![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.mft
File: dnwXZvu9z_aLvDSjxr5poMigOrk.mft (raw, json)
Hash identifier: 23+NEZgdA2oMss++IhAQYkgBd1zMy5Cuq7WL5WEIOQs=
Subject key identifier: C2:F5:5A:C4:57:88:EA:BD:AA:85:FF:52:09:E2:B3:0E:7A:DE:78:94
Authority key identifier: 76:7C:17:66:FB:BD:CF:F6:8B:BC:34:A3:C6:BE:69:A0:C8:A0:3A:B9
Certificate issuer: /CN=767c1766fbbdcff68bbc34a3c6be69a0c8a03ab9
Certificate serial: 019511A2B02C9E4A4FA72A5C7EB75C034D5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dnwXZvu9z_aLvDSjxr5poMigOrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.mft
Manifest number: 0C4F
Signing time: Mon 17 Feb 2025 02:00:29 +0000
Manifest this update: Mon 17 Feb 2025 02:00:29 +0000
Manifest next update: Tue 18 Feb 2025 02:00:29 +0000
Files and hashes: 1: S9cGjm1_FE5PT4vUzDVGwHhUU8I.roa (hash: 69AJiJKNUyPoiJ1x84aJesWdv5amXDXDdulHmdz9t+I=)
2: dnwXZvu9z_aLvDSjxr5poMigOrk.crl (hash: zMmnUJTD2wM/fsqVlMOP9IQMtka1STIGCB/ue0ALbLQ=)
3: joe5pZwVwibh0SdF2PsA-ibLXSs.roa (hash: kolEql5tzzaraNXgVLIhDCRD/4roZFIN0wmtLXS0EH4=)
4: xnRx0OSK9TIMFxn1VL8fIU-kDPQ.roa (hash: l/e913myQSQUa6e/Y2iqnvi7HmfqzgcIokF4oa8whYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dnwXZvu9z_aLvDSjxr5poMigOrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:b0:2c:9e:4a:4f:a7:2a:5c:7e:b7:5c:03:4d:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767c1766fbbdcff68bbc34a3c6be69a0c8a03ab9
Validity
Not Before: Feb 17 02:00:29 2025 GMT
Not After : Feb 18 02:00:29 2025 GMT
Subject: CN=c2f55ac45788eabdaa85ff5209e2b30e7ade7894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:10:a7:16:76:f5:1f:7f:d6:67:a6:f0:8c:ee:
42:ae:b3:07:48:ed:d1:50:ea:3a:ed:6d:85:52:18:
aa:9e:ea:5b:c4:3e:28:76:87:14:bd:bf:dc:37:ea:
e5:b2:e2:55:7b:01:4a:d7:aa:d0:21:93:35:c6:3b:
35:45:a0:52:68:b5:af:6b:1a:ad:97:06:c3:11:e4:
d5:89:15:93:d8:f3:32:3a:d1:8d:9c:f1:73:d0:4b:
f9:c2:9e:ac:1d:15:6e:e7:cf:67:26:86:9a:96:b1:
c3:14:77:50:5b:6c:91:fd:a5:b4:00:c2:52:10:87:
a6:ce:ba:ea:cc:b8:7f:df:be:c1:75:1f:e6:d8:e0:
6b:56:2e:4c:2c:bf:b7:e2:c9:5c:15:97:1a:f0:c4:
15:36:9b:dc:1b:8a:98:b7:0a:6b:f3:60:9d:4f:0e:
63:e2:22:42:13:0c:48:e5:9f:3a:f7:b7:2d:51:0d:
71:27:00:4a:65:98:a7:ec:d7:72:b7:c0:17:06:16:
6f:70:fe:cd:34:6b:5f:96:39:4c:4e:29:d9:00:91:
82:90:b9:d3:5c:4d:dd:4b:57:d4:46:93:40:3d:ff:
45:bd:66:a5:4f:ac:86:bc:86:7c:78:58:4c:93:f2:
71:d0:6c:1a:7e:3b:71:f8:bc:1d:3a:d7:bf:9e:fa:
f9:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:F5:5A:C4:57:88:EA:BD:AA:85:FF:52:09:E2:B3:0E:7A:DE:78:94
X509v3 Authority Key Identifier:
keyid:76:7C:17:66:FB:BD:CF:F6:8B:BC:34:A3:C6:BE:69:A0:C8:A0:3A:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dnwXZvu9z_aLvDSjxr5poMigOrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:7c:d5:50:07:d7:06:df:d1:14:06:28:bf:76:ae:67:d3:92:
39:9a:3f:f4:11:95:83:d9:f9:3e:68:aa:a8:08:1a:5b:0b:59:
7b:6d:83:dd:2c:76:d1:05:76:08:f0:60:1b:43:86:6e:3c:4e:
aa:53:2c:ab:e6:49:a0:26:29:83:c2:89:3b:77:4d:56:1f:43:
0b:50:b3:75:83:79:e8:92:4d:2a:a1:f4:41:ba:0f:ef:bd:15:
65:ce:0d:68:13:cf:21:30:ae:28:a2:08:07:5f:90:fa:e4:d5:
01:52:9b:d3:b5:6c:f3:1d:d7:5d:b2:84:8b:ee:39:87:e3:8e:
a6:82:b7:48:73:75:17:51:3a:ab:ed:b8:4b:ba:1b:76:87:05:
53:17:46:e8:f8:44:b7:c4:1d:02:59:3d:4e:87:53:06:37:ca:
1b:fc:9e:a4:fb:e9:6a:1b:a8:44:f0:c0:d2:12:b5:2c:0d:11:
20:df:ff:b6:a0:25:61:a6:1b:3b:1b:f3:33:71:45:61:71:62:
77:dd:3c:11:75:51:82:db:c7:1d:35:3a:94:4b:b1:12:80:55:
e8:40:97:a0:98:25:e6:35:37:7b:95:99:18:22:b6:36:7c:f8:
30:98:41:46:26:b3:d4:27:f4:ff:76:01:7b:1c:96:45:ea:81:
7f:46:cb:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:15:32 2025 by rpki-client