![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/9e4764-7234-4ba4-8e8a-e2754f6fb4c5/1/jvzJdu-QODrOfwtOCeTYGe0Nm14.mft
File: jvzJdu-QODrOfwtOCeTYGe0Nm14.mft (raw, json)
Hash identifier: ZXloGGSXhZq6seE3Rws6ExPDu62p2wyHbduat1itRqk=
Subject key identifier: 2D:6A:CA:21:1A:44:0B:F3:DD:97:EC:90:6D:0D:E2:93:91:8D:66:80
Authority key identifier: 8E:FC:C9:76:EF:90:38:3A:CE:7F:0B:4E:09:E4:D8:19:ED:0D:9B:5E
Certificate issuer: /CN=8efcc976ef90383ace7f0b4e09e4d819ed0d9b5e
Certificate serial: 0195116BDF4D53CB4810D721D916ED7DFDD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jvzJdu-QODrOfwtOCeTYGe0Nm14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/9e4764-7234-4ba4-8e8a-e2754f6fb4c5/1/jvzJdu-QODrOfwtOCeTYGe0Nm14.mft
Manifest number: 1140
Signing time: Mon 17 Feb 2025 01:00:37 +0000
Manifest this update: Mon 17 Feb 2025 01:00:37 +0000
Manifest next update: Tue 18 Feb 2025 01:00:37 +0000
Files and hashes: 1: iZWDIUILuFWunNVYaqJwiBg2ZXU.roa (hash: BgNy6gZxNs+Fc3c2uaucV4KzH/PC8AB8rNSrrgEVedo=)
2: jvzJdu-QODrOfwtOCeTYGe0Nm14.crl (hash: z9T5YY9PRgH1r8786dEX/81ZkkZR4ZbZrFHpCYpS75g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/9e4764-7234-4ba4-8e8a-e2754f6fb4c5/1/jvzJdu-QODrOfwtOCeTYGe0Nm14.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/9e4764-7234-4ba4-8e8a-e2754f6fb4c5/1/jvzJdu-QODrOfwtOCeTYGe0Nm14.mft
rsync://rpki.ripe.net/repository/DEFAULT/jvzJdu-QODrOfwtOCeTYGe0Nm14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6b:df:4d:53:cb:48:10:d7:21:d9:16:ed:7d:fd:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8efcc976ef90383ace7f0b4e09e4d819ed0d9b5e
Validity
Not Before: Feb 17 01:00:37 2025 GMT
Not After : Feb 18 01:00:37 2025 GMT
Subject: CN=2d6aca211a440bf3dd97ec906d0de293918d6680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b1:b1:cc:ca:86:2a:fb:21:1d:3c:8c:7d:56:
e6:ca:5d:4b:e8:73:a5:c2:4e:fd:a6:7b:31:9d:1f:
89:5d:5b:32:fc:0f:4f:3f:7c:4f:ef:8c:56:86:a5:
4d:9c:e8:9a:19:32:85:84:b4:b6:d8:cb:c1:a2:32:
68:ef:f1:f3:9b:89:9c:7c:c6:13:9b:46:20:91:e9:
62:22:e3:ec:b3:70:37:12:24:b9:ec:37:44:cb:3e:
28:ab:90:0c:01:0e:72:17:bb:cc:f9:af:29:b0:b6:
00:91:18:9e:90:be:ed:d9:03:c8:04:60:7b:d3:f1:
b9:5b:33:b6:14:a9:f6:90:14:e5:00:0c:d6:0f:07:
68:a6:a8:6b:d1:49:d9:53:c2:8c:77:09:2d:e2:a1:
13:a5:bb:d0:02:42:d9:e0:3b:ad:0e:85:a4:25:79:
81:77:be:8d:ca:86:65:ca:3a:d6:89:f9:d4:22:6c:
eb:ce:5a:f8:56:42:bd:86:15:bd:0b:ba:cc:7e:a1:
da:c0:f3:72:b8:07:82:e5:69:06:0e:61:6a:27:6d:
1b:a0:83:ad:5f:c8:fd:a0:5e:f9:c6:0f:be:e9:be:
32:dc:7f:3f:fa:2a:39:0d:6b:c4:0c:84:5f:7a:12:
78:0d:f7:59:53:a7:0f:e7:4a:fb:98:88:27:9b:33:
22:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:6A:CA:21:1A:44:0B:F3:DD:97:EC:90:6D:0D:E2:93:91:8D:66:80
X509v3 Authority Key Identifier:
keyid:8E:FC:C9:76:EF:90:38:3A:CE:7F:0B:4E:09:E4:D8:19:ED:0D:9B:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvzJdu-QODrOfwtOCeTYGe0Nm14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/9e4764-7234-4ba4-8e8a-e2754f6fb4c5/1/jvzJdu-QODrOfwtOCeTYGe0Nm14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/9e4764-7234-4ba4-8e8a-e2754f6fb4c5/1/jvzJdu-QODrOfwtOCeTYGe0Nm14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:a4:a6:6b:f7:73:c3:84:2c:a7:f7:7a:15:7b:fc:62:b5:39:
79:45:40:01:e7:bc:4b:3f:b9:ed:56:8f:67:b2:18:7a:91:7d:
67:a3:46:91:8d:f8:6f:8b:b5:bc:b3:87:9e:31:5c:6d:1e:30:
8c:94:ce:78:94:7d:72:69:c9:63:59:9a:ec:1f:91:01:8d:e3:
50:47:1e:0a:27:82:18:ba:81:97:56:6a:93:89:00:dd:34:65:
8f:d8:5d:2e:e6:b7:b8:b6:71:d6:ab:d5:6a:ba:76:4a:d2:bb:
ed:02:a7:11:11:8f:78:1c:b9:75:ca:23:7b:ca:38:07:59:1c:
07:68:13:f9:16:6d:4e:97:69:d4:76:ca:11:58:5d:91:38:43:
6d:1b:29:56:8a:44:d6:2b:20:3e:8b:46:62:0d:7c:7b:82:f3:
8a:59:7b:e6:25:e0:ba:10:87:5a:9e:82:3a:9b:8b:09:d1:36:
3f:78:eb:40:10:96:23:fc:b5:50:c6:b8:2f:67:f4:dc:fe:01:
db:14:9f:79:2b:37:88:f2:bb:e7:7d:35:bd:94:c5:f7:63:68:
4b:ca:03:6d:34:9b:e1:c2:aa:f8:fc:08:65:68:09:14:7b:c0:
76:99:13:46:43:b9:0e:0d:c5:99:12:56:cd:dc:f9:37:e3:41:
cd:99:28:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:13:11 2025 by rpki-client