![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/9dac2f-301e-406d-b8d0-03857ef5b387/1/uY0fbjNqfIE1GUG8C53qOdfXZNs.mft
File: uY0fbjNqfIE1GUG8C53qOdfXZNs.mft (raw, json)
Hash identifier: 7v905OibELISfGLuSTQWvPzKluaQBaGr5JEAhNufJwc=
Subject key identifier: 4C:98:B4:41:6F:19:BA:FF:9D:98:A2:D8:C7:B2:D1:C7:77:20:F2:1F
Authority key identifier: B9:8D:1F:6E:33:6A:7C:81:35:19:41:BC:0B:9D:EA:39:D7:D7:64:DB
Certificate issuer: /CN=b98d1f6e336a7c81351941bc0b9dea39d7d764db
Certificate serial: 019510FDADAEAA22D54213C9003F0476EF73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uY0fbjNqfIE1GUG8C53qOdfXZNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/9dac2f-301e-406d-b8d0-03857ef5b387/1/uY0fbjNqfIE1GUG8C53qOdfXZNs.mft
Manifest number: 119D
Signing time: Sun 16 Feb 2025 23:00:15 +0000
Manifest this update: Sun 16 Feb 2025 23:00:15 +0000
Manifest next update: Mon 17 Feb 2025 23:00:15 +0000
Files and hashes: 1: 2Bhbw3leMOOThPESRkMOR1dkKo8.roa (hash: 8BdnwPJfHaRJdOgffZDaE9NFXhulzq329A7S3hKg76Q=)
2: uY0fbjNqfIE1GUG8C53qOdfXZNs.crl (hash: EA5XdjyOP3HAox5uhNSs7ATnkkCb9GXufYT7RcvZgpw=)
3: udj1thQf8POAsC3euXPolxF29Rc.roa (hash: utsXGxz2o3qqGU1Prwq6PnQjBA2bBXJwiwg1ebpMM78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/9dac2f-301e-406d-b8d0-03857ef5b387/1/uY0fbjNqfIE1GUG8C53qOdfXZNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/9dac2f-301e-406d-b8d0-03857ef5b387/1/uY0fbjNqfIE1GUG8C53qOdfXZNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/uY0fbjNqfIE1GUG8C53qOdfXZNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fd:ad:ae:aa:22:d5:42:13:c9:00:3f:04:76:ef:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b98d1f6e336a7c81351941bc0b9dea39d7d764db
Validity
Not Before: Feb 16 23:00:15 2025 GMT
Not After : Feb 17 23:00:15 2025 GMT
Subject: CN=4c98b4416f19baff9d98a2d8c7b2d1c77720f21f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:f4:2e:c0:0b:da:0d:24:26:94:7f:9c:47:df:
ae:82:ae:49:2a:23:0d:58:91:5d:33:10:67:95:41:
dc:71:ad:3b:2d:8c:d0:97:9a:b1:a9:3a:8f:a8:61:
10:30:89:58:fd:6b:8e:19:d8:81:95:fa:5d:27:40:
00:09:ef:45:2c:86:83:bf:4c:f3:5d:74:9a:a0:a2:
a1:2b:c5:83:e9:70:04:1c:71:28:b0:37:8b:60:70:
e6:c4:7b:a6:b2:13:2e:28:38:b5:ff:48:42:4f:1f:
72:66:8a:52:de:b0:26:fd:70:5a:26:1b:89:49:6b:
d9:7f:e4:8f:45:d6:f4:0b:df:ff:6c:b1:cf:a9:43:
47:d7:88:5c:06:2f:1e:44:3a:e5:b8:4a:89:ea:24:
4d:23:b0:b0:c4:4a:0e:e1:9f:6a:6a:66:bc:7a:65:
f2:74:5d:bb:5e:07:05:0c:79:ec:2b:35:25:9e:a1:
60:75:b8:ed:db:7d:d6:dc:ea:97:12:02:01:24:20:
b2:8d:f3:c2:1b:f5:b7:85:70:35:f1:96:d0:9d:37:
47:d7:70:5b:5f:52:6f:0c:73:e6:2c:0f:73:96:81:
75:8c:4a:f8:97:0d:e2:3d:84:90:2d:5c:1d:ab:ff:
42:1c:69:4d:88:c3:66:6c:2b:11:2e:33:9e:6c:15:
19:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:98:B4:41:6F:19:BA:FF:9D:98:A2:D8:C7:B2:D1:C7:77:20:F2:1F
X509v3 Authority Key Identifier:
keyid:B9:8D:1F:6E:33:6A:7C:81:35:19:41:BC:0B:9D:EA:39:D7:D7:64:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uY0fbjNqfIE1GUG8C53qOdfXZNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/9dac2f-301e-406d-b8d0-03857ef5b387/1/uY0fbjNqfIE1GUG8C53qOdfXZNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/9dac2f-301e-406d-b8d0-03857ef5b387/1/uY0fbjNqfIE1GUG8C53qOdfXZNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:6d:ac:48:96:54:0a:50:e0:d6:1e:93:ff:49:ed:e3:3e:a4:
8f:03:a7:ee:4d:bd:bc:00:50:b7:f7:73:ec:0f:cf:1d:52:89:
93:79:42:e5:86:2b:8f:4c:04:fd:6e:b6:08:cd:f1:1b:d0:e5:
c2:fe:d1:4d:e1:53:7f:50:af:ac:36:3d:9f:51:8e:c5:36:28:
8b:fc:03:bb:5e:ca:dd:cb:02:03:81:80:6f:f0:83:0c:e0:b1:
b4:89:d5:35:e0:9b:93:34:8f:2e:1e:3c:ae:d0:ea:9e:6c:e5:
3d:70:f0:d9:51:90:51:dd:3d:37:5e:5a:88:89:29:e1:aa:14:
c4:c4:8b:2d:52:70:51:40:fe:55:cd:3a:3b:76:78:49:ac:1e:
17:ee:3e:d3:42:ef:84:98:ec:87:e3:35:98:6f:24:0f:f1:66:
58:01:9d:fb:34:13:31:a0:40:d9:49:95:e7:a6:58:6f:93:bd:
ca:b6:4d:91:9e:67:45:92:4d:e5:c1:d0:d4:9e:23:c4:11:1b:
2c:75:43:ba:b1:8f:5f:f5:0a:ab:15:2d:12:cb:dc:e3:29:07:
d1:e8:50:96:63:6b:df:86:f2:01:12:20:ac:59:c6:84:f6:3e:
5c:4c:7c:7d:a5:80:d2:b2:76:3a:74:52:bf:4a:ea:7e:1a:59:
2d:8d:4f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:12:33 2025 by rpki-client