![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.mft
File: JBR8iz83hQ6fkHSZOEXE4Gn47-I.mft (raw, json)
Hash identifier: oj6qGyb9ilBb1FjtXY9H3JquZ41lOijbS3mRmDCiUwo=
Subject key identifier: BD:51:C6:B8:4B:2E:2D:B0:EE:E9:2B:26:A6:2F:A5:39:57:6E:4F:16
Authority key identifier: 24:14:7C:8B:3F:37:85:0E:9F:90:74:99:38:45:C4:E0:69:F8:EF:E2
Certificate issuer: /CN=24147c8b3f37850e9f9074993845c4e069f8efe2
Certificate serial: 0195109011BF03F483B9E1C140100471AD92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JBR8iz83hQ6fkHSZOEXE4Gn47-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.mft
Manifest number: 146C
Signing time: Sun 16 Feb 2025 21:00:31 +0000
Manifest this update: Sun 16 Feb 2025 21:00:31 +0000
Manifest next update: Mon 17 Feb 2025 21:00:31 +0000
Files and hashes: 1: JBR8iz83hQ6fkHSZOEXE4Gn47-I.crl (hash: kWY731Kt6FSDGBgu7QYpaeqeY+Wjq1YegthAklGgZK0=)
2: Yjz0EriP9DUb51GdW-zHnP36Zd0.roa (hash: cjw7MupvPbtiLozQbL8Owq78kSNGKocuToBDzuLGFa4=)
3: fIjleh2crKLbZG2p_pW6sJNXzgE.roa (hash: wfNWlZAoz4d7U8GGL+obzZQHM3GpRCjoUB+xMdyboeA=)
4: z1HbgF83tUPDafwyrFUvhnVfBSI.roa (hash: M4kl6p3Muv0ZCK8YB2U3krHANx0k77aGuotmnLEgebI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/JBR8iz83hQ6fkHSZOEXE4Gn47-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 21:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:90:11:bf:03:f4:83:b9:e1:c1:40:10:04:71:ad:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24147c8b3f37850e9f9074993845c4e069f8efe2
Validity
Not Before: Feb 16 21:00:31 2025 GMT
Not After : Feb 17 21:00:31 2025 GMT
Subject: CN=bd51c6b84b2e2db0eee92b26a62fa539576e4f16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:34:cd:6b:22:b9:56:59:5e:53:a0:86:02:86:
24:cb:ae:d0:c7:96:e3:b7:a4:3c:c0:3a:d5:aa:27:
12:38:22:d4:ce:f5:e0:c5:da:55:28:77:3c:44:3a:
4f:08:1e:38:f0:a9:9b:7b:41:0a:f9:8d:00:ce:f2:
7f:0a:2c:16:ce:b7:ea:b7:09:32:82:56:3c:e4:46:
6f:bb:76:77:93:2f:af:d0:85:77:1e:b0:1d:cd:d3:
ef:a5:79:62:6e:55:94:03:f3:f1:2c:de:73:8c:4a:
f2:fe:1a:64:3b:03:39:2d:6b:ab:76:f7:7e:84:d0:
63:8f:c9:b5:ac:53:f3:a4:b6:67:c9:ab:fe:07:31:
57:b8:62:31:75:54:96:fd:d6:63:7f:50:19:10:e1:
b2:fb:f4:43:dd:fe:d7:e0:a8:03:b1:d0:6f:2f:fe:
7b:35:72:50:e6:04:4c:ba:38:6f:b7:88:b3:fc:3f:
ce:eb:e8:b3:bc:38:b7:21:49:fe:54:e4:cb:b6:6f:
2b:43:c7:64:68:2d:a2:33:af:e9:b7:cc:70:ae:b1:
df:ec:0c:70:a3:51:49:31:03:13:fe:f1:4e:f6:60:
0a:c0:f8:aa:d2:54:73:8c:0b:cb:c6:75:15:1b:78:
7b:3b:12:7b:af:95:b0:0e:59:02:c5:d4:8b:5a:39:
28:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:51:C6:B8:4B:2E:2D:B0:EE:E9:2B:26:A6:2F:A5:39:57:6E:4F:16
X509v3 Authority Key Identifier:
keyid:24:14:7C:8B:3F:37:85:0E:9F:90:74:99:38:45:C4:E0:69:F8:EF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JBR8iz83hQ6fkHSZOEXE4Gn47-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:a6:db:75:b3:28:a1:da:e3:8e:f0:ad:e0:70:55:57:20:e0:
d5:4c:1d:31:ae:b0:0b:d7:a6:54:07:39:39:27:a6:af:c8:f4:
d0:1d:62:6e:a9:f5:59:00:06:c2:c3:75:c1:64:9e:10:0e:db:
9c:ce:4f:5d:df:46:eb:96:4d:3b:31:f8:40:29:98:60:da:72:
d5:ec:cf:91:05:d4:ef:0f:75:d1:a6:73:03:74:40:8d:1e:51:
76:56:66:e0:19:78:07:2b:48:ff:da:fa:05:79:e5:ec:97:26:
cb:a3:ea:14:27:6b:71:b4:1d:4d:84:0f:95:62:fe:a7:ca:3e:
04:92:73:31:47:e3:fe:24:b1:cf:98:51:aa:51:58:2b:1e:7e:
a7:34:ab:cb:43:e6:53:ed:83:61:7e:f5:47:6e:33:e8:31:54:
9e:4c:da:60:5d:3b:1d:e3:6b:51:f3:0b:5b:08:ec:1c:84:4e:
99:f6:a9:7e:c3:32:5a:55:b8:24:1a:7f:e1:4f:f7:2a:67:3a:
c3:fa:fe:aa:a4:2b:e5:87:66:5e:70:55:47:93:e3:e3:b3:51:
d7:2a:d3:e4:2d:86:fe:7f:98:3e:a6:94:a0:41:8e:4d:f0:4e:
14:67:8b:41:a9:9f:5f:6e:66:9d:fb:4a:0d:8a:47:b9:4e:c5:
d8:2e:c0:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:37:29 2025 by rpki-client