![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft
File: 3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft (raw, json)
Hash identifier: kxq7S/0SI41fXQgjSjJqWt3UF7A2AGDh6QVfsMKHSEU=
Subject key identifier: 8E:2E:86:21:94:84:02:D3:02:7E:AB:4F:A3:1E:7D:50:0A:6C:B9:46
Authority key identifier: DC:F4:D4:BA:85:B7:55:EF:92:9C:9B:99:5E:AF:74:6D:0E:0B:6E:51
Certificate issuer: /CN=dcf4d4ba85b755ef929c9b995eaf746d0e0b6e51
Certificate serial: 019510C77452E1B029783A452D978ED9BE6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3PTUuoW3Ve-SnJuZXq90bQ4LblE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft
Manifest number: 1452
Signing time: Sun 16 Feb 2025 22:01:01 +0000
Manifest this update: Sun 16 Feb 2025 22:01:01 +0000
Manifest next update: Mon 17 Feb 2025 22:01:01 +0000
Files and hashes: 1: 3PTUuoW3Ve-SnJuZXq90bQ4LblE.crl (hash: a3IEIiB/9DXYATe1cnvw8Ft1cvcI+S55QVijfMgdl6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3PTUuoW3Ve-SnJuZXq90bQ4LblE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:74:52:e1:b0:29:78:3a:45:2d:97:8e:d9:be:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcf4d4ba85b755ef929c9b995eaf746d0e0b6e51
Validity
Not Before: Feb 16 22:01:01 2025 GMT
Not After : Feb 17 22:01:01 2025 GMT
Subject: CN=8e2e8621948402d3027eab4fa31e7d500a6cb946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d2:b4:83:25:ca:18:5a:2b:d3:ba:d8:75:44:
51:9d:0e:c1:e6:6f:15:e1:48:b6:0e:f3:15:cc:63:
70:ab:10:28:96:d7:be:1e:fe:45:36:b9:f6:11:f0:
6a:93:bd:7b:a3:3c:2b:1f:1b:67:59:af:8f:b4:b5:
da:87:7f:8b:e7:ef:33:3b:c7:f5:58:9e:2d:f2:f2:
50:15:8a:30:d8:0b:fa:af:4a:c5:48:50:d4:6f:da:
f3:53:3e:10:e6:60:2e:67:ad:22:84:b0:ec:d1:61:
94:75:bd:0f:a4:44:87:6d:a9:bb:cb:a5:c1:3c:71:
3c:ad:35:6b:58:53:a8:32:8b:28:50:ec:c6:fb:0e:
e5:83:da:83:7d:66:57:3d:f9:a5:78:df:67:56:b5:
3e:40:73:45:d4:17:e6:97:f1:e5:a9:99:f2:45:35:
56:8b:da:b1:b4:bf:b6:61:5c:fd:63:d7:6e:83:69:
77:4d:73:2b:4b:2b:72:ba:03:1a:0f:1a:de:71:77:
09:f5:b6:a3:02:c1:ec:08:57:d0:fe:e3:26:98:ae:
60:74:4c:f8:ef:c0:ac:40:b2:e5:ac:de:71:bb:93:
b9:36:64:0a:ee:56:5e:da:eb:95:00:55:4c:2c:96:
ba:d2:cc:74:48:27:54:29:4f:85:82:c7:94:31:4e:
94:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:2E:86:21:94:84:02:D3:02:7E:AB:4F:A3:1E:7D:50:0A:6C:B9:46
X509v3 Authority Key Identifier:
keyid:DC:F4:D4:BA:85:B7:55:EF:92:9C:9B:99:5E:AF:74:6D:0E:0B:6E:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3PTUuoW3Ve-SnJuZXq90bQ4LblE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:46:6f:3c:41:08:64:b8:8c:aa:36:78:27:33:8d:4a:fd:f6:
be:0b:b1:14:1b:c9:a3:b2:1a:66:43:8a:31:17:d3:1d:75:b7:
c4:e1:24:b0:6a:07:26:e8:8b:1d:1a:aa:a9:12:d9:a8:58:89:
dc:a9:25:03:17:59:8b:42:2c:a5:d0:89:a7:23:5a:b3:25:3f:
c3:8d:ad:1b:2b:05:19:c7:05:40:2f:25:87:d8:0f:56:1a:09:
db:26:64:5c:51:97:7b:42:8a:6f:9a:1d:77:16:85:60:c9:6a:
29:52:2c:a9:cc:64:53:5e:38:3a:28:f4:c3:ec:db:fa:49:cf:
b8:f6:d2:1b:34:c4:38:95:fd:16:84:23:5d:c7:f4:c2:ec:e9:
cb:e8:16:61:6d:7a:9a:4e:9b:f7:d8:95:31:ed:e6:55:74:cc:
14:70:b2:a8:35:f6:0a:5c:a1:ca:9f:45:ee:e6:ad:ba:17:f5:
21:79:e9:68:0e:c6:09:97:9d:3c:1a:25:19:5a:2d:25:fa:8a:
24:db:06:9f:e9:7d:82:34:c3:1f:b9:6f:ce:fa:ef:dc:be:68:
4f:b6:95:03:4d:af:a6:43:31:5b:c8:df:63:4a:b1:3d:72:f9:
00:32:3b:6b:de:0d:a6:ea:e7:c5:ce:ba:80:22:a5:d1:29:e4:
8a:8c:d4:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:27:59 2025 by rpki-client