![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/765f62-e035-45da-bc64-4753efc8929d/1/Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.mft
File: Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.mft (raw, json)
Hash identifier: cp5m7OCnAAo7sbu2fnrProFyDsO/HUkBVsochGxoeAw=
Subject key identifier: AB:7D:D3:3C:0E:89:CA:59:9E:AC:6F:A8:50:91:51:4C:C8:93:EB:5F
Authority key identifier: 22:ED:F0:D8:81:AE:EA:2E:59:99:9B:81:D2:97:51:13:E1:40:55:F5
Certificate issuer: /CN=22edf0d881aeea2e59999b81d2975113e14055f5
Certificate serial: 019510226AE41CF2E1CC47059CB9FB619B8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/765f62-e035-45da-bc64-4753efc8929d/1/Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.mft
Manifest number: 0B75
Signing time: Sun 16 Feb 2025 19:00:45 +0000
Manifest this update: Sun 16 Feb 2025 19:00:45 +0000
Manifest next update: Mon 17 Feb 2025 19:00:45 +0000
Files and hashes: 1: Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.crl (hash: dNJKFbggydp7eWyOJKyMtMnMxmhUx+Bwh7qw00L1nPE=)
2: uJDTTmn4-4oW9k1wMlYj6SoOXQ4.roa (hash: pc1//08OK0uZCD5sEikyCqJI0sYd32Do1RYyDgm63AU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/765f62-e035-45da-bc64-4753efc8929d/1/Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/765f62-e035-45da-bc64-4753efc8929d/1/Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:22:6a:e4:1c:f2:e1:cc:47:05:9c:b9:fb:61:9b:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22edf0d881aeea2e59999b81d2975113e14055f5
Validity
Not Before: Feb 16 19:00:45 2025 GMT
Not After : Feb 17 19:00:45 2025 GMT
Subject: CN=ab7dd33c0e89ca599eac6fa85091514cc893eb5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ca:12:ac:99:df:66:16:73:78:3d:95:6a:7b:
72:a5:90:f7:77:7c:3f:e9:4f:24:49:74:1c:b0:71:
95:c7:a9:c3:07:2d:1b:d3:3d:54:a8:12:91:04:90:
67:68:90:25:77:c8:a1:64:5f:84:87:98:02:9f:03:
9d:7a:c8:3a:fe:61:09:32:35:52:6b:fd:cb:2c:c4:
60:7d:37:97:86:5f:b2:5b:ec:25:0e:e1:d9:c7:2f:
a6:6b:c4:36:f3:8f:bb:8e:7b:fe:c5:9b:42:13:0f:
22:63:5f:08:65:2a:1e:2d:4f:05:fd:25:3b:00:55:
1e:75:80:fa:57:64:8d:ba:1c:59:48:16:e8:50:d8:
78:96:67:35:e2:5e:f6:bf:f8:72:f5:7d:17:af:ac:
04:7a:83:92:d5:12:ef:58:bf:ed:01:94:a9:b4:54:
c7:50:06:f2:26:cf:48:be:33:b7:9e:a8:ef:ae:60:
2f:13:28:0c:d3:05:d2:5d:1b:60:aa:d5:0f:72:67:
03:49:41:5a:f4:23:64:eb:25:31:c4:2f:9c:9e:79:
9e:51:50:99:6d:b4:81:ff:ae:95:28:1b:d9:5d:41:
fa:80:03:f9:7b:e8:4a:93:27:67:e9:c3:3a:1a:6c:
58:9b:eb:20:53:63:47:3b:7a:9e:74:ca:af:11:d2:
11:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:7D:D3:3C:0E:89:CA:59:9E:AC:6F:A8:50:91:51:4C:C8:93:EB:5F
X509v3 Authority Key Identifier:
keyid:22:ED:F0:D8:81:AE:EA:2E:59:99:9B:81:D2:97:51:13:E1:40:55:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/765f62-e035-45da-bc64-4753efc8929d/1/Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/765f62-e035-45da-bc64-4753efc8929d/1/Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:16:78:1d:12:dd:d7:7b:d0:aa:fa:dc:b5:f0:94:32:31:87:
28:c5:7b:58:63:3f:2b:22:81:14:70:b9:ec:30:9b:ad:3d:b2:
11:73:4b:3e:ea:8f:c8:05:35:6e:ba:26:ef:f4:95:0d:da:dc:
01:c4:c8:33:84:85:0e:2a:1b:ff:56:67:2d:f8:fd:64:f4:59:
73:71:d7:8c:07:f5:5e:ad:4f:20:ea:4b:ac:97:82:11:74:89:
99:c9:c1:13:72:e0:62:78:1a:8d:39:c0:3b:a8:c9:28:b3:bb:
0c:25:3f:aa:d6:4f:98:91:30:0e:43:e8:d9:2e:a9:8e:9c:b4:
9d:a6:01:2e:ef:24:a1:88:4c:47:b0:cf:14:7e:ad:7d:9f:a9:
57:dc:4a:b2:aa:ce:c9:84:66:45:2e:a8:d9:ea:3c:37:33:9e:
ec:fe:f7:ca:ad:96:e4:b8:ad:91:7b:31:4d:c5:5f:3f:65:ce:
c7:6d:c9:d5:9a:15:60:fe:ec:cb:39:f1:0f:ea:83:f1:3c:36:
88:8d:9f:c8:c2:5b:81:c8:72:f9:cb:55:e7:b6:9e:61:e4:27:
59:c1:00:7a:3f:52:bd:a2:e0:21:db:5d:db:c2:32:1a:9d:92:
c7:e9:80:f9:0b:48:70:1d:fb:59:29:48:44:d6:a6:a0:59:e3:
de:74:b1:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:56:13 2025 by rpki-client