![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/9668b6-3073-4c7b-a15d-4a9cce60bdb8/1/x5d6en0rE11ac3kcp889mtpYj2s.mft
File: x5d6en0rE11ac3kcp889mtpYj2s.mft (raw, json)
Hash identifier: XrAXnfjSV5HayWcaLQTVAZs15glLX4nn7BsRsO1ZhKk=
Subject key identifier: 11:1F:DF:A1:49:D4:D5:F4:1C:D8:C7:70:E2:E7:72:9A:1D:AA:7C:59
Authority key identifier: C7:97:7A:7A:7D:2B:13:5D:5A:73:79:1C:A7:CF:3D:9A:DA:58:8F:6B
Certificate issuer: /CN=c7977a7a7d2b135d5a73791ca7cf3d9ada588f6b
Certificate serial: 019510FDF0A7FE1BCEE2D13F6DC7C3B6D742
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x5d6en0rE11ac3kcp889mtpYj2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/9668b6-3073-4c7b-a15d-4a9cce60bdb8/1/x5d6en0rE11ac3kcp889mtpYj2s.mft
Manifest number: 1456
Signing time: Sun 16 Feb 2025 23:00:32 +0000
Manifest this update: Sun 16 Feb 2025 23:00:32 +0000
Manifest next update: Mon 17 Feb 2025 23:00:32 +0000
Files and hashes: 1: x5d6en0rE11ac3kcp889mtpYj2s.crl (hash: 4OUArVOXpNv0Klakvjxb1m/XicOz9xCVk2rd0R6vhf0=)
2: yrgIBtaF_Rl3-KfRiLgUYar-yd0.roa (hash: T90C90e5Of8IaOpnooa9JcWxTvLM03hzqcILUaCvjno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/9668b6-3073-4c7b-a15d-4a9cce60bdb8/1/x5d6en0rE11ac3kcp889mtpYj2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/9668b6-3073-4c7b-a15d-4a9cce60bdb8/1/x5d6en0rE11ac3kcp889mtpYj2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/x5d6en0rE11ac3kcp889mtpYj2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fd:f0:a7:fe:1b:ce:e2:d1:3f:6d:c7:c3:b6:d7:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7977a7a7d2b135d5a73791ca7cf3d9ada588f6b
Validity
Not Before: Feb 16 23:00:32 2025 GMT
Not After : Feb 17 23:00:32 2025 GMT
Subject: CN=111fdfa149d4d5f41cd8c770e2e7729a1daa7c59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:2f:cb:51:67:50:a4:79:7c:68:67:16:ad:1e:
1c:d1:07:48:69:da:80:7a:29:5c:cd:1e:e9:7c:97:
57:79:69:69:45:2f:64:26:eb:fa:d1:eb:dc:db:d8:
f2:14:49:c6:1e:0d:b2:21:9a:c1:21:67:2c:8b:8c:
07:9f:c2:87:c5:dc:d7:94:97:12:d9:6f:c8:90:bf:
be:59:73:1b:b5:d7:16:bc:91:be:4c:d5:bc:dd:5c:
92:c7:a2:fe:a8:1a:f4:5a:50:da:dd:ac:db:d6:e0:
32:08:9f:16:09:cb:46:91:a5:a4:fd:39:06:aa:ec:
e1:e6:2a:a6:20:ba:f3:a6:2e:fe:27:a1:35:4d:1c:
03:45:fd:bc:f5:5b:47:5f:35:0b:6c:05:e8:12:27:
3a:af:38:1b:9c:b2:b5:8c:ad:71:e1:6f:a9:28:eb:
8c:4a:dd:25:eb:51:47:47:cd:f6:7d:6e:66:1d:c3:
1b:65:ad:b3:b0:9e:11:35:b6:2f:79:39:61:23:c3:
d8:33:66:7e:92:8a:a8:5e:07:d0:28:e5:09:67:9c:
45:9e:1b:27:a9:72:10:fb:06:c1:c3:75:92:f5:77:
8b:61:9d:7c:f1:cf:78:6b:5d:1a:82:90:16:57:22:
24:e4:a5:3c:30:27:f2:5c:e1:e3:32:6e:b6:02:77:
e7:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:1F:DF:A1:49:D4:D5:F4:1C:D8:C7:70:E2:E7:72:9A:1D:AA:7C:59
X509v3 Authority Key Identifier:
keyid:C7:97:7A:7A:7D:2B:13:5D:5A:73:79:1C:A7:CF:3D:9A:DA:58:8F:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x5d6en0rE11ac3kcp889mtpYj2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9668b6-3073-4c7b-a15d-4a9cce60bdb8/1/x5d6en0rE11ac3kcp889mtpYj2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9668b6-3073-4c7b-a15d-4a9cce60bdb8/1/x5d6en0rE11ac3kcp889mtpYj2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:73:b6:5e:39:8b:cd:89:de:97:bf:24:69:f2:48:0f:f5:ea:
12:84:f2:24:b8:75:e5:50:33:4b:df:ef:3e:3d:96:6d:55:83:
77:bf:f2:15:54:d4:27:80:79:29:53:21:ff:93:44:31:1e:6e:
12:51:8b:ca:bd:94:f4:ed:60:6b:78:4d:6a:a2:31:f1:fb:fa:
68:19:d4:64:3c:5d:cc:23:f8:01:20:d9:c1:ee:5d:e5:64:6a:
d6:f8:d4:87:63:dd:42:a1:d1:af:e3:27:2c:3c:d4:60:2a:79:
7f:19:f7:88:74:03:c6:95:b5:75:b3:2f:b5:5a:fc:22:ef:b3:
4a:8d:18:78:53:e4:fb:1e:c0:41:81:50:79:5f:5f:30:e0:7d:
ec:f4:cc:7c:11:73:f7:56:5c:28:8c:84:27:15:ed:52:75:46:
ba:2a:4a:6c:e7:7c:95:95:04:dd:f8:0d:98:59:4a:67:3d:f1:
25:7b:a2:b1:29:2f:57:1e:bb:70:fc:0e:5e:0d:fa:06:b4:e3:
b9:ba:0e:41:3d:dd:ed:71:0b:d2:cf:37:23:9d:63:3e:8d:07:
4e:73:e3:b4:f0:bd:f0:9b:f5:0f:6a:5a:e5:1e:f4:7b:6c:e7:
e1:e2:ff:05:1c:3f:64:ec:bb:42:e0:42:5e:c6:2f:4d:ee:63:
d6:bb:92:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:33:12 2025 by rpki-client