![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/d6ae54-ed67-401a-88f3-7f8c983f14a4/1/612h2h-h1CXPHcnoJtZe2u1s2Jg.mft
File: 612h2h-h1CXPHcnoJtZe2u1s2Jg.mft (raw, json)
Hash identifier: Lt2vsuS9nHt29i+rooSK4UBouqe5WcByTFLSSPbtk2g=
Subject key identifier: 5F:F9:E5:09:2B:AB:53:5B:0F:28:1D:F1:28:46:C7:B2:7C:8E:01:0C
Authority key identifier: EB:5D:A1:DA:1F:A1:D4:25:CF:1D:C9:E8:26:D6:5E:DA:ED:6C:D8:98
Certificate issuer: /CN=eb5da1da1fa1d425cf1dc9e826d65edaed6cd898
Certificate serial: 019511D9B59CA005D9798FA35284FE6ABE35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/612h2h-h1CXPHcnoJtZe2u1s2Jg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/d6ae54-ed67-401a-88f3-7f8c983f14a4/1/612h2h-h1CXPHcnoJtZe2u1s2Jg.mft
Manifest number: 1209
Signing time: Mon 17 Feb 2025 03:00:35 +0000
Manifest this update: Mon 17 Feb 2025 03:00:35 +0000
Manifest next update: Tue 18 Feb 2025 03:00:35 +0000
Files and hashes: 1: 612h2h-h1CXPHcnoJtZe2u1s2Jg.crl (hash: 4dGlGASpXXz5NUJNXNm1xWQxPAlOzNqwHFPOIwmNmkw=)
2: T71-lLx_IRd0xdRoRiuKn01ramI.roa (hash: NdMh7OdN9MHFrjt5MDBsZ76I4BvEZisy0vA5gq92uHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/d6ae54-ed67-401a-88f3-7f8c983f14a4/1/612h2h-h1CXPHcnoJtZe2u1s2Jg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/d6ae54-ed67-401a-88f3-7f8c983f14a4/1/612h2h-h1CXPHcnoJtZe2u1s2Jg.mft
rsync://rpki.ripe.net/repository/DEFAULT/612h2h-h1CXPHcnoJtZe2u1s2Jg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:b5:9c:a0:05:d9:79:8f:a3:52:84:fe:6a:be:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb5da1da1fa1d425cf1dc9e826d65edaed6cd898
Validity
Not Before: Feb 17 03:00:35 2025 GMT
Not After : Feb 18 03:00:35 2025 GMT
Subject: CN=5ff9e5092bab535b0f281df12846c7b27c8e010c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:28:18:d3:55:10:14:4c:1a:6d:0d:36:51:f3:
f7:2b:c1:da:39:36:b7:23:f2:f6:60:7d:d4:63:dd:
57:4b:d1:1c:35:04:ba:34:a2:a2:f8:23:c6:64:62:
ae:75:e1:57:c1:ed:7e:19:41:1f:cf:27:04:27:ab:
d4:65:46:84:38:5a:ef:2b:33:6f:ed:05:0b:e9:fa:
3b:fb:a4:15:8e:f7:e3:6d:fd:bb:e0:f0:ec:bc:a4:
08:56:cc:de:aa:e8:8c:31:ea:a8:ba:c2:40:c7:f2:
6a:c2:c6:76:d5:32:b8:e7:9f:a5:40:f0:77:57:ae:
d1:54:8f:f8:dc:bb:2b:14:59:5f:8a:5a:96:48:58:
b7:74:49:6b:0d:b7:27:92:8a:73:95:da:f1:3f:42:
7d:50:c9:13:53:b6:fa:be:3a:a3:56:0b:2f:3a:80:
36:56:35:73:63:96:38:78:d5:5f:14:f6:61:6e:a4:
95:44:4d:14:e7:85:a1:81:44:7d:ae:6e:c0:57:84:
20:e9:95:9b:72:be:22:65:4a:e6:39:fd:f4:bf:d0:
da:f7:dc:75:1c:98:99:f8:fe:dd:91:f7:bd:39:86:
ea:95:3c:35:f6:51:b8:d9:c1:fc:81:24:eb:1b:fe:
63:9d:ae:0e:27:20:e2:fb:0c:2a:ba:d9:0c:fa:4c:
da:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:F9:E5:09:2B:AB:53:5B:0F:28:1D:F1:28:46:C7:B2:7C:8E:01:0C
X509v3 Authority Key Identifier:
keyid:EB:5D:A1:DA:1F:A1:D4:25:CF:1D:C9:E8:26:D6:5E:DA:ED:6C:D8:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/612h2h-h1CXPHcnoJtZe2u1s2Jg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d6ae54-ed67-401a-88f3-7f8c983f14a4/1/612h2h-h1CXPHcnoJtZe2u1s2Jg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d6ae54-ed67-401a-88f3-7f8c983f14a4/1/612h2h-h1CXPHcnoJtZe2u1s2Jg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:3f:d2:19:2f:9b:02:9d:fc:d9:a4:23:34:b7:0a:f6:57:ac:
6f:83:01:01:00:58:80:cd:51:7f:db:1a:c4:cf:7c:ef:cf:6e:
e8:82:b4:ed:28:7f:27:18:d6:0d:c6:74:d5:c4:5d:54:ff:c3:
f2:6b:92:7f:75:35:2d:4f:df:c4:a9:89:82:53:47:e3:ad:2e:
d9:18:ba:f7:51:f7:e9:ef:62:f8:c8:e9:91:5b:af:a0:70:8c:
60:73:7c:04:41:36:8a:a0:bd:87:41:9b:5f:c5:c8:cf:2c:94:
1c:75:c1:26:e1:55:d8:08:5f:dc:42:1f:5c:1f:e5:9b:9e:ab:
e0:a6:78:32:ab:72:c1:8f:4b:35:01:89:e4:bb:f2:88:aa:e7:
b3:91:4a:d6:91:6e:4a:6b:3b:e8:93:8c:7e:0a:99:66:fb:da:
ed:08:15:36:e0:3d:95:34:bf:68:88:20:3e:ee:d1:76:ca:36:
5c:28:52:75:49:c8:ff:62:ab:f6:a7:a7:d8:46:12:7c:55:a7:
ca:a4:6b:78:fe:7e:b3:bc:4f:ae:a8:5e:4f:3a:e2:b9:12:06:
b1:b8:e4:be:8b:b3:28:c7:97:14:25:b5:39:77:d8:c1:b5:29:
73:5f:b3:79:b6:f7:8b:e4:7d:8b:85:9d:7f:8f:08:46:ec:af:
27:82:8c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:54:05 2025 by rpki-client