![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/PseNgibLWq_xXGdSWvK4q8t7X5I.mft
File: PseNgibLWq_xXGdSWvK4q8t7X5I.mft (raw, json)
Hash identifier: W+oKs5cElahftEpPXHLSCFbNYnvSRy5n3A0WQlA3Uf4=
Subject key identifier: A6:7D:9A:4E:88:CF:42:D0:CD:09:9D:3A:33:CB:F0:67:87:6C:E2:EE
Authority key identifier: 3E:C7:8D:82:26:CB:5A:AF:F1:5C:67:52:5A:F2:B8:AB:CB:7B:5F:92
Certificate issuer: /CN=3ec78d8226cb5aaff15c67525af2b8abcb7b5f92
Certificate serial: 019510C7099B2DCC4D7110EA1D845DC58899
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PseNgibLWq_xXGdSWvK4q8t7X5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/PseNgibLWq_xXGdSWvK4q8t7X5I.mft
Manifest number: 1456
Signing time: Sun 16 Feb 2025 22:00:34 +0000
Manifest this update: Sun 16 Feb 2025 22:00:34 +0000
Manifest next update: Mon 17 Feb 2025 22:00:34 +0000
Files and hashes: 1: PseNgibLWq_xXGdSWvK4q8t7X5I.crl (hash: DjU6JYg+/wufh8w+SW3NT/asWZIoiJgYhjBAVBCPkjM=)
2: RGavrFD9QlH9mvEK00LE9vM0Ylo.roa (hash: in3DOj7fuK/tRP2Np73D85wEHXvdsqUOTjKtL4z+mG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/PseNgibLWq_xXGdSWvK4q8t7X5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/PseNgibLWq_xXGdSWvK4q8t7X5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PseNgibLWq_xXGdSWvK4q8t7X5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:09:9b:2d:cc:4d:71:10:ea:1d:84:5d:c5:88:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec78d8226cb5aaff15c67525af2b8abcb7b5f92
Validity
Not Before: Feb 16 22:00:34 2025 GMT
Not After : Feb 17 22:00:34 2025 GMT
Subject: CN=a67d9a4e88cf42d0cd099d3a33cbf067876ce2ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:63:cb:d7:56:04:6c:8a:21:7f:1d:3e:b0:98:
cf:e3:f2:52:86:28:a5:f9:61:b4:ea:61:59:9f:2f:
01:bc:b0:ab:6f:77:a2:2e:b6:d7:85:89:5b:b1:79:
eb:d6:2f:18:84:3e:e2:24:c6:1a:99:1b:7c:37:24:
d8:2a:09:da:01:0a:d7:63:aa:cf:83:47:22:6f:6b:
81:08:50:23:b6:45:96:5c:bb:a2:d8:4c:11:7d:d2:
c2:4c:9f:84:22:17:8a:11:d2:b7:ae:5a:f2:ae:72:
16:c3:01:e8:90:4c:a9:3d:ca:3a:e9:30:6e:3a:43:
75:cf:a0:20:9d:ba:7a:82:fa:a2:cd:51:5d:cc:e4:
1e:9b:ea:80:06:de:e5:f2:5b:36:3a:ba:38:3f:fc:
88:69:55:55:ec:de:c0:62:d5:d2:2c:76:2e:f6:e7:
ff:b7:a0:5d:13:02:6f:17:9a:a7:7d:17:c3:5a:e7:
6e:cb:32:b6:0a:f2:39:e6:06:42:40:87:5a:0b:4d:
b8:77:59:73:e4:03:27:0e:08:e7:83:4c:35:8c:36:
47:9b:3f:2d:8b:6a:32:a1:5e:1d:a9:9f:f4:93:7b:
0f:db:36:d0:68:81:2d:b4:6d:a3:4d:5c:8a:15:e0:
a0:db:f3:3c:cf:df:5d:16:de:6e:5c:10:ff:5e:63:
95:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:7D:9A:4E:88:CF:42:D0:CD:09:9D:3A:33:CB:F0:67:87:6C:E2:EE
X509v3 Authority Key Identifier:
keyid:3E:C7:8D:82:26:CB:5A:AF:F1:5C:67:52:5A:F2:B8:AB:CB:7B:5F:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PseNgibLWq_xXGdSWvK4q8t7X5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/PseNgibLWq_xXGdSWvK4q8t7X5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/PseNgibLWq_xXGdSWvK4q8t7X5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:47:85:0f:d3:5a:ea:5b:2d:f0:1e:a5:22:a9:dc:9a:b0:6a:
ab:2a:86:ec:48:53:00:6c:4f:ab:b0:95:f2:1f:bd:48:ec:14:
8d:6b:d2:62:ce:65:f3:e5:1d:07:dd:96:5a:52:66:7d:6e:64:
e9:38:46:cc:49:56:be:0c:69:0f:44:81:fa:6b:8b:1a:da:ef:
19:2a:ac:d4:f4:70:7d:8c:01:68:d7:80:01:85:75:5b:14:9e:
b9:6a:6a:2e:c1:89:86:f1:00:a8:71:8c:5f:9a:0a:8d:eb:63:
2a:2c:a1:67:7c:93:ae:42:80:38:0a:b8:6d:59:ee:bb:ec:a5:
5b:b9:53:ef:68:97:0c:2e:3b:67:ed:aa:05:eb:20:0c:ff:3a:
28:4a:65:4b:cb:46:72:a0:cc:03:86:e0:1e:8c:ea:3f:6b:a1:
0a:e3:5f:85:f7:55:c4:4c:a1:76:8b:8c:6d:12:a8:41:63:3e:
6b:de:48:57:54:48:eb:52:7e:b6:98:e5:25:59:d1:61:2f:d8:
d8:9f:70:94:df:fb:b2:d7:51:c8:20:7d:0e:c3:98:90:4e:4e:
97:d2:73:0c:9a:d8:fe:7e:79:b9:fc:b2:2a:72:c0:61:ee:d0:
6b:46:68:a3:71:06:a2:28:ea:0a:a1:f4:e3:67:67:f7:29:53:
b7:b8:3c:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:44:16 2025 by rpki-client