![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/fe276f-946a-446b-8453-170eb1c9fec8/1/tKW-MwcSDmXjxBZcnI50jBwSp6I.mft
File: tKW-MwcSDmXjxBZcnI50jBwSp6I.mft (raw, json)
Hash identifier: 3jMXCEBDSEnSMtsMrpw1IrrtgFiK46eywT4WQSwdMVQ=
Subject key identifier: DA:57:95:FA:A9:5F:9B:59:FE:61:D5:3F:17:11:36:C9:77:B4:1A:81
Authority key identifier: B4:A5:BE:33:07:12:0E:65:E3:C4:16:5C:9C:8E:74:8C:1C:12:A7:A2
Certificate issuer: /CN=b4a5be3307120e65e3c4165c9c8e748c1c12a7a2
Certificate serial: 01951090078C0A9C709172F212521B3E5A3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tKW-MwcSDmXjxBZcnI50jBwSp6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/fe276f-946a-446b-8453-170eb1c9fec8/1/tKW-MwcSDmXjxBZcnI50jBwSp6I.mft
Manifest number: 03A6
Signing time: Sun 16 Feb 2025 21:00:29 +0000
Manifest this update: Sun 16 Feb 2025 21:00:29 +0000
Manifest next update: Mon 17 Feb 2025 21:00:29 +0000
Files and hashes: 1: pHJ5oRo1kF5oiX8KeKirS42gdJI.roa (hash: pWmX7zoUYI3ChoG1HELYfAkOPLPYyR79PMNSLK6H1B0=)
2: tKW-MwcSDmXjxBZcnI50jBwSp6I.crl (hash: alHvydVq4cmlZNhne2d1AOdJMT8FLhBmVR9qPD40nlU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/fe276f-946a-446b-8453-170eb1c9fec8/1/tKW-MwcSDmXjxBZcnI50jBwSp6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/fe276f-946a-446b-8453-170eb1c9fec8/1/tKW-MwcSDmXjxBZcnI50jBwSp6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/tKW-MwcSDmXjxBZcnI50jBwSp6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 21:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:90:07:8c:0a:9c:70:91:72:f2:12:52:1b:3e:5a:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4a5be3307120e65e3c4165c9c8e748c1c12a7a2
Validity
Not Before: Feb 16 21:00:29 2025 GMT
Not After : Feb 17 21:00:29 2025 GMT
Subject: CN=da5795faa95f9b59fe61d53f171136c977b41a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:94:42:bf:35:fe:25:29:49:d3:fc:6d:f6:be:
2b:7c:5b:b4:d0:f0:7e:ab:dd:02:76:dd:e6:86:12:
c8:ab:14:70:2d:ac:0c:69:5c:7a:61:e4:da:ea:17:
89:be:8a:27:51:f2:44:16:46:3f:be:4c:3a:65:d5:
1e:34:bd:12:5f:ad:a8:a6:32:12:00:9c:54:e3:e5:
ea:84:ab:74:58:bf:88:74:c7:70:9a:f9:96:75:a9:
52:52:01:88:34:e8:31:23:68:80:91:80:5a:36:89:
e5:b5:70:44:02:dd:10:cc:10:c4:9c:36:74:76:bc:
b9:90:07:a2:9c:ca:d3:cf:86:3c:51:2f:2a:a1:6f:
05:4f:e8:e5:ba:17:7b:b6:75:76:42:c4:1a:11:79:
b6:8c:df:42:91:d3:8b:ff:c8:ef:91:b2:8d:41:40:
86:6a:ec:15:2a:b2:f1:61:c5:98:a7:0f:31:71:31:
be:5b:68:d2:ad:77:b5:d1:c2:c9:a7:06:fc:e2:d7:
28:40:8b:48:41:33:89:05:03:47:73:e9:69:ae:01:
cc:59:95:7a:ba:10:88:56:e2:37:c9:6a:cd:1b:c3:
b1:da:db:8b:75:dc:76:0e:3c:6e:bb:43:2b:86:d2:
9d:5a:4d:8f:cb:e8:4f:14:26:26:d2:20:f5:81:d1:
e7:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:57:95:FA:A9:5F:9B:59:FE:61:D5:3F:17:11:36:C9:77:B4:1A:81
X509v3 Authority Key Identifier:
keyid:B4:A5:BE:33:07:12:0E:65:E3:C4:16:5C:9C:8E:74:8C:1C:12:A7:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tKW-MwcSDmXjxBZcnI50jBwSp6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/fe276f-946a-446b-8453-170eb1c9fec8/1/tKW-MwcSDmXjxBZcnI50jBwSp6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/fe276f-946a-446b-8453-170eb1c9fec8/1/tKW-MwcSDmXjxBZcnI50jBwSp6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:72:2a:2b:90:cb:d2:42:bc:1e:49:e9:22:06:40:a9:12:69:
45:de:68:37:97:ca:28:44:59:b4:48:8b:00:d9:03:c2:88:5b:
89:06:e8:e3:b1:de:e7:51:7a:55:82:36:32:19:ea:ab:14:fe:
ff:a8:34:f1:5b:2b:09:13:0c:b2:07:2f:8b:06:e7:04:8b:5c:
b4:5a:77:ff:79:d2:09:4e:54:b0:e0:c4:51:ba:31:ad:e4:ec:
f8:98:8e:65:c5:58:96:aa:9b:8e:a9:14:83:a1:b4:48:61:c1:
43:be:8f:34:87:e4:57:1c:d4:a9:bf:58:0a:75:31:8f:5d:8e:
d4:5c:ae:85:9f:77:90:64:0b:0d:b6:61:ff:30:7d:81:1e:47:
62:71:af:2a:9b:9d:3a:c3:91:5f:c9:aa:47:00:44:44:48:1c:
5c:53:5e:a5:bf:d2:67:34:73:86:94:16:5e:39:2b:bb:76:70:
e8:78:8b:9e:0f:96:17:60:3f:04:4f:fe:80:b5:16:39:31:6b:
5d:e6:e8:10:49:cf:89:c3:03:f5:e0:63:19:ec:df:3d:d0:5e:
bb:8e:ec:64:d1:7e:12:1d:aa:5e:fb:b6:a0:ba:24:9b:66:b2:
59:f7:04:49:4c:26:9f:42:a9:62:2e:39:8a:a8:59:ee:d9:bb:
5d:6c:cf:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:18:11 2025 by rpki-client