![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a5df04-de51-4faf-80ca-a06f7110547b/1/EU05B6zlGbJF_rzuMsO3rUk7KGw.mft
File: EU05B6zlGbJF_rzuMsO3rUk7KGw.mft (raw, json)
Hash identifier: HH0mHACL5BiV88dXCNQ1QeOcHepedlbAIKBQc1O+dps=
Subject key identifier: 67:02:FB:05:16:D2:1F:1A:C3:89:2F:08:11:C1:18:B4:52:46:C2:70
Authority key identifier: 11:4D:39:07:AC:E5:19:B2:45:FE:BC:EE:32:C3:B7:AD:49:3B:28:6C
Certificate issuer: /CN=114d3907ace519b245febcee32c3b7ad493b286c
Certificate serial: 01951210D452A761048A7D7A104FDC2C8F0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EU05B6zlGbJF_rzuMsO3rUk7KGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a5df04-de51-4faf-80ca-a06f7110547b/1/EU05B6zlGbJF_rzuMsO3rUk7KGw.mft
Manifest number: 0298
Signing time: Mon 17 Feb 2025 04:00:47 +0000
Manifest this update: Mon 17 Feb 2025 04:00:47 +0000
Manifest next update: Tue 18 Feb 2025 04:00:47 +0000
Files and hashes: 1: EU05B6zlGbJF_rzuMsO3rUk7KGw.crl (hash: bmyO1eidSpliuDEbDyswxbGFDLymbXb7NR0V4zU1HCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/a5df04-de51-4faf-80ca-a06f7110547b/1/EU05B6zlGbJF_rzuMsO3rUk7KGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/a5df04-de51-4faf-80ca-a06f7110547b/1/EU05B6zlGbJF_rzuMsO3rUk7KGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/EU05B6zlGbJF_rzuMsO3rUk7KGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:d4:52:a7:61:04:8a:7d:7a:10:4f:dc:2c:8f:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=114d3907ace519b245febcee32c3b7ad493b286c
Validity
Not Before: Feb 17 04:00:47 2025 GMT
Not After : Feb 18 04:00:47 2025 GMT
Subject: CN=6702fb0516d21f1ac3892f0811c118b45246c270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:30:a6:71:ef:ac:4d:f4:41:93:11:4f:fe:a2:
98:7a:69:f9:6f:de:4c:e0:93:68:49:6c:3a:ae:54:
7e:5b:a8:3f:17:89:1e:58:48:08:85:7f:fd:7a:71:
75:91:1a:32:93:c7:f0:f9:67:ed:9f:46:05:e6:22:
e0:18:c0:67:36:0d:e0:b0:41:e9:1e:30:cd:1c:87:
88:85:3b:53:a6:b2:29:c6:59:55:fd:15:af:ea:cf:
d8:79:57:36:bd:d3:2b:d5:5a:05:35:a8:1a:76:af:
fb:27:b7:80:bb:98:3c:8b:32:1d:26:ea:5d:74:2c:
78:8f:1c:96:e9:f9:c2:ba:a6:30:9c:e0:7b:f3:da:
eb:3a:97:76:00:81:db:e4:ab:ad:4d:45:76:4c:29:
59:7b:b6:c8:d5:7d:f7:2c:93:ac:f9:d4:08:25:86:
8b:73:ff:ff:15:76:0f:c9:bf:e5:11:e6:83:88:69:
ac:be:48:74:44:ba:45:56:36:ac:bb:1c:ca:cd:d9:
d7:6b:04:b5:85:35:86:c6:ff:2a:71:06:7f:cb:ab:
01:5e:63:c2:47:46:64:8b:ae:cc:25:a4:fe:dc:e9:
8e:04:84:ea:66:b8:48:36:d6:bd:6a:5e:99:7e:da:
69:c9:e0:80:74:b8:a3:05:2c:ce:48:d3:f4:d1:b8:
18:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:02:FB:05:16:D2:1F:1A:C3:89:2F:08:11:C1:18:B4:52:46:C2:70
X509v3 Authority Key Identifier:
keyid:11:4D:39:07:AC:E5:19:B2:45:FE:BC:EE:32:C3:B7:AD:49:3B:28:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EU05B6zlGbJF_rzuMsO3rUk7KGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a5df04-de51-4faf-80ca-a06f7110547b/1/EU05B6zlGbJF_rzuMsO3rUk7KGw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a5df04-de51-4faf-80ca-a06f7110547b/1/EU05B6zlGbJF_rzuMsO3rUk7KGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:5a:e7:39:c2:d1:28:67:a5:1f:f6:b0:53:80:ec:79:be:89:
3e:e4:0f:9a:61:61:8a:6d:ba:5d:8a:4f:c3:10:98:18:0f:1b:
74:cd:d7:af:76:ff:b7:27:ac:04:f1:2b:5c:c3:09:f3:3f:6d:
e1:24:0e:35:fa:c5:67:27:74:7e:11:32:b8:d6:b1:e0:9f:2b:
0b:90:0d:aa:7b:23:a5:7c:99:c1:93:ae:0a:3d:32:4e:53:fc:
76:2f:d5:0e:26:fe:ac:79:2c:bb:9d:31:18:f0:f5:21:92:eb:
fa:df:e9:7a:32:5a:ed:cf:17:5e:21:40:5b:08:66:12:73:8c:
4f:e0:4b:8b:a6:0d:e8:38:76:f2:50:cd:30:fa:72:89:e1:c8:
aa:1b:3f:76:84:36:62:c1:07:c6:d9:49:0f:93:82:dd:13:db:
f8:4c:e9:d9:dc:37:84:8b:68:9a:ff:4f:49:22:10:c5:e1:96:
71:9e:43:65:d4:08:cc:bd:a0:ba:15:ce:19:d7:67:d6:ff:34:
5d:79:0f:62:58:56:09:f7:36:63:7f:87:76:c8:9c:a6:43:61:
88:70:c5:c2:dd:89:9f:fc:4a:c4:77:86:b8:2b:6c:92:38:48:
bc:3b:ac:8b:e0:eb:8f:d9:cc:37:2a:36:4e:35:97:6e:86:55:
20:b5:07:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:09:17 2025 by rpki-client