![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/703f00-7f39-4d95-8c58-4bbb838a2779/1/wxu0Tt4q_gv6nXi6KTJJVff8YJE.mft
File: wxu0Tt4q_gv6nXi6KTJJVff8YJE.mft (raw, json)
Hash identifier: Nq9ywgiF3E5s5KQ1ojfyh5ufLRn5UBL3a6s3S5vN5gc=
Subject key identifier: 08:E2:E7:7C:E4:83:90:C6:4C:21:05:31:FA:2F:E2:A8:7D:04:34:E8
Authority key identifier: C3:1B:B4:4E:DE:2A:FE:0B:FA:9D:78:BA:29:32:49:55:F7:FC:60:91
Certificate issuer: /CN=c31bb44ede2afe0bfa9d78ba29324955f7fc6091
Certificate serial: 019510C6B2CFD2C5FE6552FD11EC1612A757
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wxu0Tt4q_gv6nXi6KTJJVff8YJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/703f00-7f39-4d95-8c58-4bbb838a2779/1/wxu0Tt4q_gv6nXi6KTJJVff8YJE.mft
Manifest number: 0B38
Signing time: Sun 16 Feb 2025 22:00:12 +0000
Manifest this update: Sun 16 Feb 2025 22:00:12 +0000
Manifest next update: Mon 17 Feb 2025 22:00:12 +0000
Files and hashes: 1: GzFkstv5wkhfRB-938uIDYh-Wxo.roa (hash: 4jcDDGU9h854aDRD3uRk10AMRg0wkYSddBT/bLLaKOg=)
2: wxu0Tt4q_gv6nXi6KTJJVff8YJE.crl (hash: jJ+imUUiWeu4v321ES4vRYK//EPF3rdXp9/9l1zOh2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/703f00-7f39-4d95-8c58-4bbb838a2779/1/wxu0Tt4q_gv6nXi6KTJJVff8YJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/703f00-7f39-4d95-8c58-4bbb838a2779/1/wxu0Tt4q_gv6nXi6KTJJVff8YJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/wxu0Tt4q_gv6nXi6KTJJVff8YJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c6:b2:cf:d2:c5:fe:65:52:fd:11:ec:16:12:a7:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c31bb44ede2afe0bfa9d78ba29324955f7fc6091
Validity
Not Before: Feb 16 22:00:12 2025 GMT
Not After : Feb 17 22:00:12 2025 GMT
Subject: CN=08e2e77ce48390c64c210531fa2fe2a87d0434e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:cb:82:42:f8:40:f1:84:5f:f0:d4:97:5d:8f:
bc:a8:37:82:00:98:1a:3d:e4:29:3c:ed:5b:dd:51:
11:78:70:48:c3:84:6d:b9:6f:2e:a9:94:2b:ee:93:
46:07:94:df:18:cd:0d:13:c8:fb:62:2d:6d:23:72:
29:8d:44:ee:3c:b8:3b:53:6c:03:35:d8:e4:c9:f5:
96:02:65:49:70:ae:1e:c4:32:9c:05:62:b8:db:57:
be:e3:19:27:3e:bd:d2:82:bb:21:71:13:fd:22:e2:
44:16:48:38:1d:15:18:00:98:27:6b:11:7e:94:49:
d0:03:04:ae:99:a7:29:2e:7e:71:ee:e9:5c:2e:2e:
0a:76:b9:3b:f3:ea:3d:67:a2:d3:41:98:31:2f:3e:
73:8e:5b:94:49:e1:3c:56:12:ce:ca:50:02:a5:5c:
4a:8c:0d:30:f4:5c:c0:e8:35:4e:28:b8:fb:b9:71:
cc:67:57:2c:85:36:0d:3c:75:3d:c6:02:69:aa:71:
4e:01:9f:78:ce:4e:e4:65:4b:46:c0:02:17:63:36:
7b:ea:20:37:29:c3:4f:80:72:54:78:97:c2:4d:df:
01:02:ec:09:80:4a:5f:b6:10:1f:37:7a:d9:4b:2c:
89:d3:c1:70:73:70:fa:58:cc:30:1c:d1:28:e2:a5:
2a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:E2:E7:7C:E4:83:90:C6:4C:21:05:31:FA:2F:E2:A8:7D:04:34:E8
X509v3 Authority Key Identifier:
keyid:C3:1B:B4:4E:DE:2A:FE:0B:FA:9D:78:BA:29:32:49:55:F7:FC:60:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wxu0Tt4q_gv6nXi6KTJJVff8YJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/703f00-7f39-4d95-8c58-4bbb838a2779/1/wxu0Tt4q_gv6nXi6KTJJVff8YJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/703f00-7f39-4d95-8c58-4bbb838a2779/1/wxu0Tt4q_gv6nXi6KTJJVff8YJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:a6:b8:b1:e6:f0:bb:30:28:ce:2b:74:e2:70:c4:e6:ab:f8:
16:12:e6:34:1e:17:13:4b:20:c3:76:2d:be:fd:25:8e:18:e5:
d4:0b:b5:0b:54:3a:28:a0:97:25:6a:56:08:d7:fb:09:a1:97:
9e:87:8a:0c:af:29:ef:98:b0:16:41:83:b7:3b:44:6b:19:20:
19:fb:ab:d7:e0:23:c9:62:3f:2d:bf:26:82:83:b5:b7:5e:94:
e8:9b:eb:02:1b:3c:82:83:bb:6b:c7:84:6e:4d:30:ca:51:45:
82:f6:91:c8:2b:00:44:63:50:03:b5:5c:f4:d8:53:69:e1:fc:
eb:c7:68:c0:3a:45:f7:cc:29:32:23:cb:e4:7a:36:8d:a8:25:
62:ae:27:02:c9:7f:0a:58:5f:bc:c6:87:61:93:68:4d:f2:45:
4e:ea:ba:6f:52:28:54:cd:43:3d:8a:1f:ce:c3:b8:c8:18:59:
92:fa:f7:e1:55:48:76:c9:25:b7:7f:f9:9d:1e:00:fc:b5:58:
04:4d:f6:31:fa:e0:e4:c0:e4:dc:a8:1d:c8:cd:12:80:c1:43:
30:87:e6:e2:1d:ce:a2:ec:55:bd:0e:a7:2d:ce:93:d1:8e:d2:
26:3f:f7:25:1b:96:77:4b:95:92:38:d8:c8:78:34:e9:f3:d9:
a0:ad:bc:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:45:30 2025 by rpki-client