![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ea76fe-6119-4de0-bf4b-4b1af414fd00/1/oVJEYml6J_56uUtqypBnkx2SEC8.mft
File: oVJEYml6J_56uUtqypBnkx2SEC8.mft (raw, json)
Hash identifier: zyVmpRHF9X+x98dGkT7bLzbi2e+rrHzGDZSbCxrUb4o=
Subject key identifier: E0:68:9E:C7:4A:08:79:59:46:B0:70:EC:9F:BF:13:80:76:91:F1:1D
Authority key identifier: A1:52:44:62:69:7A:27:FE:7A:B9:4B:6A:CA:90:67:93:1D:92:10:2F
Certificate issuer: /CN=a1524462697a27fe7ab94b6aca9067931d92102f
Certificate serial: 019510C714631527726B8C9381595D90C9DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oVJEYml6J_56uUtqypBnkx2SEC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ea76fe-6119-4de0-bf4b-4b1af414fd00/1/oVJEYml6J_56uUtqypBnkx2SEC8.mft
Manifest number: 1453
Signing time: Sun 16 Feb 2025 22:00:37 +0000
Manifest this update: Sun 16 Feb 2025 22:00:37 +0000
Manifest next update: Mon 17 Feb 2025 22:00:37 +0000
Files and hashes: 1: oVJEYml6J_56uUtqypBnkx2SEC8.crl (hash: tb+qCpxYnEFpdDjNmJn+WJi28TvXb9+0Rk6BXU4cDsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ea76fe-6119-4de0-bf4b-4b1af414fd00/1/oVJEYml6J_56uUtqypBnkx2SEC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/ea76fe-6119-4de0-bf4b-4b1af414fd00/1/oVJEYml6J_56uUtqypBnkx2SEC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/oVJEYml6J_56uUtqypBnkx2SEC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:14:63:15:27:72:6b:8c:93:81:59:5d:90:c9:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1524462697a27fe7ab94b6aca9067931d92102f
Validity
Not Before: Feb 16 22:00:37 2025 GMT
Not After : Feb 17 22:00:37 2025 GMT
Subject: CN=e0689ec74a08795946b070ec9fbf13807691f11d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:29:60:c7:50:e7:dc:a6:ee:27:c6:37:e4:0c:
05:33:55:40:b5:36:b8:05:8f:ec:19:3f:6d:ff:31:
da:ea:b7:40:ad:06:9b:24:66:00:97:b5:6a:ba:02:
3c:9c:b6:56:4d:54:c4:d0:34:1a:37:42:bb:df:8a:
2f:f7:9c:62:28:46:02:1f:be:8e:a5:03:c4:63:b1:
16:8e:0a:4a:07:cb:a3:ed:5f:f3:7d:e0:e6:ae:2b:
9c:28:2b:5d:c1:4c:b4:69:7c:9c:a3:9f:e3:b2:71:
2b:69:6c:f8:05:f2:a0:34:75:f6:e1:41:69:a5:3e:
7b:c2:40:44:7f:b8:fe:2a:e4:67:d0:09:91:05:e1:
ff:b8:21:58:e0:96:a7:62:41:cc:67:14:68:41:60:
77:67:64:51:6b:dd:37:7a:f4:c1:9e:bb:aa:89:e2:
36:c1:ca:7d:b2:e5:d9:6d:ba:07:27:8a:ee:44:c0:
fc:bf:eb:0a:82:c5:5f:f5:08:18:70:87:4a:e5:b7:
7f:ba:40:c0:ba:25:e2:bd:17:70:78:c3:61:2e:44:
72:f8:b8:dc:22:17:05:fd:0a:a4:ae:79:93:72:10:
0f:9f:90:56:43:2e:79:75:93:74:b5:9e:00:af:20:
59:55:0a:e5:90:f7:74:42:45:25:21:00:b5:94:12:
f1:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:68:9E:C7:4A:08:79:59:46:B0:70:EC:9F:BF:13:80:76:91:F1:1D
X509v3 Authority Key Identifier:
keyid:A1:52:44:62:69:7A:27:FE:7A:B9:4B:6A:CA:90:67:93:1D:92:10:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVJEYml6J_56uUtqypBnkx2SEC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ea76fe-6119-4de0-bf4b-4b1af414fd00/1/oVJEYml6J_56uUtqypBnkx2SEC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ea76fe-6119-4de0-bf4b-4b1af414fd00/1/oVJEYml6J_56uUtqypBnkx2SEC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:5b:4d:f8:b3:0f:71:6b:d4:5a:bd:7f:52:7f:63:58:e2:cb:
63:c5:2e:38:c0:17:3e:de:46:f4:a0:e4:e6:09:db:93:b2:85:
11:7c:ad:6b:d0:7f:46:d3:27:df:96:38:0e:e2:4f:87:61:33:
8c:ab:5b:06:9d:8c:c0:86:3f:7e:81:46:74:45:ac:79:fe:1e:
d1:c7:9b:c9:b7:96:03:f3:62:fc:71:f5:f0:8e:a3:d8:b7:c4:
f1:b9:d2:e6:ab:94:b6:a5:79:8e:87:65:bb:c6:fc:26:37:ac:
af:2d:f6:5b:06:09:b6:48:d5:02:04:89:d7:06:4a:96:12:73:
4d:9c:c6:22:f2:82:9e:d4:2d:12:7a:3d:69:8e:45:bb:39:5e:
b0:5e:b3:7a:b4:65:b3:07:93:fe:8e:cf:76:66:fb:c4:c6:76:
0b:df:3d:3a:94:fc:54:21:c2:f4:1f:e0:83:33:99:26:78:a4:
04:3f:a9:5c:36:aa:33:6f:df:1f:2f:ee:14:12:73:9a:1f:97:
e2:2e:c4:d4:cc:c7:0f:db:14:d6:a3:7c:66:cf:d3:35:fa:04:
49:98:39:3f:80:50:b8:d4:92:08:ac:33:46:be:c4:d2:89:0f:
c8:ed:7e:68:d8:60:3c:a3:97:5c:38:9a:03:ae:ea:3b:1e:9f:
0b:e0:a0:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:38:28 2025 by rpki-client