![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/d4d7d2-9cb2-4ce0-8665-1ba21b0e2913/1/u-Sqx31jiC90NiBwTCTb7bGIDXo.mft
File: u-Sqx31jiC90NiBwTCTb7bGIDXo.mft (raw, json)
Hash identifier: fuIB4err6KFQ1CoM26zEzM5IJJO39M/au1bfNZ8fhHo=
Subject key identifier: 44:AF:A2:BC:F0:E7:77:EF:20:7E:D0:6C:9E:40:E8:BF:91:AA:40:B3
Authority key identifier: BB:E4:AA:C7:7D:63:88:2F:74:36:20:70:4C:24:DB:ED:B1:88:0D:7A
Certificate issuer: /CN=bbe4aac77d63882f743620704c24dbedb1880d7a
Certificate serial: 019510C815CF5780D242D551E0C917ABA01F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u-Sqx31jiC90NiBwTCTb7bGIDXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/d4d7d2-9cb2-4ce0-8665-1ba21b0e2913/1/u-Sqx31jiC90NiBwTCTb7bGIDXo.mft
Manifest number: 03B0
Signing time: Sun 16 Feb 2025 22:01:42 +0000
Manifest this update: Sun 16 Feb 2025 22:01:42 +0000
Manifest next update: Mon 17 Feb 2025 22:01:42 +0000
Files and hashes: 1: u-Sqx31jiC90NiBwTCTb7bGIDXo.crl (hash: aIx75vy5moo8pf86uLD3IHJJ4klS6+ltMQ6b/C4N2UA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/d4d7d2-9cb2-4ce0-8665-1ba21b0e2913/1/u-Sqx31jiC90NiBwTCTb7bGIDXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/d4d7d2-9cb2-4ce0-8665-1ba21b0e2913/1/u-Sqx31jiC90NiBwTCTb7bGIDXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/u-Sqx31jiC90NiBwTCTb7bGIDXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c8:15:cf:57:80:d2:42:d5:51:e0:c9:17:ab:a0:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbe4aac77d63882f743620704c24dbedb1880d7a
Validity
Not Before: Feb 16 22:01:42 2025 GMT
Not After : Feb 17 22:01:42 2025 GMT
Subject: CN=44afa2bcf0e777ef207ed06c9e40e8bf91aa40b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b3:ad:32:e7:3d:e6:c4:e5:e3:a5:33:76:c0:
eb:7d:0d:2e:1f:1a:11:ef:f5:5a:a3:25:94:10:fe:
b0:94:33:0a:36:40:22:eb:de:49:df:eb:b3:f9:7c:
51:84:90:31:93:d7:b4:7d:e4:aa:6a:27:ef:1e:12:
13:a9:49:b5:63:ed:e1:52:19:6e:20:27:7f:cf:ed:
0e:db:5b:f2:17:8f:cd:48:f8:c0:bc:44:fc:c7:fb:
95:b5:03:e6:33:f9:af:23:ed:04:ef:f8:e5:cc:68:
87:7d:18:e2:e0:44:c0:b8:08:88:8a:09:e9:fb:28:
72:e9:5d:8c:2c:f8:1b:4f:8e:de:b9:4c:0f:a9:26:
7d:75:16:30:75:db:e1:b1:ea:2c:3c:92:ab:93:a9:
55:bd:25:68:b6:99:2f:b4:50:fe:90:89:50:b5:e2:
b8:ae:ca:24:0d:1b:be:3e:0e:c8:06:ae:b5:46:40:
a3:1c:30:db:73:c3:57:f2:c8:20:4a:92:0e:68:ad:
45:a9:4b:ef:b6:bc:a6:e2:01:21:01:c4:01:00:3a:
9b:3f:32:29:2e:13:7f:b0:59:25:08:21:c5:3d:1d:
73:ee:5b:b5:61:ed:15:0b:72:b3:df:72:48:09:34:
30:36:2b:0b:26:4e:b4:cb:2a:7a:e5:30:15:ae:d4:
7b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:AF:A2:BC:F0:E7:77:EF:20:7E:D0:6C:9E:40:E8:BF:91:AA:40:B3
X509v3 Authority Key Identifier:
keyid:BB:E4:AA:C7:7D:63:88:2F:74:36:20:70:4C:24:DB:ED:B1:88:0D:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-Sqx31jiC90NiBwTCTb7bGIDXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d4d7d2-9cb2-4ce0-8665-1ba21b0e2913/1/u-Sqx31jiC90NiBwTCTb7bGIDXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d4d7d2-9cb2-4ce0-8665-1ba21b0e2913/1/u-Sqx31jiC90NiBwTCTb7bGIDXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:c5:9a:3f:13:82:34:e0:78:41:fb:43:32:37:f2:02:e8:68:
67:c9:d0:01:ed:f2:b9:14:31:d9:22:ee:b9:e9:a5:9c:f3:15:
6d:f7:e1:d0:37:4e:bb:1e:6b:76:7d:27:f1:b2:0b:b6:66:39:
f7:5a:27:cf:02:82:4b:0a:3b:94:bb:86:1f:98:74:5c:fe:ed:
70:af:5e:b4:66:96:83:18:fc:ef:50:01:43:5b:b6:bd:74:07:
65:f6:0a:a3:4d:b2:db:e5:16:bd:79:6f:04:c4:d4:54:ae:98:
6e:35:ef:67:75:1c:3c:e5:3e:e0:3b:e4:1f:a1:48:95:10:59:
a3:e1:e6:77:d5:0a:87:1a:32:19:22:14:35:f5:82:7e:01:be:
cd:be:e8:fb:24:67:80:c7:b9:23:7b:79:5a:55:6f:3d:6d:9c:
78:43:aa:79:17:2a:c8:a0:e5:93:69:8b:60:a2:ea:22:74:8d:
40:b7:87:81:12:40:24:36:40:3b:17:40:b4:a6:e4:13:54:81:
a6:3b:6a:db:2d:6c:ea:28:21:2c:13:74:36:56:5a:40:82:15:
16:b4:db:ef:75:9d:eb:30:d0:17:fd:42:eb:da:5e:ce:3c:9d:
93:cf:6f:d0:72:9e:25:3c:92:b8:c4:a5:b1:20:d0:9c:1e:c1:
83:49:04:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:37:25 2025 by rpki-client