![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8020d8-0684-44f6-84d1-d1d0f96cad1e/1/E0vH5v379zjSP8XuXlrLUr77wFE.mft
File: E0vH5v379zjSP8XuXlrLUr77wFE.mft (raw, json)
Hash identifier: VgWTzVQI4an/6RR0Gonkr4wBh4+VfGbYfdMlCkfg8A8=
Subject key identifier: D2:69:D1:35:14:ED:5A:33:2B:6C:9C:6A:25:0B:54:5A:DC:7C:97:EC
Authority key identifier: 13:4B:C7:E6:FD:FB:F7:38:D2:3F:C5:EE:5E:5A:CB:52:BE:FB:C0:51
Certificate issuer: /CN=134bc7e6fdfbf738d23fc5ee5e5acb52befbc051
Certificate serial: 019512105BB18AD8ABC11DE91DE9C5CF8B4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E0vH5v379zjSP8XuXlrLUr77wFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/8020d8-0684-44f6-84d1-d1d0f96cad1e/1/E0vH5v379zjSP8XuXlrLUr77wFE.mft
Manifest number: 1399
Signing time: Mon 17 Feb 2025 04:00:16 +0000
Manifest this update: Mon 17 Feb 2025 04:00:16 +0000
Manifest next update: Tue 18 Feb 2025 04:00:16 +0000
Files and hashes: 1: E0vH5v379zjSP8XuXlrLUr77wFE.crl (hash: qQLO6t5w6/HiCCcW6HRJmWUwAQPTm9vRVqXI37mYCLY=)
2: jScU1zFVjCaRKrDbPPQusY4_bns.roa (hash: 4SG9zb228Iu48jTcU1xr7DFLeKIwml/oUjk+0F3n0UE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/8020d8-0684-44f6-84d1-d1d0f96cad1e/1/E0vH5v379zjSP8XuXlrLUr77wFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/8020d8-0684-44f6-84d1-d1d0f96cad1e/1/E0vH5v379zjSP8XuXlrLUr77wFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/E0vH5v379zjSP8XuXlrLUr77wFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:5b:b1:8a:d8:ab:c1:1d:e9:1d:e9:c5:cf:8b:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=134bc7e6fdfbf738d23fc5ee5e5acb52befbc051
Validity
Not Before: Feb 17 04:00:16 2025 GMT
Not After : Feb 18 04:00:16 2025 GMT
Subject: CN=d269d13514ed5a332b6c9c6a250b545adc7c97ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d0:ec:bd:5a:a9:74:2f:84:f3:f8:16:51:df:
7b:9c:b5:02:17:c2:8f:5f:dc:e8:21:98:70:d4:f2:
47:9b:cc:6c:31:33:6e:09:1b:bf:36:fc:12:bb:6f:
d4:08:73:a8:7e:e8:36:1c:d9:25:a8:c7:76:64:f1:
13:d8:3f:c1:9b:9a:0e:90:26:37:13:e0:ee:56:1f:
31:73:c1:8d:96:28:d4:b5:ff:3e:d4:dd:c7:d4:2e:
47:4b:4c:11:77:db:4f:75:a9:08:dd:04:1b:de:5c:
50:8e:ac:c2:e4:ca:32:3e:cd:3a:37:d3:c0:7c:e3:
75:2a:86:2f:7f:e6:1b:e7:43:1e:b2:7f:5c:55:a1:
6f:f9:a8:e8:06:7b:d9:58:9b:bf:1a:13:07:f4:38:
57:07:46:cf:af:8b:8f:fb:9d:18:27:92:a9:cc:6f:
fe:6d:b3:da:b1:ad:8d:a0:17:05:b6:42:cf:9f:55:
74:01:48:53:41:e9:f5:ca:06:c6:62:7d:16:66:cd:
b8:9c:94:ad:0d:6f:b9:2c:ab:25:52:ea:f2:31:84:
27:8c:82:32:bb:07:3d:82:fa:42:09:7a:08:32:1c:
c9:ce:a3:2f:87:79:df:da:08:c9:e2:b1:1f:5b:97:
36:55:78:92:63:77:75:ea:8b:0c:2a:3c:9a:2a:8d:
9e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:69:D1:35:14:ED:5A:33:2B:6C:9C:6A:25:0B:54:5A:DC:7C:97:EC
X509v3 Authority Key Identifier:
keyid:13:4B:C7:E6:FD:FB:F7:38:D2:3F:C5:EE:5E:5A:CB:52:BE:FB:C0:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E0vH5v379zjSP8XuXlrLUr77wFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8020d8-0684-44f6-84d1-d1d0f96cad1e/1/E0vH5v379zjSP8XuXlrLUr77wFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8020d8-0684-44f6-84d1-d1d0f96cad1e/1/E0vH5v379zjSP8XuXlrLUr77wFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:c7:60:a2:59:c2:f4:ff:72:7c:59:df:b8:a8:d5:b7:67:6b:
ee:d2:59:58:6f:f7:06:f8:34:20:e7:f5:6c:17:dd:7c:f4:ae:
00:b8:f4:16:72:69:b2:b5:61:7f:e4:f0:11:cf:98:62:94:78:
35:38:ab:38:21:df:63:fe:6b:8d:ce:86:0f:b4:a8:28:1f:f9:
00:56:64:ac:df:bc:db:47:f4:9f:d9:1d:cb:1f:03:28:a3:c7:
4a:b1:1a:30:8d:56:c3:4f:73:01:b7:03:32:05:72:a5:99:ff:
7b:a6:1d:a6:b3:4e:5c:33:c1:5c:73:b7:c2:01:0c:77:df:ad:
cc:d3:50:97:34:34:b9:49:be:80:5d:ca:f7:7a:5c:d6:cf:8b:
26:21:d4:52:18:d4:bc:e1:6d:6c:ef:7b:c7:4e:5b:2a:eb:c1:
70:5a:ee:9d:cd:48:24:99:e5:63:13:83:36:dd:fc:c4:0f:4d:
07:80:89:5a:9e:4f:39:98:52:83:22:41:31:4f:da:0d:e1:7d:
c4:43:f3:fa:0d:6f:7a:68:ee:a2:30:a6:22:7f:2f:82:e7:18:
32:2e:51:1c:ba:77:8a:82:89:ec:4c:07:40:e8:bc:77:1d:08:
42:da:9b:49:1b:92:87:d0:35:6d:0b:7c:20:9c:f8:a9:93:1a:
43:4e:de:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:09:28 2025 by rpki-client