![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.mft
File: 4upZNGSFjik5UjRc9Ol3ksiBEFc.mft (raw, json)
Hash identifier: B9z6vjzOBhrRz5KVHeaJmeYqZpraQjLaiaugbehFTig=
Subject key identifier: 29:D5:B0:80:18:5D:59:F8:97:70:4E:8F:18:E3:7D:D8:C4:6D:24:43
Authority key identifier: E2:EA:59:34:64:85:8E:29:39:52:34:5C:F4:E9:77:92:C8:81:10:57
Certificate issuer: /CN=e2ea593464858e293952345cf4e97792c8811057
Certificate serial: 0195127E1C1E5E3A59765D56E17FF5AC5CB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4upZNGSFjik5UjRc9Ol3ksiBEFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.mft
Manifest number: 13EA
Signing time: Mon 17 Feb 2025 06:00:09 +0000
Manifest this update: Mon 17 Feb 2025 06:00:09 +0000
Manifest next update: Tue 18 Feb 2025 06:00:09 +0000
Files and hashes: 1: 4upZNGSFjik5UjRc9Ol3ksiBEFc.crl (hash: t/P5OqnCi3jiQDzyj9r4dsy1tbUfoVfGj1xLDbabuwM=)
2: n71MSGzOhUkplgZWWIqcoN_zTeY.roa (hash: M4lvFRLACkU+Ya2mbosmCvcTtHX7Mafia2WGDrBrlJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4upZNGSFjik5UjRc9Ol3ksiBEFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:7e:1c:1e:5e:3a:59:76:5d:56:e1:7f:f5:ac:5c:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2ea593464858e293952345cf4e97792c8811057
Validity
Not Before: Feb 17 06:00:09 2025 GMT
Not After : Feb 18 06:00:09 2025 GMT
Subject: CN=29d5b080185d59f897704e8f18e37dd8c46d2443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:dc:30:93:b3:4b:39:bd:4a:95:fa:05:be:ae:
2e:40:56:49:cd:0c:64:10:92:18:94:49:26:d3:79:
bb:02:51:67:5c:97:7e:d5:c8:e3:7a:79:f0:00:93:
76:02:b3:a7:7d:2f:70:03:21:45:d3:94:24:1a:c4:
7f:d9:43:a5:37:80:96:ba:03:32:25:34:c2:3e:5d:
74:14:56:70:46:fb:b4:41:2a:c1:50:92:da:f9:d5:
a1:04:26:52:0f:2e:dd:12:83:0c:1d:77:4a:e7:92:
61:9d:b2:14:35:e9:32:7d:5c:a8:66:35:8d:90:c4:
16:73:00:82:db:90:a0:b3:e9:c8:7a:60:83:23:c6:
de:61:eb:57:43:fd:2e:c3:25:e4:4b:88:9d:e6:7e:
87:27:c5:de:ba:49:94:3a:45:b4:52:10:1a:a5:db:
50:f9:d2:ee:9c:4f:a5:bd:11:16:e5:95:29:ba:8f:
59:9f:f0:e9:f2:91:68:c4:af:22:6e:87:b2:be:1c:
38:87:fc:c8:d2:50:62:26:8a:71:70:ef:14:bd:93:
41:40:79:27:86:f4:3c:b7:2b:ce:c0:c1:66:79:27:
28:20:ef:79:f2:e5:4e:6e:8d:86:43:62:64:81:73:
9b:e6:14:d3:da:cb:08:f5:c7:83:c3:ab:dd:57:14:
12:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:D5:B0:80:18:5D:59:F8:97:70:4E:8F:18:E3:7D:D8:C4:6D:24:43
X509v3 Authority Key Identifier:
keyid:E2:EA:59:34:64:85:8E:29:39:52:34:5C:F4:E9:77:92:C8:81:10:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4upZNGSFjik5UjRc9Ol3ksiBEFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:a5:7f:a3:69:eb:bb:b1:a0:bf:67:e9:8e:68:3e:4e:b8:6e:
c1:33:6d:61:e8:e8:75:66:13:a0:91:f3:2e:d7:72:fa:e6:a7:
5f:55:44:f4:ea:fa:85:01:65:ea:86:36:e1:7b:05:9d:c5:90:
ca:15:88:de:05:9c:d7:ae:51:42:3a:db:c4:e3:15:40:a0:0b:
b0:87:85:ed:ca:a3:35:17:94:eb:97:ad:2d:e0:20:f7:4f:98:
1a:29:e4:7e:5a:f2:75:19:96:f7:0f:cf:47:2e:4a:10:5f:c2:
58:c6:1a:7f:2b:52:4d:c8:9c:b3:18:c0:7e:c4:9b:26:e2:fb:
c5:f8:62:a4:8b:2b:39:ae:bd:67:c4:89:8d:ae:e6:40:ff:1a:
27:04:2e:9a:88:48:34:31:c4:0c:e8:54:aa:0d:e2:59:a7:78:
2e:1d:e1:cf:8b:e4:83:62:34:a7:01:e0:12:95:68:f2:65:96:
f2:a9:18:db:a9:26:06:67:21:b1:9d:78:01:32:27:1d:9d:d9:
15:c1:eb:6d:4b:c7:0b:fb:86:80:57:62:81:26:9d:0c:5b:04:
65:fa:90:5b:2e:cd:74:bf:8f:5a:8c:03:1c:76:1f:ba:fc:c4:
e5:28:0c:df:29:81:e3:d4:2e:b5:bd:8b:75:0c:4e:c4:19:46:
d0:08:03:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:00:47 2025 by rpki-client