![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.mft
File: v42FRzQuL8ns-t_O8Azyc--dbpA.mft (raw, json)
Hash identifier: PCPR7ZN9zV0keiCMTDspqeqL+1bU1aA6vpSdjKDDvOo=
Subject key identifier: ED:47:23:9B:7A:86:35:F7:1F:E5:7A:9A:49:13:94:79:3B:FF:D6:CB
Authority key identifier: BF:8D:85:47:34:2E:2F:C9:EC:FA:DF:CE:F0:0C:F2:73:EF:9D:6E:90
Certificate issuer: /CN=bf8d8547342e2fc9ecfadfcef00cf273ef9d6e90
Certificate serial: 019510FDD7984F99F9E6966EE496297F7AB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v42FRzQuL8ns-t_O8Azyc--dbpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.mft
Manifest number: 01B6
Signing time: Sun 16 Feb 2025 23:00:26 +0000
Manifest this update: Sun 16 Feb 2025 23:00:26 +0000
Manifest next update: Mon 17 Feb 2025 23:00:26 +0000
Files and hashes: 1: fwI8WQwy5fbXMlIKzIdcXaYEMU0.roa (hash: bPDJhxbWV/nawvua5orm+AkfyQvA9xpKaA3uAdqYMPA=)
2: v42FRzQuL8ns-t_O8Azyc--dbpA.crl (hash: hperL/nkJhxvsgTKQZshjaLUkoaYauDhasV6/QImWvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/v42FRzQuL8ns-t_O8Azyc--dbpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fd:d7:98:4f:99:f9:e6:96:6e:e4:96:29:7f:7a:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf8d8547342e2fc9ecfadfcef00cf273ef9d6e90
Validity
Not Before: Feb 16 23:00:26 2025 GMT
Not After : Feb 17 23:00:26 2025 GMT
Subject: CN=ed47239b7a8635f71fe57a9a491394793bffd6cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b0:f5:ec:64:25:a9:be:9b:c0:d0:80:f9:8e:
ed:f5:93:d4:1f:0b:5d:41:34:13:94:80:ba:73:a7:
fd:05:7f:ce:14:08:ae:54:0a:2a:68:66:04:92:ab:
1d:dd:9f:51:82:cd:54:50:c0:c5:34:06:c8:1f:1d:
a0:86:8d:58:a5:f8:cd:13:d6:0b:b6:31:ee:18:59:
73:6f:74:68:9b:47:e1:4a:2b:5b:50:0e:8c:02:4d:
80:2a:68:c3:ad:de:33:a7:7e:8f:d0:76:49:bf:98:
98:9e:cd:58:22:5f:60:d0:02:2d:e2:a0:4d:68:fb:
5d:6b:a4:cf:e9:9b:b5:46:13:47:90:da:a5:41:3d:
2c:e4:ee:58:97:34:5c:9a:1c:d5:30:b1:b4:fb:d3:
ec:7b:89:37:2b:ab:af:e7:bf:55:3d:74:21:e2:0b:
74:fe:ec:c8:f0:05:62:e5:df:14:9d:30:7a:55:07:
7b:a9:14:28:50:99:eb:e0:c8:f2:88:87:68:1d:ca:
7c:55:09:fc:93:ac:e5:ff:6b:1f:c7:2e:b0:c7:c2:
19:eb:96:51:bc:26:2f:85:e4:76:4a:bc:50:3b:75:
4b:62:c5:f3:ce:a2:a6:d4:4c:40:b4:96:36:68:90:
c4:35:bf:b8:fd:05:78:3f:91:7a:91:48:4a:17:7b:
03:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:47:23:9B:7A:86:35:F7:1F:E5:7A:9A:49:13:94:79:3B:FF:D6:CB
X509v3 Authority Key Identifier:
keyid:BF:8D:85:47:34:2E:2F:C9:EC:FA:DF:CE:F0:0C:F2:73:EF:9D:6E:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v42FRzQuL8ns-t_O8Azyc--dbpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:7b:69:72:88:05:ff:44:40:63:e0:09:a2:cc:33:e5:58:13:
a7:ad:2a:49:36:2f:6f:b5:87:59:7b:1a:f7:94:49:e7:ee:43:
44:d2:63:71:6a:e1:43:e4:0d:67:08:5a:99:9f:05:5d:2a:33:
b6:11:52:e8:3b:fc:49:ad:cc:f4:6c:5b:fd:98:8c:0e:b8:ac:
ba:9a:8d:98:9b:ff:78:80:7c:78:e1:e5:06:51:0c:b6:6b:ef:
7b:35:97:7c:58:07:22:ad:55:1f:4b:7c:16:fe:c7:50:56:4e:
50:17:90:69:df:96:8a:ca:11:d6:9d:07:8d:83:ce:40:b5:ae:
58:30:e5:32:f2:16:ec:9f:38:46:11:4e:e0:5f:15:3b:dd:a5:
65:79:64:8e:40:c4:64:b3:7c:29:35:f1:76:96:21:b5:94:5f:
f5:26:f1:46:6b:26:92:35:b0:7f:97:86:e4:5c:1e:64:ec:5c:
33:7a:bd:a4:48:c7:67:a4:1b:8e:6b:ba:ce:e3:07:e0:ae:c5:
18:35:e6:d0:88:db:a4:73:10:eb:50:11:b2:18:d2:f6:c1:ad:
33:14:38:be:f7:a4:10:e4:be:f1:a6:2b:0b:3f:df:43:cf:6c:
aa:02:57:43:dd:7e:4d:fa:97:ca:b1:ab:fe:d7:ab:55:b7:d1:
ce:9a:12:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:19:10 2025 by rpki-client