![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/e346e4-5831-40cf-a4dc-42fb3677df77/1/OR6ZSpUBLZL7UaKMimUO2fl3N7g.mft
File: OR6ZSpUBLZL7UaKMimUO2fl3N7g.mft (raw, json)
Hash identifier: URrDlCL/e9gTiXqFOMXkyfmtu22LaU0aSokoRE8I+y4=
Subject key identifier: 19:C9:C9:E2:3A:13:88:EC:0D:82:13:5F:94:01:AF:88:C8:AF:B4:38
Authority key identifier: 39:1E:99:4A:95:01:2D:92:FB:51:A2:8C:8A:65:0E:D9:F9:77:37:B8
Certificate issuer: /CN=391e994a95012d92fb51a28c8a650ed9f97737b8
Certificate serial: 0195116BE7267DC8C30E503BAB2E32428C30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OR6ZSpUBLZL7UaKMimUO2fl3N7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/e346e4-5831-40cf-a4dc-42fb3677df77/1/OR6ZSpUBLZL7UaKMimUO2fl3N7g.mft
Manifest number: 0AD0
Signing time: Mon 17 Feb 2025 01:00:38 +0000
Manifest this update: Mon 17 Feb 2025 01:00:38 +0000
Manifest next update: Tue 18 Feb 2025 01:00:38 +0000
Files and hashes: 1: OR6ZSpUBLZL7UaKMimUO2fl3N7g.crl (hash: nIPsGNY1JI4WMrOtpHYlS+fxJsQ8LtGJ78koUw8p330=)
2: dZUPSlz29pGWYByW6oVfuTbfNRM.roa (hash: kjVkTTaEOvl+OY2K3zGyDyZOzxn/+zfixfXEwc09htQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/e346e4-5831-40cf-a4dc-42fb3677df77/1/OR6ZSpUBLZL7UaKMimUO2fl3N7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/e346e4-5831-40cf-a4dc-42fb3677df77/1/OR6ZSpUBLZL7UaKMimUO2fl3N7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/OR6ZSpUBLZL7UaKMimUO2fl3N7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6b:e7:26:7d:c8:c3:0e:50:3b:ab:2e:32:42:8c:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391e994a95012d92fb51a28c8a650ed9f97737b8
Validity
Not Before: Feb 17 01:00:38 2025 GMT
Not After : Feb 18 01:00:38 2025 GMT
Subject: CN=19c9c9e23a1388ec0d82135f9401af88c8afb438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e6:88:40:2e:e7:f3:77:c9:06:9d:6b:a6:54:
75:73:91:23:ef:0a:9d:e2:61:0f:87:fe:f0:66:f3:
8b:0c:18:25:37:fd:cc:58:48:29:9f:96:b2:ed:74:
ee:f5:4b:1e:2e:18:b4:32:3c:ca:e4:8b:20:40:ea:
5b:8b:ad:cb:d9:05:c0:00:10:47:d5:0b:ed:98:8f:
42:f0:2c:c0:52:43:f8:fa:b3:4e:fb:89:7f:28:78:
25:e1:4d:33:72:e0:06:94:71:d7:d4:dd:e5:c5:bf:
5b:75:c4:97:bd:29:de:25:d2:84:88:8d:dd:de:6e:
d1:40:52:98:0d:5a:16:da:c0:da:05:b3:ce:ea:93:
67:e0:d7:c5:0b:43:e5:dc:9b:da:ed:5f:72:a5:a3:
b8:fa:a4:8d:ba:a0:a7:83:ca:8f:ab:f1:e9:f6:c1:
3c:cc:70:da:a9:a7:14:7c:d1:d4:14:47:5c:1b:38:
13:4c:0f:0f:2c:4b:97:39:c4:6a:4b:51:7c:c6:bb:
3a:af:87:d4:9c:91:6a:fd:3b:9c:a8:d2:3b:ef:43:
45:1f:18:b8:ae:09:ee:2a:02:78:ae:af:a2:4d:f3:
56:ad:20:a1:52:88:6c:67:46:71:dc:96:6c:f0:8f:
db:80:19:04:9d:ed:59:37:42:e3:fa:67:52:0a:0a:
a4:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:C9:C9:E2:3A:13:88:EC:0D:82:13:5F:94:01:AF:88:C8:AF:B4:38
X509v3 Authority Key Identifier:
keyid:39:1E:99:4A:95:01:2D:92:FB:51:A2:8C:8A:65:0E:D9:F9:77:37:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OR6ZSpUBLZL7UaKMimUO2fl3N7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e346e4-5831-40cf-a4dc-42fb3677df77/1/OR6ZSpUBLZL7UaKMimUO2fl3N7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e346e4-5831-40cf-a4dc-42fb3677df77/1/OR6ZSpUBLZL7UaKMimUO2fl3N7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:5e:c9:d8:20:85:60:ec:93:44:30:b1:f8:dd:49:56:d2:3c:
3c:07:35:69:2a:07:a5:8f:b1:3d:9b:6d:a4:44:6e:77:83:d2:
b5:39:4e:e2:74:87:b3:ab:02:3d:61:c8:45:e9:51:38:eb:32:
a5:27:11:85:06:cb:32:a7:7d:33:c4:fc:57:0d:35:02:84:76:
1e:ad:ee:f7:c7:40:cf:e4:17:38:43:66:46:4e:56:06:52:99:
d6:b0:48:8d:25:42:21:6e:35:4a:4c:bf:10:d1:e9:57:8b:dc:
d1:0c:a3:b5:38:95:2d:c2:88:d4:dc:a8:37:ab:fc:c8:1a:89:
4e:fb:ee:33:46:a6:81:83:1c:96:75:35:d1:35:54:4c:73:8c:
c9:30:05:44:a8:10:e2:cb:f2:7c:b4:3e:36:8b:7b:16:81:64:
0a:c5:13:70:1a:30:91:88:0c:de:1e:b9:1b:d5:13:a1:f7:e3:
00:e6:60:11:9b:07:bc:5d:30:79:29:f7:49:b2:50:20:99:fa:
ab:fb:c6:89:cf:b5:2d:0b:47:e1:72:b9:87:e6:63:3e:16:1c:
b5:64:de:94:9d:38:a6:c2:2b:58:4b:58:56:cf:5e:4a:e1:6d:
4a:d0:69:71:09:da:84:6e:56:fa:0f:de:87:bf:06:3b:57:98:
2d:95:35:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:41:34 2025 by rpki-client