![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/859f30-1e4b-45fe-b7ec-6d0781532a48/1/jw23m-h704ZVurcDpg53TE1sI1c.mft
File: jw23m-h704ZVurcDpg53TE1sI1c.mft (raw, json)
Hash identifier: SitqZXQ4kXKPk/2WI5vVMPqbCoyjLwEASw5r0awURrA=
Subject key identifier: 2F:EF:8C:3A:E0:D7:1D:73:99:26:75:95:FA:FE:13:29:90:2A:14:C7
Authority key identifier: 8F:0D:B7:9B:E8:7B:D3:86:55:BA:B7:03:A6:0E:77:4C:4D:6C:23:57
Certificate issuer: /CN=8f0db79be87bd38655bab703a60e774c4d6c2357
Certificate serial: 01951134821BE71E51176FB2FE260273D01A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jw23m-h704ZVurcDpg53TE1sI1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/859f30-1e4b-45fe-b7ec-6d0781532a48/1/jw23m-h704ZVurcDpg53TE1sI1c.mft
Manifest number: 1457
Signing time: Mon 17 Feb 2025 00:00:08 +0000
Manifest this update: Mon 17 Feb 2025 00:00:08 +0000
Manifest next update: Tue 18 Feb 2025 00:00:08 +0000
Files and hashes: 1: OF_w8skU7WRjWk0mpW9Xvj5C2nw.roa (hash: tQcSraFvFoIta1SmxEd+9qBZqJ+cQ+xPaOZSIV3iL4Q=)
2: jw23m-h704ZVurcDpg53TE1sI1c.crl (hash: UYw3WJOZZ560ihJDJGRLW9duOFyu/OBTncVQU/G6deQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/859f30-1e4b-45fe-b7ec-6d0781532a48/1/jw23m-h704ZVurcDpg53TE1sI1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/859f30-1e4b-45fe-b7ec-6d0781532a48/1/jw23m-h704ZVurcDpg53TE1sI1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/jw23m-h704ZVurcDpg53TE1sI1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:82:1b:e7:1e:51:17:6f:b2:fe:26:02:73:d0:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f0db79be87bd38655bab703a60e774c4d6c2357
Validity
Not Before: Feb 17 00:00:08 2025 GMT
Not After : Feb 18 00:00:08 2025 GMT
Subject: CN=2fef8c3ae0d71d7399267595fafe1329902a14c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:bb:75:fd:39:f0:15:6d:8a:ee:fb:a4:e1:45:
e8:a9:0e:c1:d3:34:0b:88:78:24:3c:30:12:ac:82:
9f:5d:0f:55:e7:9d:e1:42:73:39:9f:6d:10:08:63:
0d:f7:4e:c0:38:ce:f4:29:48:59:70:98:0e:48:22:
79:a5:1f:47:d6:ff:5d:1e:fd:59:92:f2:f3:31:73:
c9:d9:a7:70:19:d8:ce:58:38:35:88:3d:c2:96:48:
70:c1:4c:48:fe:f2:83:93:18:1c:7f:fa:85:87:e8:
b8:ae:cd:5a:7b:df:21:6f:0e:af:9d:00:09:d0:20:
13:31:8e:cd:2a:db:0a:6e:d5:7a:31:13:d3:8e:62:
df:20:38:4e:2d:55:1f:ba:70:9a:4c:0d:62:70:48:
67:cf:8d:81:d4:1f:b0:f3:80:8b:59:f3:4f:f6:9a:
ad:a7:d6:dc:71:4a:d4:d4:93:0b:42:9f:33:46:19:
75:83:42:e7:9e:1e:d8:fc:5e:94:7e:f3:5c:31:26:
95:39:60:e3:d8:07:e2:46:3b:7b:95:d3:8c:4d:41:
56:cc:3e:65:e0:b9:60:bf:8f:74:3f:7c:36:70:4c:
25:23:86:42:e6:15:9b:e7:8e:2d:f4:a8:ec:f2:e6:
56:3f:17:5f:35:dc:fb:b1:7e:cd:a4:31:e7:2d:fd:
48:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:EF:8C:3A:E0:D7:1D:73:99:26:75:95:FA:FE:13:29:90:2A:14:C7
X509v3 Authority Key Identifier:
keyid:8F:0D:B7:9B:E8:7B:D3:86:55:BA:B7:03:A6:0E:77:4C:4D:6C:23:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jw23m-h704ZVurcDpg53TE1sI1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/859f30-1e4b-45fe-b7ec-6d0781532a48/1/jw23m-h704ZVurcDpg53TE1sI1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/859f30-1e4b-45fe-b7ec-6d0781532a48/1/jw23m-h704ZVurcDpg53TE1sI1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:fc:4a:9b:54:88:83:9e:f9:92:67:48:1b:b7:75:63:f6:c6:
0a:b4:5c:8f:36:10:8e:e3:b0:ca:4f:90:07:f0:52:8b:92:b9:
a0:54:38:d6:20:b5:34:3e:ce:4c:d6:22:99:8e:90:c2:9b:f2:
d7:c7:05:b0:ef:5d:1b:c9:47:fd:90:80:35:25:75:e5:87:69:
08:e6:35:3b:36:02:d4:c5:90:f4:b6:3f:dd:bc:44:c3:89:1f:
3f:5f:c6:0b:6c:ff:56:3b:15:4f:46:55:fa:6f:30:83:aa:4f:
6c:b8:60:2f:d9:54:94:75:cb:8b:a0:e8:b1:39:34:8a:45:1a:
53:0a:5a:95:94:38:c8:4b:10:17:0c:8d:c2:ac:5a:a6:46:b3:
bd:54:29:d3:5d:a9:1b:f6:7d:22:25:3a:43:4d:d8:61:5e:68:
94:45:0e:5a:07:25:f3:00:8a:47:29:bf:74:b1:68:fa:c0:da:
33:43:35:4b:85:f9:2f:9b:68:5a:f1:ac:b0:f5:76:a3:61:23:
38:fc:02:33:f3:fb:ce:74:3b:17:de:b1:60:44:db:65:f2:c0:
62:ae:fe:ac:4f:a5:8f:95:9e:65:9b:22:31:d0:5a:11:d5:bf:
ef:ab:d9:ac:ab:eb:5a:26:b4:76:2f:11:f6:c4:01:12:6b:bc:
93:24:1c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:23:31 2025 by rpki-client