![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/97f89e-82b5-442b-b672-5d192fbfcb0b/1/1-reW2YD6YP4lFPzmJkb0XRLJUWU.mft
File: 1-reW2YD6YP4lFPzmJkb0XRLJUWU.mft (raw, json)
Hash identifier: HrdsIH1Q4DbjL+4ZO0phS5xtSCmiiQ9NhYi8no3QHBk=
Subject key identifier: 35:65:E9:72:BB:2B:5F:C9:43:13:4A:D3:51:F7:3D:53:C0:C8:AC:A2
Authority key identifier: FA:B7:96:D9:80:FA:60:FE:25:14:FC:E6:26:46:F4:5D:12:C9:51:65
Certificate issuer: /CN=fab796d980fa60fe2514fce62646f45d12c95165
Certificate serial: 019511354F38DA45A306C97034624160459E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-reW2YD6YP4lFPzmJkb0XRLJUWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/97f89e-82b5-442b-b672-5d192fbfcb0b/1/1-reW2YD6YP4lFPzmJkb0XRLJUWU.mft
Manifest number: 145A
Signing time: Mon 17 Feb 2025 00:01:01 +0000
Manifest this update: Mon 17 Feb 2025 00:01:01 +0000
Manifest next update: Tue 18 Feb 2025 00:01:01 +0000
Files and hashes: 1: 1-reW2YD6YP4lFPzmJkb0XRLJUWU.crl (hash: 4fRDwCtLfsB5TN6wCPkPLZ2c7U+AZDp23uazpPy1UVE=)
2: t-kDZ60Ga6s9XyZB2kPkoXB6jwY.roa (hash: +ne5fdeCEiZZDZ8TkDgbzZo5fLLpzzbaivx2MhBIpe0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/97f89e-82b5-442b-b672-5d192fbfcb0b/1/1-reW2YD6YP4lFPzmJkb0XRLJUWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/97f89e-82b5-442b-b672-5d192fbfcb0b/1/1-reW2YD6YP4lFPzmJkb0XRLJUWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-reW2YD6YP4lFPzmJkb0XRLJUWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:35:4f:38:da:45:a3:06:c9:70:34:62:41:60:45:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fab796d980fa60fe2514fce62646f45d12c95165
Validity
Not Before: Feb 17 00:01:01 2025 GMT
Not After : Feb 18 00:01:01 2025 GMT
Subject: CN=3565e972bb2b5fc943134ad351f73d53c0c8aca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6b:bf:bd:5d:33:9d:0d:2e:6d:27:e8:15:71:
11:ee:df:e4:b9:45:91:bd:be:60:ca:21:c3:8c:cb:
5b:b0:7b:4e:7f:10:fb:99:52:88:18:c4:de:27:c0:
de:c3:fc:5b:80:52:53:58:b8:5b:bc:f3:a9:61:07:
69:7d:ac:9c:a5:1f:d9:3c:98:0b:f4:10:28:37:6c:
34:e2:8e:60:f9:90:75:74:0d:b6:aa:5c:1c:08:24:
ac:96:fe:e8:88:51:24:26:51:92:9f:9a:08:08:3b:
57:ab:d6:8e:31:ad:dc:97:40:13:10:fe:33:b5:a7:
bd:83:53:8c:85:b7:d6:f1:8f:ae:c7:96:f1:74:fc:
6f:d1:1f:c3:88:01:d7:a1:40:12:ab:fa:ce:29:e3:
94:ab:d5:50:c0:47:ae:e8:29:fc:6e:23:2d:fa:b7:
73:83:4f:f6:b9:b6:f0:75:fa:3d:29:47:2d:3c:0f:
8b:bc:f0:b6:8e:20:47:bf:08:08:68:26:63:bd:81:
59:a7:3c:42:76:14:52:20:2e:ef:02:f8:63:1a:62:
b7:43:2e:5b:f0:ef:3e:0e:e7:40:d1:e9:44:f6:9c:
2c:7a:2d:07:26:f3:2d:60:91:b1:5c:ff:49:66:29:
c0:83:57:f6:ab:96:44:2a:4e:c9:3e:37:52:89:d8:
64:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:65:E9:72:BB:2B:5F:C9:43:13:4A:D3:51:F7:3D:53:C0:C8:AC:A2
X509v3 Authority Key Identifier:
keyid:FA:B7:96:D9:80:FA:60:FE:25:14:FC:E6:26:46:F4:5D:12:C9:51:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-reW2YD6YP4lFPzmJkb0XRLJUWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/97f89e-82b5-442b-b672-5d192fbfcb0b/1/1-reW2YD6YP4lFPzmJkb0XRLJUWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/97f89e-82b5-442b-b672-5d192fbfcb0b/1/1-reW2YD6YP4lFPzmJkb0XRLJUWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:29:28:63:88:94:a9:1a:86:bc:02:45:3a:1a:37:cc:de:57:
c2:77:dc:94:9b:a8:58:da:0f:5c:f8:69:5b:2b:c3:c0:ef:2f:
84:46:94:58:68:7b:fb:1a:71:71:e7:5f:1d:48:8a:b6:25:11:
c9:c1:14:64:f2:62:d7:de:10:9c:4e:9b:5f:45:6f:f3:04:d9:
e1:99:0f:3f:7c:38:e2:22:08:35:93:1f:3e:91:1d:42:48:60:
9a:83:62:45:a4:e5:c1:6d:2f:25:b3:97:78:2f:b3:b7:dc:75:
20:d3:0b:24:19:8c:7f:43:d7:17:c2:a8:d6:c7:dc:90:e7:9c:
1a:6b:97:0f:01:66:db:7b:c4:85:c6:41:1e:35:d7:c4:5f:26:
b7:40:42:e3:b0:a8:6c:a6:0f:14:e3:75:97:24:17:37:27:10:
53:bd:7e:a1:33:7b:11:1f:96:43:9b:fb:8a:12:fd:de:ed:50:
56:a2:83:db:07:e7:5e:16:de:70:3c:ed:39:21:a8:d7:42:f7:
cc:b7:05:af:9b:2f:f8:9f:59:2f:17:2f:0a:6f:5a:23:c4:33:
b6:90:46:e1:43:95:e1:dd:3f:15:f0:d5:97:3f:06:9d:5a:75:
c7:56:ce:b4:1a:ac:3f:58:69:4c:0d:c5:49:45:d8:2b:a2:f0:
0a:9d:99:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:26:44 2025 by rpki-client