![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.mft
File: xRZ0_uVVZygXXvtW6qi5nzgVr6c.mft (raw, json)
Hash identifier: BzVQiUJ6AjXKyLySe+Z60PWlTvh0U+5QpCrN271JByU=
Subject key identifier: 1E:39:B2:DC:37:55:34:33:69:92:83:C6:04:4C:75:55:5A:FC:94:E4
Authority key identifier: C5:16:74:FE:E5:55:67:28:17:5E:FB:56:EA:A8:B9:9F:38:15:AF:A7
Certificate issuer: /CN=c51674fee5556728175efb56eaa8b99f3815afa7
Certificate serial: 01951247715FA89EF0D552B7119F7D8F0C08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xRZ0_uVVZygXXvtW6qi5nzgVr6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.mft
Manifest number: 1258
Signing time: Mon 17 Feb 2025 05:00:26 +0000
Manifest this update: Mon 17 Feb 2025 05:00:26 +0000
Manifest next update: Tue 18 Feb 2025 05:00:26 +0000
Files and hashes: 1: ueBb6XAUF6o0wgWHrBMyAvCjDcw.roa (hash: FG2GqOv/aixTR0aGnuCtGnWbZFyWEpFgUNZYVCVmlOI=)
2: xRZ0_uVVZygXXvtW6qi5nzgVr6c.crl (hash: 02LXlxK0ks3VRNx24xbbtLI1RScJQxYzpBXodLPwoy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/xRZ0_uVVZygXXvtW6qi5nzgVr6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:47:71:5f:a8:9e:f0:d5:52:b7:11:9f:7d:8f:0c:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c51674fee5556728175efb56eaa8b99f3815afa7
Validity
Not Before: Feb 17 05:00:26 2025 GMT
Not After : Feb 18 05:00:26 2025 GMT
Subject: CN=1e39b2dc37553433699283c6044c75555afc94e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f4:3d:71:db:8e:bc:83:93:fb:82:f0:9b:12:
b1:11:03:d1:40:06:d0:ab:e7:3a:7f:f6:07:77:c2:
36:c0:22:88:20:46:ed:1a:1a:3b:08:8c:d3:5e:e2:
8f:3d:1b:9c:e0:4f:f6:13:cd:aa:1b:70:19:67:54:
39:0f:69:9b:b3:27:e0:6b:99:07:ec:76:95:f1:76:
de:8b:61:cb:f9:5d:74:0d:bd:9b:06:de:70:b2:36:
8a:88:01:1b:37:06:f0:f1:59:63:32:ec:87:a5:cd:
4c:20:50:07:72:37:ad:e9:29:ad:d7:3b:cc:12:46:
ad:84:b0:f7:1c:80:f3:1a:b4:cb:63:a0:82:15:38:
62:77:d2:52:57:1f:2e:82:9e:d1:c6:48:5e:d9:54:
e0:87:fa:52:57:ab:2c:4b:02:02:a5:43:4b:2f:22:
ca:32:75:d4:71:06:c3:c1:ee:80:c4:0e:b6:3c:7b:
8c:50:d6:d5:b5:e0:2f:0f:21:ce:9d:36:3c:1c:92:
89:a4:35:15:c4:d3:74:23:9f:91:a5:f9:1f:ac:0e:
b0:88:b9:1f:ec:76:27:5e:c1:6f:50:d2:89:9e:9a:
fb:c7:29:7a:1a:f3:f4:9a:2e:d7:31:a6:e6:4b:b3:
96:04:82:fe:50:6e:b2:03:3f:bb:41:31:d3:ec:57:
c2:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:39:B2:DC:37:55:34:33:69:92:83:C6:04:4C:75:55:5A:FC:94:E4
X509v3 Authority Key Identifier:
keyid:C5:16:74:FE:E5:55:67:28:17:5E:FB:56:EA:A8:B9:9F:38:15:AF:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xRZ0_uVVZygXXvtW6qi5nzgVr6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:32:a6:91:e1:c0:f6:25:43:a0:10:6b:20:f9:ab:dd:56:98:
81:90:39:a1:f6:70:c6:f8:5c:72:55:4a:5f:d6:a3:37:59:26:
5d:40:75:b4:a4:28:63:60:ca:ca:13:e8:90:7f:69:cd:2f:eb:
4e:15:e5:4d:53:35:4d:e7:bb:19:3a:4b:f9:2c:f2:dc:e0:af:
41:b2:b6:fd:e8:47:92:03:05:4a:fa:ab:ad:17:da:62:30:bb:
33:fb:5e:41:75:47:5f:70:89:5e:0e:a0:3d:ed:5c:04:ac:55:
88:b6:a3:c2:b4:a4:11:73:f4:78:b8:01:8d:71:c8:05:da:f2:
db:13:0d:1b:bd:a7:57:fa:6f:cc:62:f6:94:a5:8a:7d:0b:d6:
5d:6f:51:0b:c2:5a:76:26:14:f4:60:59:fb:f0:b7:8c:61:21:
ac:52:d2:38:fa:4b:be:8a:58:07:f3:66:61:63:54:4e:f8:47:
b7:5b:e0:b1:94:1f:0e:2a:67:35:be:79:a5:6f:49:9f:bd:98:
f0:81:28:77:ef:d3:bf:2c:eb:d7:81:d0:ae:7e:3d:73:c8:ef:
b0:aa:5d:ab:45:8f:9f:ff:46:d1:ea:6e:3f:a9:e1:6a:44:9a:
e2:c5:3e:88:c1:cf:83:5b:7f:06:9b:27:60:74:20:a0:ff:f6:
a3:52:38:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:57:37 2025 by rpki-client