![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.mft
File: 0BDueLvUh9OdecsZgIXphPcCogg.mft (raw, json)
Hash identifier: IZlGVuVoLwe/O6bIq0OKKoAX0D+aFuxiELOJ/M12Dc4=
Subject key identifier: 51:16:07:C2:11:72:D3:66:69:94:E9:DF:41:EE:D8:F8:FF:A9:81:BE
Authority key identifier: D0:10:EE:78:BB:D4:87:D3:9D:79:CB:19:80:85:E9:84:F7:02:A2:08
Certificate issuer: /CN=d010ee78bbd487d39d79cb198085e984f702a208
Certificate serial: 019510FDE6B00F9AB4201D0EF710B7147DF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0BDueLvUh9OdecsZgIXphPcCogg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.mft
Manifest number: 0748
Signing time: Sun 16 Feb 2025 23:00:29 +0000
Manifest this update: Sun 16 Feb 2025 23:00:29 +0000
Manifest next update: Mon 17 Feb 2025 23:00:29 +0000
Files and hashes: 1: 0BDueLvUh9OdecsZgIXphPcCogg.crl (hash: OWd+I67+56OwlD4vumq0YBYmD29tAlJQpP/debX8EIU=)
2: 3t2rbtcOEw5sD7uRjCXTPR4SMU8.roa (hash: oLSU3YNaGRS7ljQgete6uiDJRLwSKNoaWdOvOIOXxdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0BDueLvUh9OdecsZgIXphPcCogg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fd:e6:b0:0f:9a:b4:20:1d:0e:f7:10:b7:14:7d:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d010ee78bbd487d39d79cb198085e984f702a208
Validity
Not Before: Feb 16 23:00:29 2025 GMT
Not After : Feb 17 23:00:29 2025 GMT
Subject: CN=511607c21172d3666994e9df41eed8f8ffa981be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e7:90:da:fb:36:04:49:2d:f3:97:5c:52:f5:
ec:f9:08:b3:fc:c0:24:4b:c3:c5:26:32:b4:7c:b0:
74:1e:0e:5c:ae:e2:8d:9e:3c:62:8f:1a:36:46:ca:
a1:2c:15:c0:8c:9b:74:65:63:f0:f1:23:99:07:20:
20:04:66:e2:53:59:7c:43:75:0f:06:58:d2:2a:dc:
3f:87:f6:a3:27:da:c4:77:b6:b1:b2:16:f4:1b:55:
84:da:9d:52:e5:41:19:34:26:11:9e:7b:4b:ab:88:
d2:4d:8e:07:67:e5:af:fc:d3:d7:da:03:b5:8a:91:
45:a3:fe:33:8d:f6:a5:c6:86:d4:f7:32:e0:8c:53:
95:86:ef:68:2d:91:d2:42:10:1c:99:a1:22:a0:a4:
b6:52:3b:00:b0:4e:44:53:85:db:fb:33:f7:f1:aa:
79:15:82:c3:66:aa:c5:61:37:52:3c:6d:49:08:4a:
68:12:e7:54:0c:8b:3d:2a:53:d6:0b:36:ad:04:12:
a0:f9:80:f8:e7:1e:0d:56:0f:69:56:e1:63:80:3a:
2b:de:3c:cf:92:12:dc:41:f7:22:fc:6c:d8:bb:1d:
a1:8f:aa:12:c5:31:87:2c:c4:5d:fd:fb:51:ae:ff:
e6:7d:e7:6f:b8:12:f4:ea:63:cf:cb:79:07:fc:6e:
bc:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:16:07:C2:11:72:D3:66:69:94:E9:DF:41:EE:D8:F8:FF:A9:81:BE
X509v3 Authority Key Identifier:
keyid:D0:10:EE:78:BB:D4:87:D3:9D:79:CB:19:80:85:E9:84:F7:02:A2:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BDueLvUh9OdecsZgIXphPcCogg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:ca:d9:98:0f:d9:fe:de:20:d9:5c:46:a2:b7:79:38:74:42:
97:85:43:35:cf:90:73:ff:90:8b:81:30:18:bc:73:a9:cc:52:
c9:71:a9:bb:e5:0f:a1:a2:43:b8:67:f4:7c:4b:99:5e:68:d1:
75:07:7d:14:4c:94:59:34:74:38:64:f4:9a:79:81:bb:cc:44:
dc:d6:08:28:c0:58:bf:30:dc:a6:67:63:39:ee:35:df:dc:73:
56:02:40:f2:f8:d8:61:e1:3c:99:f4:f3:e3:2e:46:3a:e7:72:
47:85:ee:ba:3c:f4:75:1b:cd:3a:1f:89:36:c9:cd:2a:f6:f4:
61:0e:a6:1d:43:54:cc:a6:3f:0e:af:5e:23:0a:5d:2b:62:b5:
2d:60:0c:5a:17:2f:47:cf:fb:bc:d9:32:d5:74:2b:4c:42:09:
d4:55:48:b0:8e:7a:ba:c7:94:5f:16:c9:41:7f:35:be:c9:31:
40:98:56:50:2e:9a:8c:ec:72:6d:60:b2:be:6f:3b:7e:f9:96:
a1:5b:e7:0c:c0:ca:14:f1:73:32:38:4a:32:80:92:5e:8b:8c:
4d:92:f0:d7:0a:10:bf:27:96:8d:26:82:2f:dc:af:6c:70:1a:
f3:46:15:0c:27:e8:34:6a:47:08:cb:1d:10:9d:d5:51:6b:4a:
c9:d0:a1:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:19:51 2025 by rpki-client