![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bdfd19-201a-444d-8d88-6ef4c7c7470b/1/FMUSYv6H9OKV755_h6H55J9XwwA.mft
File: FMUSYv6H9OKV755_h6H55J9XwwA.mft (raw, json)
Hash identifier: D71p2PdGlgFptcwr5kc3VIo7fQKaJdnZyRBXgM6wUlA=
Subject key identifier: F7:83:AB:D9:7A:FF:89:25:AA:C8:AB:7A:CB:52:FE:93:2F:B8:0D:E8
Authority key identifier: 14:C5:12:62:FE:87:F4:E2:95:EF:9E:7F:87:A1:F9:E4:9F:57:C3:00
Certificate issuer: /CN=14c51262fe87f4e295ef9e7f87a1f9e49f57c300
Certificate serial: 019511D9B349CF9196731FA8937DEE35F0AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FMUSYv6H9OKV755_h6H55J9XwwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/bdfd19-201a-444d-8d88-6ef4c7c7470b/1/FMUSYv6H9OKV755_h6H55J9XwwA.mft
Manifest number: 1457
Signing time: Mon 17 Feb 2025 03:00:34 +0000
Manifest this update: Mon 17 Feb 2025 03:00:34 +0000
Manifest next update: Tue 18 Feb 2025 03:00:34 +0000
Files and hashes: 1: FMUSYv6H9OKV755_h6H55J9XwwA.crl (hash: s4oHLEyI3a8/Sck8GoYA8+QizBsXauTTbtUSM4yP3yo=)
2: g_XzhYK_F03VjR9bvWlU1jF-Z50.roa (hash: ncibWC7f4F7EAqAuohBbP1sHDmPsoPuD5J5qdDnZdOA=)
3: wMG4w9uOn61cljP-qNjeEZGUwwk.roa (hash: HqXX/Ra1vF/x/d826M43hJ5A8k+zB4kBn5HcqZ0geiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/bdfd19-201a-444d-8d88-6ef4c7c7470b/1/FMUSYv6H9OKV755_h6H55J9XwwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/bdfd19-201a-444d-8d88-6ef4c7c7470b/1/FMUSYv6H9OKV755_h6H55J9XwwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/FMUSYv6H9OKV755_h6H55J9XwwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:b3:49:cf:91:96:73:1f:a8:93:7d:ee:35:f0:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14c51262fe87f4e295ef9e7f87a1f9e49f57c300
Validity
Not Before: Feb 17 03:00:34 2025 GMT
Not After : Feb 18 03:00:34 2025 GMT
Subject: CN=f783abd97aff8925aac8ab7acb52fe932fb80de8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:22:39:a7:da:9f:92:23:40:0a:63:e0:e3:1b:
6d:5a:3f:01:36:dc:0b:34:41:e6:4e:23:1c:09:39:
88:47:45:18:9c:d3:c0:36:75:d2:a8:9f:54:c8:0d:
1e:94:d9:49:68:96:83:b2:ac:9f:d0:c7:6d:16:fe:
67:5c:3a:4c:79:e2:5f:18:27:d1:82:6e:e1:2b:db:
c1:56:cb:02:ec:13:95:4d:f3:2f:34:eb:23:f4:85:
c4:84:2e:db:59:52:e5:f3:4e:8a:88:c3:d0:53:05:
46:e9:a1:75:67:35:85:b4:32:4f:30:e6:7d:2f:aa:
ac:27:19:82:0f:cc:75:2b:43:56:b1:39:90:2f:d1:
b4:a1:e7:6b:c9:e0:d1:4d:c2:49:cf:b9:bf:1f:ca:
c3:bb:c3:db:02:f3:6d:fa:09:2a:9a:f8:32:09:86:
6b:7a:be:dc:51:54:86:c8:c9:26:96:22:ba:2b:df:
b0:2b:67:e1:ce:8e:f5:94:72:87:6f:ff:61:bd:c4:
77:32:70:cf:e8:74:08:8a:48:a7:57:fc:46:12:95:
bc:f5:25:46:46:bf:b8:18:09:6c:53:b3:76:a6:01:
6b:19:0e:ef:51:6a:96:ee:68:71:ee:f1:d0:25:83:
bb:ad:6f:91:6b:50:dd:3d:b9:48:49:1b:90:a0:9f:
fb:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:83:AB:D9:7A:FF:89:25:AA:C8:AB:7A:CB:52:FE:93:2F:B8:0D:E8
X509v3 Authority Key Identifier:
keyid:14:C5:12:62:FE:87:F4:E2:95:EF:9E:7F:87:A1:F9:E4:9F:57:C3:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FMUSYv6H9OKV755_h6H55J9XwwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bdfd19-201a-444d-8d88-6ef4c7c7470b/1/FMUSYv6H9OKV755_h6H55J9XwwA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bdfd19-201a-444d-8d88-6ef4c7c7470b/1/FMUSYv6H9OKV755_h6H55J9XwwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:01:34:51:16:c7:99:23:81:54:75:fa:7c:ad:1b:eb:51:ec:
d9:1c:f5:7a:c7:cd:ed:6d:2e:29:fb:2f:99:96:e2:d4:01:ab:
f0:35:9b:e2:ab:e7:83:51:5e:77:09:38:ad:72:35:74:51:d0:
45:76:9c:cf:03:27:57:12:fc:b7:aa:f2:3b:8a:6c:7a:9f:10:
e8:57:0e:bf:3e:24:5f:d3:72:b6:53:67:68:4a:a7:c2:0c:3f:
b7:de:e1:e8:ab:28:d2:c7:6d:fd:bc:40:9e:26:7d:33:5f:1e:
82:1f:19:3f:04:2f:26:87:cd:6e:d7:1d:ef:8e:f4:f3:a7:ce:
eb:82:82:c9:2d:a3:0e:88:64:70:06:2e:85:68:30:c1:6e:50:
29:3d:00:94:03:f0:a9:9f:2d:87:5c:f6:2c:5a:72:ba:a0:38:
ef:f7:ed:c9:f9:50:59:74:7f:e9:8b:65:1a:fe:fe:f0:d1:ea:
79:f9:b9:fc:46:d9:02:ad:16:65:59:e5:65:66:7d:e8:df:30:
4f:17:7e:6a:a9:b9:b1:52:a3:be:8a:95:2a:e6:bd:b6:65:da:
13:4e:57:1d:33:f1:21:05:95:9c:96:ab:f9:96:55:7b:cf:49:
e7:8d:a1:db:3d:3a:61:85:17:78:83:96:5f:2d:6b:69:e2:a4:
b8:45:bc:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:14:13 2025 by rpki-client