![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/a760a9-ab5e-4acf-a8e2-4bd58db10ed2/1/VIgrFBMiHptdO8inMpt2Sfmx7Cw.mft
File: VIgrFBMiHptdO8inMpt2Sfmx7Cw.mft (raw, json)
Hash identifier: virMNZL2aoC5jW9EWX9R386yFLiRxm3ki/oTty+Vq3Y=
Subject key identifier: E1:70:F3:47:FA:FD:F0:F4:DB:D9:28:3A:FA:B5:AC:84:A2:CC:A8:15
Authority key identifier: 54:88:2B:14:13:22:1E:9B:5D:3B:C8:A7:32:9B:76:49:F9:B1:EC:2C
Certificate issuer: /CN=54882b1413221e9b5d3bc8a7329b7649f9b1ec2c
Certificate serial: 0195116C0CF237BCEB38071DFC2229AA33F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VIgrFBMiHptdO8inMpt2Sfmx7Cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/a760a9-ab5e-4acf-a8e2-4bd58db10ed2/1/VIgrFBMiHptdO8inMpt2Sfmx7Cw.mft
Manifest number: 1456
Signing time: Mon 17 Feb 2025 01:00:48 +0000
Manifest this update: Mon 17 Feb 2025 01:00:48 +0000
Manifest next update: Tue 18 Feb 2025 01:00:48 +0000
Files and hashes: 1: VIgrFBMiHptdO8inMpt2Sfmx7Cw.crl (hash: t+ijaEut9cY1VL0BbumW8pR5oNdb2si8j6a30yWvntI=)
2: bOIrh8o4MvR1wd4C84En4JCn0L4.roa (hash: DG81fv6EP9+XjNFDQGRmy+cQGfBXw0VPtgzqJ5IZAq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/a760a9-ab5e-4acf-a8e2-4bd58db10ed2/1/VIgrFBMiHptdO8inMpt2Sfmx7Cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/a760a9-ab5e-4acf-a8e2-4bd58db10ed2/1/VIgrFBMiHptdO8inMpt2Sfmx7Cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VIgrFBMiHptdO8inMpt2Sfmx7Cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6c:0c:f2:37:bc:eb:38:07:1d:fc:22:29:aa:33:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54882b1413221e9b5d3bc8a7329b7649f9b1ec2c
Validity
Not Before: Feb 17 01:00:48 2025 GMT
Not After : Feb 18 01:00:48 2025 GMT
Subject: CN=e170f347fafdf0f4dbd9283afab5ac84a2cca815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d4:1c:f4:a2:69:74:9a:96:fa:7e:c7:5a:bb:
7d:cc:90:6b:af:38:93:3d:4a:74:b5:85:0d:6d:96:
c3:5f:51:e4:7a:fc:bd:16:5d:e2:79:bf:61:28:56:
1d:0c:e7:ed:e7:42:f2:97:d2:8c:01:75:a6:7b:8b:
56:8c:c9:09:a0:6d:52:8d:c2:1e:f4:cf:00:5b:7f:
27:08:8a:6d:b8:db:20:d8:f6:47:72:a9:1c:e1:69:
28:d5:ce:a2:cc:85:ad:cf:15:2b:ed:25:94:07:ef:
07:19:fe:22:7c:b2:72:0b:6a:a6:16:1b:63:1b:03:
39:dc:0b:4e:5a:61:ce:be:c1:2b:56:3a:60:33:c0:
b4:0d:31:0a:05:ff:11:b5:7f:1b:58:fd:cc:2b:eb:
a5:dd:e9:06:ce:f7:52:68:4d:82:dc:21:62:38:fa:
fb:95:f7:5e:25:07:7f:33:c3:33:ac:9d:e2:6c:d2:
92:90:ee:eb:76:ce:b8:ef:3c:70:fc:10:86:a3:82:
5b:de:c7:f4:17:e1:48:8b:e6:cf:a9:d5:db:e0:0b:
1f:a5:00:dc:76:33:58:0f:48:48:5a:c1:7f:ac:15:
a4:31:83:7d:6c:c5:ab:bc:bc:cf:08:f6:0e:ed:e3:
40:d7:e1:c9:9d:9c:99:d5:ce:3c:43:fe:b4:fd:69:
98:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:70:F3:47:FA:FD:F0:F4:DB:D9:28:3A:FA:B5:AC:84:A2:CC:A8:15
X509v3 Authority Key Identifier:
keyid:54:88:2B:14:13:22:1E:9B:5D:3B:C8:A7:32:9B:76:49:F9:B1:EC:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VIgrFBMiHptdO8inMpt2Sfmx7Cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a760a9-ab5e-4acf-a8e2-4bd58db10ed2/1/VIgrFBMiHptdO8inMpt2Sfmx7Cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a760a9-ab5e-4acf-a8e2-4bd58db10ed2/1/VIgrFBMiHptdO8inMpt2Sfmx7Cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:14:e2:1d:32:9b:7e:b4:a5:44:9b:13:49:ce:21:c2:16:e9:
7d:09:a9:5d:f9:71:4a:de:e8:9a:d9:65:1b:33:ae:7d:b6:32:
b6:e5:94:ba:24:c5:8c:e4:6c:14:ec:7f:c0:4f:0e:f3:7a:6e:
75:36:e9:76:2d:2f:4a:fe:95:94:b6:1e:c9:f9:dd:e7:80:e3:
cf:0c:4c:9a:ab:87:14:84:62:01:6d:86:a3:92:3d:ee:20:59:
9c:6a:6d:78:a4:f2:8d:45:e5:04:57:78:b0:29:8d:86:a9:d8:
9d:3b:c2:69:4c:2a:b5:f7:cc:3b:fb:bc:34:3a:f1:99:2f:3d:
43:01:0e:c1:88:a7:95:b9:d1:56:11:26:0d:c0:23:b3:88:6c:
cd:ef:e1:ea:85:48:cc:71:4a:22:74:1a:93:97:d0:45:ac:1a:
8a:75:4b:ae:ed:e9:1b:9d:b4:45:05:ed:c4:cd:c8:8a:8d:68:
9f:f0:8c:31:1e:c4:0f:cf:b9:3e:21:7b:db:a8:44:f7:84:28:
87:bb:28:af:1f:f4:b4:3e:32:f9:66:a4:73:97:c3:f4:0c:95:
62:4c:87:58:14:7d:ba:c8:fb:9d:67:29:00:e1:37:66:cd:ab:
c6:62:fc:08:08:ed:80:59:02:f8:3e:9f:a7:c4:45:b4:51:67:
8c:da:4f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:30:51 2025 by rpki-client