![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/d10813-fe61-4033-a433-5ee9b62246db/1/1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.mft
File: 1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.mft (raw, json)
Hash identifier: 8Rw3N12L5DTdruc9jmN7uvMC5lZ5Eto2EJ5mJTZGrK8=
Subject key identifier: C4:F1:A7:98:48:A6:87:CE:EA:1D:E7:B0:32:28:1C:56:65:1B:3C:AC
Authority key identifier: FB:F3:80:B6:67:5B:9C:CD:5F:81:2E:06:9F:FF:17:54:78:FB:38:A4
Certificate issuer: /CN=fbf380b6675b9ccd5f812e069fff175478fb38a4
Certificate serial: 019510FDBA63A52A50C7A3DA95B01C9964AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/d10813-fe61-4033-a433-5ee9b62246db/1/1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.mft
Manifest number: 0F62
Signing time: Sun 16 Feb 2025 23:00:18 +0000
Manifest this update: Sun 16 Feb 2025 23:00:18 +0000
Manifest next update: Mon 17 Feb 2025 23:00:18 +0000
Files and hashes: 1: 1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.crl (hash: 8YbmioVHj84GbfRIjIeMq4Z0n2dj1NX7ITYS1V3cYi0=)
2: oCmBMF8iI8CutVf6sdX1dTs5wPg.roa (hash: TfgX1fiboG0xroG328eMyAxUa0ejT6atD6RIyf61++A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/d10813-fe61-4033-a433-5ee9b62246db/1/1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/d10813-fe61-4033-a433-5ee9b62246db/1/1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fd:ba:63:a5:2a:50:c7:a3:da:95:b0:1c:99:64:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbf380b6675b9ccd5f812e069fff175478fb38a4
Validity
Not Before: Feb 16 23:00:18 2025 GMT
Not After : Feb 17 23:00:18 2025 GMT
Subject: CN=c4f1a79848a687ceea1de7b032281c56651b3cac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:6f:72:c6:bc:56:b0:09:39:6c:24:1e:9d:e1:
97:4f:9e:c1:e4:3d:9b:76:e2:e7:1b:5f:60:23:64:
0c:9a:01:8b:0c:71:36:cb:6a:35:5f:0e:e7:fd:59:
58:a3:d0:b4:0c:2f:6a:ff:69:ed:5e:40:c7:15:c1:
93:6c:f3:e2:f7:b1:b9:91:9d:27:2e:c5:56:81:03:
02:f4:80:68:2f:c1:30:a9:cc:93:87:1f:1a:a1:34:
fc:d0:f9:f9:b9:53:34:1e:c2:f4:8a:ba:98:5b:36:
cc:4b:1c:71:a3:2c:6a:97:ab:0a:2c:39:d8:ea:3d:
2d:52:cf:26:3e:db:6b:2b:92:51:f8:ed:ce:7c:f3:
55:23:91:4b:d4:f2:a9:09:79:b2:c7:ee:3e:ae:30:
c7:8d:30:ed:8c:50:1c:00:32:7e:0f:e8:53:5c:b7:
11:66:02:f4:5b:28:f8:9b:b1:76:23:4f:d1:80:0c:
3c:41:dd:e9:65:7a:0f:30:eb:6b:23:ee:52:ba:5b:
d4:b6:ec:23:90:b5:84:4b:50:86:57:78:8f:b6:2d:
c7:3e:64:70:7e:c4:1c:f3:5d:d9:75:cf:d2:d2:23:
44:bc:58:f3:ff:df:a0:da:7c:8c:92:ad:7c:f4:17:
10:b3:ed:c7:92:2c:17:da:e6:31:d6:16:39:c3:fc:
92:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:F1:A7:98:48:A6:87:CE:EA:1D:E7:B0:32:28:1C:56:65:1B:3C:AC
X509v3 Authority Key Identifier:
keyid:FB:F3:80:B6:67:5B:9C:CD:5F:81:2E:06:9F:FF:17:54:78:FB:38:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d10813-fe61-4033-a433-5ee9b62246db/1/1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d10813-fe61-4033-a433-5ee9b62246db/1/1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:87:97:b1:83:15:e4:83:f3:62:15:e8:70:ba:56:e5:54:9c:
a2:6c:b9:27:85:5d:b7:f4:d9:5e:03:cb:f6:88:0a:ef:75:24:
27:42:7d:cf:73:a4:db:10:10:1b:0e:15:b1:f8:4a:a6:cd:5a:
1a:cd:b3:81:61:2c:00:e1:dd:fb:9c:cc:7f:38:b2:0b:06:08:
02:07:70:ff:43:9a:ac:47:39:b2:5b:da:3b:ec:c2:f4:a3:02:
6b:74:c1:07:c6:82:58:c3:cb:53:9a:ac:ea:11:af:b3:df:44:
e5:d3:67:03:e5:e0:f6:59:dc:61:04:43:0b:95:ed:bc:53:8f:
10:68:1c:71:64:1d:aa:f7:6c:bc:a9:75:a2:cf:7f:7f:2b:65:
5b:22:93:47:84:b3:09:97:53:f5:7a:5e:4a:c1:17:68:22:d5:
00:5e:ea:be:4f:e8:b4:2a:8b:21:1c:bb:61:d2:34:74:cb:6b:
49:06:28:2e:9a:00:f7:ec:3b:49:ed:25:10:7d:b4:73:0c:dc:
a9:e2:9a:5c:61:a4:27:95:ee:c3:67:92:dd:f3:dc:50:c9:e4:
bd:0b:79:19:cf:b4:1b:d7:b5:f6:b9:3b:f4:b3:69:cd:d1:f5:
94:f1:30:e3:d6:c0:69:a9:90:82:61:25:6f:17:21:e4:a6:80:
73:3b:49:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:29:27 2025 by rpki-client