![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.mft
File: 6nUDuD-gmnW8uRB1QA-DB6ZnuO0.mft (raw, json)
Hash identifier: 54WE5dCVT9Sz0zNndFkZvnMP1Wxv2NmIFmbOXaJVgrk=
Subject key identifier: AC:E8:AB:D8:FE:8F:3E:28:03:97:D8:4F:5D:1D:BB:2A:1D:8B:05:7D
Authority key identifier: EA:75:03:B8:3F:A0:9A:75:BC:B9:10:75:40:0F:83:07:A6:67:B8:ED
Certificate issuer: /CN=ea7503b83fa09a75bcb91075400f8307a667b8ed
Certificate serial: 019511D97C1C66D66A9442E708AEEE068540
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.mft
Manifest number: 0B4C
Signing time: Mon 17 Feb 2025 03:00:20 +0000
Manifest this update: Mon 17 Feb 2025 03:00:20 +0000
Manifest next update: Tue 18 Feb 2025 03:00:20 +0000
Files and hashes: 1: 534vF5sjkwJDGuUSMSbyeoXyx-w.roa (hash: yaE3+RBNj5kJXWkdpo0vdtCXgmh99gzWa0o0cozuQ7M=)
2: 6nUDuD-gmnW8uRB1QA-DB6ZnuO0.crl (hash: y/G8iWh2wV03Ur0b8HMnCkf2RnfZewQ/IMhr0G7rjWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:7c:1c:66:d6:6a:94:42:e7:08:ae:ee:06:85:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea7503b83fa09a75bcb91075400f8307a667b8ed
Validity
Not Before: Feb 17 03:00:20 2025 GMT
Not After : Feb 18 03:00:20 2025 GMT
Subject: CN=ace8abd8fe8f3e280397d84f5d1dbb2a1d8b057d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:56:ee:32:e9:31:d9:7b:30:33:91:4a:6b:83:
f2:59:eb:0a:11:12:24:bc:99:de:2d:a0:a1:70:b5:
15:85:71:51:c4:79:26:7f:8c:85:16:96:b3:65:23:
16:d0:26:7d:50:49:33:bb:54:ab:c4:e5:bd:96:0e:
1c:b4:ae:39:4e:58:15:3c:96:e7:7c:64:69:fa:04:
54:9e:8d:ef:75:2b:70:1a:12:c9:7f:67:28:a1:bf:
6e:18:35:25:a4:d1:5c:43:bd:f9:70:61:8a:ed:01:
13:c3:5e:37:72:5c:72:83:43:47:7f:81:8b:19:70:
e4:98:f5:de:52:48:97:07:61:8e:b7:a0:fd:52:4d:
10:ad:af:d1:58:5c:c9:91:cf:31:45:1b:e8:13:56:
00:bf:dc:3d:57:2f:ae:63:7d:2a:1b:23:92:3b:bf:
64:79:8e:ed:1f:7d:b8:fe:23:a1:60:ba:a0:3b:14:
fb:2b:21:2c:39:6e:15:aa:2c:08:60:91:85:04:35:
9b:bb:42:d7:8b:41:c7:ed:38:22:10:c1:c3:86:c5:
4b:54:13:57:43:80:7c:e8:37:26:40:10:c7:5e:bc:
b7:bb:66:8f:62:8b:81:c2:b4:07:fb:6d:ea:ce:c7:
66:e8:eb:af:36:74:75:62:75:3c:b5:b2:e0:42:b1:
bd:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:E8:AB:D8:FE:8F:3E:28:03:97:D8:4F:5D:1D:BB:2A:1D:8B:05:7D
X509v3 Authority Key Identifier:
keyid:EA:75:03:B8:3F:A0:9A:75:BC:B9:10:75:40:0F:83:07:A6:67:B8:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:b7:42:ec:59:3f:6e:0d:0b:c5:6c:1a:1d:92:8d:64:64:b8:
6d:88:5d:46:eb:d1:ad:a2:26:73:b1:86:37:68:95:5e:24:a2:
e6:47:69:1a:38:c3:42:06:e5:97:37:d6:b4:7c:4c:29:55:bc:
22:cb:e5:41:da:1e:bc:78:b8:9a:70:c4:03:f7:2b:75:e6:f9:
14:2a:1e:48:aa:90:09:c7:bc:96:5d:30:aa:f2:4e:6e:b2:f4:
f2:ac:9d:e5:73:e2:2c:af:0d:86:61:89:1d:9b:07:a0:a3:0f:
73:21:8b:ab:6a:4b:06:ae:b0:ef:ed:65:ee:c7:0c:0c:6b:35:
9a:0a:ba:f9:a2:47:a9:19:21:c7:63:c3:25:b4:f4:80:c2:df:
d7:3d:17:97:3a:c1:45:f9:ab:98:fb:f2:45:f8:09:97:64:a5:
89:4f:d9:3f:11:47:6f:2c:1c:b0:bf:c0:aa:cb:f6:48:4c:91:
59:40:b0:47:51:63:1f:d9:60:f9:50:39:70:79:76:c3:23:b4:
8d:d9:fd:05:7a:ee:09:78:7a:33:a3:e0:57:7a:dc:a0:2c:8a:
49:e9:f8:82:59:98:f5:fe:03:da:ad:ac:5f:02:49:df:92:5c:
66:b1:6e:c8:b6:06:a0:4d:f9:ba:d5:bc:51:86:b6:c5:ad:82:
03:c4:0e:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:35:05 2025 by rpki-client