![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.mft
File: vy7vp8YEjmoKWmXAfj4lU0HhQ7s.mft (raw, json)
Hash identifier: CYML4LF3N9Y421kVX3MvRC6y3DXhVDxcBiq6HM9jrbw=
Subject key identifier: 07:42:D5:72:99:92:D1:33:AA:73:76:E9:09:36:53:6A:8A:02:9B:BF
Authority key identifier: BF:2E:EF:A7:C6:04:8E:6A:0A:5A:65:C0:7E:3E:25:53:41:E1:43:BB
Certificate issuer: /CN=bf2eefa7c6048e6a0a5a65c07e3e255341e143bb
Certificate serial: 019512473F5C91697D2B4E45B9DED3D69B32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.mft
Manifest number: 1459
Signing time: Mon 17 Feb 2025 05:00:13 +0000
Manifest this update: Mon 17 Feb 2025 05:00:13 +0000
Manifest next update: Tue 18 Feb 2025 05:00:13 +0000
Files and hashes: 1: qBn6ockm6JSiEH-8udw_bpsms9g.roa (hash: nCADL7lFGk+Q6O3ajQCgcYhE2O5JRszPFiBp0Ov4f98=)
2: vy7vp8YEjmoKWmXAfj4lU0HhQ7s.crl (hash: CBnTHQEIk1HhfRZ4rtKiRkvozgWKjr25uT1pCHDxfK0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:47:3f:5c:91:69:7d:2b:4e:45:b9:de:d3:d6:9b:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf2eefa7c6048e6a0a5a65c07e3e255341e143bb
Validity
Not Before: Feb 17 05:00:13 2025 GMT
Not After : Feb 18 05:00:13 2025 GMT
Subject: CN=0742d5729992d133aa7376e90936536a8a029bbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d0:c9:c5:ab:42:d1:89:a5:06:7a:a6:7a:b8:
96:c3:d6:8d:38:39:bc:a3:66:78:24:e6:c2:a0:f3:
13:b9:e3:65:9b:b3:28:d5:82:4b:39:ec:cc:e0:4b:
0f:6d:a5:a2:98:55:3c:3a:58:c3:8e:44:03:5d:c4:
54:b4:f8:c5:1a:c5:e7:20:2b:4c:fc:bc:28:67:31:
84:a7:81:74:88:ac:25:82:73:56:7e:30:08:98:f5:
3f:b6:14:89:b1:62:5a:f3:52:22:ef:fb:8e:85:c7:
29:17:1d:10:77:8f:94:2e:4a:10:2e:e5:18:f5:9b:
63:38:b6:78:33:9d:34:6f:ce:5f:8f:51:ef:19:88:
08:6a:c7:bf:51:83:8d:fc:a0:32:b3:cc:79:dc:7d:
92:54:2f:9b:13:56:29:69:58:58:ac:ac:7f:da:c0:
7a:b2:50:5f:51:ed:3a:90:94:43:4d:3c:dd:32:4e:
a6:8e:bb:ea:d3:7a:de:a0:b8:47:8f:a5:64:e0:bf:
0a:52:83:b6:bb:68:f3:00:61:22:39:73:43:0b:1a:
05:ab:bf:11:d8:fd:c9:ec:9b:9e:0c:0c:dd:99:30:
5a:0c:89:ea:0b:47:51:59:04:18:a6:41:90:aa:3c:
89:03:83:3c:3f:65:bd:5a:fd:30:2f:f4:ba:f8:36:
e4:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:42:D5:72:99:92:D1:33:AA:73:76:E9:09:36:53:6A:8A:02:9B:BF
X509v3 Authority Key Identifier:
keyid:BF:2E:EF:A7:C6:04:8E:6A:0A:5A:65:C0:7E:3E:25:53:41:E1:43:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:40:a6:a2:24:db:f3:a2:84:55:11:63:c5:d4:b5:54:a0:7a:
ff:ea:86:30:61:5b:e1:cc:9b:05:c0:ca:16:10:5c:96:d7:60:
a3:63:93:c0:fa:2c:5a:44:c5:8a:72:43:42:2c:c0:5e:7e:aa:
60:b8:d2:bf:12:19:94:a5:81:ee:94:f5:de:7f:33:5b:2d:3a:
5e:39:81:5b:27:f3:3d:8b:44:81:f6:f8:0d:f6:f0:ba:ef:0e:
49:a1:e3:38:1c:a3:fa:3d:44:9f:92:a9:72:a8:31:2a:b1:a0:
40:58:4b:cd:cf:40:b5:59:ad:c8:4a:6a:f2:d5:99:c6:8e:58:
7c:37:37:f0:4b:6f:48:3a:99:08:e9:0e:fd:ea:2a:31:ac:69:
18:4f:2b:7c:91:c6:9f:43:b3:f7:d7:c0:72:c3:38:f8:76:59:
3f:df:ea:c7:a5:4a:40:a5:2b:76:42:ce:db:f9:a8:96:73:25:
98:77:bf:ca:b9:84:6b:4b:c5:7c:6a:65:8f:c3:0b:23:1a:d2:
31:ac:06:45:8c:56:2f:97:50:55:d0:fb:77:97:65:42:9f:f9:
34:42:7b:f8:d1:6c:13:d4:a0:c3:ae:b2:ff:ad:49:5b:9f:a4:
fe:5f:75:15:10:78:e2:a2:fb:59:09:bd:42:7d:59:4c:1d:72:
4a:59:24:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:41:26 2025 by rpki-client