![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft
File: vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft (raw, json)
Hash identifier: kAd+6ukI7KCkULX0lsEV5k1VFpM09NmTiGJXRbQFsuQ=
Subject key identifier: 83:B7:4C:09:5B:E9:4F:23:EA:C6:11:BA:83:C1:E8:95:21:C6:5E:3D
Authority key identifier: BD:B7:AA:C7:C4:93:BC:8A:A7:EC:70:59:D3:EC:76:BB:FC:2F:23:D8
Certificate issuer: /CN=bdb7aac7c493bc8aa7ec7059d3ec76bbfc2f23d8
Certificate serial: 019511A29AED9D7B8384D907CDF53EBEEBBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vbeqx8STvIqn7HBZ0-x2u_wvI9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft
Manifest number: 1457
Signing time: Mon 17 Feb 2025 02:00:23 +0000
Manifest this update: Mon 17 Feb 2025 02:00:23 +0000
Manifest next update: Tue 18 Feb 2025 02:00:23 +0000
Files and hashes: 1: 6pAZoUeyJNKjbIkJ9bo52GGChiE.roa (hash: H9UE5mQZ+sgOHGu/NqWUAUZ7b5ITdi+7fpdJ+eVNZFg=)
2: vbeqx8STvIqn7HBZ0-x2u_wvI9g.crl (hash: CU+P2dJzRs25A98H3joiun0B8q9iOWoQt05JbhsMnmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/vbeqx8STvIqn7HBZ0-x2u_wvI9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:9a:ed:9d:7b:83:84:d9:07:cd:f5:3e:be:eb:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdb7aac7c493bc8aa7ec7059d3ec76bbfc2f23d8
Validity
Not Before: Feb 17 02:00:23 2025 GMT
Not After : Feb 18 02:00:23 2025 GMT
Subject: CN=83b74c095be94f23eac611ba83c1e89521c65e3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:87:ce:da:72:a0:66:07:8b:cc:5e:5f:bb:0d:
e3:60:83:a1:6c:97:bd:1f:f2:b3:7b:00:13:93:b7:
6e:37:2e:e8:7b:40:8e:57:ba:de:ce:8b:d5:ec:a5:
b0:92:1c:fe:be:8f:59:da:07:7f:d3:09:44:98:e6:
4e:54:be:8b:ca:cf:ac:fd:3b:b7:b2:5c:7b:00:fd:
9f:3b:fd:df:5a:c7:c3:20:1c:9f:d2:45:a3:19:de:
6a:5d:d3:34:61:7f:40:b3:13:55:b5:5c:15:e5:a8:
63:34:5a:3d:f1:05:8a:83:d5:82:2e:ea:3a:d9:81:
ea:bd:63:e9:fe:60:8b:85:44:48:ee:e9:88:ac:db:
c2:e7:e2:02:d2:66:fa:c8:c2:28:0d:8c:73:5e:8d:
92:62:f3:1d:c5:55:1f:2b:30:bb:13:d6:be:39:57:
e0:1a:f7:ab:84:2e:10:9a:69:9e:aa:de:06:25:17:
72:3f:10:f0:6b:cc:d1:54:e0:56:fe:db:fb:b4:5c:
ec:21:fe:80:80:bf:e6:13:2a:29:95:0c:c3:6a:19:
43:10:e0:5b:37:09:ca:1b:40:86:73:3d:70:df:0a:
c1:e8:02:5f:86:7b:94:8f:54:eb:d9:7e:f6:65:94:
4a:d3:0f:05:d2:46:20:47:a7:df:ac:32:a8:07:27:
03:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:B7:4C:09:5B:E9:4F:23:EA:C6:11:BA:83:C1:E8:95:21:C6:5E:3D
X509v3 Authority Key Identifier:
keyid:BD:B7:AA:C7:C4:93:BC:8A:A7:EC:70:59:D3:EC:76:BB:FC:2F:23:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vbeqx8STvIqn7HBZ0-x2u_wvI9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:34:11:7d:f4:82:80:8c:43:4a:b5:3e:5e:52:cb:94:c4:8a:
6c:61:7c:a5:66:f7:65:92:9a:9f:0e:79:c1:be:49:b8:97:bc:
bf:f1:28:4d:ed:e8:b4:84:f3:a1:ca:c4:d3:62:4e:26:7d:51:
7d:ee:bb:5e:54:23:65:74:a0:21:f5:45:ec:fb:80:7c:17:a9:
63:95:18:0f:42:3b:73:28:46:75:e7:f8:cf:7c:de:63:42:37:
71:2d:a6:fd:97:ed:28:b0:38:8f:df:18:a3:65:48:04:b3:33:
4f:22:e7:ce:c8:93:99:2a:4b:76:9b:10:dc:05:a4:ee:f8:03:
ad:fa:27:65:82:b6:f3:00:8e:06:36:42:0e:57:9a:7d:55:87:
fc:bc:92:2d:04:df:e9:13:e2:a5:7a:d5:34:8c:7a:94:b8:5e:
97:d6:0f:ff:d2:a7:72:40:fb:42:6d:01:c5:85:58:15:bd:15:
a1:a6:07:fb:d5:4e:71:53:48:ec:a5:36:07:ab:f7:6b:f2:6d:
d4:6b:4b:6b:cf:8e:a7:cb:17:ad:27:bb:99:72:f2:78:cf:e5:
1e:a1:c1:0e:c1:cf:f2:80:27:94:49:da:87:62:b4:a2:f7:f5:
12:b5:fd:db:f2:cc:75:56:73:92:32:ab:cb:4b:88:c6:f2:55:
c6:4a:d3:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:24:54 2025 by rpki-client