![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/7262b8-a1a7-4d13-8793-d3887dc45c6d/1/YyX1FCcBZ6Q-ZeJ9-bPSbvspwxw.mft
File: YyX1FCcBZ6Q-ZeJ9-bPSbvspwxw.mft (raw, json)
Hash identifier: Nm3uO4ytXtMhF/tNpUDdn1RZXrN8/0lZeqt1vvb8z/I=
Subject key identifier: FE:51:56:65:F1:74:3F:C8:33:3C:96:07:3F:FE:94:36:91:53:70:A1
Authority key identifier: 63:25:F5:14:27:01:67:A4:3E:65:E2:7D:F9:B3:D2:6E:FB:29:C3:1C
Certificate issuer: /CN=6325f514270167a43e65e27df9b3d26efb29c31c
Certificate serial: 01951134C552719E78B1E6A9E22057DDB94C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YyX1FCcBZ6Q-ZeJ9-bPSbvspwxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/7262b8-a1a7-4d13-8793-d3887dc45c6d/1/YyX1FCcBZ6Q-ZeJ9-bPSbvspwxw.mft
Manifest number: 1456
Signing time: Mon 17 Feb 2025 00:00:25 +0000
Manifest this update: Mon 17 Feb 2025 00:00:25 +0000
Manifest next update: Tue 18 Feb 2025 00:00:25 +0000
Files and hashes: 1: 7i3ElD5IcOtwR7N5wXzR1mVlNsw.roa (hash: eiPh0DahvU1iWHrSLpqP3W+j96pO/2cFZ0BXyIe6o9g=)
2: YyX1FCcBZ6Q-ZeJ9-bPSbvspwxw.crl (hash: RqG1LwyQGInpK20+2pE1Lealp7LFOthET5icNVYIFyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/7262b8-a1a7-4d13-8793-d3887dc45c6d/1/YyX1FCcBZ6Q-ZeJ9-bPSbvspwxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/7262b8-a1a7-4d13-8793-d3887dc45c6d/1/YyX1FCcBZ6Q-ZeJ9-bPSbvspwxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YyX1FCcBZ6Q-ZeJ9-bPSbvspwxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:c5:52:71:9e:78:b1:e6:a9:e2:20:57:dd:b9:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6325f514270167a43e65e27df9b3d26efb29c31c
Validity
Not Before: Feb 17 00:00:25 2025 GMT
Not After : Feb 18 00:00:25 2025 GMT
Subject: CN=fe515665f1743fc8333c96073ffe9436915370a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6c:5a:5d:b3:15:c1:1e:e1:12:e8:d3:1d:7f:
f4:82:51:e7:53:08:51:56:11:38:a6:bc:2c:20:b3:
4e:08:c8:47:b2:bf:0b:c6:84:83:e6:c9:ac:cf:b7:
ef:ae:23:b6:e6:02:ce:07:23:ae:29:b7:f3:75:5c:
e1:1e:dc:87:bc:8b:fb:39:8d:28:f6:be:7a:41:10:
c0:f4:71:fb:ea:29:fa:60:7a:0f:cb:0a:16:fa:de:
83:c4:55:bf:c5:44:21:0b:0d:e8:68:74:2b:96:65:
33:0b:ba:17:cd:f2:f2:6b:0a:67:55:c4:c8:76:17:
09:8f:d8:f4:bd:e6:62:12:72:38:4c:99:41:a4:0b:
b5:24:a3:b6:fd:92:40:79:5c:d0:4a:72:e2:7c:43:
7c:41:4b:34:eb:ea:0c:19:e1:5e:ad:63:32:e0:ba:
ce:87:10:5f:c1:b3:cb:ed:ab:cd:12:ea:de:3a:1c:
5f:ed:6b:6c:41:ae:9c:e4:ef:47:80:88:93:14:78:
0d:a1:b2:42:e0:59:d2:b6:a0:19:17:6f:f2:0f:60:
f9:f8:97:62:e3:3a:87:0c:b3:5f:c6:e5:df:57:46:
4d:94:eb:8f:30:bb:ce:f2:c5:7d:50:a2:64:c3:4e:
77:17:87:10:c9:d0:39:3e:54:17:00:63:3e:2b:e3:
e8:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:51:56:65:F1:74:3F:C8:33:3C:96:07:3F:FE:94:36:91:53:70:A1
X509v3 Authority Key Identifier:
keyid:63:25:F5:14:27:01:67:A4:3E:65:E2:7D:F9:B3:D2:6E:FB:29:C3:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YyX1FCcBZ6Q-ZeJ9-bPSbvspwxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7262b8-a1a7-4d13-8793-d3887dc45c6d/1/YyX1FCcBZ6Q-ZeJ9-bPSbvspwxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7262b8-a1a7-4d13-8793-d3887dc45c6d/1/YyX1FCcBZ6Q-ZeJ9-bPSbvspwxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:80:cf:07:4a:55:23:df:53:01:be:d2:1b:73:c3:ed:d1:75:
26:c3:06:77:cd:1a:be:e1:c8:c5:b4:e3:65:b4:53:7c:63:b2:
36:ca:c4:d0:fc:db:e7:8f:4a:68:88:4d:a4:b7:b4:63:65:25:
ee:0e:7d:72:cb:89:13:6b:86:f5:94:91:f0:be:77:70:56:ed:
10:e0:1d:7c:1a:1e:41:6e:59:87:4b:f7:f4:00:d6:5e:4e:13:
68:cc:2f:4d:90:14:d7:2d:d8:e4:3b:bc:9a:98:19:11:38:d2:
06:80:a5:42:00:04:5f:8c:43:0d:12:cf:2e:4d:21:11:9c:43:
25:b9:34:bf:f3:80:1a:01:bc:47:6c:c5:5b:af:d5:03:c4:73:
18:90:f0:5e:0d:04:8c:af:25:b8:ab:c6:62:76:04:c0:7e:57:
70:34:ef:55:87:b5:a1:dc:48:39:59:ee:42:29:1f:28:37:52:
b8:aa:27:6f:ad:ff:b1:da:4f:e4:f7:4d:37:a2:95:1c:1d:51:
e4:2e:a7:dc:d0:bd:8c:7c:1d:0b:28:db:e2:23:32:a1:2e:34:
67:d6:8a:15:81:ba:8e:24:06:ac:2a:87:a3:8c:ad:fd:24:59:
23:2e:c4:dc:3c:3e:e6:56:af:11:07:0f:60:96:ee:e6:c9:a3:
8e:bc:26:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:07:03 2025 by rpki-client