![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/aae017-5afd-4bfd-8fdd-d6e7dcc52799/1/PRgTEVbDK1enN4cYxgiq46mWXCs.mft
File: PRgTEVbDK1enN4cYxgiq46mWXCs.mft (raw, json)
Hash identifier: RcGK0IRTm4U9xwFe97CA39Q94opsSR+XTCL3oit9Hfc=
Subject key identifier: C6:FE:D1:6A:E5:69:89:A3:A7:41:51:46:61:6C:84:46:75:31:A8:B9
Authority key identifier: 3D:18:13:11:56:C3:2B:57:A7:37:87:18:C6:08:AA:E3:A9:96:5C:2B
Certificate issuer: /CN=3d18131156c32b57a7378718c608aae3a9965c2b
Certificate serial: 019510C7FC16B29715DFCEE7FA85A8081DA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRgTEVbDK1enN4cYxgiq46mWXCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/aae017-5afd-4bfd-8fdd-d6e7dcc52799/1/PRgTEVbDK1enN4cYxgiq46mWXCs.mft
Manifest number: 1451
Signing time: Sun 16 Feb 2025 22:01:36 +0000
Manifest this update: Sun 16 Feb 2025 22:01:36 +0000
Manifest next update: Mon 17 Feb 2025 22:01:36 +0000
Files and hashes: 1: PRgTEVbDK1enN4cYxgiq46mWXCs.crl (hash: pvteYsWqU/4cG+h6KDzJLo/IV4FVQyN1JvJsOhiXCZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/aae017-5afd-4bfd-8fdd-d6e7dcc52799/1/PRgTEVbDK1enN4cYxgiq46mWXCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/aae017-5afd-4bfd-8fdd-d6e7dcc52799/1/PRgTEVbDK1enN4cYxgiq46mWXCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/PRgTEVbDK1enN4cYxgiq46mWXCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:fc:16:b2:97:15:df:ce:e7:fa:85:a8:08:1d:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d18131156c32b57a7378718c608aae3a9965c2b
Validity
Not Before: Feb 16 22:01:36 2025 GMT
Not After : Feb 17 22:01:36 2025 GMT
Subject: CN=c6fed16ae56989a3a7415146616c84467531a8b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:cd:64:5c:3f:84:95:c5:0e:44:2c:c4:29:00:
73:80:f6:95:2f:85:d7:03:63:0f:e8:d1:89:c3:3b:
18:6f:43:f4:32:99:d2:ad:f0:49:17:5a:45:5b:20:
d9:41:73:43:a9:42:29:27:2b:d9:2b:37:7d:39:04:
a0:2e:a3:78:be:e1:cf:c1:13:6d:ae:82:7b:71:3c:
67:fa:7c:8e:ab:fe:17:ab:02:15:41:7c:56:5f:6b:
e4:18:1d:88:e5:64:45:ea:59:7f:4d:21:63:0a:ee:
b0:77:88:a1:d1:6d:6d:b1:fa:7e:fa:9f:17:65:2b:
61:a4:bf:79:94:01:d7:7f:8f:ba:38:a0:ac:4f:d3:
e1:10:6d:bf:b2:19:9c:c4:23:2f:0c:61:86:e9:41:
33:6a:38:09:0a:5b:b1:99:c5:04:87:11:1c:ba:5c:
9c:19:e2:31:1e:6b:c7:bb:b5:61:c6:00:c7:54:33:
72:52:eb:a5:b4:b8:53:94:bf:74:3d:92:f1:66:33:
08:18:e5:33:59:57:95:4f:ca:5f:92:90:81:88:fe:
af:0b:91:4b:6f:d3:b7:79:bc:0f:10:cc:36:60:f3:
74:36:cb:5f:07:39:5a:7e:a0:08:fe:49:49:c8:4f:
fb:d0:2d:53:3e:50:23:8c:1e:f1:17:8f:33:d2:b4:
23:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:FE:D1:6A:E5:69:89:A3:A7:41:51:46:61:6C:84:46:75:31:A8:B9
X509v3 Authority Key Identifier:
keyid:3D:18:13:11:56:C3:2B:57:A7:37:87:18:C6:08:AA:E3:A9:96:5C:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRgTEVbDK1enN4cYxgiq46mWXCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/aae017-5afd-4bfd-8fdd-d6e7dcc52799/1/PRgTEVbDK1enN4cYxgiq46mWXCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/aae017-5afd-4bfd-8fdd-d6e7dcc52799/1/PRgTEVbDK1enN4cYxgiq46mWXCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:16:6f:52:06:00:4e:31:28:1e:d9:d8:30:e5:6d:5f:27:b0:
84:6a:b8:3a:b9:ef:51:d4:05:f7:ab:55:7a:f9:16:da:6a:2a:
83:da:b7:c3:48:19:c1:bb:ad:d7:d1:dd:49:ee:c6:25:d5:a7:
b5:75:6c:73:d9:fa:b2:89:b1:35:14:47:f0:f6:8c:44:f1:41:
ff:c1:46:95:3a:c2:fc:66:9c:b7:98:98:a1:9a:7c:6b:15:bc:
e2:d1:5b:13:74:da:f3:6c:5c:1f:b8:9b:d1:73:7f:9e:f0:b0:
86:96:a1:bc:c7:d6:c4:10:3c:6c:3d:30:f0:19:03:56:77:a7:
4d:fc:4f:9b:53:30:2c:ea:39:88:70:c7:0f:56:ea:26:91:90:
a8:31:a4:55:30:29:7b:ef:01:33:97:6a:c2:5a:3b:69:cf:b7:
ae:41:f2:c6:26:93:23:9f:79:f2:b8:08:6a:25:b9:6d:19:e0:
97:68:33:0e:b9:56:90:b9:18:10:24:cc:fa:2d:e0:c1:15:2e:
1a:37:0e:91:0f:16:71:fa:b7:c3:92:9c:a3:c2:ac:da:77:05:
f6:79:fa:36:6a:f7:c5:b6:76:ff:66:e5:d9:67:91:bc:70:8f:
41:6e:5a:9a:2f:fd:ae:f8:60:8d:9f:52:51:3f:42:b9:98:ea:
0a:dd:bd:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:54:30 2025 by rpki-client