![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/d734fa-6e83-4683-bf49-87122b514e69/1/WYjwhVxEeNG5Srio1tnZxRHzFCY.mft
File: WYjwhVxEeNG5Srio1tnZxRHzFCY.mft (raw, json)
Hash identifier: 15Pr4NetuEmz2DdQuk6E2L9jHa+SpPhxn7jgLazvL+4=
Subject key identifier: BE:3B:C4:DC:9C:5D:6C:BD:66:CD:A5:01:7C:5D:DB:3A:DF:46:ED:45
Authority key identifier: 59:88:F0:85:5C:44:78:D1:B9:4A:B8:A8:D6:D9:D9:C5:11:F3:14:26
Certificate issuer: /CN=5988f0855c4478d1b94ab8a8d6d9d9c511f31426
Certificate serial: 019510C6F40E50C9D231ECAFFC38DA3ED433
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WYjwhVxEeNG5Srio1tnZxRHzFCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/d734fa-6e83-4683-bf49-87122b514e69/1/WYjwhVxEeNG5Srio1tnZxRHzFCY.mft
Manifest number: 0B0C
Signing time: Sun 16 Feb 2025 22:00:28 +0000
Manifest this update: Sun 16 Feb 2025 22:00:28 +0000
Manifest next update: Mon 17 Feb 2025 22:00:28 +0000
Files and hashes: 1: WYjwhVxEeNG5Srio1tnZxRHzFCY.crl (hash: /d3PPktjIsJ1uNMokh3QTSrhD73B5E2ddxwT5oXxy4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/d734fa-6e83-4683-bf49-87122b514e69/1/WYjwhVxEeNG5Srio1tnZxRHzFCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/d734fa-6e83-4683-bf49-87122b514e69/1/WYjwhVxEeNG5Srio1tnZxRHzFCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/WYjwhVxEeNG5Srio1tnZxRHzFCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c6:f4:0e:50:c9:d2:31:ec:af:fc:38:da:3e:d4:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5988f0855c4478d1b94ab8a8d6d9d9c511f31426
Validity
Not Before: Feb 16 22:00:28 2025 GMT
Not After : Feb 17 22:00:28 2025 GMT
Subject: CN=be3bc4dc9c5d6cbd66cda5017c5ddb3adf46ed45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c6:b0:ab:9c:10:92:30:e3:09:f9:2b:b8:c3:
ee:ed:98:10:d4:30:16:a5:ab:40:ae:65:ed:70:3b:
f4:cf:ef:a3:60:8b:ba:08:5b:f4:b1:64:97:3f:da:
5d:81:e6:90:6b:d9:bb:09:6d:64:90:fa:33:ac:33:
22:59:87:ad:d4:e5:0e:3a:04:32:9f:aa:e1:37:13:
72:19:ce:92:e9:6f:8e:ff:f4:fd:10:b2:c3:14:64:
2a:77:60:e7:b0:a9:08:20:de:d0:d6:98:f1:92:ef:
90:a9:d0:c6:02:ef:78:cc:2c:ea:a3:fa:a5:b6:d2:
59:b5:a3:b6:72:25:30:b7:93:79:80:07:3f:05:54:
e8:9a:66:e2:5f:d8:f5:d0:27:57:f7:fb:a7:05:ac:
95:3e:ad:81:09:ef:c2:8f:c6:0b:8a:07:64:fc:08:
3f:fd:bd:19:43:e0:6a:e0:93:ec:fa:cd:a9:25:b3:
7a:61:aa:c7:a0:0a:03:33:09:0b:62:76:df:49:63:
ff:56:85:d4:74:be:c7:06:b3:41:4d:0d:56:39:f7:
cf:b4:b4:33:65:5f:58:d4:e5:17:a3:cf:66:3f:2e:
72:2c:30:42:49:1b:61:c4:67:d7:7d:c3:37:9d:33:
a5:ea:e4:54:24:18:97:42:53:6e:92:53:4e:67:1f:
5b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:3B:C4:DC:9C:5D:6C:BD:66:CD:A5:01:7C:5D:DB:3A:DF:46:ED:45
X509v3 Authority Key Identifier:
keyid:59:88:F0:85:5C:44:78:D1:B9:4A:B8:A8:D6:D9:D9:C5:11:F3:14:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WYjwhVxEeNG5Srio1tnZxRHzFCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d734fa-6e83-4683-bf49-87122b514e69/1/WYjwhVxEeNG5Srio1tnZxRHzFCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d734fa-6e83-4683-bf49-87122b514e69/1/WYjwhVxEeNG5Srio1tnZxRHzFCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:7c:c1:13:f1:6b:c9:76:a3:9e:3c:af:36:f3:bc:32:e8:5c:
50:c6:5d:a7:f4:ed:ce:02:49:fe:b7:41:74:f5:70:58:74:3e:
3b:25:de:d0:e6:c5:58:7b:0e:e7:13:0b:60:df:d8:30:1f:74:
68:d6:db:be:84:31:6d:0f:68:5b:cd:57:f4:9a:1c:ca:60:77:
94:99:8a:3d:62:38:86:01:fa:f8:7a:ea:a2:b1:ec:9f:54:13:
b6:b2:9e:b5:d2:26:b1:63:58:be:78:b8:4c:b9:13:d9:09:bf:
3a:19:9b:60:c1:4c:8c:5e:23:d4:a2:8e:f4:ab:31:3d:bb:40:
f9:14:46:8b:a9:1e:48:a7:1e:a0:14:68:38:b6:24:48:14:ff:
36:af:de:36:9e:a1:c6:6e:fc:62:00:1f:dc:8a:ac:be:8b:43:
93:c6:ef:df:73:83:5e:fd:da:62:d5:be:03:aa:2b:8e:6f:24:
4a:99:6a:30:01:c5:78:0d:62:34:71:e0:d9:31:fc:d6:40:21:
72:12:63:4d:63:a4:e8:fd:db:a4:1d:4e:22:56:6a:d6:d7:60:
08:0c:18:70:d3:57:89:c6:ce:c6:6d:d5:cc:86:03:61:a4:15:
e7:81:09:ff:7f:b4:a9:80:3a:17:48:20:95:e2:eb:8d:85:5a:
69:cf:10:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:12:25 2025 by rpki-client