![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/179891-41cc-4aa0-ab68-f406c83b3fba/1/rpPMjMqB-gDcU-e4B46RtcEbou8.mft
File: rpPMjMqB-gDcU-e4B46RtcEbou8.mft (raw, json)
Hash identifier: TbxsWnveAmQWpvJ/3xjuccQF2g5R3xCZcwzhK4TiALg=
Subject key identifier: F1:85:EC:3D:B3:42:1D:30:7F:F0:BE:A9:61:73:59:77:E2:BD:79:EB
Authority key identifier: AE:93:CC:8C:CA:81:FA:00:DC:53:E7:B8:07:8E:91:B5:C1:1B:A2:EF
Certificate issuer: /CN=ae93cc8cca81fa00dc53e7b8078e91b5c11ba2ef
Certificate serial: 01951134FD11D4487A9E10E311F548BF5413
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rpPMjMqB-gDcU-e4B46RtcEbou8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/179891-41cc-4aa0-ab68-f406c83b3fba/1/rpPMjMqB-gDcU-e4B46RtcEbou8.mft
Manifest number: 0F5F
Signing time: Mon 17 Feb 2025 00:00:40 +0000
Manifest this update: Mon 17 Feb 2025 00:00:40 +0000
Manifest next update: Tue 18 Feb 2025 00:00:40 +0000
Files and hashes: 1: crHez21ajs4tpxPy7D0FO2U5bxU.roa (hash: gCTLggUH/wf+1HoWxwo5Fpy8idWpj7d4gVSkhA0S2qM=)
2: rpPMjMqB-gDcU-e4B46RtcEbou8.crl (hash: DI7q75lGqOK4yL6m4+fCDSKnbGXle8bFqWcnNPST++Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/179891-41cc-4aa0-ab68-f406c83b3fba/1/rpPMjMqB-gDcU-e4B46RtcEbou8.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/179891-41cc-4aa0-ab68-f406c83b3fba/1/rpPMjMqB-gDcU-e4B46RtcEbou8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rpPMjMqB-gDcU-e4B46RtcEbou8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:fd:11:d4:48:7a:9e:10:e3:11:f5:48:bf:54:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae93cc8cca81fa00dc53e7b8078e91b5c11ba2ef
Validity
Not Before: Feb 17 00:00:40 2025 GMT
Not After : Feb 18 00:00:40 2025 GMT
Subject: CN=f185ec3db3421d307ff0bea961735977e2bd79eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7a:f1:a6:41:38:be:0d:40:d1:8a:fc:cd:06:
ae:d1:fe:88:07:0c:c4:24:27:02:0c:60:fe:be:28:
5c:fd:57:85:00:f0:e1:d1:44:cd:01:c3:f4:a8:68:
66:af:e1:8b:c3:57:c1:e0:96:d9:10:ec:a3:26:59:
8b:a6:08:ed:14:a9:a4:25:1b:ac:da:a4:e8:ca:ba:
30:3f:ef:8f:11:ce:e3:0e:46:62:a6:11:73:fe:b2:
2c:2d:57:80:0a:14:3e:85:92:18:45:2f:4e:59:bd:
8c:5b:cf:de:8f:4f:f1:34:77:f3:9c:43:c5:9a:13:
ef:3b:cb:7d:5a:07:b3:15:e8:99:59:e6:19:02:4b:
ed:1a:05:5b:49:2a:ba:c8:7d:f9:7d:25:20:18:6a:
77:2c:6e:27:44:b2:98:3d:1b:f3:83:0d:b8:94:e2:
01:70:ac:07:01:e6:58:a4:ad:ab:c8:0b:09:77:8f:
f1:bf:6d:20:37:bf:8f:ec:e8:55:60:ad:82:f0:77:
59:44:5a:ef:10:78:f9:72:b6:fe:11:73:4b:83:cd:
39:4f:8b:3c:45:66:7f:db:fb:87:58:90:e4:fa:e1:
87:cc:3c:f9:b3:e3:07:da:3f:ff:53:a4:c4:5f:c0:
18:1f:d1:94:64:04:6f:82:2c:34:53:88:fc:e0:09:
3b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:85:EC:3D:B3:42:1D:30:7F:F0:BE:A9:61:73:59:77:E2:BD:79:EB
X509v3 Authority Key Identifier:
keyid:AE:93:CC:8C:CA:81:FA:00:DC:53:E7:B8:07:8E:91:B5:C1:1B:A2:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rpPMjMqB-gDcU-e4B46RtcEbou8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/179891-41cc-4aa0-ab68-f406c83b3fba/1/rpPMjMqB-gDcU-e4B46RtcEbou8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/179891-41cc-4aa0-ab68-f406c83b3fba/1/rpPMjMqB-gDcU-e4B46RtcEbou8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:1f:cd:f2:9c:00:e3:3c:16:7b:7c:d5:d9:84:a0:ab:3a:5c:
d9:eb:3b:94:6a:37:dc:df:7a:9d:5a:91:1a:d1:4c:6c:5a:34:
00:a4:d8:e5:f8:1e:82:29:9c:8f:5f:23:8a:eb:72:a1:c7:c7:
d6:b8:fa:53:50:4f:a7:8b:f2:8b:df:aa:bc:f3:2f:ee:3e:22:
7c:40:20:91:52:56:ec:09:75:1c:2b:47:5d:b2:e3:b0:a5:bc:
41:f0:ad:32:ca:dd:1c:0e:83:70:73:88:ae:91:14:bc:41:a6:
3d:56:6e:ef:b2:9d:5e:60:23:5a:78:b0:0a:fb:ac:fe:ce:aa:
bb:4a:bf:35:4d:62:e2:a0:b0:d0:97:fb:f6:10:4f:c9:b7:a7:
9c:0a:e6:07:cc:9b:a3:a4:b6:3b:0c:f0:50:aa:82:3e:1d:ea:
f3:23:f6:37:0a:b6:86:fe:be:09:35:a8:1a:6f:7d:53:50:8c:
4c:96:97:a7:08:3b:46:5b:5b:5a:78:c3:be:5e:16:dc:81:7d:
e9:f2:33:95:70:43:44:7b:10:4c:cd:c7:fe:76:af:73:dc:fc:
53:01:79:4c:f7:53:95:f4:a1:33:75:f3:ff:51:0d:19:ab:2c:
71:51:e1:44:6b:5a:33:fe:63:ea:eb:fe:da:9a:1a:28:75:29:
a6:d1:4d:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:36:01 2025 by rpki-client