![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.mft
File: dRk72fhLSp7UegO9-JLZ55i3Jyc.mft (raw, json)
Hash identifier: l8ZjIfaBk+DBhN/dqiZiEz9iIqHRt5Igf/PImen6BUI=
Subject key identifier: 77:9C:62:E7:02:21:4D:09:75:EF:84:EF:CE:B0:19:8F:3E:FD:E9:7A
Authority key identifier: 75:19:3B:D9:F8:4B:4A:9E:D4:7A:03:BD:F8:92:D9:E7:98:B7:27:27
Certificate issuer: /CN=75193bd9f84b4a9ed47a03bdf892d9e798b72727
Certificate serial: 019510C7E36EA947E2BC146980A79516DCAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dRk72fhLSp7UegO9-JLZ55i3Jyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.mft
Manifest number: 1459
Signing time: Sun 16 Feb 2025 22:01:30 +0000
Manifest this update: Sun 16 Feb 2025 22:01:30 +0000
Manifest next update: Mon 17 Feb 2025 22:01:30 +0000
Files and hashes: 1: dRk72fhLSp7UegO9-JLZ55i3Jyc.crl (hash: kwAhLhqBLPlgdIRli2h8njL3wO01mqs++KRm8nzii7g=)
2: kX-VdRHtzW1CfMS8g0O9lVNrN34.roa (hash: 1YTwpLO8F8/c72ElMFw6a0YxOTA0MMlnVtuXBy93WMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dRk72fhLSp7UegO9-JLZ55i3Jyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:e3:6e:a9:47:e2:bc:14:69:80:a7:95:16:dc:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75193bd9f84b4a9ed47a03bdf892d9e798b72727
Validity
Not Before: Feb 16 22:01:30 2025 GMT
Not After : Feb 17 22:01:30 2025 GMT
Subject: CN=779c62e702214d0975ef84efceb0198f3efde97a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ef:09:ee:74:c9:26:00:e7:7f:8a:22:1b:9b:
d5:cd:1f:33:76:b7:f3:15:a2:d3:7b:d5:86:0e:22:
14:84:73:0b:f7:b2:18:73:9c:3f:37:0c:3f:3d:aa:
b3:2d:4f:2d:9e:fc:e1:66:a2:4b:56:77:d3:8f:a1:
e0:0a:cb:0a:4f:09:37:90:97:cf:06:9e:71:4d:e9:
1b:df:29:7e:c3:fb:98:09:71:6e:54:e1:8a:40:0c:
2a:73:3f:47:b2:b1:fb:74:80:eb:f8:5f:97:0d:ee:
02:4b:c4:db:bc:2e:ac:59:94:83:db:b8:58:b7:7a:
3c:8c:b2:15:47:b8:69:e7:8b:7f:1c:8d:e2:6b:78:
8c:af:42:2e:35:b3:8f:6f:ed:2f:84:2c:fb:1f:7b:
71:4f:1e:80:38:25:d4:ff:fe:d2:ee:fd:12:51:ce:
f3:ec:74:cd:5a:1a:ea:8a:92:ee:cd:41:2f:88:f9:
f0:dc:10:c3:b2:52:9b:c4:c4:82:87:cd:f4:c3:45:
dc:a1:d3:c6:69:85:c9:af:39:a7:3f:5f:ee:d8:f2:
82:41:72:f5:e4:91:81:91:f2:ec:e1:73:42:40:70:
d0:21:46:5b:8e:d6:09:cf:4a:7a:72:d5:3b:bc:f9:
1c:f7:49:c0:d3:ea:b5:38:c3:61:b0:13:78:ba:cd:
30:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:9C:62:E7:02:21:4D:09:75:EF:84:EF:CE:B0:19:8F:3E:FD:E9:7A
X509v3 Authority Key Identifier:
keyid:75:19:3B:D9:F8:4B:4A:9E:D4:7A:03:BD:F8:92:D9:E7:98:B7:27:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dRk72fhLSp7UegO9-JLZ55i3Jyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:4a:c1:a0:72:fd:cc:c1:c5:6d:c6:ce:88:dd:27:bc:4e:e8:
f5:2d:0b:5e:58:29:5d:d1:15:b4:8a:5e:6e:dd:7a:6a:41:9f:
2f:7b:86:fb:fa:95:64:7b:48:17:ab:1f:16:89:29:b8:b9:1f:
7c:8e:cf:10:a5:8b:d1:af:a7:e1:2a:3c:83:74:51:43:57:6f:
9d:b9:2a:82:51:6a:f1:ea:d5:b8:96:01:79:52:bf:d5:9f:ed:
e8:83:53:65:94:51:7c:40:e5:35:e7:ba:cb:88:65:b2:58:44:
6b:cb:4d:a7:ac:76:ff:b6:8b:6b:d6:cd:fa:2b:eb:29:33:ad:
a7:07:33:cc:0b:8c:8d:d3:24:fe:b9:86:a9:3d:3c:81:23:90:
4f:ba:47:8a:e7:ad:94:59:91:32:26:05:4a:c3:db:9d:b6:bf:
d5:80:1a:e8:c3:c9:1f:18:94:06:00:5d:e3:68:d7:82:25:7b:
82:52:c6:44:eb:b8:59:ce:08:e7:92:5d:39:56:09:7f:95:0e:
60:78:d1:ea:cf:c3:a1:44:ca:1c:9d:71:d3:d4:2b:39:1b:1d:
dc:80:70:0d:36:f1:d4:2a:3d:3d:f2:5e:01:a9:a4:60:7b:db:
06:2b:5c:fb:fe:cd:a5:13:9d:4b:17:ab:28:ee:ed:ee:e1:15:
01:36:8e:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:18:33 2025 by rpki-client