![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/f3c3b2-b64a-49e1-9a48-c93989cc9b67/1/VzCjLzFiRs4LFHu4lejN8K7UPtY.mft
File: VzCjLzFiRs4LFHu4lejN8K7UPtY.mft (raw, json)
Hash identifier: OGzQadgwup+ahjmEw+7OmDSF2hXsBR3aB709/Tf6usQ=
Subject key identifier: 3F:1E:48:BC:DC:02:D1:D5:C6:35:39:24:CB:67:0A:96:9C:ED:9A:90
Authority key identifier: 57:30:A3:2F:31:62:46:CE:0B:14:7B:B8:95:E8:CD:F0:AE:D4:3E:D6
Certificate issuer: /CN=5730a32f316246ce0b147bb895e8cdf0aed43ed6
Certificate serial: 0195121061CFC79077D5232F7B5CD55CDE7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VzCjLzFiRs4LFHu4lejN8K7UPtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/f3c3b2-b64a-49e1-9a48-c93989cc9b67/1/VzCjLzFiRs4LFHu4lejN8K7UPtY.mft
Manifest number: 0705
Signing time: Mon 17 Feb 2025 04:00:18 +0000
Manifest this update: Mon 17 Feb 2025 04:00:18 +0000
Manifest next update: Tue 18 Feb 2025 04:00:18 +0000
Files and hashes: 1: JdnQsGvdkhLMYKHimmIYbcmtu_4.roa (hash: XQ8/SW7MphrctHqH7PZ0NzqyE28ii273Q0FygBQXgEo=)
2: VzCjLzFiRs4LFHu4lejN8K7UPtY.crl (hash: BhnLRnOamder0SCQ0O/8T33Zsjmn9BveedjEr6ORgh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/f3c3b2-b64a-49e1-9a48-c93989cc9b67/1/VzCjLzFiRs4LFHu4lejN8K7UPtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/f3c3b2-b64a-49e1-9a48-c93989cc9b67/1/VzCjLzFiRs4LFHu4lejN8K7UPtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VzCjLzFiRs4LFHu4lejN8K7UPtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:61:cf:c7:90:77:d5:23:2f:7b:5c:d5:5c:de:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5730a32f316246ce0b147bb895e8cdf0aed43ed6
Validity
Not Before: Feb 17 04:00:18 2025 GMT
Not After : Feb 18 04:00:18 2025 GMT
Subject: CN=3f1e48bcdc02d1d5c6353924cb670a969ced9a90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ce:cb:9f:ad:29:8f:c4:60:0e:32:a8:15:a0:
03:b3:86:49:49:cf:23:70:63:58:bd:a7:c0:2b:08:
3a:20:cd:46:b0:b7:52:da:07:ce:3a:55:d3:7f:f4:
bc:90:d8:6e:57:4c:f9:27:0b:86:cf:e1:d1:af:8c:
93:a8:f8:54:d0:f1:d9:a3:7a:5a:59:33:54:9d:02:
77:c2:95:3f:55:70:e8:f6:41:aa:2f:ac:92:c9:24:
39:9d:06:16:c4:dd:04:dc:04:ab:3b:6a:df:6d:00:
fa:b9:5c:b7:d0:13:18:aa:e0:14:0d:65:49:c8:ef:
15:db:3d:77:e4:c8:fc:ae:c2:10:22:53:84:87:d8:
23:d8:e0:dc:92:7c:65:1d:c1:7a:08:cf:bd:a2:45:
31:21:8b:0c:30:34:84:6d:b6:0c:e6:85:b2:58:30:
22:d2:1a:30:12:07:b3:08:db:d2:f7:15:5f:c6:7b:
6f:22:ed:bc:53:4e:a0:e5:28:d9:74:0a:e2:78:88:
ad:55:dd:fe:9b:0f:b5:ba:1c:97:e0:6f:fb:37:07:
64:da:12:72:02:0c:54:5a:88:46:c0:d5:79:0e:4a:
cb:e8:fe:ac:4f:6a:5c:e8:9c:e8:a2:13:01:17:57:
7f:04:8b:a0:1f:ec:7c:91:18:7f:0c:4a:b4:8b:27:
b6:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:1E:48:BC:DC:02:D1:D5:C6:35:39:24:CB:67:0A:96:9C:ED:9A:90
X509v3 Authority Key Identifier:
keyid:57:30:A3:2F:31:62:46:CE:0B:14:7B:B8:95:E8:CD:F0:AE:D4:3E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VzCjLzFiRs4LFHu4lejN8K7UPtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f3c3b2-b64a-49e1-9a48-c93989cc9b67/1/VzCjLzFiRs4LFHu4lejN8K7UPtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f3c3b2-b64a-49e1-9a48-c93989cc9b67/1/VzCjLzFiRs4LFHu4lejN8K7UPtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:10:cb:a6:4c:24:60:36:4d:a8:f4:82:b1:28:ed:a3:b3:14:
94:72:6a:29:a4:fe:72:db:60:e0:74:9a:2d:3b:bd:73:5e:78:
b1:0f:22:81:c2:eb:f6:67:d3:ef:21:12:40:43:05:64:49:49:
eb:ad:d6:76:15:51:a6:88:e0:a8:c3:d2:9d:1c:9a:23:05:7c:
9d:3e:88:e5:82:ae:06:12:66:dc:6a:40:a1:6a:0e:24:75:07:
71:c1:91:ab:7c:76:63:87:99:eb:8f:10:0a:7c:04:c6:57:58:
ba:4f:b1:cb:0f:83:b8:7b:86:d0:6a:b6:71:22:da:77:8b:7f:
e9:29:e9:39:65:1c:0d:16:04:33:1a:e5:8c:46:56:bd:0f:33:
ef:2d:3e:01:26:b3:3f:7d:3e:e6:30:c8:4d:7b:02:ef:93:ff:
c2:21:66:3d:18:78:ec:9c:20:6c:74:f3:ea:3a:55:c8:58:c6:
fc:5f:91:7b:f8:76:2c:16:b5:e4:0e:e1:cf:2e:bb:b0:1e:88:
d3:54:7c:c5:a7:2b:3e:a2:56:84:33:11:68:3f:ca:f3:b1:0f:
e5:12:d7:6d:eb:69:80:54:76:64:5b:7e:fc:3a:80:73:dc:8c:
96:9a:e3:90:4f:77:94:d4:0d:d6:a2:d7:ad:93:df:a3:f6:1b:
16:e1:b6:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:38:05 2025 by rpki-client