![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/d2bc90-2950-4322-a92e-c63fcd03a89b/1/J83PK9CaINK63Tq2yMft-h_Vwsw.mft
File: J83PK9CaINK63Tq2yMft-h_Vwsw.mft (raw, json)
Hash identifier: tdxTpu5I4x/vunCbOOp9CO/hVlW4eH6/IFUnzQMy2Ss=
Subject key identifier: 72:9C:10:B7:65:39:F2:DF:22:8C:80:7B:64:3A:86:3B:00:43:7B:8C
Authority key identifier: 27:CD:CF:2B:D0:9A:20:D2:BA:DD:3A:B6:C8:C7:ED:FA:1F:D5:C2:CC
Certificate issuer: /CN=27cdcf2bd09a20d2badd3ab6c8c7edfa1fd5c2cc
Certificate serial: 019512478F040C960E6F3016EE106236E19A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J83PK9CaINK63Tq2yMft-h_Vwsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/d2bc90-2950-4322-a92e-c63fcd03a89b/1/J83PK9CaINK63Tq2yMft-h_Vwsw.mft
Manifest number: 0170
Signing time: Mon 17 Feb 2025 05:00:34 +0000
Manifest this update: Mon 17 Feb 2025 05:00:34 +0000
Manifest next update: Tue 18 Feb 2025 05:00:34 +0000
Files and hashes: 1: J83PK9CaINK63Tq2yMft-h_Vwsw.crl (hash: wW5h7L0Z2C1yc9H9IB0vnJ3LZLNKABhYK3e7luiDA8Y=)
2: kxpaHhhuxaN-Jg9For9SY2Nccrk.roa (hash: Q31rgNDFAzRPHBiMS/f4s6A4eZqCkoNUT9MdgG2F6C8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/d2bc90-2950-4322-a92e-c63fcd03a89b/1/J83PK9CaINK63Tq2yMft-h_Vwsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/d2bc90-2950-4322-a92e-c63fcd03a89b/1/J83PK9CaINK63Tq2yMft-h_Vwsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/J83PK9CaINK63Tq2yMft-h_Vwsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:47:8f:04:0c:96:0e:6f:30:16:ee:10:62:36:e1:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27cdcf2bd09a20d2badd3ab6c8c7edfa1fd5c2cc
Validity
Not Before: Feb 17 05:00:34 2025 GMT
Not After : Feb 18 05:00:34 2025 GMT
Subject: CN=729c10b76539f2df228c807b643a863b00437b8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b4:7d:23:a6:ce:4b:82:a2:ae:56:9e:ce:31:
8a:5e:14:33:49:dc:35:83:4a:80:c7:26:21:d1:bb:
e6:81:5a:9f:a2:1d:a3:74:c6:72:fe:97:3a:e2:0f:
83:f5:32:25:78:29:77:6a:15:98:b7:e2:62:fa:c6:
94:80:e6:fb:20:85:de:c9:a2:8a:99:9e:4d:0e:2f:
ac:1a:33:4c:db:e7:5b:d6:dc:06:75:82:ef:34:48:
72:e8:4c:36:97:66:1e:cd:dd:4f:1c:4a:64:fa:3c:
a3:4d:af:ca:f3:26:37:d9:dc:6a:26:03:db:f2:04:
9d:81:8a:cd:a6:6d:7d:b3:ef:91:d9:cf:90:8a:84:
1b:5b:41:fd:1c:48:52:b4:e6:0a:68:26:8a:27:7c:
87:3b:b7:71:af:2d:ec:78:2a:20:b0:22:77:48:73:
1b:0d:25:ce:b9:ec:78:3e:37:86:37:95:fa:41:86:
3f:6a:54:c8:ee:63:d1:0e:7a:4f:d5:30:f9:be:73:
ad:2c:04:c3:eb:58:b7:e9:15:24:f3:1a:b2:47:28:
aa:2c:d1:38:f6:31:8b:af:be:e5:55:96:b3:25:a1:
68:e1:d1:38:6f:6b:ea:b0:79:21:37:d4:91:49:11:
e0:4b:7f:71:f8:a3:0a:15:4e:9e:de:40:9f:ca:53:
12:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:9C:10:B7:65:39:F2:DF:22:8C:80:7B:64:3A:86:3B:00:43:7B:8C
X509v3 Authority Key Identifier:
keyid:27:CD:CF:2B:D0:9A:20:D2:BA:DD:3A:B6:C8:C7:ED:FA:1F:D5:C2:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J83PK9CaINK63Tq2yMft-h_Vwsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/d2bc90-2950-4322-a92e-c63fcd03a89b/1/J83PK9CaINK63Tq2yMft-h_Vwsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/d2bc90-2950-4322-a92e-c63fcd03a89b/1/J83PK9CaINK63Tq2yMft-h_Vwsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:c2:6a:7a:af:98:76:cc:78:b1:f6:a1:87:08:6c:08:3f:fd:
b5:4c:6f:f5:8c:78:64:ea:71:ae:cc:b4:bf:e6:67:00:80:f8:
0d:00:f2:df:37:b1:bd:cc:b2:d6:1c:6e:19:bf:21:b5:d1:d0:
09:c4:d3:aa:ed:37:d5:d1:6e:d2:2e:9a:f9:ed:77:0a:e6:f2:
9c:d8:a8:a3:8a:8a:e6:01:88:5e:8a:76:52:f3:d6:44:86:77:
4d:51:89:95:49:04:6d:7e:70:56:1c:44:ad:d3:e9:70:02:0c:
b5:ab:b5:ef:16:ba:a5:5c:57:bf:4b:b6:a7:ff:82:c1:db:12:
cf:c7:66:4b:2c:52:ea:28:6f:58:40:63:3b:18:a9:b7:3f:d9:
3e:a7:a2:5a:7a:fa:cc:eb:b4:ac:85:bd:7d:d7:53:ec:89:0b:
a1:8f:e5:a8:34:6c:b7:72:53:43:47:35:e6:f5:75:94:7b:a4:
c8:32:56:4f:d4:67:0c:ba:91:1f:ab:49:f1:00:e3:56:7a:c9:
cd:8f:78:78:1f:06:3b:8d:0b:24:c1:f6:fa:14:19:c5:5f:9b:
7c:d8:0f:bb:4f:0f:17:f9:ce:e3:5f:98:65:3c:02:ae:a8:c2:
83:63:51:3b:a9:df:32:5a:0c:0c:99:15:5f:b8:e0:36:61:f7:
ea:64:ad:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:35:39 2025 by rpki-client