![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/yOkLFy-IviG7mdVz_XWyf1v3RcI.mft
File: yOkLFy-IviG7mdVz_XWyf1v3RcI.mft (raw, json)
Hash identifier: aF9QMGE3VdgkZRG/oBz1Bx6sD19igFMs+afStOEQCrg=
Subject key identifier: 2D:FB:9A:FA:25:14:92:4E:BE:0E:4C:47:80:28:A3:67:32:AC:05:F1
Authority key identifier: C8:E9:0B:17:2F:88:BE:21:BB:99:D5:73:FD:75:B2:7F:5B:F7:45:C2
Certificate issuer: /CN=c8e90b172f88be21bb99d573fd75b27f5bf745c2
Certificate serial: 0195116C0091C21872C1935657163B451CDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yOkLFy-IviG7mdVz_XWyf1v3RcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/yOkLFy-IviG7mdVz_XWyf1v3RcI.mft
Manifest number: 108B
Signing time: Mon 17 Feb 2025 01:00:45 +0000
Manifest this update: Mon 17 Feb 2025 01:00:45 +0000
Manifest next update: Tue 18 Feb 2025 01:00:45 +0000
Files and hashes: 1: DruMjLoGzTbfpdC-U-WNttTm1_E.roa (hash: SsRWSqMHnifAjAWueilvP4vmdjzH/KuaOCO7NOMeoV8=)
2: yOkLFy-IviG7mdVz_XWyf1v3RcI.crl (hash: 6fa5Q4e5HJeaWsShCDvpjdp1cD784e2TFa3BxcX7wDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/yOkLFy-IviG7mdVz_XWyf1v3RcI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/yOkLFy-IviG7mdVz_XWyf1v3RcI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yOkLFy-IviG7mdVz_XWyf1v3RcI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6c:00:91:c2:18:72:c1:93:56:57:16:3b:45:1c:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8e90b172f88be21bb99d573fd75b27f5bf745c2
Validity
Not Before: Feb 17 01:00:45 2025 GMT
Not After : Feb 18 01:00:45 2025 GMT
Subject: CN=2dfb9afa2514924ebe0e4c478028a36732ac05f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1f:33:a5:0d:60:d2:75:d7:0a:a9:bd:e5:19:
59:1b:51:da:2c:9c:53:33:e1:26:17:a0:ea:99:20:
1b:a4:44:62:e4:94:d7:16:c4:d3:fa:af:eb:76:ad:
ce:fb:e3:60:3b:00:d4:8a:d9:09:0b:b5:62:aa:b8:
08:4c:eb:2c:39:c2:08:bb:e2:8b:df:2c:63:04:32:
96:af:32:00:d6:a2:39:1f:ea:34:66:0e:05:cf:54:
4f:ef:8a:ed:d4:28:7c:9c:53:aa:18:18:9b:69:5e:
0a:50:98:b8:32:4f:76:ba:a3:d9:15:f3:2a:06:3d:
0f:cc:51:9b:ce:cd:f1:b0:79:fc:72:90:e7:22:2a:
0a:95:e3:e0:f2:df:82:e7:2a:9d:2e:8d:a0:80:6e:
d1:7c:60:d7:22:08:12:67:6a:04:5a:43:7d:ab:1b:
01:cc:53:4f:bf:79:f3:f0:e1:9b:8f:87:9e:0c:e2:
ef:e2:07:a0:eb:28:46:61:49:31:61:62:a7:e8:44:
a7:03:56:72:3c:55:7c:86:d2:9d:1b:07:8a:8b:bc:
4d:94:80:cc:a1:0e:5e:57:e3:9e:3e:75:37:5d:dd:
6a:5c:92:3d:fb:c6:e4:27:64:9b:71:3f:7b:7a:dc:
a8:20:d7:52:f4:65:bb:ae:53:0d:1e:b8:b3:42:b8:
5a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:FB:9A:FA:25:14:92:4E:BE:0E:4C:47:80:28:A3:67:32:AC:05:F1
X509v3 Authority Key Identifier:
keyid:C8:E9:0B:17:2F:88:BE:21:BB:99:D5:73:FD:75:B2:7F:5B:F7:45:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yOkLFy-IviG7mdVz_XWyf1v3RcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/yOkLFy-IviG7mdVz_XWyf1v3RcI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/yOkLFy-IviG7mdVz_XWyf1v3RcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:6e:e9:bd:46:c3:d3:5c:a6:c9:45:e7:c2:65:64:51:9d:c6:
f6:a7:f6:26:88:93:ba:3b:4a:0b:03:03:46:98:60:04:b4:61:
db:57:e6:0d:af:4a:c5:a3:df:a4:85:48:20:24:5b:fa:87:34:
87:0c:6f:42:a1:19:ec:07:6c:31:7a:f8:90:bb:51:70:b0:b4:
fd:5d:93:df:9b:5e:ad:5a:03:98:da:44:3d:46:c4:7d:42:07:
25:0a:d5:d7:de:f1:f5:5c:a1:71:7a:08:1f:c3:4a:82:f6:47:
3d:e5:78:36:da:98:29:66:15:c5:8d:a8:e8:39:8a:e3:5b:3a:
fa:f2:68:c3:c3:31:ef:7d:75:5e:ef:41:46:03:91:76:12:da:
83:34:d1:35:e6:79:86:c6:b2:b9:4c:db:e3:88:0c:15:66:c9:
69:55:b9:ad:07:52:94:fa:9c:4a:9c:9a:ce:d7:e7:1f:3f:2d:
1d:0f:8b:34:d9:bf:91:b9:19:24:b3:27:7f:ae:f1:ef:16:98:
35:16:e1:d7:f1:a9:ad:ed:17:e5:69:86:af:69:37:56:95:7a:
05:c4:50:05:dd:b5:d7:83:b6:82:95:42:01:b0:b5:93:ef:99:
1c:37:62:01:18:04:2b:a1:67:28:43:e6:46:1f:c2:fb:65:9b:
82:d5:ba:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:51:31 2025 by rpki-client