![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/217bee-cab6-422f-88cc-c2664e37c327/1/WRoP7x77ru2z0o1Dnz1cz639iHM.mft
File: WRoP7x77ru2z0o1Dnz1cz639iHM.mft (raw, json)
Hash identifier: 94GLl7XHkOjGCgnOLThts3ek+PIV4LYJoHFlJ5tYMew=
Subject key identifier: 2F:96:FB:54:12:91:CF:32:94:A4:9E:20:A3:4E:C2:53:B5:EE:E8:E8
Authority key identifier: 59:1A:0F:EF:1E:FB:AE:ED:B3:D2:8D:43:9F:3D:5C:CF:AD:FD:88:73
Certificate issuer: /CN=591a0fef1efbaeedb3d28d439f3d5ccfadfd8873
Certificate serial: 0195108FAFCB7172271B080C3C26E6E0972C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WRoP7x77ru2z0o1Dnz1cz639iHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/217bee-cab6-422f-88cc-c2664e37c327/1/WRoP7x77ru2z0o1Dnz1cz639iHM.mft
Manifest number: 1457
Signing time: Sun 16 Feb 2025 21:00:06 +0000
Manifest this update: Sun 16 Feb 2025 21:00:06 +0000
Manifest next update: Mon 17 Feb 2025 21:00:06 +0000
Files and hashes: 1: LUyjz5khkwF0up_SKtv4Oh6tO7Q.roa (hash: rBnLOroG+8zcnjSq90aHGH7YJtrPhERWyt49grALMsE=)
2: WRoP7x77ru2z0o1Dnz1cz639iHM.crl (hash: /HnkVoAJ/6aZo/wpAmRmW7jiE2OZYc1K+V7O0+HlTG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/217bee-cab6-422f-88cc-c2664e37c327/1/WRoP7x77ru2z0o1Dnz1cz639iHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/217bee-cab6-422f-88cc-c2664e37c327/1/WRoP7x77ru2z0o1Dnz1cz639iHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/WRoP7x77ru2z0o1Dnz1cz639iHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 21:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:8f:af:cb:71:72:27:1b:08:0c:3c:26:e6:e0:97:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=591a0fef1efbaeedb3d28d439f3d5ccfadfd8873
Validity
Not Before: Feb 16 21:00:06 2025 GMT
Not After : Feb 17 21:00:06 2025 GMT
Subject: CN=2f96fb541291cf3294a49e20a34ec253b5eee8e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e1:c5:20:c5:cf:6e:94:78:a9:2a:4a:bf:46:
9e:02:7f:9d:76:6d:8f:10:7b:ca:66:b9:d7:ef:e9:
0f:f5:76:98:9f:38:df:2a:e4:77:02:fc:8b:e4:e8:
fb:df:51:f4:4b:c8:40:d9:f1:9a:9e:6e:c3:b4:01:
60:33:2c:ec:87:38:5a:ec:a2:8b:d5:9b:a4:e3:30:
74:95:f1:59:be:ff:a2:c9:87:51:43:4b:41:27:57:
e1:ec:de:bb:cb:d6:ff:07:34:94:57:fd:99:ac:a0:
bf:12:28:59:6b:f6:26:67:63:ad:7a:47:2f:0c:71:
6a:f0:73:f7:10:cb:64:a6:2f:4a:61:16:eb:a1:13:
9b:f0:e6:07:bf:36:3f:d4:cd:f7:59:b1:54:40:3f:
fd:6b:01:6a:f8:41:1d:36:46:4e:23:2a:0c:6e:1d:
c6:1a:12:55:6c:bf:da:d9:93:49:90:03:80:0e:5c:
8d:88:4d:03:5a:e4:36:6b:1e:de:6a:44:2d:b7:f6:
89:80:e6:cf:99:28:6a:48:52:5d:c7:4a:96:14:90:
fb:68:1a:37:b5:f2:15:fc:8b:9c:5e:7b:f9:aa:7b:
ac:f1:bc:ed:7d:17:90:7d:b5:11:4c:60:71:3c:dd:
b3:a3:04:89:0d:ad:83:c4:4c:a9:5a:a8:5b:db:c5:
d9:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:96:FB:54:12:91:CF:32:94:A4:9E:20:A3:4E:C2:53:B5:EE:E8:E8
X509v3 Authority Key Identifier:
keyid:59:1A:0F:EF:1E:FB:AE:ED:B3:D2:8D:43:9F:3D:5C:CF:AD:FD:88:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WRoP7x77ru2z0o1Dnz1cz639iHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/217bee-cab6-422f-88cc-c2664e37c327/1/WRoP7x77ru2z0o1Dnz1cz639iHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/217bee-cab6-422f-88cc-c2664e37c327/1/WRoP7x77ru2z0o1Dnz1cz639iHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:c9:89:88:fa:46:d8:a2:4f:48:ae:a4:c9:ac:f5:fb:dc:aa:
e0:66:5a:5a:b5:19:ea:f1:27:d4:3c:49:49:a2:e9:04:6e:8f:
41:62:59:a9:a7:6d:cb:b9:52:65:67:a2:be:6c:5f:32:48:7f:
a9:5b:e1:00:fd:b8:70:0f:f4:a0:9a:60:94:58:e7:e6:b7:ae:
28:45:6a:1d:f6:3c:28:8d:8a:1f:53:16:a2:ba:b1:df:1e:a7:
09:a6:4d:3a:27:1a:e8:e6:e8:07:75:00:e2:39:01:46:10:39:
5b:7e:1c:ad:04:7d:9e:2f:01:76:a6:24:d1:68:ce:30:f2:64:
09:5a:0a:43:1d:55:3e:8b:b9:b3:69:b8:84:cf:eb:be:c4:17:
6c:15:97:3f:f0:c2:4d:be:8e:70:3c:73:b8:21:d9:c3:be:83:
37:73:c2:f0:8b:48:b3:e7:0c:c9:8a:2b:4d:c1:ca:9e:3e:85:
b3:0e:2a:98:82:74:c2:2d:07:cf:b3:db:c8:0b:45:08:69:56:
83:3e:28:f5:a0:f0:c0:6a:b8:90:b7:47:ae:07:58:aa:5d:e2:
ba:f8:fd:b4:af:c3:31:e5:82:2a:b8:ad:78:0c:dd:7b:66:65:
9f:2b:86:2a:c4:25:39:78:02:24:1a:5a:1d:a2:1e:29:b2:a9:
cf:83:6c:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:36:53 2025 by rpki-client