![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/np5oh-p1cqZBEwbIewzAiTl6Y1Q.mft
File: np5oh-p1cqZBEwbIewzAiTl6Y1Q.mft (raw, json)
Hash identifier: 6mQ41R780VlAKOoGkdNf5gABhxzYKjTRGlpk3ZIjlSs=
Subject key identifier: C6:36:FA:81:42:60:A4:70:66:63:FF:74:FD:24:7B:2F:91:8E:70:DF
Authority key identifier: 9E:9E:68:87:EA:75:72:A6:41:13:06:C8:7B:0C:C0:89:39:7A:63:54
Certificate issuer: /CN=9e9e6887ea7572a6411306c87b0cc089397a6354
Certificate serial: 01951134DC857D34FC62B8C33C2BA26F23B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/np5oh-p1cqZBEwbIewzAiTl6Y1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/np5oh-p1cqZBEwbIewzAiTl6Y1Q.mft
Manifest number: 100C
Signing time: Mon 17 Feb 2025 00:00:31 +0000
Manifest this update: Mon 17 Feb 2025 00:00:31 +0000
Manifest next update: Tue 18 Feb 2025 00:00:31 +0000
Files and hashes: 1: YJ50MQnvVhHtjWvLvxqRLtfcQ7A.roa (hash: dYfbwzgf/ynRL4xNJih6ua1qw+Sw/CexFK1ACNOG+tc=)
2: np5oh-p1cqZBEwbIewzAiTl6Y1Q.crl (hash: OkUFXX5cZlD6Bfl57mcGG2nGHA+V5Ywr121mgOOJESs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/np5oh-p1cqZBEwbIewzAiTl6Y1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/np5oh-p1cqZBEwbIewzAiTl6Y1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/np5oh-p1cqZBEwbIewzAiTl6Y1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:dc:85:7d:34:fc:62:b8:c3:3c:2b:a2:6f:23:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e9e6887ea7572a6411306c87b0cc089397a6354
Validity
Not Before: Feb 17 00:00:31 2025 GMT
Not After : Feb 18 00:00:31 2025 GMT
Subject: CN=c636fa814260a4706663ff74fd247b2f918e70df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:97:0c:05:4b:de:d2:32:aa:89:16:9b:e2:57:
8b:92:d3:7f:25:f9:43:7a:16:7e:22:4e:19:6f:99:
62:20:74:07:42:2a:7d:c1:62:8e:ea:3b:34:f3:c2:
59:ba:3c:b7:80:a8:e9:ce:9b:20:5e:ff:43:45:b7:
fc:b9:64:35:cf:14:1d:2f:00:19:d6:1e:3a:15:0f:
f0:9c:7d:64:fa:68:a7:d9:5d:50:18:a6:61:66:d7:
7a:a6:00:ba:20:2a:1b:7f:c2:44:2d:c8:64:e0:f1:
ee:05:bd:7a:19:18:54:53:ce:ff:f2:33:81:d1:1d:
2a:8f:f4:a1:19:d5:2e:46:ed:9b:eb:36:dc:e3:d3:
17:56:61:96:49:22:1b:6d:fa:5f:96:60:4b:d4:d4:
90:75:a6:20:e0:7a:30:a1:ff:91:a9:46:4f:9b:ad:
03:95:a1:f7:6f:c2:5e:ab:5e:4b:2a:05:6f:73:1a:
89:b9:77:80:5c:f7:1d:f4:0d:ab:54:0f:4e:52:da:
4c:ab:6b:e3:7a:11:2e:da:1f:07:a3:48:24:2d:34:
4b:2e:9e:39:9e:d2:06:0b:ea:50:1c:5b:00:3c:7e:
f4:aa:3c:1a:67:f0:c0:97:1f:93:56:fc:29:33:71:
62:dc:93:9a:b2:85:00:df:bd:61:6b:a5:56:d5:2e:
1e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:36:FA:81:42:60:A4:70:66:63:FF:74:FD:24:7B:2F:91:8E:70:DF
X509v3 Authority Key Identifier:
keyid:9E:9E:68:87:EA:75:72:A6:41:13:06:C8:7B:0C:C0:89:39:7A:63:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/np5oh-p1cqZBEwbIewzAiTl6Y1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/np5oh-p1cqZBEwbIewzAiTl6Y1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/np5oh-p1cqZBEwbIewzAiTl6Y1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:82:06:26:88:15:18:4b:0d:c5:b4:77:70:16:50:a8:a7:da:
53:de:2b:98:6c:06:e8:ab:3b:8c:53:65:61:0a:35:bb:65:7a:
ab:34:44:af:1d:19:ce:73:a9:8e:43:df:44:43:a8:e7:ce:df:
a8:2d:a1:dc:11:db:af:a0:b3:c9:21:ab:81:de:a1:1f:73:99:
9d:5e:cb:0c:0d:e7:3c:1a:ab:7f:99:80:9b:da:e0:b2:82:b0:
c9:22:f7:8c:ce:a0:7f:3d:42:de:d9:71:aa:ab:0c:9d:d6:20:
b5:06:11:30:4c:99:eb:26:d9:b7:c7:9a:6a:8f:9d:96:0b:40:
39:ba:38:69:d3:b8:45:62:f0:e5:3e:06:f4:b3:ae:b5:85:23:
ba:83:d1:2c:44:86:a0:e4:79:28:1b:7a:4e:53:48:0b:da:6b:
c6:a2:d6:95:f1:3d:66:47:03:42:de:18:99:f5:7d:21:66:99:
35:1c:e0:71:0f:b4:6b:21:a7:35:a6:7d:80:e8:2f:cf:6b:7a:
2a:d8:3a:e4:9e:dd:e6:de:f0:09:f2:b6:8e:4d:e4:bd:db:96:
8e:14:65:df:a6:12:a9:3b:b4:fc:f0:9c:e2:03:de:29:00:f3:
44:b1:f7:76:8e:14:62:a1:37:ea:08:8b:ad:0d:82:ae:12:9a:
ce:73:e7:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:01:32 2025 by rpki-client