![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/eb4c6e-a2b0-4e5b-9aea-8b7cf9b86764/1/drjsczufmU1ahYxeVVF46K6Kou0.mft
File: drjsczufmU1ahYxeVVF46K6Kou0.mft (raw, json)
Hash identifier: U5cM57+3XFXPS/iYZQ7PTKLCQq5pf4lVkWm1bKpQ1C0=
Subject key identifier: CD:A7:55:6A:78:F2:65:58:9A:4B:64:9A:19:52:7E:07:49:25:84:C7
Authority key identifier: 76:B8:EC:73:3B:9F:99:4D:5A:85:8C:5E:55:51:78:E8:AE:8A:A2:ED
Certificate issuer: /CN=76b8ec733b9f994d5a858c5e555178e8ae8aa2ed
Certificate serial: 01951134CCE54B691C75750F5F3D3A85DF60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/drjsczufmU1ahYxeVVF46K6Kou0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/eb4c6e-a2b0-4e5b-9aea-8b7cf9b86764/1/drjsczufmU1ahYxeVVF46K6Kou0.mft
Manifest number: 0F1E
Signing time: Mon 17 Feb 2025 00:00:27 +0000
Manifest this update: Mon 17 Feb 2025 00:00:27 +0000
Manifest next update: Tue 18 Feb 2025 00:00:27 +0000
Files and hashes: 1: S4GC9z8T1D4fMhH9pz6xtTzGJy8.roa (hash: oDc/JvXHI28ccd9ZG6/Yr60N+FV54r1lVJyg24riv30=)
2: drjsczufmU1ahYxeVVF46K6Kou0.crl (hash: /19z4wjkHbkNSoBwpomuA2UEwr2L129dqXwAZXF9jgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/eb4c6e-a2b0-4e5b-9aea-8b7cf9b86764/1/drjsczufmU1ahYxeVVF46K6Kou0.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/eb4c6e-a2b0-4e5b-9aea-8b7cf9b86764/1/drjsczufmU1ahYxeVVF46K6Kou0.mft
rsync://rpki.ripe.net/repository/DEFAULT/drjsczufmU1ahYxeVVF46K6Kou0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:cc:e5:4b:69:1c:75:75:0f:5f:3d:3a:85:df:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76b8ec733b9f994d5a858c5e555178e8ae8aa2ed
Validity
Not Before: Feb 17 00:00:27 2025 GMT
Not After : Feb 18 00:00:27 2025 GMT
Subject: CN=cda7556a78f265589a4b649a19527e07492584c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:37:1b:11:c2:20:28:3f:80:b0:21:a7:fb:21:
4f:51:1e:5a:91:c3:59:c9:99:eb:46:8c:33:78:bd:
38:a7:35:20:5b:00:4a:bc:f7:50:65:be:e4:96:05:
2e:30:5d:bb:17:4b:5a:55:a6:9e:b9:f0:9e:ee:2f:
35:4c:12:d7:de:d9:ae:7f:77:46:b8:52:3d:cb:a1:
16:a9:ea:8c:69:3c:a4:1b:27:0c:27:8d:c6:4e:02:
17:df:ae:07:a4:d1:30:5c:a3:d6:b3:32:ff:cb:04:
1f:dc:f7:a1:4e:5c:92:92:46:64:65:6a:77:d2:bd:
09:2a:7b:5d:55:4b:2a:01:03:2e:97:dd:3b:58:85:
3f:ea:09:fb:8a:0e:25:25:73:65:22:40:d9:16:72:
e8:05:66:61:dc:95:41:4c:84:00:92:01:5b:1e:e0:
f7:f3:09:ce:e8:3a:87:f9:16:e3:71:51:17:d3:89:
92:e2:e5:e9:16:12:02:03:c9:38:8b:34:e4:4a:19:
93:58:00:44:56:93:3d:bc:3d:8a:87:b4:fd:8d:1b:
22:2d:dd:8a:82:b3:79:15:b6:c9:ec:6e:86:f3:2e:
6b:69:84:a2:28:2e:47:ba:fd:4b:bb:f4:3c:ac:6c:
ce:ac:36:f6:18:d7:36:71:fb:0b:e7:59:37:72:1f:
a6:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:A7:55:6A:78:F2:65:58:9A:4B:64:9A:19:52:7E:07:49:25:84:C7
X509v3 Authority Key Identifier:
keyid:76:B8:EC:73:3B:9F:99:4D:5A:85:8C:5E:55:51:78:E8:AE:8A:A2:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/drjsczufmU1ahYxeVVF46K6Kou0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/eb4c6e-a2b0-4e5b-9aea-8b7cf9b86764/1/drjsczufmU1ahYxeVVF46K6Kou0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/eb4c6e-a2b0-4e5b-9aea-8b7cf9b86764/1/drjsczufmU1ahYxeVVF46K6Kou0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:48:40:0f:11:6e:c9:6e:47:bf:fb:0e:fa:c5:36:f5:0b:1a:
16:40:0b:f7:6b:86:2c:a5:31:50:ea:23:64:c5:f0:69:10:a4:
3c:43:24:49:d2:82:0b:c1:92:19:bc:31:ca:e8:16:b0:7e:28:
41:ca:f4:d0:1c:ac:c1:43:40:50:ed:bf:45:c3:e5:20:66:d0:
0b:6a:b9:55:ea:be:e6:98:b7:73:8a:dc:56:a6:66:1e:6f:cc:
ef:9e:19:80:27:f9:89:42:f7:77:cc:12:38:7f:15:98:97:c1:
aa:af:db:c2:b0:19:11:25:ed:ce:4d:98:38:ff:c9:71:8e:f4:
9c:e6:1c:f9:5e:7b:7e:c7:51:63:34:05:8e:09:c9:25:01:10:
38:98:7e:0e:77:f6:77:1a:e4:80:70:20:a6:b7:5f:4d:d7:12:
d2:ee:2c:06:12:f3:17:49:80:ce:6e:f4:bb:ab:cf:92:67:41:
b1:8c:13:14:cf:bf:40:7a:5f:e0:c6:08:85:b0:e5:71:3b:24:
c3:bd:ea:ba:65:ff:b4:f9:23:86:85:a3:ed:78:37:23:71:3a:
d9:c3:ed:b7:0f:39:5e:d6:62:66:21:5c:02:27:7d:12:a8:eb:
7b:ee:0c:69:cf:ee:8a:5f:c2:41:7c:f0:6d:22:cb:52:b2:fe:
31:fd:22:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:59:18 2025 by rpki-client