![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/3e77dc-4868-41d4-90c4-2ac8bcd83550/1/MpZ6d0c2XIGd5gdvf1qgujyeWYo.mft
File: MpZ6d0c2XIGd5gdvf1qgujyeWYo.mft (raw, json)
Hash identifier: T3xlrISLhqZyDlVTgcENtV0OcmEwI66JZS6bkc65zBA=
Subject key identifier: 93:2C:2E:DB:53:4F:CC:29:E3:12:9F:43:AE:5D:2A:83:72:47:0F:2D
Authority key identifier: 32:96:7A:77:47:36:5C:81:9D:E6:07:6F:7F:5A:A0:BA:3C:9E:59:8A
Certificate issuer: /CN=32967a7747365c819de6076f7f5aa0ba3c9e598a
Certificate serial: 01951134B66D47047923543AFA5885CA2959
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MpZ6d0c2XIGd5gdvf1qgujyeWYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/3e77dc-4868-41d4-90c4-2ac8bcd83550/1/MpZ6d0c2XIGd5gdvf1qgujyeWYo.mft
Manifest number: 1457
Signing time: Mon 17 Feb 2025 00:00:21 +0000
Manifest this update: Mon 17 Feb 2025 00:00:21 +0000
Manifest next update: Tue 18 Feb 2025 00:00:21 +0000
Files and hashes: 1: FhZSLFV8-vM046QI8Vb33R1E0e8.roa (hash: f3eqnqdq9rWk7n9nPOwGunFqubODgfs5rafbqH5/HQw=)
2: MpZ6d0c2XIGd5gdvf1qgujyeWYo.crl (hash: Uy6lsimgTxsbimJdZk1+z1pS/avonYnlqnPJVUfM4yk=)
3: X-ClDjMzAtgNyKBr2k9TMrqu3vE.roa (hash: 7Ip8LVyEIhcWLOz6eWH0cRFN5zErMvUCRSSMLokd5pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/3e77dc-4868-41d4-90c4-2ac8bcd83550/1/MpZ6d0c2XIGd5gdvf1qgujyeWYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/3e77dc-4868-41d4-90c4-2ac8bcd83550/1/MpZ6d0c2XIGd5gdvf1qgujyeWYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/MpZ6d0c2XIGd5gdvf1qgujyeWYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:b6:6d:47:04:79:23:54:3a:fa:58:85:ca:29:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32967a7747365c819de6076f7f5aa0ba3c9e598a
Validity
Not Before: Feb 17 00:00:21 2025 GMT
Not After : Feb 18 00:00:21 2025 GMT
Subject: CN=932c2edb534fcc29e3129f43ae5d2a8372470f2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:82:d6:85:a4:8c:c6:ae:de:b0:90:a9:77:56:
05:51:c9:d1:42:ef:8a:49:fe:8b:3b:18:b3:07:24:
2a:c3:69:c7:b7:2d:d4:33:42:f9:e0:e8:75:15:3f:
72:8a:8c:4f:84:93:3a:fc:69:1f:b4:62:4b:d3:a8:
20:40:a9:68:3c:41:3b:91:94:ca:5f:44:fe:b9:5d:
7a:c7:c8:e1:d1:39:01:6e:db:18:ec:74:b3:f9:c8:
e3:27:f9:7c:fc:81:1e:c3:62:be:6b:75:9a:90:ae:
7c:66:c3:db:37:b4:0e:9e:0c:98:66:2a:40:54:e8:
1a:5d:de:ef:a4:6b:4c:72:90:52:1a:6b:d3:19:7a:
6f:ae:74:77:b3:d0:d3:c8:4c:cb:7a:a8:49:79:16:
1a:7c:b5:d9:b2:cb:fb:7c:61:51:a3:b6:2d:19:78:
ae:b1:cb:ae:77:fc:ac:49:dc:93:2e:16:93:1e:d5:
27:a7:79:ea:15:65:53:60:39:f5:3f:d6:1d:2b:9b:
6a:a1:7a:fb:32:38:52:bc:fc:7e:9a:c7:10:aa:57:
2d:18:23:b6:c7:cf:da:cd:34:b1:62:26:19:7a:96:
54:cf:c6:b5:80:7d:73:49:65:5d:e1:ad:00:ed:2f:
cf:3a:22:f0:f8:37:ce:9c:6f:61:66:31:ac:0d:80:
57:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:2C:2E:DB:53:4F:CC:29:E3:12:9F:43:AE:5D:2A:83:72:47:0F:2D
X509v3 Authority Key Identifier:
keyid:32:96:7A:77:47:36:5C:81:9D:E6:07:6F:7F:5A:A0:BA:3C:9E:59:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MpZ6d0c2XIGd5gdvf1qgujyeWYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/3e77dc-4868-41d4-90c4-2ac8bcd83550/1/MpZ6d0c2XIGd5gdvf1qgujyeWYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/3e77dc-4868-41d4-90c4-2ac8bcd83550/1/MpZ6d0c2XIGd5gdvf1qgujyeWYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:59:1d:28:22:4f:ec:1b:52:60:cd:ff:71:c2:da:4b:3f:b2:
17:61:e6:a1:32:a9:1c:ff:10:38:9c:66:47:4e:71:c3:9a:8e:
bd:77:8e:2e:2a:7d:cd:fc:0d:1f:f8:87:8d:2e:8d:06:d7:a6:
1b:45:0c:92:b6:7f:b6:f6:ee:b0:d5:bd:27:e6:9b:f4:c6:ee:
b7:e2:9a:d4:0a:5f:a1:fa:17:46:73:6a:96:04:b7:84:fc:9c:
65:dc:b2:60:ef:51:53:f7:88:df:04:85:28:74:e2:68:42:96:
ee:8f:02:35:63:2a:9a:7c:ac:1d:37:65:8c:27:ab:85:f5:a3:
6c:5c:83:99:06:41:83:52:e7:30:e5:73:fc:89:06:06:1f:1b:
95:00:24:14:45:92:0e:2d:00:97:72:bf:5d:73:e7:8e:0b:4f:
59:0a:86:70:95:df:a0:51:c4:2a:99:23:25:d2:05:c0:ee:a4:
da:bb:6e:25:da:7a:cc:2a:d6:94:be:20:dc:54:e8:2c:66:99:
42:01:73:5a:ba:1c:93:53:9d:b5:df:08:c5:e1:42:5b:4d:33:
8c:52:19:85:05:ac:84:02:7d:31:df:a9:2e:10:3d:cb:c6:cc:
bf:da:25:5b:60:fc:ae:b2:96:de:4d:0d:ad:dd:91:79:86:de:
a1:42:85:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:24:36 2025 by rpki-client