![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/15fee7-d411-4c1d-a7cd-570d17f9f2a5/1/Ysv6JKSIMntzB3XjKdUaGSFhJTE.mft
File: Ysv6JKSIMntzB3XjKdUaGSFhJTE.mft (raw, json)
Hash identifier: zBH9Qz9HbUK03VC4NGWMzyVFt23Qmk5pb8vkmF2KZVQ=
Subject key identifier: 97:9D:12:DC:7F:81:5F:0D:28:EA:78:29:F5:28:7A:8C:C8:30:92:56
Authority key identifier: 62:CB:FA:24:A4:88:32:7B:73:07:75:E3:29:D5:1A:19:21:61:25:31
Certificate issuer: /CN=62cbfa24a488327b730775e329d51a1921612531
Certificate serial: 01951135340304C2C76A8C72D95FAFBE2926
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ysv6JKSIMntzB3XjKdUaGSFhJTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/15fee7-d411-4c1d-a7cd-570d17f9f2a5/1/Ysv6JKSIMntzB3XjKdUaGSFhJTE.mft
Manifest number: 0FBE
Signing time: Mon 17 Feb 2025 00:00:54 +0000
Manifest this update: Mon 17 Feb 2025 00:00:54 +0000
Manifest next update: Tue 18 Feb 2025 00:00:54 +0000
Files and hashes: 1: Ysv6JKSIMntzB3XjKdUaGSFhJTE.crl (hash: fKTK5oxZnOlH8aM2AdIQE2hyQGJdTk4VnHIuYIcB6Pc=)
2: diGFBknLdwh-HCGfBtKOS8e6uJM.roa (hash: cB3gm8p9TxqmEEhTV6yxgTgaXbm1raO7jRrFe5J7IiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/15fee7-d411-4c1d-a7cd-570d17f9f2a5/1/Ysv6JKSIMntzB3XjKdUaGSFhJTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/15fee7-d411-4c1d-a7cd-570d17f9f2a5/1/Ysv6JKSIMntzB3XjKdUaGSFhJTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ysv6JKSIMntzB3XjKdUaGSFhJTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:35:34:03:04:c2:c7:6a:8c:72:d9:5f:af:be:29:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62cbfa24a488327b730775e329d51a1921612531
Validity
Not Before: Feb 17 00:00:54 2025 GMT
Not After : Feb 18 00:00:54 2025 GMT
Subject: CN=979d12dc7f815f0d28ea7829f5287a8cc8309256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5f:12:b6:3d:09:25:b4:2c:f9:07:df:59:1e:
aa:3b:5d:1a:3f:ac:70:69:bb:28:89:8f:f4:3f:e5:
fe:9a:f3:7e:d0:11:e2:4b:53:19:f2:ad:96:b0:a7:
5f:ae:75:f8:65:31:e4:0d:d8:35:02:c2:00:e9:eb:
40:eb:26:1e:97:c3:92:ab:14:2c:55:01:04:07:d4:
80:df:77:58:7e:38:b6:a8:b4:83:32:ec:06:1b:05:
df:e9:81:aa:4e:9f:48:6d:75:79:17:02:ef:36:33:
20:fd:f1:97:6d:72:ff:e7:7e:fd:9e:04:72:d3:85:
24:86:f3:d2:73:a4:f9:1d:36:ec:b3:5d:63:f5:db:
b3:4e:32:86:de:45:37:b7:84:87:c0:f3:9e:b5:95:
67:65:3f:a7:9a:3d:f2:3a:fa:6b:a4:01:3e:ab:2b:
3d:37:0e:37:3a:d2:46:2e:23:21:25:26:31:e7:44:
7b:ae:c8:24:b2:b5:e6:2a:51:74:1c:d3:3c:3f:75:
b0:8a:a2:60:ad:69:47:cd:3f:e6:4b:df:6a:ce:c4:
aa:bc:ac:c2:ab:75:46:2f:35:e8:a7:cc:dc:f2:2b:
3b:eb:e6:45:ca:e8:5f:62:fd:11:26:80:b4:ae:c6:
a3:cc:a0:8a:97:dd:c5:92:51:e8:f2:28:70:e2:a9:
7b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:9D:12:DC:7F:81:5F:0D:28:EA:78:29:F5:28:7A:8C:C8:30:92:56
X509v3 Authority Key Identifier:
keyid:62:CB:FA:24:A4:88:32:7B:73:07:75:E3:29:D5:1A:19:21:61:25:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ysv6JKSIMntzB3XjKdUaGSFhJTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/15fee7-d411-4c1d-a7cd-570d17f9f2a5/1/Ysv6JKSIMntzB3XjKdUaGSFhJTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/15fee7-d411-4c1d-a7cd-570d17f9f2a5/1/Ysv6JKSIMntzB3XjKdUaGSFhJTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:54:4e:75:e4:3b:f2:72:7f:d8:2b:73:4b:38:ca:e9:f5:65:
b1:dd:26:8f:9b:d4:c5:0d:11:80:2e:ea:77:e7:27:76:91:7b:
ae:b0:7b:da:08:9c:e1:64:f9:bf:4b:59:fc:75:f0:a0:ae:46:
c5:6c:9c:03:9f:d5:2e:b5:76:25:3e:c9:47:3d:31:70:66:e1:
2e:da:e3:e3:5b:03:bf:b6:e8:ce:48:68:fe:8b:cd:18:a5:27:
10:a9:e4:cf:c2:98:fb:94:11:19:b8:f1:96:a9:73:e5:85:74:
bb:e7:3e:53:44:1d:b5:c5:42:4c:4b:14:d1:5e:8d:87:f3:41:
fc:9a:33:d5:a9:5e:bb:00:1c:8f:b3:4d:e4:83:6e:4c:2e:00:
98:ef:39:33:25:88:20:2b:e7:d3:06:35:df:0f:04:bd:6f:5f:
dc:f0:c1:30:68:f6:73:a4:90:92:fd:d4:61:0f:81:74:89:cd:
7f:59:5b:6f:0f:30:7a:d4:a6:4d:af:da:35:de:f2:f6:e0:9a:
75:bb:39:ee:79:9d:39:b3:ad:f1:0c:7c:e3:96:9b:e7:82:41:
9d:37:8a:ca:99:e2:00:7e:85:e1:19:8c:be:24:5c:c4:17:6d:
99:79:5a:28:1c:e4:37:b9:3a:16:59:a8:1a:7e:86:af:7d:eb:
1e:78:22:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:14:57 2025 by rpki-client