![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft
File: Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft (raw, json)
Hash identifier: StzJ3Kc6cjtK1nl23t8jwBBpe8Tkm7Cshq9J/M7hjtQ=
Subject key identifier: F0:08:AF:E9:5F:0E:F2:1C:2E:B5:E8:EC:95:CF:75:86:04:FA:39:9F
Authority key identifier: 67:67:06:83:06:2C:D8:B3:5C:1B:76:02:18:A7:89:B9:08:CB:4C:8D
Certificate issuer: /CN=67670683062cd8b35c1b760218a789b908cb4c8d
Certificate serial: 019510C75DCDCC6345FC7DB419C2A5322E55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft
Manifest number: 0F61
Signing time: Sun 16 Feb 2025 22:00:55 +0000
Manifest this update: Sun 16 Feb 2025 22:00:55 +0000
Manifest next update: Mon 17 Feb 2025 22:00:55 +0000
Files and hashes: 1: Z2cGgwYs2LNcG3YCGKeJuQjLTI0.crl (hash: Qw6bQ7HOJCPVq/vuvGjSovUrMkLYOWOCUhu9hsb1sTQ=)
2: ZIWXo67jPvL3hLYa3gap-960Rno.roa (hash: 7t2maR+QFwGZQ0cko9J2jlQifVoeQAYE4OqVyag5JNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:5d:cd:cc:63:45:fc:7d:b4:19:c2:a5:32:2e:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67670683062cd8b35c1b760218a789b908cb4c8d
Validity
Not Before: Feb 16 22:00:55 2025 GMT
Not After : Feb 17 22:00:55 2025 GMT
Subject: CN=f008afe95f0ef21c2eb5e8ec95cf758604fa399f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a9:be:ca:7f:0f:4f:fa:c2:7b:cf:d3:72:36:
63:f3:1c:21:0c:05:96:83:41:fa:13:48:10:43:c9:
b0:09:5a:10:35:4f:5f:9d:97:46:2a:18:73:4a:16:
1b:14:be:a3:ef:d2:53:b2:c4:d9:48:9d:46:6d:5c:
2c:5e:41:c2:42:f3:a4:10:cb:72:f9:9e:e5:8a:64:
91:3c:9a:a6:d7:39:29:8c:42:b7:9c:1a:4a:14:17:
51:91:ee:cf:19:3e:a1:96:6b:c6:d7:25:bc:4e:9e:
8a:c3:77:4f:75:2c:51:68:45:bb:88:50:fb:0c:ef:
75:bb:24:da:b0:1c:4b:2d:21:d9:41:d3:9d:e8:9e:
0d:90:2d:86:b6:36:7c:69:42:aa:f4:58:a4:38:64:
6b:75:0b:2a:cb:c1:1c:fc:cc:b2:6f:55:2e:67:22:
a8:91:70:c7:3e:4f:c0:fa:a8:22:82:e1:13:52:e1:
30:e1:14:ce:e7:72:1a:19:0c:dd:01:2c:e7:70:d3:
32:92:bd:a2:f8:62:8b:b2:d5:3b:07:14:37:5a:de:
06:6c:25:6a:3b:c5:62:88:ea:c5:b2:07:05:6f:e9:
bd:0b:21:5c:a0:5a:e1:3f:9e:e3:69:0e:04:79:26:
d1:d5:b2:f3:b9:4f:89:48:b1:1b:ad:6c:bf:98:3b:
f6:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:08:AF:E9:5F:0E:F2:1C:2E:B5:E8:EC:95:CF:75:86:04:FA:39:9F
X509v3 Authority Key Identifier:
keyid:67:67:06:83:06:2C:D8:B3:5C:1B:76:02:18:A7:89:B9:08:CB:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:bf:8e:6d:23:40:03:79:36:46:41:ac:f5:61:d6:cd:ad:96:
71:9e:d2:fe:47:fb:86:e7:20:09:50:73:28:e3:c4:d4:01:32:
52:9d:da:ff:64:fa:0f:cb:93:b1:e2:f4:15:cd:fe:88:c2:27:
c8:f6:85:e8:a6:07:52:76:43:a0:d4:2a:f1:fb:dc:65:01:03:
4b:b0:a4:0b:6f:84:42:38:f0:d1:c1:fd:01:4c:2e:e2:ce:46:
0e:21:50:54:01:99:6f:2a:df:f6:ff:06:95:62:30:a1:ba:a1:
d3:4b:0f:8e:03:b3:45:4b:32:f8:8c:be:e4:58:43:8d:48:c3:
c7:05:4f:e5:62:97:67:c3:b5:0c:38:6b:de:d7:3c:77:77:a4:
31:d2:90:a2:61:c1:97:d8:7a:6e:61:17:6e:c8:44:34:df:87:
08:c6:75:10:1c:bb:25:8f:63:5b:77:ba:a0:a5:a4:2f:b7:e7:
c0:1d:38:5d:ac:c1:cc:f6:9e:5f:0e:b7:12:20:19:82:a0:03:
33:51:25:58:a4:6e:69:95:e1:bd:38:59:03:05:98:74:71:09:
84:3d:70:0d:20:a1:40:89:27:3a:c2:8b:0e:b1:20:0a:6e:b9:
e4:8a:7e:21:e3:f5:36:18:92:ad:c1:65:08:25:0e:a3:47:73:
e2:f5:40:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:48:59 2025 by rpki-client