![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/f0a918-9335-4bcc-becd-4ea73083aec6/1/JmKrPF2xRXuy9RleI4_kvcjyFes.mft
File: JmKrPF2xRXuy9RleI4_kvcjyFes.mft (raw, json)
Hash identifier: W0BUbxoqslQuFVYgbbJizAnJj1Efe0yzMHKR2p8TnW4=
Subject key identifier: 72:C2:AC:DC:71:5B:CA:C3:9C:BD:12:DA:01:57:D0:0C:0E:13:35:8E
Authority key identifier: 26:62:AB:3C:5D:B1:45:7B:B2:F5:19:5E:23:8F:E4:BD:C8:F2:15:EB
Certificate issuer: /CN=2662ab3c5db1457bb2f5195e238fe4bdc8f215eb
Certificate serial: 0195116C45FA4321E6E5E985F4903F01877E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmKrPF2xRXuy9RleI4_kvcjyFes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/f0a918-9335-4bcc-becd-4ea73083aec6/1/JmKrPF2xRXuy9RleI4_kvcjyFes.mft
Manifest number: 0C01
Signing time: Mon 17 Feb 2025 01:01:03 +0000
Manifest this update: Mon 17 Feb 2025 01:01:03 +0000
Manifest next update: Tue 18 Feb 2025 01:01:03 +0000
Files and hashes: 1: JmKrPF2xRXuy9RleI4_kvcjyFes.crl (hash: AAFNiTohpzlcmq/0Y8iYYvCGOsulYEJdcChCGuZoD2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/f0a918-9335-4bcc-becd-4ea73083aec6/1/JmKrPF2xRXuy9RleI4_kvcjyFes.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/f0a918-9335-4bcc-becd-4ea73083aec6/1/JmKrPF2xRXuy9RleI4_kvcjyFes.mft
rsync://rpki.ripe.net/repository/DEFAULT/JmKrPF2xRXuy9RleI4_kvcjyFes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6c:45:fa:43:21:e6:e5:e9:85:f4:90:3f:01:87:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2662ab3c5db1457bb2f5195e238fe4bdc8f215eb
Validity
Not Before: Feb 17 01:01:03 2025 GMT
Not After : Feb 18 01:01:03 2025 GMT
Subject: CN=72c2acdc715bcac39cbd12da0157d00c0e13358e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:60:d5:a5:75:ef:39:10:50:1c:08:d1:33:d0:
b9:e4:24:fa:ef:97:f3:32:bd:4b:2e:46:6d:bf:05:
6a:7f:b4:61:db:c8:7e:8e:35:96:e4:73:28:78:a4:
dd:16:ab:9a:28:c9:1c:ac:6b:f5:50:5f:04:54:4a:
88:c8:50:ea:06:f0:f2:e8:97:e6:c7:9f:0f:41:05:
c0:4c:be:f8:12:ac:62:c2:86:9f:c7:29:65:b4:ff:
17:55:9c:05:03:a5:0a:72:a5:e2:3e:64:3e:c3:a7:
04:c7:51:1a:1e:36:9f:7f:69:cf:57:16:56:e4:95:
b2:2a:f2:ec:f8:c2:e5:36:09:a1:37:f2:1f:f5:f0:
fe:cd:9d:3a:8a:80:86:0d:f3:ea:c7:8a:38:1b:2b:
cd:ea:76:2e:ef:95:4e:c8:73:ba:78:44:3c:52:ea:
92:e9:91:88:7c:fc:33:44:62:69:55:84:65:14:aa:
51:44:a3:46:bf:ba:07:b7:2b:eb:b2:01:27:d1:25:
b2:da:75:97:36:14:47:e8:1a:48:a2:e4:64:d5:65:
c9:c5:f9:1f:13:63:7f:5e:37:45:a2:c6:24:97:4e:
d8:ef:0a:0c:3f:20:25:00:fe:11:14:f9:b5:ac:03:
4e:0e:22:de:72:de:3d:d0:b1:45:b5:9c:a6:26:56:
9a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:C2:AC:DC:71:5B:CA:C3:9C:BD:12:DA:01:57:D0:0C:0E:13:35:8E
X509v3 Authority Key Identifier:
keyid:26:62:AB:3C:5D:B1:45:7B:B2:F5:19:5E:23:8F:E4:BD:C8:F2:15:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmKrPF2xRXuy9RleI4_kvcjyFes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f0a918-9335-4bcc-becd-4ea73083aec6/1/JmKrPF2xRXuy9RleI4_kvcjyFes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f0a918-9335-4bcc-becd-4ea73083aec6/1/JmKrPF2xRXuy9RleI4_kvcjyFes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:4b:32:da:d4:a9:9f:11:a2:02:03:07:ce:c7:00:5b:04:03:
59:39:2e:68:d8:98:05:54:b7:ea:ad:53:aa:58:0f:f2:88:10:
5b:a2:8e:58:c6:51:f2:5a:36:84:49:a5:33:ca:2d:d9:8f:d8:
9f:46:40:0d:e8:54:9a:2d:a4:b4:01:f6:2e:c4:1d:7d:ed:28:
f2:a2:06:35:ae:c6:4f:67:be:8b:28:5d:01:ee:dc:32:d6:9a:
45:2e:fa:c0:7c:0e:e6:e6:ef:ac:59:9d:64:de:fb:3c:6c:5d:
1f:84:d7:74:66:34:d3:e9:2b:60:0d:5f:13:43:5e:91:7d:89:
ec:8b:3f:4d:51:e5:4a:19:1d:15:e5:7d:51:98:c6:53:88:38:
2f:80:e4:97:53:0b:c0:b2:6f:63:be:c0:38:f7:06:d4:c3:1b:
5d:33:d7:1b:bf:1d:09:d5:e6:3c:48:c6:39:40:ab:ef:7a:c9:
d0:cd:85:be:94:51:53:fe:b3:1e:4e:ff:f1:21:0c:ea:43:69:
92:a7:e8:71:18:6d:ba:1f:6f:8e:04:a1:cb:9e:43:f5:bc:11:
3b:7e:c5:16:49:76:39:b9:40:38:34:71:d8:2e:55:5b:3c:e7:
f2:d4:2a:ca:e6:9a:26:46:72:ef:08:c9:5d:7f:00:4f:09:0e:
64:74:a3:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:26:05 2025 by rpki-client