![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/IAsV4Hg_4A8bile9FP29BpJLiDI.mft
File: IAsV4Hg_4A8bile9FP29BpJLiDI.mft (raw, json)
Hash identifier: 08yCtVEpGuIRQFdqEPylfiiqMeQ3T4PV8BFTVXpRruM=
Subject key identifier: A6:13:46:ED:D4:7D:5E:53:80:5E:DE:B7:87:BE:A3:CA:9C:61:BF:34
Authority key identifier: 20:0B:15:E0:78:3F:E0:0F:1B:8A:57:BD:14:FD:BD:06:92:4B:88:32
Certificate issuer: /CN=200b15e0783fe00f1b8a57bd14fdbd06924b8832
Certificate serial: 0195116BC50382221BECB09A84F9B7C739A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IAsV4Hg_4A8bile9FP29BpJLiDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/IAsV4Hg_4A8bile9FP29BpJLiDI.mft
Manifest number: 1457
Signing time: Mon 17 Feb 2025 01:00:30 +0000
Manifest this update: Mon 17 Feb 2025 01:00:30 +0000
Manifest next update: Tue 18 Feb 2025 01:00:30 +0000
Files and hashes: 1: IAsV4Hg_4A8bile9FP29BpJLiDI.crl (hash: O2LeQv+UY2lwN08gIxkNH+EBiJf541Mkaj7EgUmceDA=)
2: foZeHIwLujdlY8Z9L88C79OdbL4.roa (hash: kBji60S+DjYJ/bgY7+g+22RM5gAKkLkkfayTk1h8AIo=)
3: szEuog0QzjoBQW1CQcU6MA8xPCY.roa (hash: LsMXxa5IeE1fxcnMKQjYIuPdJ91pJvkbpdujugd5olw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/IAsV4Hg_4A8bile9FP29BpJLiDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/IAsV4Hg_4A8bile9FP29BpJLiDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IAsV4Hg_4A8bile9FP29BpJLiDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6b:c5:03:82:22:1b:ec:b0:9a:84:f9:b7:c7:39:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=200b15e0783fe00f1b8a57bd14fdbd06924b8832
Validity
Not Before: Feb 17 01:00:30 2025 GMT
Not After : Feb 18 01:00:30 2025 GMT
Subject: CN=a61346edd47d5e53805edeb787bea3ca9c61bf34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d1:11:d0:a4:5d:c4:1c:68:91:3d:67:62:2c:
a6:dc:2c:51:dd:e2:4c:0a:b1:01:61:7d:fc:3b:16:
f6:bc:fa:0d:52:7a:a6:df:29:1a:ee:84:0f:b1:6c:
1d:a1:04:55:6e:eb:99:31:9d:be:db:14:e5:25:4f:
42:6a:43:be:f9:8b:c8:75:2d:b0:2a:f1:97:4a:6b:
6c:30:04:0b:de:51:61:8e:7d:9d:ee:b8:70:52:25:
0f:da:86:c5:f6:84:da:bf:32:de:67:be:30:bd:6f:
9b:92:8c:67:ef:c8:9b:d1:24:de:68:9d:99:66:c3:
cd:0b:37:97:26:e2:31:29:45:3c:d1:48:31:9b:ab:
cd:15:81:e9:22:b6:eb:6e:10:21:02:fa:64:84:db:
33:8d:5d:d8:84:12:14:96:6c:76:4e:f5:0b:88:a7:
bc:c1:2f:e8:30:6f:73:fd:11:6c:7d:1e:fe:72:62:
fc:f8:49:02:59:45:6b:c9:02:86:31:c4:01:9b:f1:
3c:ae:7e:63:db:ea:9b:80:ac:fa:a0:af:ae:1c:93:
8a:b0:d5:61:6c:6f:76:48:3a:cd:eb:0b:af:ff:71:
74:b2:5b:1e:e1:0e:9e:34:15:24:13:7d:97:85:f8:
a9:b3:e6:d2:a7:0f:bb:6a:8c:18:ee:82:a5:65:e7:
8d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:13:46:ED:D4:7D:5E:53:80:5E:DE:B7:87:BE:A3:CA:9C:61:BF:34
X509v3 Authority Key Identifier:
keyid:20:0B:15:E0:78:3F:E0:0F:1B:8A:57:BD:14:FD:BD:06:92:4B:88:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IAsV4Hg_4A8bile9FP29BpJLiDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/IAsV4Hg_4A8bile9FP29BpJLiDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/IAsV4Hg_4A8bile9FP29BpJLiDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:ea:2c:71:89:de:4b:9a:75:65:df:0d:e6:7c:37:39:6b:57:
53:83:57:01:7f:f5:33:c1:8b:7a:a2:d4:86:13:ad:c1:87:fb:
ca:48:1c:c1:6c:b7:1f:53:b4:b2:de:20:84:4e:4f:43:30:06:
ba:b6:a1:46:8d:cb:6b:d6:75:c7:5f:f5:d0:44:80:43:36:ac:
03:64:91:b0:06:23:e0:9d:3d:a4:75:ca:e5:dd:a8:19:f6:b7:
50:84:e5:76:e9:10:d2:6d:6b:5f:5c:09:48:c8:eb:f3:b5:e2:
21:06:97:33:b4:84:97:2e:5f:ac:8f:67:83:24:f5:87:67:2f:
39:aa:5d:2f:3f:99:69:52:a1:c5:f4:c1:15:8c:90:50:4c:92:
9f:bb:11:de:33:6a:39:c1:0f:0d:2e:40:ec:38:f2:63:2a:37:
f8:e9:74:09:65:36:ca:63:ca:e2:17:6b:8a:38:50:17:be:6e:
7c:bd:9d:8a:01:a5:37:ca:05:21:29:4c:5c:40:87:26:2d:92:
a9:a1:aa:94:9a:06:a8:37:07:c3:81:26:28:8e:bf:59:aa:bc:
bc:5d:a3:da:df:7a:d6:4c:86:2a:0a:5e:11:87:4d:20:61:e0:
85:d0:99:b9:43:89:f2:35:91:0d:4c:de:38:da:2d:c3:c1:34:
16:32:4c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:16:40 2025 by rpki-client