![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.mft
File: fLi4cwN1yShTuZrjr1eXwSPdFQc.mft (raw, json)
Hash identifier: ofbpIaiIA2Ox0Y9kCQ60jSWRGLhti43apUxVxbO/ays=
Subject key identifier: C6:0A:BB:7B:B6:C8:D5:AC:B7:8E:CD:CC:21:2F:E0:85:43:0C:D7:A8
Authority key identifier: 7C:B8:B8:73:03:75:C9:28:53:B9:9A:E3:AF:57:97:C1:23:DD:15:07
Certificate issuer: /CN=7cb8b8730375c92853b99ae3af5797c123dd1507
Certificate serial: 019510C78A256B59AF83F3DD1D22359BDE6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fLi4cwN1yShTuZrjr1eXwSPdFQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.mft
Manifest number: 0E7D
Signing time: Sun 16 Feb 2025 22:01:07 +0000
Manifest this update: Sun 16 Feb 2025 22:01:07 +0000
Manifest next update: Mon 17 Feb 2025 22:01:07 +0000
Files and hashes: 1: f-4yu6sDyBHuoUp0ijzfgQJpE8U.roa (hash: I5XhYKmiwTTC0KZ/h+71MELDdEucvcsXapf63tq8JL0=)
2: fLi4cwN1yShTuZrjr1eXwSPdFQc.crl (hash: 7qrG9UEmHPHsDY3HHKEE4ts5Rc1faST3USAcRBeV+EQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fLi4cwN1yShTuZrjr1eXwSPdFQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:8a:25:6b:59:af:83:f3:dd:1d:22:35:9b:de:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cb8b8730375c92853b99ae3af5797c123dd1507
Validity
Not Before: Feb 16 22:01:07 2025 GMT
Not After : Feb 17 22:01:07 2025 GMT
Subject: CN=c60abb7bb6c8d5acb78ecdcc212fe085430cd7a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:04:c6:65:e9:f6:4f:da:a4:a1:54:65:ca:22:
5c:79:b5:4d:7f:6c:21:ad:36:0c:b0:1c:4f:fc:c5:
09:86:00:22:11:06:63:0b:09:d5:a5:8b:20:51:28:
2c:4c:8a:b4:2e:13:52:0c:d4:dd:9c:be:63:84:7f:
51:5f:e0:dc:2d:30:ef:e8:0c:b6:c1:27:54:67:e3:
ea:8b:81:a0:fe:26:3d:d4:c9:30:89:24:16:44:41:
2f:2a:65:ab:29:61:f4:be:20:f5:72:d0:fa:6d:1a:
cc:0e:0f:f3:e6:fa:f5:b6:19:a3:7c:14:ea:a8:51:
c4:0e:18:79:57:90:71:7b:8d:54:11:ca:46:7d:2b:
a8:a7:5a:24:a8:23:8e:c1:19:ed:96:6a:b0:c5:95:
2c:0d:a9:06:58:26:d1:d0:00:4a:20:e9:e5:98:ea:
85:09:44:6c:85:d1:b6:4b:0e:e0:ca:95:ce:54:80:
f9:e0:90:48:ba:31:68:cf:4b:6e:e8:c8:25:9a:8e:
ac:8a:69:ca:99:dc:e4:39:de:57:ff:c9:52:e8:9a:
03:0d:8a:2f:7d:c6:49:61:f6:e2:bb:7c:30:7d:6f:
a2:6d:73:9c:60:03:ca:51:ec:df:4b:54:ab:4a:d1:
2a:7a:d3:c7:b6:f3:cf:e6:50:6c:b9:cb:00:0d:c7:
70:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:0A:BB:7B:B6:C8:D5:AC:B7:8E:CD:CC:21:2F:E0:85:43:0C:D7:A8
X509v3 Authority Key Identifier:
keyid:7C:B8:B8:73:03:75:C9:28:53:B9:9A:E3:AF:57:97:C1:23:DD:15:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fLi4cwN1yShTuZrjr1eXwSPdFQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:83:03:fc:9f:16:98:88:5c:00:1c:bd:04:5e:3d:4d:8a:24:
a9:5d:5c:e7:98:42:6e:cb:28:c0:97:98:b9:5c:1e:32:22:4b:
bb:4a:df:37:ae:3b:84:4b:87:b2:68:75:b4:be:e0:5e:5f:d0:
8d:25:50:0a:2d:5e:08:06:9c:62:27:27:27:c3:04:80:ea:44:
f4:28:50:db:94:6b:26:37:1b:e5:69:c5:f9:77:31:58:cc:96:
39:54:29:9f:49:cc:01:37:26:45:28:64:60:9d:77:a0:a2:63:
99:9e:35:4b:e7:6b:7c:52:bd:02:e3:af:14:3b:7d:4d:51:bc:
87:5e:48:65:94:22:19:5e:b7:6d:98:3f:61:df:65:a7:c5:89:
45:c1:6f:5f:73:3c:17:1f:a3:a1:e1:7d:6c:1c:cc:6e:f3:f5:
c4:ef:e2:cc:4c:23:8b:ae:32:4d:9b:0c:d3:00:c6:84:41:de:
84:76:26:91:a0:fb:0c:7e:56:43:97:07:f7:e6:a4:e1:3f:74:
f0:3d:45:f2:a4:3c:f1:78:e7:9e:4e:52:0c:ca:29:43:74:8c:
da:a9:0b:40:38:04:8f:59:23:07:de:76:cc:a3:35:fb:2e:d6:
6b:5b:92:31:32:a6:f2:c3:97:d9:04:59:0f:66:74:30:fc:97:
ae:7a:69:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:12:39 2025 by rpki-client