![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/2f689a-29cd-4704-94ce-d90558af2c39/1/vuRUApZHZoHEBIxtZQ0LqqbLmOc.mft
File: vuRUApZHZoHEBIxtZQ0LqqbLmOc.mft (raw, json)
Hash identifier: 15+XOO1Q41dhw8ypkAYmxwuR89dpULttwjMfJyDuAnY=
Subject key identifier: C6:9D:66:AA:C0:4D:66:31:C9:D8:9F:C1:EA:4B:D3:EB:27:C5:03:36
Authority key identifier: BE:E4:54:02:96:47:66:81:C4:04:8C:6D:65:0D:0B:AA:A6:CB:98:E7
Certificate issuer: /CN=bee4540296476681c4048c6d650d0baaa6cb98e7
Certificate serial: 01951134BC340D65178758CA29D284443109
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vuRUApZHZoHEBIxtZQ0LqqbLmOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/2f689a-29cd-4704-94ce-d90558af2c39/1/vuRUApZHZoHEBIxtZQ0LqqbLmOc.mft
Manifest number: 1397
Signing time: Mon 17 Feb 2025 00:00:23 +0000
Manifest this update: Mon 17 Feb 2025 00:00:23 +0000
Manifest next update: Tue 18 Feb 2025 00:00:23 +0000
Files and hashes: 1: vuRUApZHZoHEBIxtZQ0LqqbLmOc.crl (hash: RUCwrnuLdqNi9TFjN8noahnvK2docOdlr04zFu1RpIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/2f689a-29cd-4704-94ce-d90558af2c39/1/vuRUApZHZoHEBIxtZQ0LqqbLmOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/2f689a-29cd-4704-94ce-d90558af2c39/1/vuRUApZHZoHEBIxtZQ0LqqbLmOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/vuRUApZHZoHEBIxtZQ0LqqbLmOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:bc:34:0d:65:17:87:58:ca:29:d2:84:44:31:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bee4540296476681c4048c6d650d0baaa6cb98e7
Validity
Not Before: Feb 17 00:00:23 2025 GMT
Not After : Feb 18 00:00:23 2025 GMT
Subject: CN=c69d66aac04d6631c9d89fc1ea4bd3eb27c50336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8a:3b:39:45:fc:7a:cd:8a:fc:94:2b:1e:3b:
3f:6b:8f:02:5c:19:39:bc:7e:ad:ac:b7:4d:9a:47:
e5:c6:62:d7:4f:cd:48:2f:9f:73:be:26:62:99:23:
43:be:ef:b2:9f:2f:e1:c4:7a:e2:ed:6c:e5:f3:db:
6a:d0:bc:9e:c7:0a:71:31:1e:4f:9f:38:63:e5:46:
41:7f:59:27:73:96:1d:b0:5a:30:75:c1:34:7c:7a:
6f:42:65:f8:5d:38:06:bf:3b:be:2b:64:fd:d3:3f:
76:67:fa:e9:25:d6:68:41:19:12:68:b7:65:9f:c2:
25:49:bf:ed:d7:01:ee:71:a1:91:d9:bf:52:39:a6:
ab:f6:b0:6a:f0:8e:64:a4:fb:33:eb:19:71:51:11:
62:e1:ca:44:ea:71:ce:5a:6f:ac:78:04:7a:a2:6a:
43:e2:02:0c:24:f5:ad:f8:37:b0:aa:61:a7:f5:4d:
ae:95:54:60:6a:c0:91:d7:27:3f:fc:08:38:19:b6:
ca:b5:45:67:0e:93:a9:70:ef:94:f9:6d:de:18:96:
aa:4e:4d:a7:b5:e2:5f:00:ab:eb:3a:0b:56:b7:a7:
1b:0e:0a:43:40:31:06:6b:c1:3c:dc:76:51:a0:ac:
fb:0c:0e:98:eb:55:5b:0b:fc:73:c8:b3:d2:f1:7c:
55:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:9D:66:AA:C0:4D:66:31:C9:D8:9F:C1:EA:4B:D3:EB:27:C5:03:36
X509v3 Authority Key Identifier:
keyid:BE:E4:54:02:96:47:66:81:C4:04:8C:6D:65:0D:0B:AA:A6:CB:98:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vuRUApZHZoHEBIxtZQ0LqqbLmOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2f689a-29cd-4704-94ce-d90558af2c39/1/vuRUApZHZoHEBIxtZQ0LqqbLmOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2f689a-29cd-4704-94ce-d90558af2c39/1/vuRUApZHZoHEBIxtZQ0LqqbLmOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:3d:ea:24:f4:94:40:a5:c7:1d:3f:45:0c:97:22:29:03:c6:
4d:bf:e4:f5:8a:92:d6:ec:cf:43:ad:17:ab:c7:69:1e:23:9b:
d6:1b:c5:22:f3:53:8e:88:86:68:c5:23:0a:39:25:46:ab:4c:
a3:f6:39:1f:89:2c:5f:b2:d9:4d:fa:fe:e2:4d:2a:7d:1b:bd:
73:c7:66:bc:0a:48:06:8b:5d:59:86:9e:95:86:9f:7e:c3:52:
3b:32:21:c7:63:2d:44:85:85:7f:ca:90:1a:9b:a9:6d:51:12:
fa:7f:df:f0:8e:9f:6c:b7:13:45:50:b3:af:6d:16:a4:94:f9:
26:d8:6d:55:27:37:8d:f6:a0:73:c8:10:22:9b:98:72:61:d7:
43:f0:07:0f:f5:af:0a:65:b0:cc:c2:0a:a0:9b:36:0d:57:91:
59:03:06:fd:35:1e:23:39:18:46:5d:e3:42:1e:7b:17:8b:a7:
52:d8:ed:90:9d:47:9f:29:d5:db:7e:a2:c7:fe:bc:3a:4b:ad:
69:4e:29:eb:c5:62:93:f1:4a:53:cf:3e:cb:88:bf:03:85:67:
ba:3b:5d:41:4b:89:9d:84:ed:18:ff:10:57:04:cf:99:9a:4d:
02:e3:c2:04:a7:51:6b:98:a9:60:13:53:8b:88:79:32:88:88:
d6:53:ce:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:13:13 2025 by rpki-client