![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/bb7335-b8c9-4e41-b124-bf9e37b7b870/1/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.mft
File: wFLV2TVyLCxcxJ8FLNWlqPFFc2s.mft (raw, json)
Hash identifier: QPNr7jyid1tidwuzKPQDa42ZID5+uRn0m64L/OU031M=
Subject key identifier: AA:7E:ED:21:39:D3:3C:1C:00:42:F7:C1:C7:E3:C4:03:3C:79:64:F8
Authority key identifier: C0:52:D5:D9:35:72:2C:2C:5C:C4:9F:05:2C:D5:A5:A8:F1:45:73:6B
Certificate issuer: /CN=c052d5d935722c2c5cc49f052cd5a5a8f145736b
Certificate serial: 019512106725C70A2336149E583B06E8085D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/bb7335-b8c9-4e41-b124-bf9e37b7b870/1/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.mft
Manifest number: 1325
Signing time: Mon 17 Feb 2025 04:00:19 +0000
Manifest this update: Mon 17 Feb 2025 04:00:19 +0000
Manifest next update: Tue 18 Feb 2025 04:00:19 +0000
Files and hashes: 1: wFLV2TVyLCxcxJ8FLNWlqPFFc2s.crl (hash: qvzsuejGt4Qb4fHgi/v8HJnCgUETpnLVIAtY7ULHKCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/bb7335-b8c9-4e41-b124-bf9e37b7b870/1/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/bb7335-b8c9-4e41-b124-bf9e37b7b870/1/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:67:25:c7:0a:23:36:14:9e:58:3b:06:e8:08:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c052d5d935722c2c5cc49f052cd5a5a8f145736b
Validity
Not Before: Feb 17 04:00:19 2025 GMT
Not After : Feb 18 04:00:19 2025 GMT
Subject: CN=aa7eed2139d33c1c0042f7c1c7e3c4033c7964f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c7:d5:83:8f:1f:f4:2f:31:ab:fe:d2:28:39:
d9:0e:be:8d:fc:74:e9:84:f9:12:33:87:d7:1b:99:
03:ec:4a:c8:ed:c7:35:ed:c4:13:b2:de:fe:36:8e:
7c:ad:a6:d1:7d:43:39:8d:cc:6e:22:64:b6:e1:c7:
58:2d:1b:20:cd:01:70:ad:04:a5:47:f9:22:99:77:
31:da:30:f5:4d:ac:ad:6f:ce:4f:a2:6e:0b:34:e5:
c9:73:22:05:d8:90:52:8c:54:cf:79:69:c1:b5:28:
4d:2a:a2:f7:89:60:81:17:bf:3a:3c:7c:88:49:93:
e7:6f:fe:3a:36:99:91:ba:a1:c2:94:ae:51:bc:da:
95:2e:c1:ac:10:13:21:57:59:d6:52:0d:23:67:df:
53:5d:36:6c:d8:8d:2a:f4:ce:35:63:97:8a:bb:f6:
54:ad:08:6d:73:32:57:72:73:d1:e8:5c:74:23:7b:
6e:1f:c5:31:fe:64:14:75:2e:29:c7:0a:c1:8e:dc:
83:f6:ac:29:a6:1f:44:68:06:4d:59:28:d9:f5:98:
95:83:48:7e:42:a3:07:a8:af:15:2b:19:98:10:77:
50:f9:65:a2:f4:47:7f:36:4b:e5:d7:47:37:3a:85:
db:7c:ff:a6:38:df:89:b1:73:95:43:10:80:2b:d8:
3b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:7E:ED:21:39:D3:3C:1C:00:42:F7:C1:C7:E3:C4:03:3C:79:64:F8
X509v3 Authority Key Identifier:
keyid:C0:52:D5:D9:35:72:2C:2C:5C:C4:9F:05:2C:D5:A5:A8:F1:45:73:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/bb7335-b8c9-4e41-b124-bf9e37b7b870/1/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/bb7335-b8c9-4e41-b124-bf9e37b7b870/1/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:52:e8:97:92:3d:90:50:39:30:92:2a:fe:cd:b7:92:c0:f3:
5b:7b:3c:66:70:a3:67:da:02:b2:ae:99:e7:14:1e:1b:b2:26:
5b:5d:eb:6f:95:42:b2:a7:5f:73:9e:a7:c8:e6:81:ca:8a:aa:
ad:73:da:3a:40:db:9a:24:03:b8:92:80:c5:ce:71:21:5d:96:
44:04:09:30:6c:b3:20:22:a4:b7:d2:b6:cc:37:2f:58:95:3f:
46:7b:6c:ab:ba:dc:bb:87:d1:cb:47:e3:05:22:d1:a6:1d:61:
39:26:65:f4:22:4d:9e:08:a3:0e:29:02:b0:02:29:c1:35:a4:
e9:35:c3:79:4d:38:d0:f6:1f:42:1a:29:8a:af:49:6b:15:bc:
6c:a0:82:8f:5a:0d:e3:dc:30:f6:e4:31:0e:0a:eb:98:ae:2a:
d2:e5:3f:1c:e8:09:c4:7e:fd:a4:8e:e0:05:bb:04:94:f3:51:
ee:0a:19:7f:a2:9e:07:0e:35:e8:bb:23:86:50:be:54:da:b1:
03:ab:f0:e4:5c:87:3d:0f:f2:0b:be:9a:0b:c1:e7:d0:0d:f0:
20:62:b4:fa:59:8f:94:b0:f8:a0:43:14:e9:ab:34:b6:36:63:
05:2c:57:d9:9e:03:48:5e:6f:f2:d7:78:9f:33:2a:91:c0:f2:
bb:07:db:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:35:37 2025 by rpki-client