![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft
File: 1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft (raw, json)
Hash identifier: dTSxjk/l7CaNl0g924tEJQuGzGSAntc1YiJcoaelJm4=
Subject key identifier: FC:F7:45:11:9E:97:A4:9D:F1:84:8E:33:25:91:49:D3:5C:3C:6F:29
Authority key identifier: F9:73:20:96:25:E2:A0:3D:DE:EC:F9:1B:B4:80:54:8E:57:29:D4:79
Certificate issuer: /CN=f973209625e2a03ddeecf91bb480548e5729d479
Certificate serial: 01951134BA96802B9D2D94BE88C30DA833DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-XMgliXioD3e7PkbtIBUjlcp1Hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft
Manifest number: 1454
Signing time: Mon 17 Feb 2025 00:00:23 +0000
Manifest this update: Mon 17 Feb 2025 00:00:23 +0000
Manifest next update: Tue 18 Feb 2025 00:00:23 +0000
Files and hashes: 1: 1-XMgliXioD3e7PkbtIBUjlcp1Hk.crl (hash: Z+/MiEktJp0Ti37lQxHaYYiZ0pmy4TbG1jaoF8rczUQ=)
2: l3JzatKnSb-qTPQjQ9VOzx8MD7g.roa (hash: 40hMQclA6AyvTYjGgbc8RhGg1fGmdxgMO6uT9Avjx2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-XMgliXioD3e7PkbtIBUjlcp1Hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:ba:96:80:2b:9d:2d:94:be:88:c3:0d:a8:33:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f973209625e2a03ddeecf91bb480548e5729d479
Validity
Not Before: Feb 17 00:00:23 2025 GMT
Not After : Feb 18 00:00:23 2025 GMT
Subject: CN=fcf745119e97a49df1848e33259149d35c3c6f29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e7:11:95:60:3d:4b:5a:ac:92:08:98:9f:92:
46:77:0a:ee:30:10:53:0f:63:dc:25:ae:36:6a:f4:
81:a3:b7:98:f4:d2:ad:b7:79:19:9b:61:6f:66:c8:
34:9d:59:75:cf:eb:5e:33:46:61:34:24:6d:b4:5b:
c8:28:7a:cc:03:34:d0:6b:ae:34:94:64:d0:af:32:
66:91:66:62:aa:9d:28:73:a7:ed:dd:cf:59:0a:c6:
3e:5b:f5:a5:e5:92:3b:98:a4:94:9a:df:5f:b3:5a:
0c:85:5e:8b:0f:b4:ef:a6:4d:7f:e8:97:17:98:9b:
10:0e:c5:c2:69:59:fe:00:12:9d:82:42:61:5a:c1:
2a:de:dd:e6:09:78:47:82:98:75:31:0d:4d:ac:92:
e4:19:b4:d4:a6:e2:ca:10:67:1c:2a:e8:fb:04:26:
b9:11:a5:0c:ee:2b:73:4f:2e:7b:83:7d:62:d7:cb:
07:7d:0f:f2:50:27:14:86:3f:9f:41:c4:33:46:88:
f6:1b:43:9e:7c:26:f9:18:1c:da:66:77:0a:99:02:
3f:c0:dd:59:ed:3d:4d:e2:be:77:1e:54:35:63:a7:
f9:9b:8d:9f:da:5e:9b:d3:33:34:1d:55:56:24:6c:
21:34:8f:4f:0a:70:4e:c3:be:b3:46:f2:bd:35:2d:
31:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:F7:45:11:9E:97:A4:9D:F1:84:8E:33:25:91:49:D3:5C:3C:6F:29
X509v3 Authority Key Identifier:
keyid:F9:73:20:96:25:E2:A0:3D:DE:EC:F9:1B:B4:80:54:8E:57:29:D4:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XMgliXioD3e7PkbtIBUjlcp1Hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:f9:0a:c4:93:51:be:91:ce:6b:d8:3c:c9:55:04:cf:86:d3:
48:33:58:c0:1f:ef:0d:2f:53:dc:44:1c:50:9c:8a:09:86:9d:
cd:54:36:ca:f4:34:6b:fd:6b:6a:71:b9:57:bc:15:ee:05:e5:
fc:7d:62:82:52:68:74:f9:21:ae:3a:f6:5d:55:73:cc:f2:43:
56:65:a5:15:b1:48:de:7b:86:07:0b:7a:3c:7f:17:40:40:ad:
03:5d:d6:ea:39:91:c4:f3:8e:c9:07:ac:13:43:16:e0:04:35:
d1:c2:30:a1:23:c4:99:dc:f7:d0:d3:f1:ff:c0:80:13:07:97:
f1:03:62:85:be:f2:bc:25:54:ec:14:f8:81:23:fc:10:e3:ea:
1c:29:b1:f7:da:12:e8:12:6f:f1:bb:c0:e4:4b:21:41:ae:ce:
08:e4:75:0f:5c:59:67:98:b1:ec:54:f6:c5:d7:a0:53:ae:07:
b3:a5:67:16:98:75:4b:08:84:ec:d3:5e:92:4e:9c:af:95:93:
c9:c8:2c:28:89:50:f8:45:46:8e:81:80:e3:ba:3a:66:50:ec:
29:d6:f9:5c:d8:20:54:3e:4b:3b:63:ae:33:4d:87:a1:93:e9:
fc:f9:e5:61:93:77:ce:6b:ca:31:57:0e:85:99:db:a3:4e:c6:
36:b7:66:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:26:25 2025 by rpki-client