![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.mft
File: bWjTPT2hTTu8_PwuSS3BZzhJqmw.mft (raw, json)
Hash identifier: 9h3pDq6imHpuJQUcu9b9ZbnnKQe2xHdmlZQRZgnYckU=
Subject key identifier: B5:80:BE:21:FA:17:7C:92:08:F9:F6:42:77:4D:01:48:4E:F6:2C:40
Authority key identifier: 6D:68:D3:3D:3D:A1:4D:3B:BC:FC:FC:2E:49:2D:C1:67:38:49:AA:6C
Certificate issuer: /CN=6d68d33d3da14d3bbcfcfc2e492dc1673849aa6c
Certificate serial: 0195116C1FEDB18EFB2EFB6114E3FECBA6B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWjTPT2hTTu8_PwuSS3BZzhJqmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.mft
Manifest number: 0863
Signing time: Mon 17 Feb 2025 01:00:53 +0000
Manifest this update: Mon 17 Feb 2025 01:00:53 +0000
Manifest next update: Tue 18 Feb 2025 01:00:53 +0000
Files and hashes: 1: bWjTPT2hTTu8_PwuSS3BZzhJqmw.crl (hash: D5Vd+Svzgh+jM1wYSaGntTerfJLrLT3NQFKXJNf48sY=)
2: kYlX8uk50adCvLD80f5Fzepy0uA.roa (hash: ha3QcBHkgMvicsrTAgTGPAD+hk2VZnwH2+hSQHLSUdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bWjTPT2hTTu8_PwuSS3BZzhJqmw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6c:1f:ed:b1:8e:fb:2e:fb:61:14:e3:fe:cb:a6:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d68d33d3da14d3bbcfcfc2e492dc1673849aa6c
Validity
Not Before: Feb 17 01:00:53 2025 GMT
Not After : Feb 18 01:00:53 2025 GMT
Subject: CN=b580be21fa177c9208f9f642774d01484ef62c40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f0:15:ef:6e:eb:0b:b9:54:c1:32:69:d7:cc:
56:c9:ef:5e:3c:54:70:65:47:eb:06:a3:50:46:1a:
48:7d:cf:82:03:1d:7d:60:fe:f1:60:5a:0c:d6:d8:
1f:eb:20:5d:a0:84:a3:f6:a6:cb:7b:b1:ae:e7:ea:
4d:55:10:57:a8:b0:28:93:f7:4c:e2:c5:ed:3e:96:
48:2e:d9:72:7e:79:c1:c6:3e:45:14:36:74:04:a9:
47:ec:a9:4e:d8:a4:ac:a9:7e:38:73:03:02:28:c4:
9e:7b:be:5f:4d:ad:4b:27:4e:8f:9b:ab:c4:53:62:
12:ef:86:c5:e0:59:f2:0d:0b:23:1d:f0:a8:02:08:
80:6b:5e:d5:fd:41:dd:0e:98:5a:7b:74:f8:fc:e4:
72:30:1f:82:e4:ea:6a:74:d8:3c:cc:52:2c:0d:28:
ae:77:fa:86:2f:7c:05:f7:96:8c:01:e6:1a:63:c1:
c5:7e:2c:ca:f2:6d:a7:41:b6:20:5f:26:c7:c8:ee:
22:6f:c9:bf:aa:af:46:9a:d8:e6:4b:a7:f0:a4:29:
3c:87:8f:02:81:62:c2:95:e8:e4:8e:6e:2e:93:4f:
33:4f:a5:8f:4a:9c:b3:81:22:ba:3a:e1:ae:08:3d:
8a:97:c5:a6:89:55:bf:ff:54:9e:79:cc:f1:9c:d9:
56:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:80:BE:21:FA:17:7C:92:08:F9:F6:42:77:4D:01:48:4E:F6:2C:40
X509v3 Authority Key Identifier:
keyid:6D:68:D3:3D:3D:A1:4D:3B:BC:FC:FC:2E:49:2D:C1:67:38:49:AA:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWjTPT2hTTu8_PwuSS3BZzhJqmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:e1:e5:f1:42:2c:0e:1e:6b:6b:2e:63:f8:77:c6:fa:2f:0c:
86:07:c4:ce:eb:e5:2e:ec:11:da:7e:2b:b7:1f:de:a2:fb:2e:
fe:f5:a4:64:b7:2a:e6:c6:a6:fe:ca:95:64:62:bf:f8:59:c6:
47:52:9b:ac:ad:14:12:83:f9:00:dc:7f:a4:38:c5:2d:ba:a7:
77:3a:6b:1f:34:a8:b0:0a:ca:80:6a:24:4a:e1:4e:bc:fa:44:
59:12:ee:a5:0f:30:8d:ce:19:42:7f:61:5b:f5:27:95:df:33:
e7:db:9c:36:c5:13:42:77:9d:7c:56:63:ff:9e:65:55:a6:a6:
11:e2:ae:00:64:fb:91:f1:3d:0d:af:eb:83:9f:ff:ba:68:13:
f0:cc:70:5c:de:46:1a:5b:3e:7f:7d:bc:28:79:3f:52:5a:35:
21:39:f7:79:34:00:8b:30:1a:04:31:ae:a0:7d:13:5d:a1:db:
e1:dd:52:8c:4e:48:dd:7e:d7:7b:53:b8:88:b1:b7:ad:f0:ac:
dd:82:26:5f:4d:1a:66:ef:bb:47:89:87:78:2f:8c:2a:7f:11:
1c:eb:dc:8f:29:d1:4a:1f:64:d9:19:e6:83:bf:55:1c:b6:18:
b2:a7:2a:48:1e:ef:76:5c:96:09:7f:0f:52:6a:f7:a9:3b:ff:
56:77:08:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:16:24 2025 by rpki-client