![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2901ce-67e7-44f5-99ea-2373a1ba6d0b/1/wGLmqllGb-VhqTq81NzfPepNwmc.mft
File: wGLmqllGb-VhqTq81NzfPepNwmc.mft (raw, json)
Hash identifier: GucsEPsvMqbLt2PYqpjMUooAmAQLBoay96CSG8m6otQ=
Subject key identifier: 63:24:C1:13:A9:31:CA:0A:EA:3E:26:67:DC:29:B9:D5:2C:5E:D0:36
Authority key identifier: C0:62:E6:AA:59:46:6F:E5:61:A9:3A:BC:D4:DC:DF:3D:EA:4D:C2:67
Certificate issuer: /CN=c062e6aa59466fe561a93abcd4dcdf3dea4dc267
Certificate serial: 019511A27795DA99DF8DAB1537F96C7FA67C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wGLmqllGb-VhqTq81NzfPepNwmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2901ce-67e7-44f5-99ea-2373a1ba6d0b/1/wGLmqllGb-VhqTq81NzfPepNwmc.mft
Manifest number: 0336
Signing time: Mon 17 Feb 2025 02:00:14 +0000
Manifest this update: Mon 17 Feb 2025 02:00:14 +0000
Manifest next update: Tue 18 Feb 2025 02:00:14 +0000
Files and hashes: 1: wGLmqllGb-VhqTq81NzfPepNwmc.crl (hash: GXkpJBdvaWDlUonX1IwNDP+oFPS8RPuhDK2Ebhcz38k=)
2: yDU1rEJ62ylcENkxxq9-gc-Am2g.roa (hash: 7IZ7rxbnUahaLcCnP9skdbmiM7UlbVpGLatma5hP9yw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2901ce-67e7-44f5-99ea-2373a1ba6d0b/1/wGLmqllGb-VhqTq81NzfPepNwmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/2901ce-67e7-44f5-99ea-2373a1ba6d0b/1/wGLmqllGb-VhqTq81NzfPepNwmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wGLmqllGb-VhqTq81NzfPepNwmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:77:95:da:99:df:8d:ab:15:37:f9:6c:7f:a6:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c062e6aa59466fe561a93abcd4dcdf3dea4dc267
Validity
Not Before: Feb 17 02:00:14 2025 GMT
Not After : Feb 18 02:00:14 2025 GMT
Subject: CN=6324c113a931ca0aea3e2667dc29b9d52c5ed036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:df:b7:d7:34:29:74:0d:cf:62:42:69:66:51:
ce:dc:bd:46:82:d1:47:9b:58:bd:06:0b:0a:d4:6a:
d6:db:db:06:0e:60:6c:74:58:19:57:5d:20:fe:a9:
f3:5c:bc:b6:a3:93:ea:4c:ca:18:6c:ab:2c:47:73:
7d:b5:67:18:af:52:87:fd:3a:c5:bf:db:6a:9a:e1:
84:c2:60:af:f9:3f:64:a5:9f:bf:88:79:96:13:c4:
14:55:4e:80:39:ac:b9:63:b0:d3:19:a7:b9:1f:7a:
ef:3b:31:55:55:f7:cf:b6:dc:16:8c:0b:aa:bd:8b:
79:79:6e:99:fb:1d:10:1b:02:9c:cc:b1:fe:10:05:
23:c2:bb:f6:04:20:6b:cd:6a:7e:9f:62:eb:7e:d0:
b2:78:09:25:a6:8b:0d:8c:ef:10:aa:7c:df:ed:f0:
f3:b9:28:34:a2:06:f8:3a:5c:83:59:89:28:b5:4f:
35:c1:e0:5a:03:da:e3:b6:03:6f:93:ac:62:24:b1:
dc:6a:5f:e7:cc:ec:a0:25:7b:8c:74:cc:f9:04:bf:
9e:3e:45:18:26:9d:fd:c9:a3:d8:99:e1:c9:ee:90:
41:9b:b6:df:b8:c8:61:9a:12:96:dc:f6:4d:58:eb:
4d:90:70:b1:7d:ff:ec:9f:a0:56:87:7b:61:04:91:
3b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:24:C1:13:A9:31:CA:0A:EA:3E:26:67:DC:29:B9:D5:2C:5E:D0:36
X509v3 Authority Key Identifier:
keyid:C0:62:E6:AA:59:46:6F:E5:61:A9:3A:BC:D4:DC:DF:3D:EA:4D:C2:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wGLmqllGb-VhqTq81NzfPepNwmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2901ce-67e7-44f5-99ea-2373a1ba6d0b/1/wGLmqllGb-VhqTq81NzfPepNwmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2901ce-67e7-44f5-99ea-2373a1ba6d0b/1/wGLmqllGb-VhqTq81NzfPepNwmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:fe:51:e6:a0:b2:8d:4e:34:4c:ab:1f:dc:61:02:25:72:6a:
6b:04:1a:c8:d1:4c:2b:71:cb:75:4b:b1:e3:09:07:73:7e:5d:
d6:6f:7a:55:19:ba:74:c4:75:4b:fa:51:98:d0:2e:0f:fa:b9:
37:b6:71:70:e8:52:9a:54:fe:ed:01:57:20:38:16:b7:8f:88:
af:43:2d:d7:5e:5b:05:02:d6:70:e2:44:c6:95:24:35:5d:29:
e4:cd:5f:b6:54:18:d6:9d:79:ca:ba:3b:f0:8a:f7:05:91:eb:
5a:5c:51:cf:e8:ff:0f:30:c1:5d:c7:ea:14:68:08:1a:83:3e:
20:51:26:5f:50:67:97:33:07:3a:3c:59:7a:ed:ec:40:06:84:
52:c1:60:7b:a3:50:83:07:43:c3:0a:1d:31:8f:d9:d4:63:f7:
3b:3c:82:2b:15:80:6d:b9:2c:9a:0a:4d:bd:af:89:fd:8c:02:
58:f7:45:e0:dc:1b:9f:c4:55:9b:9e:7d:1e:39:b1:c6:26:b0:
59:0c:cb:08:90:42:73:d8:60:1e:a9:78:1e:96:df:b3:35:f6:
08:87:f9:09:54:4b:6a:85:e0:ec:99:d0:3c:f6:56:27:df:4e:
0d:5f:d7:05:7c:66:bb:cc:2f:9f:11:4e:1c:04:36:73:b0:6a:
2d:da:4b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:28:54 2025 by rpki-client