![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.mft
File: 3JS7aUU_E5pgAp4i2w-zQkqQbO4.mft (raw, json)
Hash identifier: exuwGhCybydVqXUEu02rM0aA+9gbKlWO6cwnc11RHJM=
Subject key identifier: 79:A1:57:EF:D0:85:2C:A3:C6:51:68:E6:58:C2:FB:7F:11:7D:5C:D6
Authority key identifier: DC:94:BB:69:45:3F:13:9A:60:02:9E:22:DB:0F:B3:42:4A:90:6C:EE
Certificate issuer: /CN=dc94bb69453f139a60029e22db0fb3424a906cee
Certificate serial: 019511D96B243AB5C5B307A92820E9F7D5F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JS7aUU_E5pgAp4i2w-zQkqQbO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.mft
Manifest number: 118C
Signing time: Mon 17 Feb 2025 03:00:16 +0000
Manifest this update: Mon 17 Feb 2025 03:00:16 +0000
Manifest next update: Tue 18 Feb 2025 03:00:16 +0000
Files and hashes: 1: 2sJ6ZGpwbn2MD9cB-VLv0zGhn0c.roa (hash: 9pTsB3dCKKFbBl3Zhp4GXJNV4w/5Tt16+io9kuuIpls=)
2: 3JS7aUU_E5pgAp4i2w-zQkqQbO4.crl (hash: dWXLfpOVpKLbPdfNwXBAueyo7VoUO+cCnSCSrGA/SX0=)
3: 4sP42GCgs2AI1q38BZqUFNnf0sg.roa (hash: CknajvS4pn5bWEXVquILmPoBaxykd3UlHu3TAMkqiiw=)
4: I_q4haHSQ5-iSHbhiDxn8LO10n0.roa (hash: rR8MdnfYv9DYhofCAQL44jv965jNwY7cLv2/tA4Lg2A=)
5: cdhvQ3G9D22hzZ35uWHLO4DK-b8.roa (hash: 9/hDVeqHVKKGEQirCvU77EziyJeBYbpOSUraYbA1sQI=)
6: icjgdrZ-2bYy0vmLkXN3ZejcMO0.roa (hash: BhIg1YAcMIYOB5H79uWHhrjxoemSR0rVkY+hQV1/Imo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3JS7aUU_E5pgAp4i2w-zQkqQbO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:6b:24:3a:b5:c5:b3:07:a9:28:20:e9:f7:d5:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc94bb69453f139a60029e22db0fb3424a906cee
Validity
Not Before: Feb 17 03:00:16 2025 GMT
Not After : Feb 18 03:00:16 2025 GMT
Subject: CN=79a157efd0852ca3c65168e658c2fb7f117d5cd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:23:d7:ca:37:1f:10:dd:28:5f:f8:8f:eb:c2:
76:fa:92:ff:b3:23:9d:ae:8d:a0:b3:95:ce:c3:80:
ee:64:2c:7a:de:9e:36:77:a3:29:56:c2:17:94:99:
07:1d:ff:85:1e:9d:f6:d3:69:b2:87:1e:6a:64:98:
21:19:4d:b8:de:bb:91:5d:e7:2d:6d:f8:22:62:68:
9e:ca:81:80:2f:bc:71:11:c8:8e:1c:26:d2:6c:39:
3e:2e:8c:cb:7d:7e:cd:19:c4:66:bb:7b:2e:96:78:
52:3d:44:1a:66:19:ec:26:4f:e0:a6:70:7b:1e:67:
46:aa:6d:71:66:c5:73:bd:d0:d4:6a:63:3f:bb:16:
c0:a0:58:70:de:1f:d6:f3:85:86:3b:34:36:c1:18:
fd:d0:50:0d:38:7c:b8:75:d6:0e:1e:b3:89:52:99:
7a:b7:3a:2a:c2:c1:e9:bc:52:bc:f9:f3:61:3a:4e:
4e:a7:9c:46:d3:88:47:aa:f0:5e:8f:93:07:19:38:
7a:a0:42:13:f9:1b:0c:8f:f4:56:29:f8:e6:f5:b2:
9b:d6:03:ca:19:5e:f4:20:46:d4:11:ae:87:77:05:
0c:ec:e9:fb:71:38:ee:25:90:42:bb:58:5a:96:17:
d1:99:60:8e:b8:ac:1e:e5:41:c6:7e:23:1e:a6:c7:
04:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:A1:57:EF:D0:85:2C:A3:C6:51:68:E6:58:C2:FB:7F:11:7D:5C:D6
X509v3 Authority Key Identifier:
keyid:DC:94:BB:69:45:3F:13:9A:60:02:9E:22:DB:0F:B3:42:4A:90:6C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JS7aUU_E5pgAp4i2w-zQkqQbO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:ea:9e:8a:39:07:49:b6:c7:db:99:67:0a:0e:f3:87:8a:d3:
0e:f9:c4:e0:91:4f:64:02:2e:1d:a3:04:7e:bf:6a:1f:29:8c:
50:5a:87:b3:e5:13:11:a3:ad:f5:30:eb:cc:b1:41:4d:ee:b4:
9e:b1:e3:b0:53:e5:7d:09:b0:7a:f1:d2:5f:4a:f6:d8:fb:4d:
f0:1a:e3:5e:16:e2:4b:ca:06:a3:0b:4b:42:db:fe:9c:a7:57:
58:ec:44:2c:d7:4b:bb:e8:1c:d3:fb:ef:38:3c:e0:e8:4a:62:
3b:a5:90:5d:fa:6a:c3:8f:6c:30:52:13:3b:1a:ce:95:05:7c:
fc:5d:23:07:fa:69:5b:66:30:9e:e5:2b:c1:96:f9:88:8a:59:
34:76:5d:1f:76:a3:9a:04:fc:f0:86:57:7e:45:0e:3f:b8:a5:
2e:e0:19:75:49:1b:f1:77:5b:4e:14:2e:ab:27:bf:91:22:75:
c5:dc:0f:e9:0d:d2:f5:4a:c1:60:4d:f8:67:f2:a7:b7:e4:da:
de:6d:e1:35:4b:93:5a:de:bf:b4:d3:0b:45:03:0d:6e:2c:84:
f9:ab:e8:ab:ba:cf:91:88:87:ba:63:64:3b:f4:8b:96:a0:07:
ce:d3:45:e3:82:6a:0f:06:c2:54:7c:8e:a7:fb:7d:f8:ad:7a:
39:bf:96:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:24:09 2025 by rpki-client