![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/ca5b7b-b5d6-40af-877c-1a7f84b40792/1/R8x-nha98tTmHHXufgADPnZvmJc.mft
File: R8x-nha98tTmHHXufgADPnZvmJc.mft (raw, json)
Hash identifier: u4kKEJn0W1SQy1fF7w67aX7cTLqyFWdf2SmT+NUyXCs=
Subject key identifier: 9A:28:C3:F0:DF:71:92:BD:99:43:EB:C0:81:49:10:21:13:7C:A1:CB
Authority key identifier: 47:CC:7E:9E:16:BD:F2:D4:E6:1C:75:EE:7E:00:03:3E:76:6F:98:97
Certificate issuer: /CN=47cc7e9e16bdf2d4e61c75ee7e00033e766f9897
Certificate serial: 01951210AAC6DD4205FE249F394D895C28B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R8x-nha98tTmHHXufgADPnZvmJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/ca5b7b-b5d6-40af-877c-1a7f84b40792/1/R8x-nha98tTmHHXufgADPnZvmJc.mft
Manifest number: 1454
Signing time: Mon 17 Feb 2025 04:00:36 +0000
Manifest this update: Mon 17 Feb 2025 04:00:36 +0000
Manifest next update: Tue 18 Feb 2025 04:00:36 +0000
Files and hashes: 1: R8x-nha98tTmHHXufgADPnZvmJc.crl (hash: A9WQ43MgFQvxVGbBA15araYk1WpIznVr3lLgFb4fT/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/ca5b7b-b5d6-40af-877c-1a7f84b40792/1/R8x-nha98tTmHHXufgADPnZvmJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/ca5b7b-b5d6-40af-877c-1a7f84b40792/1/R8x-nha98tTmHHXufgADPnZvmJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/R8x-nha98tTmHHXufgADPnZvmJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:aa:c6:dd:42:05:fe:24:9f:39:4d:89:5c:28:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47cc7e9e16bdf2d4e61c75ee7e00033e766f9897
Validity
Not Before: Feb 17 04:00:36 2025 GMT
Not After : Feb 18 04:00:36 2025 GMT
Subject: CN=9a28c3f0df7192bd9943ebc081491021137ca1cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:8c:49:f3:b0:54:62:7a:e9:44:44:b1:47:58:
f8:b8:29:51:21:66:4d:db:81:5e:cd:1a:8c:c7:fc:
1c:fd:4e:1f:de:07:eb:b5:b9:f9:ab:66:02:89:d0:
af:1b:55:9e:a4:fc:85:7b:1f:fd:54:73:d1:9e:44:
a3:7a:9f:c8:9a:e9:dc:28:9a:67:79:2f:0e:c7:3e:
8d:26:91:bd:d1:05:7e:7f:b5:6c:17:5f:44:f2:f0:
86:24:dd:86:ac:cd:09:73:c4:a2:c9:b3:6b:76:a6:
b0:2d:3d:06:1e:4e:db:99:2b:2e:ff:fd:09:af:ae:
2f:65:79:8d:63:fd:9a:fd:96:24:18:28:5a:08:b0:
49:25:7f:66:ea:15:8f:60:c5:34:2b:5e:86:b7:42:
9a:38:85:54:cf:7b:78:24:d3:f1:9e:6b:fe:85:b6:
cb:af:68:3e:f9:3e:ac:96:6f:72:94:76:68:87:66:
ee:e3:5c:58:95:df:4f:49:3f:8f:51:92:9b:1e:d5:
89:59:b1:b6:20:5b:3b:b7:e3:02:b6:a9:d1:d1:c3:
28:5d:b5:0a:e7:11:47:42:f2:f9:cd:70:c9:d2:0f:
1b:1e:b7:19:f6:60:08:c0:26:c8:12:e9:a7:cb:b1:
d1:c0:75:5f:09:a1:df:8b:43:5c:68:f6:7c:e7:6f:
69:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:28:C3:F0:DF:71:92:BD:99:43:EB:C0:81:49:10:21:13:7C:A1:CB
X509v3 Authority Key Identifier:
keyid:47:CC:7E:9E:16:BD:F2:D4:E6:1C:75:EE:7E:00:03:3E:76:6F:98:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R8x-nha98tTmHHXufgADPnZvmJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ca5b7b-b5d6-40af-877c-1a7f84b40792/1/R8x-nha98tTmHHXufgADPnZvmJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ca5b7b-b5d6-40af-877c-1a7f84b40792/1/R8x-nha98tTmHHXufgADPnZvmJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:5e:f8:2d:00:b8:6b:7c:0b:1c:af:14:d7:9c:49:8b:90:f8:
11:6e:09:28:11:4b:bd:a2:eb:a5:c0:e9:6e:e6:5c:37:69:18:
23:07:00:46:39:01:23:ef:ec:56:c9:93:05:b3:83:24:0e:db:
ab:43:ab:b7:4e:21:88:59:be:53:1c:5e:bb:21:bf:2e:42:67:
ee:6f:60:f5:23:86:24:2d:cc:0c:95:ed:df:d0:7d:d6:cf:27:
84:97:2c:e3:61:d3:a4:64:51:6b:99:f2:b7:73:17:16:75:45:
de:ce:48:c5:72:5f:eb:5e:a4:54:1b:eb:0b:ec:dc:d5:f8:67:
98:74:a0:4f:1d:b4:33:2f:69:a6:c9:b7:67:de:73:75:a5:1c:
af:ac:eb:88:b6:23:50:c4:2f:bd:a6:d3:d1:64:c8:f8:4c:04:
7c:7c:b5:62:da:a5:29:82:ed:9c:2b:b2:37:4d:59:5d:4f:69:
8c:5f:d7:c6:97:24:89:4c:56:16:41:ec:17:e2:72:68:9b:b0:
71:cb:24:13:41:52:5e:80:1f:88:fa:01:e0:b2:92:d1:87:15:
78:23:a3:26:e7:9a:e5:ca:94:8e:23:0a:1f:c7:a8:9c:3f:14:
e2:df:73:92:08:e1:b4:3a:11:9f:4d:15:11:5c:fd:9d:6f:7a:
57:aa:77:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:17:37 2025 by rpki-client