![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.mft
File: 58yGJhOL8enLP9H-wmxoxKY0CWs.mft (raw, json)
Hash identifier: OBZspD1DUodCjOhD/LlIVcKyRGKHv9HpBn8G2sPysLI=
Subject key identifier: 03:AF:4B:0E:C6:5B:5E:71:6C:13:BB:12:74:18:EE:3A:94:F2:98:4D
Authority key identifier: E7:CC:86:26:13:8B:F1:E9:CB:3F:D1:FE:C2:6C:68:C4:A6:34:09:6B
Certificate issuer: /CN=e7cc8626138bf1e9cb3fd1fec26c68c4a634096b
Certificate serial: 019511346C160CCD4D21ED9F2D9194587846
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/58yGJhOL8enLP9H-wmxoxKY0CWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.mft
Manifest number: 0798
Signing time: Mon 17 Feb 2025 00:00:02 +0000
Manifest this update: Mon 17 Feb 2025 00:00:02 +0000
Manifest next update: Tue 18 Feb 2025 00:00:02 +0000
Files and hashes: 1: 58yGJhOL8enLP9H-wmxoxKY0CWs.crl (hash: 4sWIWqyDbcUFespGxbLBXVelzIsl9/Mas76Ok/bgy3A=)
2: rj-L1Ht9KU4SpqytVvSZ8FykJs0.roa (hash: o5/pUFEbXRLCOB5XslmeCnU9+6JRYi7PIpvUyWlOL2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/58yGJhOL8enLP9H-wmxoxKY0CWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:6c:16:0c:cd:4d:21:ed:9f:2d:91:94:58:78:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cc8626138bf1e9cb3fd1fec26c68c4a634096b
Validity
Not Before: Feb 17 00:00:02 2025 GMT
Not After : Feb 18 00:00:02 2025 GMT
Subject: CN=03af4b0ec65b5e716c13bb127418ee3a94f2984d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8e:ad:b4:f4:36:1f:ac:4f:10:e6:99:88:16:
0f:75:87:c8:ad:98:2a:eb:cd:e1:18:12:00:1c:07:
91:6f:9d:8d:c8:d7:4e:d2:e0:87:95:4c:9b:3b:50:
a7:c8:c4:8b:18:85:1d:73:bf:ad:71:30:45:c1:c9:
95:b5:b1:02:a1:3e:30:2c:35:cc:97:32:41:b8:99:
69:0f:fb:53:ff:fc:b7:03:70:24:21:1f:52:7e:18:
7f:34:7d:71:d5:ee:ae:12:13:e8:59:10:bb:f9:6c:
cb:6e:2e:d3:da:9a:b9:bd:62:d1:b9:dd:3f:00:8b:
6a:b2:96:1c:8f:31:c7:72:e8:a3:d2:50:2d:a4:9d:
3c:97:15:88:a2:ba:bf:77:2d:cb:e7:76:5c:cc:e5:
d3:2f:c3:57:b4:96:58:5f:26:b2:bc:99:47:b7:77:
49:13:aa:fb:a3:1b:c2:d0:17:5f:1a:62:d1:42:27:
1d:07:76:6b:df:f0:f6:4c:75:71:3a:c5:c3:e2:bc:
e7:56:a8:00:af:54:fa:52:ce:45:40:4d:17:a3:f8:
0f:37:c8:6d:b0:56:54:c0:b1:fa:57:8b:00:49:02:
57:9d:b3:33:06:c7:45:df:0c:80:2d:18:fe:d4:b4:
bf:c6:00:93:d8:e8:25:97:47:ab:c3:51:80:ec:dd:
ff:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:AF:4B:0E:C6:5B:5E:71:6C:13:BB:12:74:18:EE:3A:94:F2:98:4D
X509v3 Authority Key Identifier:
keyid:E7:CC:86:26:13:8B:F1:E9:CB:3F:D1:FE:C2:6C:68:C4:A6:34:09:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/58yGJhOL8enLP9H-wmxoxKY0CWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:5c:36:7f:17:d7:05:e6:c2:b5:c5:4d:66:ee:3e:db:f7:72:
35:87:8c:99:9a:b2:cb:cb:5c:a3:93:41:29:87:bb:c0:f7:4e:
2f:7d:43:f4:00:a5:04:7d:30:4d:35:0f:b1:8c:1c:56:a0:1b:
37:4c:4e:89:c5:e2:1a:a0:e1:39:3d:71:15:a2:0b:e0:b8:60:
06:b5:0e:9c:e4:b8:04:73:72:0e:3c:92:80:e9:d6:96:57:27:
b8:62:55:6d:d3:15:7b:8a:ff:6e:f5:41:cf:97:34:b8:75:10:
8d:e4:69:40:f6:55:aa:1c:69:7f:d6:89:28:d3:5d:24:7e:11:
dd:7a:4c:17:9a:e8:72:1e:6d:f0:a7:48:0f:43:c1:e3:b7:c6:
da:06:b0:de:8e:20:f7:a3:82:8f:ec:3c:1e:8b:44:4f:ab:45:
dd:f5:92:85:f1:0e:ac:53:c3:f8:53:7d:cc:70:7e:a3:3e:e9:
3b:ac:aa:ac:bb:67:12:99:ce:6e:e6:0d:6d:21:54:98:fa:de:
0c:64:a3:21:f0:ff:ab:f8:19:de:01:bb:af:92:08:99:b4:b2:
f6:ac:00:0c:75:14:d9:dd:ff:e9:4f:3f:b9:01:67:7d:55:38:
80:42:17:df:de:0e:ae:57:b1:ef:d5:63:b0:44:fa:cb:dd:6a:
72:84:e7:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:12:25 2025 by rpki-client