![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/b81895-c605-41e2-b283-c0565fa840d4/1/UW2UBk9zhVXozjZaGVfWnnaICcQ.mft
File: UW2UBk9zhVXozjZaGVfWnnaICcQ.mft (raw, json)
Hash identifier: Jpd9L35Su/zFHdMpnggf1IYYKDwRuWP3cStsBhMku84=
Subject key identifier: CD:AD:07:90:E0:74:0A:33:16:2C:9B:CA:85:01:E0:B0:37:C6:B9:AA
Authority key identifier: 51:6D:94:06:4F:73:85:55:E8:CE:36:5A:19:57:D6:9E:76:88:09:C4
Certificate issuer: /CN=516d94064f738555e8ce365a1957d69e768809c4
Certificate serial: 019510C7A561C84C6B726381BCB47DC24110
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UW2UBk9zhVXozjZaGVfWnnaICcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/b81895-c605-41e2-b283-c0565fa840d4/1/UW2UBk9zhVXozjZaGVfWnnaICcQ.mft
Manifest number: 0437
Signing time: Sun 16 Feb 2025 22:01:14 +0000
Manifest this update: Sun 16 Feb 2025 22:01:14 +0000
Manifest next update: Mon 17 Feb 2025 22:01:14 +0000
Files and hashes: 1: UW2UBk9zhVXozjZaGVfWnnaICcQ.crl (hash: NxSUtDLq5WD19P+kYY4XyaTuwko+uRDyYETNvTqr4IU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/b81895-c605-41e2-b283-c0565fa840d4/1/UW2UBk9zhVXozjZaGVfWnnaICcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/b81895-c605-41e2-b283-c0565fa840d4/1/UW2UBk9zhVXozjZaGVfWnnaICcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/UW2UBk9zhVXozjZaGVfWnnaICcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:a5:61:c8:4c:6b:72:63:81:bc:b4:7d:c2:41:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=516d94064f738555e8ce365a1957d69e768809c4
Validity
Not Before: Feb 16 22:01:14 2025 GMT
Not After : Feb 17 22:01:14 2025 GMT
Subject: CN=cdad0790e0740a33162c9bca8501e0b037c6b9aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:46:07:27:85:7a:db:27:b3:f3:f2:12:1b:3d:
dd:1c:9b:b4:21:85:fa:40:8d:d2:00:84:79:5e:d1:
b5:5d:b9:da:42:0f:75:75:bf:8b:1c:11:bc:10:64:
6d:86:82:96:a1:3e:d4:f0:79:02:8a:7b:8f:6e:75:
7a:6d:c3:1d:ee:93:97:ce:62:c0:5c:b1:62:ab:d4:
ab:8c:da:6c:fd:34:3f:3c:ee:85:79:23:37:6f:8c:
d9:11:7f:c9:97:2e:62:9a:f8:34:ba:8b:14:12:0a:
1e:a9:45:40:d2:33:7b:7e:bf:1f:6e:99:1e:7c:82:
76:b9:c2:ff:75:c8:d7:e2:08:4b:aa:b6:4e:9d:1b:
9b:40:95:70:c0:33:78:d0:65:90:c7:03:0d:01:fb:
92:5b:d1:a8:21:cb:54:00:45:bf:2a:d6:53:0c:fb:
39:16:8f:cd:7a:22:99:2a:3f:3d:18:b4:7d:87:be:
7a:37:ec:14:c7:ce:b8:10:39:db:12:d4:2f:70:09:
da:20:12:f3:05:98:5c:f2:a4:cb:16:e7:af:be:82:
16:e7:42:13:03:d5:b2:48:81:9b:ea:9b:ed:79:a7:
db:f6:d1:de:ce:ec:6d:e2:87:3d:92:5c:06:27:df:
1d:49:57:09:e7:86:f9:b3:d1:4f:75:e8:a1:a8:6d:
80:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:AD:07:90:E0:74:0A:33:16:2C:9B:CA:85:01:E0:B0:37:C6:B9:AA
X509v3 Authority Key Identifier:
keyid:51:6D:94:06:4F:73:85:55:E8:CE:36:5A:19:57:D6:9E:76:88:09:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UW2UBk9zhVXozjZaGVfWnnaICcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b81895-c605-41e2-b283-c0565fa840d4/1/UW2UBk9zhVXozjZaGVfWnnaICcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b81895-c605-41e2-b283-c0565fa840d4/1/UW2UBk9zhVXozjZaGVfWnnaICcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:a8:76:a4:60:3e:e8:fd:8d:26:3c:3e:26:af:e6:60:3a:bf:
28:40:c9:fc:81:5c:1e:98:2b:20:77:58:1d:b0:37:65:db:93:
2e:6d:10:cb:98:fa:75:c2:3f:83:e0:0b:40:a1:d6:ef:26:f7:
09:e2:07:7e:35:52:a6:2c:a8:37:c0:a5:78:89:d2:24:2c:a3:
35:df:5d:ed:ab:38:a7:63:7e:f2:6b:bd:44:32:04:8e:1a:1d:
74:1d:46:d9:a0:05:bb:81:ec:24:7f:e6:77:02:10:bf:1e:3d:
4a:89:34:88:84:f5:02:ae:ef:f3:af:f6:13:ef:47:63:6b:ef:
e9:b7:47:ac:f3:83:0b:0e:41:6b:8b:00:8e:e0:85:f8:a5:84:
4c:ba:89:f3:a0:be:39:7c:a5:54:ee:97:89:59:18:e3:37:a8:
dc:25:a9:20:66:97:20:9b:ff:3b:8a:0a:4d:f0:6b:28:b4:82:
13:0a:37:fa:55:21:96:6f:87:ea:ec:43:19:d6:fe:c8:2a:0e:
2a:05:26:7c:4f:79:99:ec:3a:ad:c5:f1:55:ce:5a:0c:17:a5:
58:b4:be:84:5f:84:b3:cd:e1:f9:1e:a5:02:12:cb:df:55:6f:
dc:91:40:f1:db:79:86:fc:d2:25:a5:95:2e:87:ae:4c:13:64:
d9:7e:5e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:21:04 2025 by rpki-client