![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/OBgMB0--WYgkxwAxlbMKpKNmFSw.mft
File: OBgMB0--WYgkxwAxlbMKpKNmFSw.mft (raw, json)
Hash identifier: zenP5uA5bL9EkrJNysN+GOJIdp47sDOY/9S6O2Rl98w=
Subject key identifier: DB:BD:31:35:01:6A:79:B5:F3:F9:3C:91:73:D0:AA:FD:5A:53:15:06
Authority key identifier: 38:18:0C:07:4F:BE:59:88:24:C7:00:31:95:B3:0A:A4:A3:66:15:2C
Certificate issuer: /CN=38180c074fbe598824c7003195b30aa4a366152c
Certificate serial: 019510C70F31688530B7563CCB0C273A154C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OBgMB0--WYgkxwAxlbMKpKNmFSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/OBgMB0--WYgkxwAxlbMKpKNmFSw.mft
Manifest number: 10F6
Signing time: Sun 16 Feb 2025 22:00:35 +0000
Manifest this update: Sun 16 Feb 2025 22:00:35 +0000
Manifest next update: Mon 17 Feb 2025 22:00:35 +0000
Files and hashes: 1: OBgMB0--WYgkxwAxlbMKpKNmFSw.crl (hash: EKCbIVxK0R3kv6D7bnXe2JfPntmCeCrqQvJvTHnVs/U=)
2: RgnQQrRta7gI5tMEs8KYLDUw56A.roa (hash: BgqUN0fwjyUmpN6+mMGR9pZDz7pjjDqgWhnYghe6PvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/OBgMB0--WYgkxwAxlbMKpKNmFSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/OBgMB0--WYgkxwAxlbMKpKNmFSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/OBgMB0--WYgkxwAxlbMKpKNmFSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:0f:31:68:85:30:b7:56:3c:cb:0c:27:3a:15:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38180c074fbe598824c7003195b30aa4a366152c
Validity
Not Before: Feb 16 22:00:35 2025 GMT
Not After : Feb 17 22:00:35 2025 GMT
Subject: CN=dbbd3135016a79b5f3f93c9173d0aafd5a531506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fc:a0:f2:cc:34:b4:83:cc:a4:d8:3d:ef:ca:
52:2b:55:ab:3b:7f:8b:d1:5e:26:24:6c:72:7f:0d:
b1:00:fe:7b:bb:0f:dc:73:8c:be:6b:c7:ed:6e:48:
a3:14:b8:ce:be:23:72:c2:a7:bc:41:6b:77:be:13:
5c:90:1e:1e:ca:15:29:ad:85:0c:d9:19:35:ce:dd:
0b:e9:66:9c:b0:a1:79:a7:93:74:e6:53:d2:c4:bb:
21:21:70:8a:3c:b3:e3:c7:66:b0:35:1d:56:98:88:
6a:34:5c:6d:19:a7:13:d6:55:95:db:4c:0b:f6:a5:
41:69:d4:6c:ff:f6:a2:1c:00:e2:5e:57:46:ed:e6:
8b:e5:66:57:25:93:aa:cc:a5:02:16:cd:60:47:34:
eb:c4:0d:e3:5f:88:9f:d1:9b:b2:59:cd:43:af:4f:
37:6e:3e:ab:9b:70:c8:7e:c6:84:6c:7a:17:6d:13:
2a:39:38:f6:df:67:3d:bf:2a:73:ac:d8:86:d6:0e:
67:d5:e4:f1:3f:fe:99:71:99:ae:2e:7d:a0:c7:ac:
33:96:10:c4:ba:58:5d:f3:2b:45:2c:ef:ab:7c:bf:
98:15:ab:5b:bd:17:2f:88:72:b5:8f:7f:dc:59:a9:
ca:4f:22:70:14:df:36:ad:e0:45:7d:7c:a5:eb:b4:
7a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:BD:31:35:01:6A:79:B5:F3:F9:3C:91:73:D0:AA:FD:5A:53:15:06
X509v3 Authority Key Identifier:
keyid:38:18:0C:07:4F:BE:59:88:24:C7:00:31:95:B3:0A:A4:A3:66:15:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBgMB0--WYgkxwAxlbMKpKNmFSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/OBgMB0--WYgkxwAxlbMKpKNmFSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/OBgMB0--WYgkxwAxlbMKpKNmFSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:1d:3e:0c:d4:b2:ae:64:44:ca:16:2e:44:17:1d:bf:b8:da:
ae:6b:76:1f:f0:cf:84:64:92:b0:44:0b:77:b4:88:63:94:1f:
bf:94:76:6e:40:aa:eb:e4:10:ce:53:4d:5c:2c:77:9d:03:63:
52:ef:13:a7:bd:81:1b:1e:c3:c2:a0:79:30:7b:c2:4e:0e:fd:
0c:67:5e:49:65:a2:59:4d:df:99:6e:2e:7d:f1:fa:dc:d8:21:
75:05:57:ca:77:73:a6:f5:60:32:41:3c:11:e1:1f:cc:ce:2a:
e8:7c:26:dd:49:56:80:39:6b:92:55:3f:52:ef:55:24:ef:42:
ef:96:3c:58:f5:4e:6c:0f:1f:ca:86:a5:ac:63:d1:b9:f8:06:
50:26:a9:52:70:7f:d6:45:96:0c:b7:40:5e:33:b9:1b:60:92:
b6:2d:22:28:e6:b5:1f:f8:55:ef:63:e8:f0:8c:d5:8c:ee:b7:
64:c4:cf:1b:f7:fb:50:98:6d:1c:8a:06:68:1e:a3:0c:c0:31:
61:19:56:30:93:ae:39:a8:d6:48:ee:4e:5e:2d:39:25:dc:51:
2b:4e:76:75:0c:69:68:43:02:ad:af:0b:e2:92:97:04:73:00:
5e:f5:b2:ec:4f:46:d8:57:5e:d5:33:9e:18:9a:dd:ad:3a:7a:
d8:78:47:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:45:25 2025 by rpki-client