![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/2ec5b2-46f6-411b-b90f-a43aec6232aa/1/C6ZznUryCYWXGQqgkoMN6pwXpwA.mft
File: C6ZznUryCYWXGQqgkoMN6pwXpwA.mft (raw, json)
Hash identifier: I++L2fvbx7b8XHWviTKfgmXiC3cxfLtC/7sOxftj5Pw=
Subject key identifier: A4:9B:50:7F:4E:B1:04:22:58:28:4C:21:1D:C3:4F:3F:A4:34:56:20
Authority key identifier: 0B:A6:73:9D:4A:F2:09:85:97:19:0A:A0:92:83:0D:EA:9C:17:A7:00
Certificate issuer: /CN=0ba6739d4af2098597190aa092830dea9c17a700
Certificate serial: 0195121068B1EB48EAE336B1B77917BEEDEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C6ZznUryCYWXGQqgkoMN6pwXpwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/2ec5b2-46f6-411b-b90f-a43aec6232aa/1/C6ZznUryCYWXGQqgkoMN6pwXpwA.mft
Manifest number: 0A69
Signing time: Mon 17 Feb 2025 04:00:19 +0000
Manifest this update: Mon 17 Feb 2025 04:00:19 +0000
Manifest next update: Tue 18 Feb 2025 04:00:19 +0000
Files and hashes: 1: C6ZznUryCYWXGQqgkoMN6pwXpwA.crl (hash: Iq4brndzKoQ5umizj162mPApCAWRQU86UnluAXilltg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/2ec5b2-46f6-411b-b90f-a43aec6232aa/1/C6ZznUryCYWXGQqgkoMN6pwXpwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/2ec5b2-46f6-411b-b90f-a43aec6232aa/1/C6ZznUryCYWXGQqgkoMN6pwXpwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/C6ZznUryCYWXGQqgkoMN6pwXpwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:68:b1:eb:48:ea:e3:36:b1:b7:79:17:be:ed:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ba6739d4af2098597190aa092830dea9c17a700
Validity
Not Before: Feb 17 04:00:19 2025 GMT
Not After : Feb 18 04:00:19 2025 GMT
Subject: CN=a49b507f4eb1042258284c211dc34f3fa4345620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:71:05:5a:93:c5:ee:d6:4b:63:c5:bc:5b:30:
92:30:a7:bc:6c:8e:02:72:af:2d:60:0c:4a:43:34:
65:57:aa:92:5f:66:c5:48:74:15:69:4e:c9:f3:96:
79:b6:ec:a7:6a:e3:89:fb:fd:40:9b:4f:e0:3e:07:
86:d4:a4:7c:65:c6:85:51:41:2a:07:29:10:ee:2c:
44:6c:3b:9b:4c:a2:fa:fb:9a:34:ca:97:ff:a7:de:
06:c7:3c:45:75:2b:a1:7a:3b:29:91:06:09:2d:02:
91:e2:02:de:34:9c:99:40:3c:a4:3a:c8:e4:91:c4:
87:13:aa:14:97:17:b1:45:2b:54:bf:f8:1b:6b:f9:
5f:2d:de:6f:12:51:8c:77:fa:c2:fe:46:af:95:22:
09:c7:91:ff:21:06:32:89:d6:14:4f:c7:4e:a0:d7:
91:5e:29:10:86:ee:13:b9:ae:b9:d4:67:47:5b:06:
79:a9:d5:9b:58:b2:6d:52:8b:33:a0:27:d0:59:3f:
16:55:0f:d9:ca:f5:de:f5:4e:a3:4c:83:03:8f:66:
c8:8c:57:2b:85:60:c5:87:f0:76:e9:3b:dd:96:09:
99:d7:8b:51:55:75:78:e9:cd:4c:df:1b:ce:59:db:
11:db:bd:d1:57:c0:9f:15:0e:03:63:42:3e:a9:0e:
d2:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:9B:50:7F:4E:B1:04:22:58:28:4C:21:1D:C3:4F:3F:A4:34:56:20
X509v3 Authority Key Identifier:
keyid:0B:A6:73:9D:4A:F2:09:85:97:19:0A:A0:92:83:0D:EA:9C:17:A7:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6ZznUryCYWXGQqgkoMN6pwXpwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/2ec5b2-46f6-411b-b90f-a43aec6232aa/1/C6ZznUryCYWXGQqgkoMN6pwXpwA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/2ec5b2-46f6-411b-b90f-a43aec6232aa/1/C6ZznUryCYWXGQqgkoMN6pwXpwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:66:33:13:d0:c4:2f:2d:40:49:9c:b4:30:12:fb:82:6f:91:
4a:c1:fd:8b:91:87:a6:59:f1:53:9c:30:20:2e:5b:6c:ce:ef:
2d:6b:72:fd:5e:11:c1:3f:b8:f3:25:69:45:e7:3a:41:e0:ca:
25:15:d7:6f:63:7e:a3:2d:3c:4a:9e:d2:2d:71:be:42:2c:70:
9f:5d:97:ad:c9:6a:2f:49:f3:d1:f4:60:cd:6f:b1:8b:63:a4:
5e:07:bf:ee:9e:34:1a:e6:98:f2:b1:e6:c8:4c:18:ef:25:82:
2a:c0:2b:a0:de:c4:0f:4c:25:96:4d:70:a4:b8:e4:8d:5e:31:
db:fc:3c:d0:34:5e:ce:e2:e3:90:dd:7b:a9:bb:df:d4:ac:d9:
9d:ba:6e:3a:73:a8:99:71:94:df:64:e3:ab:0d:d9:5c:49:30:
01:3f:a6:4b:5c:7d:7e:3a:08:01:19:0b:6b:00:79:18:cc:7b:
ee:40:4c:3c:d2:ee:c8:a4:0b:f2:8a:e5:47:93:de:65:5d:90:
8a:4d:db:f6:78:2a:b0:1f:63:fd:be:08:df:83:b4:03:ee:0a:
fd:9d:e3:f3:f4:61:e8:a1:33:a5:42:57:f4:13:94:83:73:5f:
24:31:68:15:48:58:4c:d7:b3:68:17:4f:88:ed:ae:f0:27:48:
27:eb:6e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:51:42 2025 by rpki-client