![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/7f3561-1ce7-43e1-89db-070b4256262b/1/6T5Zf3uhSto19PbFD4plg6BPzDU.mft
File: 6T5Zf3uhSto19PbFD4plg6BPzDU.mft (raw, json)
Hash identifier: deezNapCv0Q9cgb5wZ2zx6uHJOfPwfKvqaJwYYiOMvw=
Subject key identifier: 3C:E1:BD:ED:4A:33:BF:BE:0D:01:1F:A8:C1:6E:B3:34:F2:5A:B8:A3
Authority key identifier: E9:3E:59:7F:7B:A1:4A:DA:35:F4:F6:C5:0F:8A:65:83:A0:4F:CC:35
Certificate issuer: /CN=e93e597f7ba14ada35f4f6c50f8a6583a04fcc35
Certificate serial: 019511D948026395F6739F8010E7CC9ED27E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6T5Zf3uhSto19PbFD4plg6BPzDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/7f3561-1ce7-43e1-89db-070b4256262b/1/6T5Zf3uhSto19PbFD4plg6BPzDU.mft
Manifest number: 01E3
Signing time: Mon 17 Feb 2025 03:00:07 +0000
Manifest this update: Mon 17 Feb 2025 03:00:07 +0000
Manifest next update: Tue 18 Feb 2025 03:00:07 +0000
Files and hashes: 1: 6T5Zf3uhSto19PbFD4plg6BPzDU.crl (hash: jbNJw/vSVz2kxGAULQ9LVbYQbqqoAHAsGRtFcgFr3YU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/7f3561-1ce7-43e1-89db-070b4256262b/1/6T5Zf3uhSto19PbFD4plg6BPzDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/7f3561-1ce7-43e1-89db-070b4256262b/1/6T5Zf3uhSto19PbFD4plg6BPzDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/6T5Zf3uhSto19PbFD4plg6BPzDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:48:02:63:95:f6:73:9f:80:10:e7:cc:9e:d2:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e93e597f7ba14ada35f4f6c50f8a6583a04fcc35
Validity
Not Before: Feb 17 03:00:07 2025 GMT
Not After : Feb 18 03:00:07 2025 GMT
Subject: CN=3ce1bded4a33bfbe0d011fa8c16eb334f25ab8a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e7:e5:92:ab:85:e9:5e:c1:2f:3b:8d:e1:0d:
08:e3:3c:47:33:c9:58:e5:15:d8:18:8b:de:eb:f1:
c4:a4:53:9c:bf:14:cd:4c:83:c2:d4:15:f3:d2:ae:
07:f7:f3:36:37:98:4f:dc:c9:55:28:8e:3f:a1:d9:
13:13:db:0f:bb:27:a8:da:8c:cd:b7:23:08:7c:0a:
23:0a:f9:7e:5e:bc:12:28:d9:d8:32:6a:47:5d:57:
1c:0a:d5:0c:ef:4b:ab:bc:05:79:19:02:f5:59:67:
c1:ea:cb:83:23:e8:84:8a:fb:fa:70:13:c3:19:89:
f4:0d:c0:dc:8d:7c:a2:c6:aa:7e:b6:9d:c7:87:8d:
05:28:17:78:1b:80:a3:3f:bf:53:01:ab:5f:c2:f5:
7d:f3:a7:26:e5:0b:9c:69:e7:d8:1a:20:9a:d5:5f:
94:cc:2e:3d:89:3e:ec:ce:2e:07:a9:79:86:1b:1a:
9f:7f:3e:80:ad:c2:e0:c7:4b:da:d4:c6:56:79:37:
bf:10:cf:87:2e:bf:ab:5b:8b:a1:7c:9d:82:3b:2e:
ab:ee:d8:ff:64:16:71:a5:c7:b2:da:dd:ec:9e:bd:
57:71:c0:0a:71:96:21:f7:1f:8e:3b:23:ef:a9:df:
0a:9d:fc:6f:48:51:14:76:c3:4a:08:e0:00:77:10:
97:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:E1:BD:ED:4A:33:BF:BE:0D:01:1F:A8:C1:6E:B3:34:F2:5A:B8:A3
X509v3 Authority Key Identifier:
keyid:E9:3E:59:7F:7B:A1:4A:DA:35:F4:F6:C5:0F:8A:65:83:A0:4F:CC:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6T5Zf3uhSto19PbFD4plg6BPzDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7f3561-1ce7-43e1-89db-070b4256262b/1/6T5Zf3uhSto19PbFD4plg6BPzDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7f3561-1ce7-43e1-89db-070b4256262b/1/6T5Zf3uhSto19PbFD4plg6BPzDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:03:7e:9f:38:6c:2c:50:0d:de:59:f4:c6:37:28:41:61:c8:
64:4e:fa:d8:0b:09:14:fe:23:42:b2:07:94:a8:ff:3f:eb:ba:
13:a1:12:16:83:ed:a8:05:8d:54:ca:03:ce:49:54:bb:70:fd:
0f:09:1d:8d:ed:90:4b:0d:8c:a8:13:94:24:49:fc:ce:61:49:
07:a9:92:81:c9:66:2e:44:f9:18:18:8b:cb:93:fc:68:fd:9b:
18:e9:50:cf:44:94:85:60:f0:71:f1:10:ac:76:3b:d2:7c:c8:
9f:da:b5:9b:2d:04:f3:16:d1:f4:2d:06:aa:64:de:ea:ab:fb:
a6:d8:6c:af:64:0f:f4:14:35:68:aa:06:00:08:00:96:da:2b:
87:9d:b6:13:94:3b:b5:ce:6e:90:9d:25:b5:be:03:10:e6:e6:
e9:ea:de:51:79:d1:99:d8:fa:cc:77:b7:87:21:da:01:3f:9c:
6f:f5:27:0d:e7:1e:8f:e7:b6:91:99:6c:c8:a6:6d:df:de:49:
10:89:01:bf:fd:a2:c7:78:32:ed:4d:7b:6a:62:07:20:2f:26:
e0:73:86:33:12:8b:bb:3b:af:14:8d:b6:9b:4b:d3:28:1d:f6:
d4:d2:b5:b4:5e:c5:b4:4f:8b:0b:0f:3b:35:72:f7:09:0a:30:
0e:13:95:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:16:00 2025 by rpki-client