![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/35aa48-3ed6-4b72-aa76-8cebc5d16489/1/7sI7DnggvD7NT4cI57mQ7daSDV0.mft
File: 7sI7DnggvD7NT4cI57mQ7daSDV0.mft (raw, json)
Hash identifier: jASDtHIDD3naacRE3i8U5kbG4QRVs127RwfaszhArn4=
Subject key identifier: DB:27:86:F1:D3:5D:5E:73:3A:31:0C:86:CA:F9:7A:C1:5B:76:98:88
Authority key identifier: EE:C2:3B:0E:78:20:BC:3E:CD:4F:87:08:E7:B9:90:ED:D6:92:0D:5D
Certificate issuer: /CN=eec23b0e7820bc3ecd4f8708e7b990edd6920d5d
Certificate serial: 019510C7FBB3927314F0095612772A0C0A77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7sI7DnggvD7NT4cI57mQ7daSDV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/35aa48-3ed6-4b72-aa76-8cebc5d16489/1/7sI7DnggvD7NT4cI57mQ7daSDV0.mft
Manifest number: 041A
Signing time: Sun 16 Feb 2025 22:01:36 +0000
Manifest this update: Sun 16 Feb 2025 22:01:36 +0000
Manifest next update: Mon 17 Feb 2025 22:01:36 +0000
Files and hashes: 1: 7sI7DnggvD7NT4cI57mQ7daSDV0.crl (hash: tfIGSdJwFAa5EpxXhMcpDoBYxPdcvgC0s19tgtyQSN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/35aa48-3ed6-4b72-aa76-8cebc5d16489/1/7sI7DnggvD7NT4cI57mQ7daSDV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/35aa48-3ed6-4b72-aa76-8cebc5d16489/1/7sI7DnggvD7NT4cI57mQ7daSDV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7sI7DnggvD7NT4cI57mQ7daSDV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:fb:b3:92:73:14:f0:09:56:12:77:2a:0c:0a:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eec23b0e7820bc3ecd4f8708e7b990edd6920d5d
Validity
Not Before: Feb 16 22:01:36 2025 GMT
Not After : Feb 17 22:01:36 2025 GMT
Subject: CN=db2786f1d35d5e733a310c86caf97ac15b769888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:25:3f:65:6d:ab:bd:af:82:e3:bc:e4:35:8f:
d9:ad:c2:e6:b3:69:b8:0d:8e:5f:f8:46:3b:a7:c9:
3e:e5:13:cb:ac:6c:e1:30:f9:ff:08:b7:8d:f0:6b:
30:c4:eb:e6:8e:df:d3:72:cb:92:f9:aa:23:84:ce:
57:2b:bf:bd:c2:66:9f:20:d6:18:b0:b8:4d:84:8c:
48:87:7d:91:56:d1:ec:2f:cb:68:a3:02:39:56:3b:
98:53:ff:ff:5b:74:ca:9c:26:ff:78:dc:94:fc:b9:
a5:7e:d1:5b:32:bf:18:03:0e:fe:5e:89:5a:4e:0b:
84:09:68:f0:97:1d:e5:5e:65:d7:a0:bc:24:cc:99:
57:84:60:2e:28:7f:af:4e:f8:46:06:39:3e:9c:f1:
b9:23:87:2c:54:89:02:59:f3:61:93:9a:5e:3f:47:
5f:13:d6:ad:ce:6e:12:50:18:4c:f3:0e:a9:4e:82:
27:f5:d5:17:3c:0d:72:35:05:91:9b:80:36:ff:89:
0e:d8:85:86:fe:ac:03:71:eb:41:cd:35:a5:71:7a:
cd:66:8d:ed:f1:1a:ad:2e:30:f7:0f:ea:85:bf:be:
a5:c0:69:28:4e:4e:dc:e5:a6:39:13:ec:32:1a:b0:
1a:36:4c:6a:63:76:7f:a6:da:ed:cf:63:13:d4:44:
f6:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:27:86:F1:D3:5D:5E:73:3A:31:0C:86:CA:F9:7A:C1:5B:76:98:88
X509v3 Authority Key Identifier:
keyid:EE:C2:3B:0E:78:20:BC:3E:CD:4F:87:08:E7:B9:90:ED:D6:92:0D:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7sI7DnggvD7NT4cI57mQ7daSDV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/35aa48-3ed6-4b72-aa76-8cebc5d16489/1/7sI7DnggvD7NT4cI57mQ7daSDV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/35aa48-3ed6-4b72-aa76-8cebc5d16489/1/7sI7DnggvD7NT4cI57mQ7daSDV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:2f:74:be:97:83:41:2a:3c:4a:79:bc:53:81:cf:f4:ab:63:
0c:78:ee:2a:e7:60:48:ef:ec:44:df:ba:26:1a:37:29:02:10:
9c:19:4b:bd:38:ae:ec:35:2a:bb:49:3e:f6:5b:ac:e3:d9:6e:
de:ce:b7:1c:24:90:45:0e:39:d7:92:4c:bc:60:26:6d:58:29:
aa:f6:63:9c:97:fb:62:2b:e4:f9:09:b9:9a:48:e3:f2:62:ed:
0c:82:79:5e:e5:ef:e6:21:c2:93:86:47:b2:80:8e:7e:b2:fb:
5a:4e:81:50:fc:f8:7a:7e:70:1b:07:b6:ff:79:39:e8:12:b6:
18:74:f2:72:b7:d9:2a:c3:b1:d6:ff:a1:0b:e0:cf:e7:a4:be:
d0:cd:12:cd:eb:19:9c:db:39:ee:60:0a:07:ff:4b:c0:6c:d1:
da:20:ac:b1:4d:93:db:2e:fb:5d:4b:e2:0a:5f:12:77:92:f4:
1d:8b:72:88:c7:84:fe:fd:88:ac:65:8c:3c:ba:a7:4e:f9:eb:
e9:f8:c0:04:80:32:f4:8d:ea:e8:d5:f5:1f:e6:9d:0a:c4:e6:
b1:b8:40:c0:eb:cf:0e:37:96:4f:87:18:b5:9f:89:77:91:9d:
0a:00:42:8b:b6:32:fb:ce:cd:d7:ce:92:e6:1e:ad:39:89:2d:
57:a1:85:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:10:41 2025 by rpki-client