![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/0da8f7-fe22-42fb-a329-7d45a9fc4ffc/1/Bcij-qGLbXF6ovdiIYG62L5bVaM.mft
File: Bcij-qGLbXF6ovdiIYG62L5bVaM.mft (raw, json)
Hash identifier: v3FjMOal3rWs+sKB9rxy7dnf1CQI6SePKrqMvY7JiTA=
Subject key identifier: 9F:AF:39:AF:A6:41:7C:D2:62:B3:D1:D5:7A:36:8E:7B:8F:2F:0D:11
Authority key identifier: 05:C8:A3:FA:A1:8B:6D:71:7A:A2:F7:62:21:81:BA:D8:BE:5B:55:A3
Certificate issuer: /CN=05c8a3faa18b6d717aa2f7622181bad8be5b55a3
Certificate serial: 01951134C2C68F6B993FD88C0868AFD02A7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bcij-qGLbXF6ovdiIYG62L5bVaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/0da8f7-fe22-42fb-a329-7d45a9fc4ffc/1/Bcij-qGLbXF6ovdiIYG62L5bVaM.mft
Manifest number: 1455
Signing time: Mon 17 Feb 2025 00:00:25 +0000
Manifest this update: Mon 17 Feb 2025 00:00:25 +0000
Manifest next update: Tue 18 Feb 2025 00:00:25 +0000
Files and hashes: 1: Bcij-qGLbXF6ovdiIYG62L5bVaM.crl (hash: 9xyrlB3d/83XbJARGDINf43ostHUFJAVKvCux6FMN1s=)
2: tNEEVzPUvK-ygDPmYLA5K9Cm79o.roa (hash: /IY44KTu7ulQ8DUrvEAnJ6AB/WTV2xBTm/RnCC+27ZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/0da8f7-fe22-42fb-a329-7d45a9fc4ffc/1/Bcij-qGLbXF6ovdiIYG62L5bVaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/0da8f7-fe22-42fb-a329-7d45a9fc4ffc/1/Bcij-qGLbXF6ovdiIYG62L5bVaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bcij-qGLbXF6ovdiIYG62L5bVaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:c2:c6:8f:6b:99:3f:d8:8c:08:68:af:d0:2a:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05c8a3faa18b6d717aa2f7622181bad8be5b55a3
Validity
Not Before: Feb 17 00:00:25 2025 GMT
Not After : Feb 18 00:00:25 2025 GMT
Subject: CN=9faf39afa6417cd262b3d1d57a368e7b8f2f0d11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:61:99:ce:2c:56:67:ed:7e:7e:82:c7:c3:77:
ab:39:f1:63:d5:02:b4:cf:98:da:b3:c7:04:12:0b:
1e:02:e2:dd:a9:0b:62:6b:74:6e:cb:59:76:03:eb:
86:9b:6b:63:eb:c5:99:30:b1:10:e0:48:b3:ff:49:
82:1d:f7:48:82:b0:ca:48:aa:95:29:1b:58:4a:1c:
2f:d8:e2:6b:bf:a3:d7:40:28:21:11:73:36:f9:3d:
c8:cd:08:00:49:d2:b5:fe:a9:e5:fb:d1:1b:35:fc:
93:ed:0c:2d:df:47:35:e7:dd:8e:4f:28:86:ba:df:
42:35:ec:ef:07:99:74:3b:6a:d8:3d:f6:93:2b:f8:
32:c6:33:d0:ac:8c:09:84:e4:c0:e2:c7:8b:cb:5c:
d5:2c:d3:c9:7a:b2:0c:3c:9c:62:a8:9e:8e:40:6f:
71:70:a2:98:d9:f7:26:eb:95:c5:58:ed:fc:47:60:
26:a3:50:30:9f:91:ab:5f:a4:e1:d1:e6:30:51:df:
18:fd:4d:82:b1:6c:a7:38:eb:3d:54:dd:ab:f0:00:
c5:d0:c1:81:22:03:b6:50:8d:94:0a:d7:1a:85:f1:
33:a0:9d:12:0d:84:48:a8:e7:c9:c8:08:e7:2a:3c:
1d:1b:8d:6b:00:f1:e7:c9:07:07:c8:d9:61:f2:8e:
8a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:AF:39:AF:A6:41:7C:D2:62:B3:D1:D5:7A:36:8E:7B:8F:2F:0D:11
X509v3 Authority Key Identifier:
keyid:05:C8:A3:FA:A1:8B:6D:71:7A:A2:F7:62:21:81:BA:D8:BE:5B:55:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bcij-qGLbXF6ovdiIYG62L5bVaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/0da8f7-fe22-42fb-a329-7d45a9fc4ffc/1/Bcij-qGLbXF6ovdiIYG62L5bVaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/0da8f7-fe22-42fb-a329-7d45a9fc4ffc/1/Bcij-qGLbXF6ovdiIYG62L5bVaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:2a:3b:4c:77:62:9c:ea:d8:09:d2:4d:03:ec:07:39:db:00:
3f:d8:1b:88:7c:a6:ee:bd:f2:d7:50:6f:cd:1d:18:dd:70:8d:
cc:29:13:5b:b8:a5:51:6e:98:85:2a:07:ab:c1:8b:48:13:86:
29:c7:89:9a:3a:01:a0:fb:52:0e:c1:b7:a7:c0:b5:12:8a:ce:
04:66:c9:3c:18:d2:2d:a5:f3:b3:28:bb:47:fd:b1:8d:8e:31:
9d:1d:c4:35:96:d9:1a:c7:b5:85:79:4d:1a:92:2d:ca:26:93:
f7:a5:0b:62:3a:9d:ad:3f:ab:9b:0a:f9:3f:ae:30:4f:aa:c5:
6a:32:31:28:14:60:05:e7:da:12:dc:95:40:49:06:f9:f7:85:
32:e9:9b:99:7d:93:0b:6d:00:bc:57:db:df:62:07:95:3f:c5:
9f:39:ef:2f:2b:76:27:50:e0:24:b0:74:bd:d5:cb:dd:bb:93:
46:e9:fa:64:ab:d2:e9:12:76:aa:9a:33:97:4b:33:d1:3a:e3:
3e:bc:4a:3c:48:48:b0:c5:7e:dc:49:14:17:6d:be:96:54:fc:
b7:c0:7c:39:91:26:5d:c4:75:78:df:20:38:71:f1:25:53:91:
0e:98:ed:a1:57:0c:0f:27:0b:ce:bf:20:50:0b:f7:7e:ea:b8:
c1:34:e9:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:13:41 2025 by rpki-client