![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/956e7d-6b93-42fb-993f-6b0038875a14/1/e3XTcgObGrLUFq2Dv2kUBYQRwqI.mft
File: e3XTcgObGrLUFq2Dv2kUBYQRwqI.mft (raw, json)
Hash identifier: WVQwEu1HKlAqjzaXSmnxUoMYW7PC9wvlyqzgcLZcmY0=
Subject key identifier: CA:0D:C0:E3:87:98:AA:04:D2:92:07:84:67:AE:8F:88:12:E7:20:23
Authority key identifier: 7B:75:D3:72:03:9B:1A:B2:D4:16:AD:83:BF:69:14:05:84:11:C2:A2
Certificate issuer: /CN=7b75d372039b1ab2d416ad83bf6914058411c2a2
Certificate serial: 019511A2998AA22673C3FB651168A82148C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e3XTcgObGrLUFq2Dv2kUBYQRwqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/956e7d-6b93-42fb-993f-6b0038875a14/1/e3XTcgObGrLUFq2Dv2kUBYQRwqI.mft
Manifest number: 145C
Signing time: Mon 17 Feb 2025 02:00:23 +0000
Manifest this update: Mon 17 Feb 2025 02:00:23 +0000
Manifest next update: Tue 18 Feb 2025 02:00:23 +0000
Files and hashes: 1: UnCcsT72IxAT_A7pPL3SizxwgN4.roa (hash: c7dhvZVWkHenODhaz4yGW2E9vwoS+Yy4F3XRITR7veQ=)
2: e3XTcgObGrLUFq2Dv2kUBYQRwqI.crl (hash: XAEwHDHhOCHMWmLAeSW5hRRyhozU6bCDqA2JzJ4N2o0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/956e7d-6b93-42fb-993f-6b0038875a14/1/e3XTcgObGrLUFq2Dv2kUBYQRwqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/956e7d-6b93-42fb-993f-6b0038875a14/1/e3XTcgObGrLUFq2Dv2kUBYQRwqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/e3XTcgObGrLUFq2Dv2kUBYQRwqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:99:8a:a2:26:73:c3:fb:65:11:68:a8:21:48:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b75d372039b1ab2d416ad83bf6914058411c2a2
Validity
Not Before: Feb 17 02:00:23 2025 GMT
Not After : Feb 18 02:00:23 2025 GMT
Subject: CN=ca0dc0e38798aa04d292078467ae8f8812e72023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:6a:9d:4c:3a:24:04:15:c3:06:71:92:f2:15:
dd:e6:75:aa:df:b9:a7:9b:d1:3e:6b:87:ba:9d:11:
37:16:b4:9c:3c:58:df:30:e3:22:e7:07:9c:64:ad:
2f:14:8c:c0:ef:11:ef:98:7e:a8:b1:06:fd:63:e2:
f4:7b:30:51:2d:e2:98:24:0d:76:b5:df:06:09:f2:
c9:58:df:47:68:e6:88:e4:95:86:3f:09:3d:17:ca:
f5:58:3f:e4:83:fa:7a:7a:16:8a:95:d5:be:0c:5a:
41:67:80:a7:95:eb:41:c7:d2:64:63:07:be:19:7b:
ec:6d:67:ee:2d:c7:ec:55:b2:32:90:aa:35:7f:94:
3b:0c:36:b6:9e:5c:8a:f7:b0:91:c6:74:fd:2b:9b:
ee:95:c2:e0:01:01:e9:96:98:06:56:4a:06:ef:93:
3a:86:b0:43:cc:08:a5:bd:0a:ff:02:1e:aa:6d:0f:
fb:ef:be:3b:a4:b1:e5:0b:e5:b4:f2:2d:6c:ba:87:
31:06:1d:d7:99:be:91:02:0a:38:60:97:ef:2e:05:
0d:ca:ec:96:5a:54:dd:42:87:91:d7:d2:90:03:6d:
63:b7:f0:d7:f1:53:bc:0e:48:0e:a5:64:e4:21:40:
ae:74:cc:d0:30:b3:6b:2a:f0:38:56:7a:c8:69:e0:
c2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:0D:C0:E3:87:98:AA:04:D2:92:07:84:67:AE:8F:88:12:E7:20:23
X509v3 Authority Key Identifier:
keyid:7B:75:D3:72:03:9B:1A:B2:D4:16:AD:83:BF:69:14:05:84:11:C2:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3XTcgObGrLUFq2Dv2kUBYQRwqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/956e7d-6b93-42fb-993f-6b0038875a14/1/e3XTcgObGrLUFq2Dv2kUBYQRwqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/956e7d-6b93-42fb-993f-6b0038875a14/1/e3XTcgObGrLUFq2Dv2kUBYQRwqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:6b:2b:96:74:7c:22:4b:b5:cd:3e:e7:91:dd:7a:06:fd:5e:
3e:25:3f:6f:ee:b3:b4:01:0b:2d:8b:9e:cf:0d:d2:ef:a9:a4:
7c:96:fa:83:5f:52:e7:f0:0f:bf:6f:63:f1:64:2e:65:29:11:
c7:e4:68:04:fd:e9:cb:03:62:00:36:7e:8d:fd:3c:fd:ab:cb:
ba:ad:c6:d5:b0:88:38:c4:3b:96:19:ba:3c:25:ce:17:c2:d6:
b9:7b:3d:f3:46:ab:3b:d5:11:3f:04:89:4e:73:50:d0:7c:34:
e8:c8:f0:ec:af:f9:77:5a:57:b4:0f:1d:1b:95:7e:23:91:d8:
44:81:a8:28:a2:a7:22:73:ec:3b:04:d9:08:a0:49:42:39:0a:
c8:e3:a2:ff:bb:9d:7c:ea:15:67:19:81:0b:24:54:00:ea:0f:
82:3e:42:a5:fa:34:85:f4:5f:18:20:d6:95:59:65:9d:08:0d:
6a:c5:7b:4e:03:d0:a5:41:c8:c5:86:73:9c:cb:ce:fa:3f:76:
ee:b8:0f:e0:5a:39:24:f7:bf:e0:56:fb:a5:91:41:a4:f5:8b:
7e:5d:15:1e:c6:d2:0c:bf:1f:f0:f2:a0:28:93:f5:7a:a9:d0:
a0:9f:c1:1c:46:57:69:ef:fa:ef:4c:f9:c0:44:27:bd:69:1c:
c4:0b:a0:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:18:50 2025 by rpki-client