![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/222376-5cf6-4978-a8a3-d741fb273116/1/50wpC1vM233lOD7kW6YV0vMGdh8.mft
File: 50wpC1vM233lOD7kW6YV0vMGdh8.mft (raw, json)
Hash identifier: 0w1Lcjd996lo65fFqs8PbrYKfXCoGQuHMzCNuFIWY9o=
Subject key identifier: 9E:0C:7F:14:C6:B8:4C:F6:22:41:BE:06:2F:2A:F3:8C:F1:A6:EC:72
Authority key identifier: E7:4C:29:0B:5B:CC:DB:7D:E5:38:3E:E4:5B:A6:15:D2:F3:06:76:1F
Certificate issuer: /CN=e74c290b5bccdb7de5383ee45ba615d2f306761f
Certificate serial: 019511A3140E43C50478683FCAF4CFC1D0BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/50wpC1vM233lOD7kW6YV0vMGdh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/222376-5cf6-4978-a8a3-d741fb273116/1/50wpC1vM233lOD7kW6YV0vMGdh8.mft
Manifest number: 131E
Signing time: Mon 17 Feb 2025 02:00:54 +0000
Manifest this update: Mon 17 Feb 2025 02:00:54 +0000
Manifest next update: Tue 18 Feb 2025 02:00:54 +0000
Files and hashes: 1: 50wpC1vM233lOD7kW6YV0vMGdh8.crl (hash: V0BoOE4S2T7RCIQz6tWhZVvqDom/gb67sLJUAwLUi2A=)
2: 9-b-mTt2Q_GMtl6Nq8eUGav_v_s.roa (hash: tGKVbdNJ8VyUlMp9atRtA5oHnZLdSfB14G6njW1y66Q=)
3: RLjtO4WLws3MKarmpX3B79Pzmv0.roa (hash: RLl60cZgFxu9a6NXLgyb6ecIzVhRlbdWbPk9gmn7AP4=)
4: wRVtvmPKs1QKlKzPVfPIJjhDkLs.roa (hash: ERuuwbvd4HbsDN0Yyhb4o5NlOjdhByH6kAsdft+2Wzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/222376-5cf6-4978-a8a3-d741fb273116/1/50wpC1vM233lOD7kW6YV0vMGdh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/222376-5cf6-4978-a8a3-d741fb273116/1/50wpC1vM233lOD7kW6YV0vMGdh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/50wpC1vM233lOD7kW6YV0vMGdh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a3:14:0e:43:c5:04:78:68:3f:ca:f4:cf:c1:d0:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e74c290b5bccdb7de5383ee45ba615d2f306761f
Validity
Not Before: Feb 17 02:00:54 2025 GMT
Not After : Feb 18 02:00:54 2025 GMT
Subject: CN=9e0c7f14c6b84cf62241be062f2af38cf1a6ec72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:39:2e:f1:5f:09:dd:a7:94:f8:67:50:41:47:
fe:97:2c:36:5d:e1:30:6b:e0:b4:b2:73:b4:97:f1:
77:00:13:eb:59:d1:ad:a9:7e:8d:58:df:a9:92:c6:
e3:f3:48:4c:60:c3:6e:e8:97:d5:c0:d7:60:c9:71:
99:85:07:e5:8a:ff:ed:9c:8e:67:40:2a:24:be:f5:
a9:fb:49:9b:79:00:4b:14:76:fe:69:2e:9d:b9:a1:
54:72:a5:0e:88:85:16:8c:c3:3b:5a:4a:47:71:bd:
56:3f:4a:2b:34:69:1e:17:d1:91:3d:e4:fb:aa:d1:
74:57:cc:18:8e:4d:73:ed:04:3b:3e:38:62:73:62:
29:ab:1d:85:48:16:2e:a1:20:4a:0d:f2:da:fa:26:
45:4a:6e:8c:db:e5:15:cf:0c:ec:4c:8b:1b:c4:19:
53:49:b2:aa:21:17:ee:7e:1b:ae:12:ca:da:6d:64:
9c:c9:cf:ca:23:22:c9:0c:c4:da:5a:a5:75:ca:ab:
47:85:f7:14:6f:9f:21:58:ea:5d:25:58:be:9f:4f:
74:1a:55:98:50:61:17:eb:cd:f5:11:8d:81:b4:0a:
d9:21:9b:16:31:31:0f:e9:75:9a:f2:79:44:0f:c7:
23:d6:62:22:32:3b:a4:7f:2f:76:a6:42:66:ce:0d:
81:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:0C:7F:14:C6:B8:4C:F6:22:41:BE:06:2F:2A:F3:8C:F1:A6:EC:72
X509v3 Authority Key Identifier:
keyid:E7:4C:29:0B:5B:CC:DB:7D:E5:38:3E:E4:5B:A6:15:D2:F3:06:76:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/50wpC1vM233lOD7kW6YV0vMGdh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/222376-5cf6-4978-a8a3-d741fb273116/1/50wpC1vM233lOD7kW6YV0vMGdh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/222376-5cf6-4978-a8a3-d741fb273116/1/50wpC1vM233lOD7kW6YV0vMGdh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:b9:e8:32:26:b8:25:05:f5:25:cc:4f:53:08:f5:c2:ac:ca:
5f:d1:d8:7c:0e:09:23:05:33:66:32:79:c4:dc:d3:08:a8:db:
cf:a7:f7:a4:d5:06:00:24:b1:c4:07:2f:98:21:70:7f:c6:bb:
a4:a3:cb:37:92:63:ed:b0:bf:a6:a0:21:06:62:9b:18:39:a9:
0f:49:a1:5a:dd:50:bf:57:64:25:33:1a:52:72:f2:a9:7d:04:
11:69:d9:22:5c:9d:a6:48:b2:f6:8f:be:0c:c1:6d:f5:44:d2:
4f:de:cd:22:a1:64:ae:fa:18:75:bf:5d:b9:eb:63:f9:49:8f:
89:0c:a2:f9:72:30:f2:10:0e:9f:1a:fc:5a:d6:ae:27:fa:a8:
00:e7:79:d2:51:dc:e4:1b:b4:e5:66:cd:6e:7c:ca:57:29:10:
8a:f9:e9:7f:97:3c:2f:57:69:8d:f7:39:39:11:75:3e:d5:af:
28:72:5d:c5:af:ec:b6:f0:2d:f0:40:76:d5:c1:36:90:59:5b:
68:2b:79:6b:ee:36:dc:20:ca:2e:38:0a:3c:84:d2:52:74:49:
5f:48:bc:e8:df:51:ca:3d:ba:dc:0e:b6:2b:e7:6e:19:b1:1c:
cd:22:aa:60:69:76:09:2d:b0:fe:ec:24:d8:2a:be:3d:37:55:
07:c1:86:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:19:10 2025 by rpki-client