![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/c7e47d-c08e-4769-86d2-c7f8b057aed0/1/wR9gPeQJpxD9rmLKwcVTk6lTtbU.mft
File: wR9gPeQJpxD9rmLKwcVTk6lTtbU.mft (raw, json)
Hash identifier: ZQugaMgVd1tb68IuDfdP2Zi2YNuxWOzR80gY1Lj1j64=
Subject key identifier: C5:5D:AB:D3:8E:1E:EB:2D:EA:D5:C1:78:3B:36:4B:79:2B:FC:E2:59
Authority key identifier: C1:1F:60:3D:E4:09:A7:10:FD:AE:62:CA:C1:C5:53:93:A9:53:B5:B5
Certificate issuer: /CN=c11f603de409a710fdae62cac1c55393a953b5b5
Certificate serial: 019511347300CA62AE21AE818C992FFAA451
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wR9gPeQJpxD9rmLKwcVTk6lTtbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/c7e47d-c08e-4769-86d2-c7f8b057aed0/1/wR9gPeQJpxD9rmLKwcVTk6lTtbU.mft
Manifest number: 014B
Signing time: Mon 17 Feb 2025 00:00:04 +0000
Manifest this update: Mon 17 Feb 2025 00:00:04 +0000
Manifest next update: Tue 18 Feb 2025 00:00:04 +0000
Files and hashes: 1: UsAeeJKz5x5UM9R7HFO2Dgzi0jA.roa (hash: FFiDVfqG1v30MyW/O7JaJbrLiihT2L0idYJ853z7lV4=)
2: wR9gPeQJpxD9rmLKwcVTk6lTtbU.crl (hash: FHHQUeM4Ds9pxY2pYZ8TQYrkuyBGF0RAXUGsjN4ZaOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/c7e47d-c08e-4769-86d2-c7f8b057aed0/1/wR9gPeQJpxD9rmLKwcVTk6lTtbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/c7e47d-c08e-4769-86d2-c7f8b057aed0/1/wR9gPeQJpxD9rmLKwcVTk6lTtbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/wR9gPeQJpxD9rmLKwcVTk6lTtbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:73:00:ca:62:ae:21:ae:81:8c:99:2f:fa:a4:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c11f603de409a710fdae62cac1c55393a953b5b5
Validity
Not Before: Feb 17 00:00:04 2025 GMT
Not After : Feb 18 00:00:04 2025 GMT
Subject: CN=c55dabd38e1eeb2dead5c1783b364b792bfce259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:db:8a:cc:92:30:11:14:71:14:af:44:7e:3d:
cc:45:39:5c:bd:c3:2d:2f:76:a9:31:d9:9e:d2:f3:
c5:89:6c:6e:fe:42:24:6e:db:c1:9d:96:75:e1:f8:
38:ec:5a:c7:14:55:28:9b:a9:33:69:af:95:f8:a3:
c4:58:ea:3e:0f:50:ba:17:3f:81:1b:9e:1b:0d:e2:
4b:64:f8:e5:66:d1:4e:0f:a6:35:43:c9:ca:e6:78:
2b:67:71:7b:7d:79:d3:5d:6f:84:f4:73:ce:a3:8e:
15:94:3e:fb:4a:c4:45:7f:e2:f9:05:92:ab:46:c3:
84:46:c5:a5:c5:a0:9f:52:2c:a7:5e:bf:7d:21:4d:
ab:5c:e9:2d:c0:db:d3:67:76:3d:7a:08:8f:cb:57:
bb:60:bf:c6:9e:45:fc:42:a0:86:30:59:66:96:2d:
da:73:e0:c1:96:b6:73:bb:e2:3c:b3:e7:3f:5b:1d:
b8:74:0e:59:53:09:54:6d:42:41:5d:c3:bc:23:e4:
f1:a3:aa:86:5c:fb:89:16:25:86:6a:85:d0:f4:b7:
ea:7e:88:51:a1:db:00:e2:81:55:67:e9:01:7b:a7:
ef:38:59:8a:28:75:5f:b6:b6:a1:66:0c:21:94:d9:
79:b1:dd:54:2b:3c:cd:93:6f:19:00:02:16:c2:fc:
12:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:5D:AB:D3:8E:1E:EB:2D:EA:D5:C1:78:3B:36:4B:79:2B:FC:E2:59
X509v3 Authority Key Identifier:
keyid:C1:1F:60:3D:E4:09:A7:10:FD:AE:62:CA:C1:C5:53:93:A9:53:B5:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wR9gPeQJpxD9rmLKwcVTk6lTtbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c7e47d-c08e-4769-86d2-c7f8b057aed0/1/wR9gPeQJpxD9rmLKwcVTk6lTtbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c7e47d-c08e-4769-86d2-c7f8b057aed0/1/wR9gPeQJpxD9rmLKwcVTk6lTtbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:57:0b:7e:a1:24:f1:96:1c:fa:e0:25:b1:38:a5:f2:38:85:
48:8a:84:9c:64:d3:14:2b:d4:63:fe:04:92:7c:80:44:a3:84:
68:b1:af:e9:96:88:39:69:c0:31:66:26:d6:2d:e9:d0:8f:60:
42:a2:f5:4b:d3:c7:c6:de:a8:db:fe:a6:1a:28:fa:a3:ad:3f:
6e:db:0a:aa:9f:ad:2a:15:09:e9:b1:87:b9:e3:f8:0b:3e:60:
35:b3:1b:98:d8:5d:4c:ab:ec:92:5f:6f:1d:cc:79:54:b3:c0:
c4:07:83:e7:cb:6a:c2:10:58:d5:8a:f9:63:8e:ef:b4:68:7c:
89:ba:f1:e4:a6:67:c1:5e:22:cf:a6:b9:cc:d3:3a:a7:d7:73:
ee:50:5d:d3:49:bc:db:59:79:51:a4:d3:5d:c6:e8:c4:ca:61:
aa:e9:08:a4:df:1e:d5:8c:27:b0:3e:b6:a5:7f:a0:eb:21:33:
02:19:fb:3b:82:ec:51:30:79:0a:81:d6:12:22:a5:1b:26:10:
23:41:9d:d1:66:55:bf:3b:7a:a8:bb:5d:9a:66:92:b0:bd:5c:
e4:c7:17:da:7d:13:84:6c:2d:b9:86:93:3e:f1:20:3c:4a:10:
1d:d0:7e:16:fc:52:14:cf:0f:74:d7:4b:9c:8a:05:30:79:ad:
ae:0a:4b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:16:31 2025 by rpki-client