![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/4RUdSJs2aUGSrL_KpeC7RvyeW-A.mft
File: 4RUdSJs2aUGSrL_KpeC7RvyeW-A.mft (raw, json)
Hash identifier: Ub0arNRL5RWClmC//PLrkQ/PhQIg4dPwoM+uRjdqyNs=
Subject key identifier: 13:E0:E6:0D:6E:FB:FD:B2:4F:CE:24:14:CE:E5:1F:D1:77:40:3D:89
Authority key identifier: E1:15:1D:48:9B:36:69:41:92:AC:BF:CA:A5:E0:BB:46:FC:9E:5B:E0
Certificate issuer: /CN=e1151d489b36694192acbfcaa5e0bb46fc9e5be0
Certificate serial: 0195108FC055E350C2187986EBB9E65331BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4RUdSJs2aUGSrL_KpeC7RvyeW-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/4RUdSJs2aUGSrL_KpeC7RvyeW-A.mft
Manifest number: 0481
Signing time: Sun 16 Feb 2025 21:00:10 +0000
Manifest this update: Sun 16 Feb 2025 21:00:10 +0000
Manifest next update: Mon 17 Feb 2025 21:00:10 +0000
Files and hashes: 1: 4RUdSJs2aUGSrL_KpeC7RvyeW-A.crl (hash: J3ot8pscvk3lXml+55dU5N7ZUP87Kyk1bdm9Y5RLcHQ=)
2: HYom0-kciwsBpHtG02N8IppZ_kA.roa (hash: gd8Ptnlp+eybQYq2eGs8Iys0wttljsxiJW6GYdz0ar4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/4RUdSJs2aUGSrL_KpeC7RvyeW-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/4RUdSJs2aUGSrL_KpeC7RvyeW-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/4RUdSJs2aUGSrL_KpeC7RvyeW-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:8f:c0:55:e3:50:c2:18:79:86:eb:b9:e6:53:31:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1151d489b36694192acbfcaa5e0bb46fc9e5be0
Validity
Not Before: Feb 16 21:00:10 2025 GMT
Not After : Feb 17 21:00:10 2025 GMT
Subject: CN=13e0e60d6efbfdb24fce2414cee51fd177403d89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f8:a0:83:fd:05:f3:cc:33:de:71:30:22:ee:
04:33:0f:36:08:88:99:bf:67:7e:0c:da:16:3d:45:
12:62:93:b8:be:7f:0a:b2:b0:a9:20:b4:6e:ce:91:
e9:42:b1:17:9e:80:44:40:0f:53:05:bf:6f:c3:69:
13:e7:c7:ad:77:0f:c5:56:48:cf:c3:3e:4c:1c:7c:
2b:36:29:0f:1f:54:f4:9e:f0:eb:bb:8f:f7:83:0b:
3a:87:3c:61:ab:5f:45:22:8f:b1:c3:3d:0d:78:4c:
17:5f:6b:7d:34:9f:61:e1:aa:17:52:a7:d1:1c:ee:
ce:19:19:1a:51:ad:1d:3e:fc:e1:6e:42:99:fb:9e:
30:01:c0:b5:59:a7:bd:d4:15:cc:67:d5:d3:b0:45:
6f:9e:3d:98:0a:b2:3e:36:82:fd:e3:66:15:aa:c5:
a6:00:7b:e3:ee:14:3c:1d:1c:3b:fc:42:a4:9e:af:
c9:6b:f7:ef:47:ef:39:51:27:4d:73:74:e2:f6:9b:
9d:d2:cb:0c:df:aa:dd:fe:b2:4b:77:ac:83:76:99:
46:a6:32:38:93:00:bf:ca:0e:64:bb:d6:30:41:2a:
72:8e:cd:9d:e0:88:ca:24:81:ba:96:a4:46:c1:fa:
12:d3:18:64:7b:83:7c:35:de:71:a8:8e:5f:c9:ab:
fc:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:E0:E6:0D:6E:FB:FD:B2:4F:CE:24:14:CE:E5:1F:D1:77:40:3D:89
X509v3 Authority Key Identifier:
keyid:E1:15:1D:48:9B:36:69:41:92:AC:BF:CA:A5:E0:BB:46:FC:9E:5B:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4RUdSJs2aUGSrL_KpeC7RvyeW-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/4RUdSJs2aUGSrL_KpeC7RvyeW-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/4RUdSJs2aUGSrL_KpeC7RvyeW-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:ed:10:54:99:d0:f7:cb:5e:b7:6c:d6:a8:5a:93:ca:60:29:
43:48:8b:37:60:49:da:4b:1d:8b:b6:ec:2e:94:e9:79:af:a1:
62:e3:23:30:43:47:77:0a:81:40:24:f4:76:35:80:33:ca:d0:
d2:69:0b:6c:81:94:0b:5e:27:b7:71:72:17:63:fc:4e:fb:5d:
d2:50:c5:f3:ef:13:dd:84:c1:d1:08:83:d3:d3:8e:ed:d5:c0:
63:95:76:27:e5:3c:d4:e9:76:6e:f2:33:a8:ff:32:8f:87:b7:
7f:b2:ab:09:58:4f:26:92:29:9b:db:8d:b5:96:c1:d8:57:42:
ca:be:e9:4b:9f:5c:74:8c:d9:2c:e1:6b:19:e3:0e:5a:e0:32:
3e:cc:1f:46:02:f9:44:02:ef:68:9f:12:d7:da:7d:75:a9:4b:
3e:e5:f3:d2:49:3c:9a:23:7a:33:df:ef:2b:f0:ec:2e:e8:c1:
45:d9:0e:a2:1a:8e:fb:fd:a8:44:42:95:90:3d:67:b6:ff:d2:
1c:8f:7c:49:8b:04:ce:dc:32:d3:b1:1d:c6:46:c2:74:d1:7e:
be:3e:a5:3b:64:c9:72:ab:ed:fe:d8:25:c0:33:e3:7c:b7:46:
1c:62:ef:cb:4b:1e:64:6b:eb:69:44:e4:f1:ee:97:c2:9d:0c:
bb:74:10:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:16:24 2025 by rpki-client