![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/4af7c1-50cb-479d-a377-007b447d4b39/1/wY3k8q-McFDm5w4IoVJXPt1C5ng.mft
File: wY3k8q-McFDm5w4IoVJXPt1C5ng.mft (raw, json)
Hash identifier: J+yc36LD0Tgd0OKPVsmQtuiNLmISDUoHKc3NZckcGpc=
Subject key identifier: 7A:99:BD:92:A4:1E:FF:01:34:78:A5:24:41:56:37:C8:2F:54:BC:69
Authority key identifier: C1:8D:E4:F2:AF:8C:70:50:E6:E7:0E:08:A1:52:57:3E:DD:42:E6:78
Certificate issuer: /CN=c18de4f2af8c7050e6e70e08a152573edd42e678
Certificate serial: 01951135204AA96C1A143B511EBAB38DE800
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wY3k8q-McFDm5w4IoVJXPt1C5ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/4af7c1-50cb-479d-a377-007b447d4b39/1/wY3k8q-McFDm5w4IoVJXPt1C5ng.mft
Manifest number: 079F
Signing time: Mon 17 Feb 2025 00:00:48 +0000
Manifest this update: Mon 17 Feb 2025 00:00:48 +0000
Manifest next update: Tue 18 Feb 2025 00:00:48 +0000
Files and hashes: 1: pFur-kbIHPtMOLrHz0LwLOKyGnk.roa (hash: CYiRhFaTrF8IsFJyFUUUj+3+nsfcKz+NgibdViBzD0s=)
2: wY3k8q-McFDm5w4IoVJXPt1C5ng.crl (hash: U2MtJDrHbkJ6UMk2BQIkjHvAO3fhpijJmxbtJO8rTJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/4af7c1-50cb-479d-a377-007b447d4b39/1/wY3k8q-McFDm5w4IoVJXPt1C5ng.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/4af7c1-50cb-479d-a377-007b447d4b39/1/wY3k8q-McFDm5w4IoVJXPt1C5ng.mft
rsync://rpki.ripe.net/repository/DEFAULT/wY3k8q-McFDm5w4IoVJXPt1C5ng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:35:20:4a:a9:6c:1a:14:3b:51:1e:ba:b3:8d:e8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c18de4f2af8c7050e6e70e08a152573edd42e678
Validity
Not Before: Feb 17 00:00:48 2025 GMT
Not After : Feb 18 00:00:48 2025 GMT
Subject: CN=7a99bd92a41eff013478a524415637c82f54bc69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b7:3f:33:c3:11:a9:39:a1:99:93:a6:8a:65:
e6:d2:16:69:d3:97:0f:c4:09:6f:17:8d:0e:e4:81:
48:c5:c3:8e:62:f6:8b:fa:c4:98:c2:d5:82:f3:25:
c9:73:6d:9c:1f:a2:49:33:be:94:55:32:1b:57:fc:
77:39:75:96:ee:5a:4f:ae:74:b8:92:61:c8:bf:21:
6c:86:c9:99:f5:6b:ea:b0:ea:f3:a7:67:47:ec:e9:
08:60:4b:2e:99:43:08:b6:82:d6:14:bf:1b:82:d5:
ea:fa:00:a0:5b:1a:ed:24:ce:e2:85:f9:73:88:ce:
b1:0b:45:f0:eb:89:a4:b8:4a:70:77:84:5a:c8:13:
c3:2e:82:13:ab:0d:4c:7b:f2:1f:c2:79:df:0c:be:
5b:d4:62:20:ac:f4:d5:8f:fa:ad:82:35:b4:23:f2:
b2:ac:b2:b1:0b:97:6b:fb:ad:0a:00:32:06:8b:a4:
01:0f:e1:5d:26:b2:71:e9:55:36:bb:71:7b:6b:55:
45:03:f4:c9:2f:e8:45:ab:cb:76:f6:c6:f0:15:13:
28:48:3e:ff:b3:4d:ad:2c:a2:cf:06:dd:22:a3:e0:
be:a7:75:47:04:5c:63:f8:0b:7a:97:9d:71:1b:e4:
9c:60:2d:9b:b0:de:de:f3:56:e1:ef:35:c8:1e:b9:
f8:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:99:BD:92:A4:1E:FF:01:34:78:A5:24:41:56:37:C8:2F:54:BC:69
X509v3 Authority Key Identifier:
keyid:C1:8D:E4:F2:AF:8C:70:50:E6:E7:0E:08:A1:52:57:3E:DD:42:E6:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wY3k8q-McFDm5w4IoVJXPt1C5ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4af7c1-50cb-479d-a377-007b447d4b39/1/wY3k8q-McFDm5w4IoVJXPt1C5ng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4af7c1-50cb-479d-a377-007b447d4b39/1/wY3k8q-McFDm5w4IoVJXPt1C5ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:c5:50:31:72:ec:fc:b0:dc:9f:80:ca:44:6c:8f:0b:79:e4:
95:ed:c3:34:2e:6f:ad:ab:65:4c:14:2d:df:85:f2:74:c8:79:
bc:74:3b:89:32:c7:6c:0e:e4:b0:9b:41:1b:e2:44:0a:1b:f1:
f3:7a:8e:74:95:9f:b4:25:7f:68:53:51:e0:5a:62:7d:0d:93:
9c:c7:31:77:64:b8:48:cd:61:59:84:17:1d:3d:c4:da:eb:0d:
44:50:25:0e:bc:19:51:6d:ee:36:7c:08:0f:bb:b4:43:79:25:
5c:36:9b:16:da:e9:07:6b:db:9a:af:f1:a0:38:23:e4:2b:59:
8d:f4:16:10:c3:c6:d7:3f:3e:6e:9c:38:69:00:c8:2a:76:71:
d4:b4:59:e2:6e:a1:2c:72:d3:7d:42:0c:a5:6e:f5:39:62:8c:
bb:16:1b:f4:17:1e:57:b7:77:38:77:13:12:31:f6:b8:31:4c:
07:5a:94:e8:8c:5d:e1:32:df:6d:7f:20:17:4c:1b:70:d0:55:
56:a0:3b:88:02:53:cd:d2:6c:42:cc:bb:5e:70:e2:20:f9:da:
e1:08:a6:41:ec:3c:d3:d8:b3:1a:98:9d:6d:be:32:20:78:77:
44:72:60:53:2a:62:5f:9d:a4:7b:32:be:d0:95:74:91:22:3e:
41:b9:82:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:09:25 2025 by rpki-client