![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/c0fc0a-15d4-46cc-a8b9-47632cb5b854/1/femPSOmIeQ0OB5NTeUG0E9LmAwY.mft
File: femPSOmIeQ0OB5NTeUG0E9LmAwY.mft (raw, json)
Hash identifier: Ip/5ZpQf1Yvtdldm8n8FsyUt8OPPNeq1VhGVT6TEu3I=
Subject key identifier: 6D:2E:55:32:3A:E2:31:B9:41:83:30:89:34:65:4C:37:D7:FF:D0:2A
Authority key identifier: 7D:E9:8F:48:E9:88:79:0D:0E:07:93:53:79:41:B4:13:D2:E6:03:06
Certificate issuer: /CN=7de98f48e988790d0e0793537941b413d2e60306
Certificate serial: 019511354D13333846CF114FB2762259B0BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/femPSOmIeQ0OB5NTeUG0E9LmAwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/c0fc0a-15d4-46cc-a8b9-47632cb5b854/1/femPSOmIeQ0OB5NTeUG0E9LmAwY.mft
Manifest number: 145A
Signing time: Mon 17 Feb 2025 00:01:00 +0000
Manifest this update: Mon 17 Feb 2025 00:01:00 +0000
Manifest next update: Tue 18 Feb 2025 00:01:00 +0000
Files and hashes: 1: L1sOGUpC5vf81IjAWo9yjqNWdoc.roa (hash: qAhDSU9NhG7HL0VsMDn5fszVhTOJb2FN5MRmMe3Ne7s=)
2: VGUAWcdE_uWGBzoEXuUWxSaeofE.roa (hash: ldYqKdQLO9amLNP7UTQrP4DX3OqZoopvjfltJwygHwg=)
3: d10u-uDwxzCO1ATs2RUc0qyrQbA.roa (hash: m3ajmbYacZUtKP1FwdP4sQzFhrAYqo+DMogwBusGYrY=)
4: femPSOmIeQ0OB5NTeUG0E9LmAwY.crl (hash: TJkGLu3LSa7HUJCFGNzpmLvBQEsoq2QPnBahnxFOwS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/c0fc0a-15d4-46cc-a8b9-47632cb5b854/1/femPSOmIeQ0OB5NTeUG0E9LmAwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/c0fc0a-15d4-46cc-a8b9-47632cb5b854/1/femPSOmIeQ0OB5NTeUG0E9LmAwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/femPSOmIeQ0OB5NTeUG0E9LmAwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:35:4d:13:33:38:46:cf:11:4f:b2:76:22:59:b0:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7de98f48e988790d0e0793537941b413d2e60306
Validity
Not Before: Feb 17 00:01:00 2025 GMT
Not After : Feb 18 00:01:00 2025 GMT
Subject: CN=6d2e55323ae231b94183308934654c37d7ffd02a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3b:7c:19:4f:78:1e:5c:b2:af:17:cb:90:be:
d6:8a:16:4f:63:51:45:dc:fc:03:13:8e:98:2e:2d:
43:9e:03:7f:4e:f9:be:56:ea:ec:d7:0a:3a:cb:15:
de:7c:10:a4:56:f8:7a:e8:d7:a4:50:bf:2b:f1:9a:
a3:ae:c9:17:50:07:80:e8:2f:30:ee:4a:03:b0:df:
65:01:f8:cf:be:49:0d:43:45:9c:1d:32:c7:6b:cc:
9c:07:cf:d8:06:bd:d1:88:49:de:f3:ca:73:ab:9c:
b6:5f:91:d9:a8:57:14:8c:07:bd:a0:33:ca:8c:9f:
57:f6:b4:79:e5:dd:57:95:bc:a5:b6:13:17:44:4e:
ed:f5:59:3c:65:41:b5:94:2f:21:89:3f:e7:b8:16:
bf:6a:72:c0:7e:88:86:5f:f0:64:99:26:16:de:78:
ec:19:f3:75:36:18:2f:5e:53:a1:d4:09:5f:0a:a7:
fe:66:90:2a:92:f1:67:fd:ec:57:59:1b:a0:74:a0:
ca:68:e8:eb:3c:31:1f:a0:5d:7e:fc:36:c6:85:ed:
3f:1e:1e:a7:db:b4:7e:1a:4d:e2:56:cb:7c:21:33:
62:c4:55:06:ec:68:f0:5a:7d:9f:e6:47:df:07:80:
51:d3:8f:29:2a:f3:2a:f2:28:76:1e:aa:e3:29:97:
a5:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:2E:55:32:3A:E2:31:B9:41:83:30:89:34:65:4C:37:D7:FF:D0:2A
X509v3 Authority Key Identifier:
keyid:7D:E9:8F:48:E9:88:79:0D:0E:07:93:53:79:41:B4:13:D2:E6:03:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/femPSOmIeQ0OB5NTeUG0E9LmAwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/c0fc0a-15d4-46cc-a8b9-47632cb5b854/1/femPSOmIeQ0OB5NTeUG0E9LmAwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/c0fc0a-15d4-46cc-a8b9-47632cb5b854/1/femPSOmIeQ0OB5NTeUG0E9LmAwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:ae:fa:03:d1:ae:1a:7d:c8:a5:87:fa:4f:7b:11:7e:38:18:
05:c6:92:6f:8d:28:f4:12:ac:d6:75:31:de:4f:ef:71:a2:86:
64:81:0d:d7:4a:11:5f:9d:cf:bc:a4:02:7e:a5:c5:f0:24:6c:
7e:4a:b0:2a:53:73:ca:84:5a:8d:77:a6:40:7f:1b:d2:4c:32:
c4:0c:53:7a:64:dd:b3:bc:ff:24:5a:ae:db:3c:28:6d:77:38:
bb:d5:89:6a:ba:70:be:40:0f:59:57:90:c1:46:42:9c:04:20:
e3:07:dc:0d:77:09:9a:1b:b0:5d:f4:8a:d8:26:03:e2:60:eb:
de:b7:54:fd:67:7a:85:fb:39:0b:05:d5:af:2b:9c:32:70:e4:
fa:c9:a5:3f:3b:fb:74:46:37:98:3a:a7:eb:01:cc:4b:5a:c1:
ea:79:ef:64:fa:61:b7:9c:17:c8:58:97:e8:61:06:70:9f:0c:
a3:a9:b2:58:d2:c8:4d:ee:74:0a:ff:6b:90:be:96:cb:65:90:
2d:1d:81:50:f7:89:6f:da:ff:c0:e4:8f:e1:e3:ca:b5:9f:5d:
ef:9c:80:b9:7a:7a:42:3e:82:da:70:01:73:ad:2e:48:13:c3:
f5:e1:49:ac:6d:15:4d:d2:bb:36:ef:c7:af:74:3e:6b:cc:92:
2f:db:3b:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:36:39 2025 by rpki-client