![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/b952a6-6049-4fd8-b7fd-9355e540ed10/1/G_mzHCCQb4foYHjbRYHl8e5Tt68.mft
File: G_mzHCCQb4foYHjbRYHl8e5Tt68.mft (raw, json)
Hash identifier: 6wux6ZTy/CTXF2QRslmKmYEEZ1+/KS2aa/qiB4sqI94=
Subject key identifier: 74:4B:BC:CD:54:B4:58:50:EE:80:E2:8A:64:90:08:25:88:E4:96:07
Authority key identifier: 1B:F9:B3:1C:20:90:6F:87:E8:60:78:DB:45:81:E5:F1:EE:53:B7:AF
Certificate issuer: /CN=1bf9b31c20906f87e86078db4581e5f1ee53b7af
Certificate serial: 019510C7CAB2C381A2B5E7D1A74C64C56B6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_mzHCCQb4foYHjbRYHl8e5Tt68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/b952a6-6049-4fd8-b7fd-9355e540ed10/1/G_mzHCCQb4foYHjbRYHl8e5Tt68.mft
Manifest number: 091A
Signing time: Sun 16 Feb 2025 22:01:23 +0000
Manifest this update: Sun 16 Feb 2025 22:01:23 +0000
Manifest next update: Mon 17 Feb 2025 22:01:23 +0000
Files and hashes: 1: G_mzHCCQb4foYHjbRYHl8e5Tt68.crl (hash: 9Zuu03NsoMj15sIC1+4tSYNAwPM/1/7Vfa0b4acQIKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/b952a6-6049-4fd8-b7fd-9355e540ed10/1/G_mzHCCQb4foYHjbRYHl8e5Tt68.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/b952a6-6049-4fd8-b7fd-9355e540ed10/1/G_mzHCCQb4foYHjbRYHl8e5Tt68.mft
rsync://rpki.ripe.net/repository/DEFAULT/G_mzHCCQb4foYHjbRYHl8e5Tt68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:ca:b2:c3:81:a2:b5:e7:d1:a7:4c:64:c5:6b:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bf9b31c20906f87e86078db4581e5f1ee53b7af
Validity
Not Before: Feb 16 22:01:23 2025 GMT
Not After : Feb 17 22:01:23 2025 GMT
Subject: CN=744bbccd54b45850ee80e28a6490082588e49607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:1b:96:b3:bd:ec:75:10:85:bc:03:a7:45:03:
12:fe:19:29:e3:5b:6e:59:23:39:ba:95:f0:bd:91:
ad:99:7c:8d:a2:14:82:4d:af:42:d6:8e:cf:6d:85:
68:5c:25:ac:e7:73:93:e5:11:18:f4:fe:38:c4:32:
0e:50:c4:96:7d:b0:7a:91:80:fc:ec:5f:e3:35:82:
8c:00:9b:0c:5e:70:b6:cd:ea:03:3e:9a:b4:fc:be:
6b:eb:55:e3:ec:21:d8:7f:4a:ac:2f:0c:03:b4:26:
50:16:51:20:80:6e:99:3b:f6:97:7f:a0:21:83:28:
e7:c4:5f:38:60:e4:e3:19:26:0f:a7:db:dc:ee:05:
d9:b3:0c:dd:4e:56:b9:d9:34:98:0d:01:b1:64:68:
78:8c:d3:8b:2e:8c:78:c4:68:04:ab:34:c3:44:56:
ac:a4:36:25:8e:a6:38:b2:2d:bf:95:24:16:19:96:
4a:37:40:22:69:83:12:ce:36:01:14:9c:2c:c4:37:
a4:60:b7:b5:21:5d:b8:64:62:6d:89:91:bf:84:f5:
5f:27:4e:c9:1c:b5:17:cc:b2:cd:ab:e0:8e:f6:3f:
67:7c:cd:27:e1:e0:d7:67:5c:cf:97:76:1a:a8:a5:
03:50:22:c6:41:0a:84:7c:be:d8:a7:aa:45:02:d2:
b6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:4B:BC:CD:54:B4:58:50:EE:80:E2:8A:64:90:08:25:88:E4:96:07
X509v3 Authority Key Identifier:
keyid:1B:F9:B3:1C:20:90:6F:87:E8:60:78:DB:45:81:E5:F1:EE:53:B7:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_mzHCCQb4foYHjbRYHl8e5Tt68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b952a6-6049-4fd8-b7fd-9355e540ed10/1/G_mzHCCQb4foYHjbRYHl8e5Tt68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b952a6-6049-4fd8-b7fd-9355e540ed10/1/G_mzHCCQb4foYHjbRYHl8e5Tt68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:96:9f:68:9c:2b:85:00:82:08:c3:a9:fa:03:ff:45:bd:a5:
e9:9a:44:10:49:e2:83:2d:44:72:17:b8:de:f9:68:4b:01:39:
36:df:77:91:85:92:97:49:7e:f5:6c:75:1d:3f:87:76:ac:c9:
be:ce:3f:1a:d1:7b:27:01:9d:6e:6c:e6:35:f9:65:f1:32:4e:
cf:a8:fe:11:de:d4:5b:4b:e2:07:05:08:2f:db:90:c9:92:d4:
f7:ce:6a:c2:17:ee:24:b5:5d:c4:5a:2c:f7:6b:2d:de:2f:d5:
4a:72:71:77:bc:55:62:cc:a1:24:96:dc:c1:e6:00:b5:0d:68:
05:9f:8c:5b:24:ca:16:36:e2:02:b3:71:db:99:1e:94:ef:9d:
e9:ea:bc:af:57:fb:2f:6d:b0:c0:ef:8c:52:fe:bf:b9:c7:44:
ed:9f:0c:fb:a2:32:44:20:64:38:1e:b5:c3:1c:1b:5e:bb:f7:
2d:3a:e0:7f:2d:dd:40:99:76:8e:b7:7a:8e:79:36:7d:2c:d4:
d0:44:b1:a9:d9:ef:3e:ff:31:66:fa:8c:a7:5f:99:87:a5:4e:
a2:e1:30:c9:86:78:13:43:8f:36:2e:ea:34:30:d3:23:a3:2d:
ec:9f:0b:b6:99:bd:30:b3:67:b1:4e:d9:3e:80:d1:3a:a8:0d:
86:f6:92:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:28:30 2025 by rpki-client