![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.mft
File: y0-6CRkLdoSf_z0m1YB5DlT6wuM.mft (raw, json)
Hash identifier: uX2IntqPVnaSGDRNFnWtp8dJ0QKigKXRP/orHw1Ipgw=
Subject key identifier: 67:BB:0C:4E:F2:98:53:93:91:67:A9:25:8E:45:FC:81:32:33:8E:A9
Authority key identifier: CB:4F:BA:09:19:0B:76:84:9F:FF:3D:26:D5:80:79:0E:54:FA:C2:E3
Certificate issuer: /CN=cb4fba09190b76849fff3d26d580790e54fac2e3
Certificate serial: 01951134AA40D5988FD5082E2B30DA688CA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y0-6CRkLdoSf_z0m1YB5DlT6wuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.mft
Manifest number: 1456
Signing time: Mon 17 Feb 2025 00:00:18 +0000
Manifest this update: Mon 17 Feb 2025 00:00:18 +0000
Manifest next update: Tue 18 Feb 2025 00:00:18 +0000
Files and hashes: 1: A7rB6GvieHic3egdiMZfNGfq2m0.roa (hash: HS3mNdYCRI3MKIsdLKnGS/MBr6fXeWlgGEcIpC1Xugc=)
2: y0-6CRkLdoSf_z0m1YB5DlT6wuM.crl (hash: H+RZQZrzvytIhQrMMy+FmylI0HNr7RtEpOhrRYy32Qk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.mft
rsync://rpki.ripe.net/repository/DEFAULT/y0-6CRkLdoSf_z0m1YB5DlT6wuM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:aa:40:d5:98:8f:d5:08:2e:2b:30:da:68:8c:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb4fba09190b76849fff3d26d580790e54fac2e3
Validity
Not Before: Feb 17 00:00:18 2025 GMT
Not After : Feb 18 00:00:18 2025 GMT
Subject: CN=67bb0c4ef29853939167a9258e45fc8132338ea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:21:bc:ea:6d:14:01:bd:1f:48:93:08:58:fe:
c0:65:2b:5d:00:f1:a2:54:46:7e:18:7e:59:1a:d8:
01:ef:4e:b8:d9:20:e9:47:b7:f3:b2:9a:6c:bb:85:
f8:2a:34:78:7d:6b:5d:9e:f3:7f:b9:7e:8c:ef:5a:
e7:7f:35:8c:0d:ea:ae:f0:f2:46:9e:9d:2a:c3:f0:
1b:79:86:3b:f6:6e:74:92:c8:f9:fb:96:62:91:6c:
06:85:d0:c4:68:d3:6e:c0:65:24:48:64:2e:b9:3d:
73:8c:92:93:06:75:c9:31:be:f1:30:55:10:30:35:
0f:88:95:61:59:65:dd:6c:99:f8:d4:d1:00:aa:0d:
97:71:3e:79:4f:ce:7e:53:14:00:d4:30:0e:6b:4d:
05:84:ab:e8:91:05:ec:24:8c:5d:ed:ed:9e:15:00:
08:de:0f:f8:d7:03:99:1c:69:9b:ff:79:b8:19:94:
8b:c4:2b:06:07:71:6f:e8:5e:d7:c7:2e:46:11:e6:
0f:8b:d1:1f:3b:46:22:a3:88:50:d7:7e:a1:51:ca:
e7:2b:5e:ac:65:a8:c6:c9:4d:9c:cb:8e:0d:c3:43:
b6:0d:5f:af:6c:ab:27:35:02:d2:b9:98:b8:91:25:
b6:77:88:47:5f:e8:50:92:92:5a:7b:de:3f:d7:a1:
ef:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:BB:0C:4E:F2:98:53:93:91:67:A9:25:8E:45:FC:81:32:33:8E:A9
X509v3 Authority Key Identifier:
keyid:CB:4F:BA:09:19:0B:76:84:9F:FF:3D:26:D5:80:79:0E:54:FA:C2:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0-6CRkLdoSf_z0m1YB5DlT6wuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:9a:05:69:2c:26:52:17:e3:61:11:fb:6a:40:30:05:a3:28:
c8:c7:f5:94:b8:a3:66:63:e5:4e:93:33:34:a4:b5:58:fe:a6:
6e:8c:a8:14:e3:2d:7f:b9:72:f7:1b:ee:fe:96:a1:9a:8c:c8:
1a:2a:b0:ef:3e:5b:45:8a:9c:40:83:23:21:6d:17:81:fd:5e:
20:ec:c2:f6:c3:50:bb:e9:22:38:aa:4e:1f:25:29:6b:4b:07:
70:1e:ff:d4:ac:e5:8b:1b:e2:25:88:9d:e3:08:40:88:aa:b7:
c5:e3:03:04:73:ab:5b:d9:8b:df:9f:c3:67:61:62:4f:3c:e0:
96:e3:cf:f2:df:6e:b0:9a:ab:50:3f:2b:3d:d6:02:62:7a:d0:
42:37:97:57:0e:96:d2:f8:c9:47:06:89:b6:53:63:b1:30:3a:
47:64:13:ec:57:12:f7:d4:30:72:10:94:77:97:fd:5f:af:bf:
a1:1f:4c:87:fc:93:38:4c:28:57:a1:05:fc:f9:62:86:c2:77:
dc:ee:52:22:83:7c:aa:a2:54:5c:af:53:a2:52:e2:56:93:ca:
c1:66:c1:85:79:f6:9d:1a:6d:c8:07:4a:e3:1e:98:d6:84:ab:
31:9b:51:e6:a2:97:28:e8:29:8f:dd:4d:39:49:9c:29:32:48:
39:9d:08:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:28:41 2025 by rpki-client