![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.mft
File: DETz4ku_xgSOX_pQw9zjZP_AErA.mft (raw, json)
Hash identifier: Fk8yaTqczWlAnHDkjTIRCQD25xhAIMHmEQvvs2hXKPM=
Subject key identifier: 5C:6C:75:69:A3:CF:D7:72:31:38:96:24:20:86:53:2C:0C:BA:4C:5F
Authority key identifier: 0C:44:F3:E2:4B:BF:C6:04:8E:5F:FA:50:C3:DC:E3:64:FF:C0:12:B0
Certificate issuer: /CN=0c44f3e24bbfc6048e5ffa50c3dce364ffc012b0
Certificate serial: 019511D953B9100F1B7F74BE6A1D96630693
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DETz4ku_xgSOX_pQw9zjZP_AErA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.mft
Manifest number: 111D
Signing time: Mon 17 Feb 2025 03:00:10 +0000
Manifest this update: Mon 17 Feb 2025 03:00:10 +0000
Manifest next update: Tue 18 Feb 2025 03:00:10 +0000
Files and hashes: 1: DETz4ku_xgSOX_pQw9zjZP_AErA.crl (hash: smSMOUD2N6iseBU70NPVlzx1MZKhzWcZqOIUsXf2Uv4=)
2: ZWVOs3WDW-rx5m7taQu6I2WYx7Q.roa (hash: yPh81fsK4TJM83HFw4j8d9BB5tZUMJFngOFcn+J9UgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DETz4ku_xgSOX_pQw9zjZP_AErA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:53:b9:10:0f:1b:7f:74:be:6a:1d:96:63:06:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c44f3e24bbfc6048e5ffa50c3dce364ffc012b0
Validity
Not Before: Feb 17 03:00:10 2025 GMT
Not After : Feb 18 03:00:10 2025 GMT
Subject: CN=5c6c7569a3cfd772313896242086532c0cba4c5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fb:06:94:73:d6:8a:1b:dd:70:ec:84:fc:1d:
a8:a2:17:a0:d7:cc:85:1f:fc:00:73:de:57:93:11:
a3:b9:a1:d6:3c:12:c1:9e:3e:73:35:ef:19:5d:92:
1f:27:65:a1:e8:59:7c:49:b0:30:b3:e4:84:25:05:
07:75:bc:79:7a:24:a4:27:35:30:01:b5:1b:de:19:
e1:8e:cb:ef:3c:4e:6f:c6:11:33:7d:64:fa:70:6f:
1a:81:1c:0a:99:c8:78:88:ee:75:4d:0e:fb:bb:f0:
ff:eb:a4:fc:a4:0e:b2:50:51:f1:33:0a:d4:3f:b7:
5e:1c:65:20:bb:a8:06:e6:97:fb:af:b8:dd:d1:3e:
3b:35:ec:df:6a:a8:ab:b8:39:5f:d4:2a:7c:3a:43:
d9:7d:ef:97:a5:c2:60:59:f4:42:37:f9:15:ab:59:
d2:60:fc:3b:2d:d6:5a:ec:51:41:27:a3:e2:9c:3d:
e2:dd:80:5c:8c:cb:66:d4:59:9e:d9:cb:64:1a:7a:
b1:7d:b6:3a:f1:d1:49:41:50:6f:5b:0b:97:de:3c:
3f:96:5c:aa:f8:5e:8b:9f:34:ac:94:fa:26:f9:a7:
f8:0d:25:46:9c:ab:6d:2b:d0:67:63:7c:4e:db:25:
ad:11:9b:c0:97:8a:8a:f5:0f:ce:1c:ed:f2:24:33:
bb:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:6C:75:69:A3:CF:D7:72:31:38:96:24:20:86:53:2C:0C:BA:4C:5F
X509v3 Authority Key Identifier:
keyid:0C:44:F3:E2:4B:BF:C6:04:8E:5F:FA:50:C3:DC:E3:64:FF:C0:12:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DETz4ku_xgSOX_pQw9zjZP_AErA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:3c:1d:0c:9c:34:c7:e1:57:32:bd:a6:ed:c5:9b:97:67:3a:
5d:e1:cc:79:61:b1:23:17:bd:ed:d7:bb:bb:cf:87:de:45:42:
79:94:0c:30:35:67:af:0e:9c:ef:e2:2f:7d:71:df:25:d8:98:
1a:b1:d8:94:9b:b4:9a:a2:17:a9:ed:7b:31:b5:ba:b6:b1:2f:
d9:9e:d3:8c:d4:65:45:f6:0c:d4:2d:90:3d:4c:61:9f:c8:4c:
c9:1b:0c:42:07:e1:93:cb:68:2c:da:30:59:f3:bc:61:e8:6a:
88:f0:d9:f3:fb:c5:7f:94:84:c8:b4:02:f5:2b:2b:bd:d3:0a:
68:c9:5e:f2:97:01:dd:3b:b7:77:6b:6a:3f:c6:fe:58:ec:42:
22:b5:71:df:f2:25:34:ee:9f:62:3b:fa:d1:ed:15:5e:9e:de:
19:c4:40:8b:a0:07:d2:35:23:9d:43:2e:3e:c3:7c:42:8f:04:
74:ab:a6:20:cd:56:d1:a8:5e:13:b1:eb:97:90:af:5c:5e:91:
f7:b4:ca:fd:77:fa:3a:10:ad:56:94:b6:cb:f4:00:6b:b5:71:
fd:7e:7b:e3:fa:d3:38:33:99:6d:90:36:d8:06:96:01:c4:31:
29:07:5c:d5:c1:52:4b:5f:eb:34:20:d8:0d:70:15:b1:bb:4d:
7f:12:9f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:18:40 2025 by rpki-client