![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft
File: 5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft (raw, json)
Hash identifier: qEizIMnFDDMVQBtkNESOpgjWJeK62gOdpxWIDW3Xje8=
Subject key identifier: 55:BE:A3:05:BE:10:B2:2F:20:E8:67:BC:EE:BD:94:04:48:25:79:47
Authority key identifier: E5:78:BC:06:50:72:B4:0B:AF:08:41:6E:21:6A:13:07:B2:4B:C4:4B
Certificate issuer: /CN=e578bc065072b40baf08416e216a1307b24bc44b
Certificate serial: 019510C7E090BE8300739AB403775304B87E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Xi8BlBytAuvCEFuIWoTB7JLxEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft
Manifest number: 1453
Signing time: Sun 16 Feb 2025 22:01:29 +0000
Manifest this update: Sun 16 Feb 2025 22:01:29 +0000
Manifest next update: Mon 17 Feb 2025 22:01:29 +0000
Files and hashes: 1: 5Xi8BlBytAuvCEFuIWoTB7JLxEs.crl (hash: z4hzeoflX/RRWWbfbhEL319EtAlUBJOqd1/mJEBhUVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Xi8BlBytAuvCEFuIWoTB7JLxEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:e0:90:be:83:00:73:9a:b4:03:77:53:04:b8:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e578bc065072b40baf08416e216a1307b24bc44b
Validity
Not Before: Feb 16 22:01:29 2025 GMT
Not After : Feb 17 22:01:29 2025 GMT
Subject: CN=55bea305be10b22f20e867bceebd940448257947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:69:4f:9e:75:7d:1b:be:9b:ef:3b:47:27:a9:
b5:9a:ba:11:04:20:d7:45:49:1a:48:4d:3b:49:3f:
8a:3d:3e:4c:f5:33:29:c5:04:cc:95:67:1a:2f:fb:
b1:32:06:31:02:da:6f:fd:56:df:71:c8:3a:ad:f1:
ec:ac:06:1a:cf:07:f7:83:5b:ce:51:2e:d2:4b:dc:
9a:fa:ff:29:67:9c:af:34:b1:37:32:f6:d7:64:b2:
b5:97:9c:37:ff:56:85:a0:97:7b:e7:75:c6:d1:26:
db:c5:9b:3a:79:f5:82:47:9c:b1:50:4b:7a:ad:99:
f0:90:d2:cc:02:1a:b3:3c:c3:f0:46:d9:55:bf:0f:
74:d2:95:d4:09:1b:ef:42:82:cf:c5:fd:4f:59:56:
38:5e:be:0e:c2:75:6c:89:f2:a2:b6:ec:dd:28:bc:
08:6e:66:c7:2a:82:8c:62:d7:35:d6:c5:53:84:7b:
d2:c5:39:e7:1e:be:ca:74:3b:83:6d:72:29:1b:ca:
a4:9a:a9:7d:d1:2e:20:74:d3:93:6c:b9:b7:5f:35:
7c:73:44:5d:fe:84:84:ba:f1:6f:0c:98:b6:2a:31:
f9:fe:b7:2b:9a:d8:5f:64:6d:a8:2c:94:01:c4:a6:
df:55:7e:a2:93:b1:2c:cb:b7:cf:49:21:14:4e:5a:
be:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:BE:A3:05:BE:10:B2:2F:20:E8:67:BC:EE:BD:94:04:48:25:79:47
X509v3 Authority Key Identifier:
keyid:E5:78:BC:06:50:72:B4:0B:AF:08:41:6E:21:6A:13:07:B2:4B:C4:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Xi8BlBytAuvCEFuIWoTB7JLxEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:c5:ba:73:f9:9d:cc:da:04:49:ae:f1:d1:79:75:8e:ba:39:
92:7c:0b:57:55:ea:56:4f:5c:f4:11:bf:e9:d4:fc:b2:ae:ea:
fa:13:cf:a2:43:a7:fb:2f:b6:19:ae:69:50:3a:95:11:55:1b:
d5:7d:be:97:b5:ad:a8:3a:84:71:a9:ee:7f:b1:98:ea:ff:51:
4d:f9:54:05:71:a8:d6:ad:0b:b1:ea:8d:58:98:2d:2c:26:87:
c4:3b:c6:3a:79:2a:55:b3:a6:fb:9b:44:22:94:50:c4:6f:0e:
d2:76:ed:dd:00:ae:df:7b:b6:9c:f9:10:4a:62:d3:c4:24:57:
a2:57:b0:cf:76:0b:f8:93:0e:91:e6:69:7f:ae:66:55:28:d1:
72:6a:c0:ee:f0:63:4c:5f:85:6c:1f:7e:5c:f5:c6:60:a0:08:
b6:ee:d1:24:08:69:f2:1f:5e:27:b8:ca:6e:48:eb:43:2a:86:
27:e5:3a:29:1a:d9:ee:1f:74:9c:09:1a:ea:07:58:af:25:96:
c7:c9:f4:0c:eb:e5:0f:77:99:be:f0:30:70:92:f3:2a:d9:73:
0d:9f:b3:27:d8:2a:ab:86:28:55:5f:ae:1e:9a:37:94:4b:44:
77:b3:03:e7:25:ec:77:f6:49:d7:f7:de:11:8e:c4:95:58:af:
e4:eb:cb:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:11:46 2025 by rpki-client