![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft
File: Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft (raw, json)
Hash identifier: KArIRQh6SgM/MmVnc/Y95iTPKt8sjc2oUSjHTM2t/dk=
Subject key identifier: D8:E4:CC:C2:1E:66:84:2B:D3:85:45:24:6D:CD:98:BC:7E:B4:C4:D5
Authority key identifier: 22:A7:76:A6:95:5C:01:63:C9:CF:1A:83:8C:41:DF:EE:5D:A9:DB:3D
Certificate issuer: /CN=22a776a6955c0163c9cf1a838c41dfee5da9db3d
Certificate serial: 01950F467E6DD16F0690B9843645F8B1764B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft
Manifest number: 0F38
Signing time: Sun 16 Feb 2025 15:00:32 +0000
Manifest this update: Sun 16 Feb 2025 15:00:32 +0000
Manifest next update: Mon 17 Feb 2025 15:00:32 +0000
Files and hashes: 1: 0qW5Y4yA32z4Dny6mIJ-qLW2XWk.roa (hash: q9HOhDrTziiN8dHNBG3tLes1wQlniZAzuxjJOEin3Rw=)
2: Iqd2ppVcAWPJzxqDjEHf7l2p2z0.crl (hash: Rr223lLb9iS1DSXj4C2yNaeEunPmcEWY2QF0pkRRG0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:0f:46:7e:6d:d1:6f:06:90:b9:84:36:45:f8:b1:76:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a776a6955c0163c9cf1a838c41dfee5da9db3d
Validity
Not Before: Feb 16 15:00:32 2025 GMT
Not After : Feb 17 15:00:32 2025 GMT
Subject: CN=d8e4ccc21e66842bd38545246dcd98bc7eb4c4d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:62:b5:49:79:81:f8:41:b9:43:34:76:de:bc:
48:1a:e2:d0:01:f4:a6:20:45:aa:4d:46:51:43:26:
87:f4:4b:77:cb:03:ae:f9:f4:27:31:74:d7:3c:40:
9f:44:a0:7d:3c:3b:a4:2c:0b:1e:73:72:b0:c1:95:
e8:e8:50:36:01:d7:92:ba:94:ff:0d:f1:b7:07:cb:
f4:b2:3b:0c:ef:0a:59:84:30:35:5f:0d:93:fb:47:
63:2c:b3:cc:0e:06:75:6e:c8:be:be:fe:20:15:e7:
fe:55:73:16:57:be:5f:75:31:a0:6b:8d:76:a2:af:
73:b3:46:01:6c:5a:62:3e:d2:c0:b8:7c:09:34:6f:
e1:df:09:e3:0c:dc:86:83:7e:53:c7:17:ed:16:f2:
8d:f1:15:08:14:5d:19:6e:49:f1:6d:69:d1:0a:e4:
77:4f:b2:6d:c3:ff:ff:c3:f0:b5:a6:d6:1d:a4:db:
51:ae:64:af:12:0b:8a:a4:83:44:9b:d7:d3:7a:21:
f6:68:e6:78:5e:dc:85:6a:c6:6a:dd:0b:3d:34:ec:
e0:ca:e5:32:38:de:6e:ca:e4:43:c0:a2:c0:1d:c0:
b8:6d:b7:ee:a3:82:12:8c:e7:d3:1e:42:6c:2b:4f:
83:4b:c0:53:9f:3a:79:bb:c2:fb:c4:17:9b:9c:27:
8c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:E4:CC:C2:1E:66:84:2B:D3:85:45:24:6D:CD:98:BC:7E:B4:C4:D5
X509v3 Authority Key Identifier:
keyid:22:A7:76:A6:95:5C:01:63:C9:CF:1A:83:8C:41:DF:EE:5D:A9:DB:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:f0:c1:8f:5d:52:c9:1a:54:5a:62:43:26:08:c6:2c:2b:f1:
8a:3e:21:2e:b6:89:e8:84:d3:6e:23:6c:c3:c3:e0:23:7b:9c:
4b:93:d7:40:8b:0a:42:c9:0b:8f:dc:d9:26:53:ea:33:27:db:
98:b3:32:74:26:f2:86:47:75:06:e3:e7:0f:3c:9f:60:bc:36:
23:6f:09:ec:8a:00:4b:85:0b:df:c8:93:6d:b5:4d:55:74:19:
d9:6c:34:26:c0:fa:03:a6:09:91:b7:8e:6e:71:64:10:ca:42:
7c:7d:88:cf:9d:5f:b0:c7:5b:6f:aa:57:37:fe:7c:0b:33:4c:
c1:b6:59:93:0f:1c:eb:d5:6e:91:a6:3c:1f:52:1f:fc:69:a3:
9b:97:d0:15:db:ee:1e:1d:b7:0f:6d:68:c3:b8:03:98:6c:7b:
32:17:b7:00:e0:f1:1b:83:bd:f9:ae:5c:1a:9a:29:ab:96:03:
4d:5e:0c:76:6b:aa:09:92:2a:b7:23:cd:95:75:5d:34:6b:a1:
49:3e:5d:8c:71:b3:1f:c2:80:09:dc:27:2d:6f:42:89:dd:9e:
f4:5c:9b:95:cb:a3:78:5f:c0:d3:1d:65:dc:af:d7:9a:0a:15:
86:c2:19:cf:42:99:09:a1:e6:b0:a3:a2:01:b0:fa:ee:6c:65:
83:00:84:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:11:14 2025 by rpki-client