![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.mft
File: gv59AOlM0qfL9_noLPCZJBdBjfY.mft (raw, json)
Hash identifier: dzsKhwf+Qh6ZQPROtYGY55iK5TJ9Zb+oq342HbJTi7o=
Subject key identifier: 68:01:5B:8D:A6:EB:1A:53:3A:C5:EE:AE:2F:37:7A:1D:1E:3E:60:03
Authority key identifier: 82:FE:7D:00:E9:4C:D2:A7:CB:F7:F9:E8:2C:F0:99:24:17:41:8D:F6
Certificate issuer: /CN=82fe7d00e94cd2a7cbf7f9e82cf0992417418df6
Certificate serial: 019510C6F54A3383E9F515387CC7503315D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gv59AOlM0qfL9_noLPCZJBdBjfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.mft
Manifest number: 059C
Signing time: Sun 16 Feb 2025 22:00:29 +0000
Manifest this update: Sun 16 Feb 2025 22:00:29 +0000
Manifest next update: Mon 17 Feb 2025 22:00:29 +0000
Files and hashes: 1: 248bDK_2X4s3D78cLTN1zTJo8ls.roa (hash: kLQEr1R8+53FUqqBvs455Xwu5a5on81N6ifpRavsyZA=)
2: gv59AOlM0qfL9_noLPCZJBdBjfY.crl (hash: MaQi0fSNq/yUfyxQxbKu75Cax00UKFbamP/lVPXLzsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.mft
rsync://rpki.ripe.net/repository/DEFAULT/gv59AOlM0qfL9_noLPCZJBdBjfY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c6:f5:4a:33:83:e9:f5:15:38:7c:c7:50:33:15:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82fe7d00e94cd2a7cbf7f9e82cf0992417418df6
Validity
Not Before: Feb 16 22:00:29 2025 GMT
Not After : Feb 17 22:00:29 2025 GMT
Subject: CN=68015b8da6eb1a533ac5eeae2f377a1d1e3e6003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c3:37:4d:21:c7:07:0e:48:34:1d:a9:ef:e4:
9a:bb:3e:2e:cd:a7:af:08:15:40:a9:37:fe:3c:b2:
e7:a2:4d:63:31:99:43:b5:a1:3b:88:23:0e:10:d7:
15:4d:38:33:16:d4:7a:71:90:52:e9:d6:92:73:2e:
7b:ba:e2:11:e2:fb:06:0b:ca:33:5f:4e:de:59:92:
e6:d6:4b:8f:de:54:fc:d7:2a:9a:dc:6d:f0:5c:60:
20:12:26:aa:48:24:b1:c4:1e:9e:e8:fa:e2:90:5c:
49:1f:70:82:95:cc:e5:0f:cc:05:54:e7:18:51:c8:
d2:9d:92:c4:21:9b:e8:2f:26:9a:d4:aa:20:ed:fd:
21:45:4e:6e:04:3d:fa:84:16:ad:8a:67:56:2f:1d:
ce:49:57:cb:82:4b:a5:8e:72:52:93:4d:ee:83:d3:
75:b9:fe:62:63:bd:f4:56:90:16:83:cb:58:20:c9:
7c:bc:38:57:23:d5:33:58:8c:f4:ef:53:4d:0f:24:
e9:d2:64:e1:a7:b8:bc:8b:e7:1e:12:f9:71:b6:af:
35:7a:9f:a1:17:46:4e:6c:cf:70:19:b8:78:2c:a0:
87:63:0b:10:a2:f7:29:a3:6c:61:61:b7:fe:7f:4a:
ce:3c:3e:e8:ca:db:e8:ca:94:19:d9:95:20:26:58:
cb:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:01:5B:8D:A6:EB:1A:53:3A:C5:EE:AE:2F:37:7A:1D:1E:3E:60:03
X509v3 Authority Key Identifier:
keyid:82:FE:7D:00:E9:4C:D2:A7:CB:F7:F9:E8:2C:F0:99:24:17:41:8D:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gv59AOlM0qfL9_noLPCZJBdBjfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:10:72:e9:90:34:d3:89:86:73:16:4d:0e:6f:fd:4a:5d:47:
4f:9b:9a:dc:e8:0b:e6:fc:6a:7c:e0:38:fd:27:f5:92:d4:61:
d3:00:12:a9:28:b5:14:9d:2b:19:7b:ff:b9:40:69:42:58:8f:
72:da:59:8b:e7:d5:59:ba:b1:b1:5b:87:2a:20:4e:d7:30:a1:
27:b8:f8:f5:16:b0:21:8e:9d:a7:c3:97:7e:59:8c:7c:c9:cf:
43:53:3c:d6:b8:ba:e8:16:a9:a5:56:06:7b:ed:c1:68:01:5b:
fb:20:36:07:fe:1e:8e:92:e9:80:0d:23:18:c0:5a:c4:83:f3:
6c:b5:99:4d:50:c2:46:65:2f:8c:f4:34:dd:6b:cf:fb:7c:43:
8d:9c:4b:0e:59:e2:96:e8:59:f1:65:91:35:d0:da:9b:cd:49:
e6:e7:5d:ad:de:05:db:45:05:a6:b9:cb:6f:08:3d:db:90:e6:
32:d9:ac:3a:c8:1b:4f:79:0b:3e:75:c0:ce:85:c7:5a:fa:33:
23:a7:26:37:5e:1a:ce:a4:42:b5:f0:47:16:a9:25:22:2f:7d:
e6:9f:e2:87:0a:a3:01:5a:0c:cf:a9:25:59:5a:e9:f5:c4:b7:
e4:8a:fa:be:a1:82:6a:46:2f:a0:e8:07:34:b7:6b:df:c8:8e:
9c:f8:4d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:15:50 2025 by rpki-client