![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/cbe695-d2d9-4d6f-87e2-a1cce6f80ca3/1/UTvf7FWwSLDS8DtDv2bj5n6GVT8.mft
File: UTvf7FWwSLDS8DtDv2bj5n6GVT8.mft (raw, json)
Hash identifier: 1IlgHbX/mQnQ4NFncPVWkZlbofbQTP7DJ5ai7pAQCN0=
Subject key identifier: 03:E9:F0:60:D9:9F:A6:FB:6D:03:D0:C1:85:A8:0C:C7:8D:8C:84:0D
Authority key identifier: 51:3B:DF:EC:55:B0:48:B0:D2:F0:3B:43:BF:66:E3:E6:7E:86:55:3F
Certificate issuer: /CN=513bdfec55b048b0d2f03b43bf66e3e67e86553f
Certificate serial: 019510FDB6F98DF1769E66A06ECF4DF103B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UTvf7FWwSLDS8DtDv2bj5n6GVT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/cbe695-d2d9-4d6f-87e2-a1cce6f80ca3/1/UTvf7FWwSLDS8DtDv2bj5n6GVT8.mft
Manifest number: 11F8
Signing time: Sun 16 Feb 2025 23:00:17 +0000
Manifest this update: Sun 16 Feb 2025 23:00:17 +0000
Manifest next update: Mon 17 Feb 2025 23:00:17 +0000
Files and hashes: 1: UTvf7FWwSLDS8DtDv2bj5n6GVT8.crl (hash: WNOiZG4MLXLJJNShndCGNJpQFq9YG+RAf1Zc6B/sao8=)
2: _a7tAKf339v0StwY-99zGhTqG38.roa (hash: JYQNh/oqUzKN3SGNytd9bNClD0WxhF6t77T6aTG1SXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/cbe695-d2d9-4d6f-87e2-a1cce6f80ca3/1/UTvf7FWwSLDS8DtDv2bj5n6GVT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/cbe695-d2d9-4d6f-87e2-a1cce6f80ca3/1/UTvf7FWwSLDS8DtDv2bj5n6GVT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UTvf7FWwSLDS8DtDv2bj5n6GVT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fd:b6:f9:8d:f1:76:9e:66:a0:6e:cf:4d:f1:03:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=513bdfec55b048b0d2f03b43bf66e3e67e86553f
Validity
Not Before: Feb 16 23:00:17 2025 GMT
Not After : Feb 17 23:00:17 2025 GMT
Subject: CN=03e9f060d99fa6fb6d03d0c185a80cc78d8c840d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8a:6e:23:c0:5f:4f:53:0d:04:0c:97:98:28:
a4:2d:05:c3:40:1e:0d:cb:cd:35:a0:61:59:1c:be:
98:8b:18:46:a0:3e:00:4b:ed:04:5f:48:36:d3:66:
b5:8e:5c:a3:c5:77:19:3e:f8:6f:5e:ec:e0:f8:01:
b2:f2:77:86:70:75:5b:df:70:36:46:d9:68:cc:4d:
8a:8a:f1:73:03:62:3b:9d:bc:7b:49:70:3d:9a:be:
ad:39:7a:46:7e:f3:8a:c3:e5:f2:e2:3d:1c:37:09:
46:5e:97:13:d5:e0:3d:83:00:18:59:df:e5:cb:f6:
29:a1:9a:5c:fc:b1:09:37:ce:ca:ac:f8:68:89:0d:
b5:49:03:55:ff:f0:cd:59:0c:ae:c2:ae:30:f5:32:
23:28:02:91:a4:63:42:e4:b1:b5:57:92:54:f7:bf:
96:43:4f:88:33:bc:3f:35:f4:4f:87:a9:d2:c7:57:
8e:cc:ee:de:af:fd:cf:3e:39:f4:77:75:03:0a:50:
a4:6f:50:b1:a0:c5:4b:21:4d:8c:7d:e8:9e:2c:de:
d3:8e:d1:2e:a1:d0:7b:cf:1a:3f:1c:26:75:30:1e:
dc:08:d4:3e:61:24:b8:6c:42:ed:a9:4f:53:93:6d:
51:45:1f:05:94:da:2d:09:54:68:4b:19:2e:9e:69:
da:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:E9:F0:60:D9:9F:A6:FB:6D:03:D0:C1:85:A8:0C:C7:8D:8C:84:0D
X509v3 Authority Key Identifier:
keyid:51:3B:DF:EC:55:B0:48:B0:D2:F0:3B:43:BF:66:E3:E6:7E:86:55:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UTvf7FWwSLDS8DtDv2bj5n6GVT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/cbe695-d2d9-4d6f-87e2-a1cce6f80ca3/1/UTvf7FWwSLDS8DtDv2bj5n6GVT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/cbe695-d2d9-4d6f-87e2-a1cce6f80ca3/1/UTvf7FWwSLDS8DtDv2bj5n6GVT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:d9:0d:5a:1c:59:8d:30:86:87:28:aa:45:eb:52:3f:47:24:
78:0f:5e:b1:b8:c1:03:17:ad:3a:f3:a4:45:4c:77:86:b1:16:
ce:22:45:44:0b:13:14:1e:10:3c:27:25:dc:53:23:8c:ff:29:
72:29:40:54:21:6e:1a:66:6d:c5:a5:1b:39:4d:77:b5:c7:be:
90:6e:a0:ac:99:19:5a:c1:e5:69:cc:a2:80:e0:cf:9a:da:59:
53:28:9b:43:74:0b:20:cb:36:c7:61:ba:18:e3:b9:1b:a9:08:
dd:a0:49:ec:6b:8d:af:97:05:81:8f:c7:62:76:27:7b:e3:a4:
c9:8b:17:dc:ee:d8:b1:41:73:56:57:c4:fa:4a:1e:f5:b1:eb:
a4:b3:c8:45:77:d1:6d:18:29:8f:5f:c8:4d:fb:c7:cf:30:58:
36:6e:20:a0:58:65:ac:2a:9e:50:a1:0e:73:a6:a5:0f:b0:a0:
a9:78:23:ec:a8:fb:85:65:7d:84:c8:65:cd:6c:41:28:e2:66:
17:7f:7b:54:3c:ba:40:e6:b4:ec:b2:22:8d:aa:79:c5:c8:a0:
5f:57:d2:d7:aa:ff:d0:6d:b4:f4:90:a0:09:52:a5:55:2d:62:
cb:95:08:04:2e:9d:9f:ca:02:5c:b5:66:bc:ab:cb:73:99:9a:
e0:5e:0d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:15:18 2025 by rpki-client