![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/45a04c-cb0d-4c0c-8bf1-48f39fde0eea/1/6YD7lTCjb_e3Qw1Q1EuPttbcqTc.mft
File: 6YD7lTCjb_e3Qw1Q1EuPttbcqTc.mft (raw, json)
Hash identifier: 5Y+nHHfHyBRYnAKExXVOFGLNNO24PzuLw1GUKCICma8=
Subject key identifier: F1:D5:37:71:23:11:D8:9F:8D:EA:FD:BA:E2:F5:82:B4:1C:F4:48:D0
Authority key identifier: E9:80:FB:95:30:A3:6F:F7:B7:43:0D:50:D4:4B:8F:B6:D6:DC:A9:37
Certificate issuer: /CN=e980fb9530a36ff7b7430d50d44b8fb6d6dca937
Certificate serial: 01951210D69AE469645392E65A21DA574DD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6YD7lTCjb_e3Qw1Q1EuPttbcqTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/45a04c-cb0d-4c0c-8bf1-48f39fde0eea/1/6YD7lTCjb_e3Qw1Q1EuPttbcqTc.mft
Manifest number: 1456
Signing time: Mon 17 Feb 2025 04:00:48 +0000
Manifest this update: Mon 17 Feb 2025 04:00:48 +0000
Manifest next update: Tue 18 Feb 2025 04:00:48 +0000
Files and hashes: 1: 6YD7lTCjb_e3Qw1Q1EuPttbcqTc.crl (hash: YgyEkLUj5OK9PdndpGNivnmON/XhhGpzlUIVR9INUXY=)
2: hOUxeyZ4GUGm-ViSGta_EVCSneY.roa (hash: qqJoiI/uI9+nuUNJ0WHcG5fxVsdVi3S2HfiMZR4B1Xg=)
3: vhuqt87dQlwpLm6mImrsEtoMnS0.roa (hash: OYcjE2mSIdir4/5GLlaTPE0qszgr/jJDU6iPw1A8rm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/45a04c-cb0d-4c0c-8bf1-48f39fde0eea/1/6YD7lTCjb_e3Qw1Q1EuPttbcqTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/45a04c-cb0d-4c0c-8bf1-48f39fde0eea/1/6YD7lTCjb_e3Qw1Q1EuPttbcqTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6YD7lTCjb_e3Qw1Q1EuPttbcqTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:d6:9a:e4:69:64:53:92:e6:5a:21:da:57:4d:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e980fb9530a36ff7b7430d50d44b8fb6d6dca937
Validity
Not Before: Feb 17 04:00:48 2025 GMT
Not After : Feb 18 04:00:48 2025 GMT
Subject: CN=f1d537712311d89f8deafdbae2f582b41cf448d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6f:85:ae:17:d1:35:6a:e4:4a:32:0e:d4:18:
28:f2:dc:fb:35:ee:83:90:de:27:85:b6:6b:eb:7d:
92:9e:a2:df:af:81:2f:61:6a:0b:c4:37:cc:d6:49:
06:68:92:e4:86:71:21:04:e6:b3:02:a9:1c:57:0c:
aa:24:85:70:db:b9:ed:c1:2f:4f:43:06:5f:c1:1d:
ee:f9:5a:37:44:b6:90:83:b0:ae:82:0d:73:55:d8:
64:ca:37:68:31:ce:6b:60:68:85:5e:cb:dd:86:c5:
d7:5d:ee:de:a4:16:d7:12:e6:19:21:06:5c:29:2d:
8a:ac:be:a2:1d:cc:20:af:dd:da:59:d3:ef:f4:37:
c0:61:b3:8a:a9:b7:e3:f4:37:95:b1:7e:b3:6c:76:
73:e9:d4:ef:e0:19:06:62:85:f5:d1:05:90:25:d5:
8b:c1:9f:36:88:dc:7a:14:36:09:54:a8:7a:61:fe:
de:70:44:96:a1:c9:f0:1c:8c:ed:56:45:f1:37:6a:
4d:7d:6b:c1:51:cd:98:38:e6:2a:59:8b:f5:83:ea:
f0:4d:91:05:cf:72:91:68:a6:a5:b9:ff:59:3e:24:
fe:fa:92:16:5c:3d:13:7e:2f:e4:07:b2:a3:2f:72:
84:9f:08:23:7e:81:e6:da:d0:30:8e:11:f7:5f:c3:
20:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:D5:37:71:23:11:D8:9F:8D:EA:FD:BA:E2:F5:82:B4:1C:F4:48:D0
X509v3 Authority Key Identifier:
keyid:E9:80:FB:95:30:A3:6F:F7:B7:43:0D:50:D4:4B:8F:B6:D6:DC:A9:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6YD7lTCjb_e3Qw1Q1EuPttbcqTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/45a04c-cb0d-4c0c-8bf1-48f39fde0eea/1/6YD7lTCjb_e3Qw1Q1EuPttbcqTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/45a04c-cb0d-4c0c-8bf1-48f39fde0eea/1/6YD7lTCjb_e3Qw1Q1EuPttbcqTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:ba:8b:95:5f:cd:79:5e:51:ea:91:ff:ab:4b:b8:9c:fc:70:
5f:e7:58:e4:fb:1f:56:80:8d:72:5c:95:a7:d3:62:11:c3:c0:
14:4b:42:5c:58:ce:30:09:c2:d3:46:04:a4:fc:55:ce:fe:e9:
c8:4c:26:b4:76:57:4d:cc:41:cf:77:ba:1b:5a:d7:ae:10:f0:
ef:ba:bc:1a:83:3d:8a:04:f4:cf:81:83:0b:6c:54:54:f1:f6:
7c:64:e4:4c:8e:55:e0:00:38:11:d8:65:2a:ca:1a:11:cc:60:
45:75:c1:09:6b:96:e8:84:4b:5d:ae:ad:80:95:55:cc:9d:02:
fa:1f:b2:07:a8:86:85:fb:2d:a6:02:3c:6a:87:de:fc:43:a6:
40:05:ba:33:74:80:d0:85:70:6b:1f:ff:8e:15:a7:b0:3e:a9:
07:ea:a3:82:7c:55:07:f1:57:ca:6c:6f:d4:ea:64:ff:0a:5e:
85:6b:94:dc:2a:d5:2d:32:55:f8:d2:dc:20:86:8d:5e:c3:94:
15:2b:4f:0a:90:fc:18:e3:fc:07:4c:c6:ac:b0:28:f7:67:a9:
83:f1:14:01:6a:15:1e:9c:07:27:a6:8d:48:d2:0a:5b:7f:ec:
f6:c4:38:11:d6:47:dc:05:66:ea:dc:d5:5f:12:2c:8f:96:00:
79:39:d9:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:21:19 2025 by rpki-client