![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft
File: 0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft (raw, json)
Hash identifier: NMtZGUhOeM3lG2lulpNLq9tWGOIft7aDr1qpxLPbn7A=
Subject key identifier: 28:B2:B5:42:F0:28:D4:FC:3E:39:98:EA:A9:B1:9A:65:50:C7:A0:68
Authority key identifier: D0:31:65:50:23:BD:14:17:31:D5:6F:B8:45:3F:F0:51:4F:72:88:65
Certificate issuer: /CN=d031655023bd141731d56fb8453ff0514f728865
Certificate serial: 01951134EDC99D255C166CCDC855B22B07EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0DFlUCO9FBcx1W-4RT_wUU9yiGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft
Manifest number: 110A
Signing time: Mon 17 Feb 2025 00:00:36 +0000
Manifest this update: Mon 17 Feb 2025 00:00:36 +0000
Manifest next update: Tue 18 Feb 2025 00:00:36 +0000
Files and hashes: 1: 0DFlUCO9FBcx1W-4RT_wUU9yiGU.crl (hash: Ohm04pWG8pZ653ec10q7JoIvXy8DSK8c7hY9iT2GwxA=)
2: AyldtAoWafPHTkmACDxst6jxsP8.roa (hash: 5JuPcS4QOkaO/Jt7b79o9DhsMUfsXTNZilUz8aQXzEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0DFlUCO9FBcx1W-4RT_wUU9yiGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:ed:c9:9d:25:5c:16:6c:cd:c8:55:b2:2b:07:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d031655023bd141731d56fb8453ff0514f728865
Validity
Not Before: Feb 17 00:00:36 2025 GMT
Not After : Feb 18 00:00:36 2025 GMT
Subject: CN=28b2b542f028d4fc3e3998eaa9b19a6550c7a068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:06:de:29:eb:ba:8d:49:f2:6c:56:ba:55:24:
24:d8:e6:64:32:4f:4c:15:60:a0:61:9d:33:3f:da:
0f:40:b2:d6:0d:d7:e5:fd:ba:07:88:e2:96:8d:0b:
ab:4a:89:5c:e1:af:8a:50:ec:4d:a6:70:b7:32:01:
c8:00:6d:0e:6a:25:ea:a1:98:06:f8:91:54:f5:28:
60:b8:b6:b1:6a:3d:ba:af:92:ea:82:65:e5:d0:b1:
fe:4b:06:08:a4:42:3b:29:5d:75:97:76:2f:8f:82:
85:38:fc:39:6d:81:6e:4c:70:fc:f3:27:15:71:f6:
67:e3:10:85:10:49:6b:b4:9f:28:c1:d5:78:59:95:
d3:88:2f:0f:dc:14:2d:16:a1:fe:18:ac:e5:f0:ce:
f4:c9:58:8d:d6:47:f7:6b:32:8d:a8:54:79:62:20:
6c:ce:d0:bb:c7:38:a3:61:3a:d5:62:8f:a3:dd:d1:
13:fc:30:03:9e:0b:9d:b4:c0:75:ca:be:59:bd:5a:
6d:dc:14:eb:a7:6d:c5:2e:e4:dc:3b:12:3b:b0:99:
67:2d:cc:76:9d:a7:67:3c:fe:19:2e:76:51:57:e2:
40:f3:6b:30:ce:a4:bd:69:91:21:ba:3b:22:16:1f:
e1:e0:e3:d3:4b:86:c1:70:bb:42:45:94:07:89:66:
a0:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:B2:B5:42:F0:28:D4:FC:3E:39:98:EA:A9:B1:9A:65:50:C7:A0:68
X509v3 Authority Key Identifier:
keyid:D0:31:65:50:23:BD:14:17:31:D5:6F:B8:45:3F:F0:51:4F:72:88:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0DFlUCO9FBcx1W-4RT_wUU9yiGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:eb:91:99:dd:9e:d9:10:64:a4:ac:40:ee:59:78:23:d1:d7:
31:54:f2:18:c5:5d:ad:1d:42:a3:a4:ef:f5:2e:e2:69:2d:14:
2d:fa:7d:a5:7b:ac:e9:12:be:60:62:ed:50:c4:11:0d:5a:e5:
0a:fc:bb:50:92:a6:d2:5f:fb:19:bb:0b:15:bd:76:f8:19:ec:
18:4c:b4:62:59:49:67:69:f1:1e:e5:69:24:ed:e1:f6:11:2b:
71:16:67:e7:3e:c2:6d:fa:2a:be:24:dd:2a:12:3c:57:57:5c:
ed:39:99:23:a3:73:5c:84:74:69:72:26:26:91:ca:22:21:8e:
41:19:a8:35:4b:13:6d:d7:f3:f3:4f:71:52:02:bc:fb:42:ba:
14:5f:db:41:a9:f9:69:f4:3b:46:f1:42:be:5f:16:fe:86:15:
38:1e:12:38:ea:e8:df:3b:43:a2:e8:0d:3f:94:c3:09:aa:b8:
8f:41:4e:26:34:e0:60:96:b3:4d:85:4d:61:05:da:11:f2:9b:
97:26:1c:b7:50:4c:43:2d:ac:4f:f1:11:e0:8b:4d:5d:2e:08:
a3:92:9c:5b:c9:f5:a6:6f:7a:bf:18:a5:0f:08:f7:7d:47:e6:
f8:0f:77:27:2f:3e:d1:2d:35:48:48:2c:f1:19:54:ec:ca:0f:
80:aa:57:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:29:44 2025 by rpki-client