![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/af1aae-c5f9-42c7-a7ff-e296f818ade9/1/mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.mft
File: mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.mft (raw, json)
Hash identifier: AmUHeIzuqrA+qrjs+q2xQEW3+8TKMlx5fIFIuCyVCBg=
Subject key identifier: 04:F3:3E:90:73:82:C7:A1:35:04:9F:92:96:03:1C:A2:93:8E:2A:09
Authority key identifier: 99:0D:9F:E7:93:B1:8E:EF:91:DC:76:FB:CB:A2:B2:CF:C5:2E:0B:C4
Certificate issuer: /CN=990d9fe793b18eef91dc76fbcba2b2cfc52e0bc4
Certificate serial: 01951210CE654780857BC2CA3298236C2BED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/af1aae-c5f9-42c7-a7ff-e296f818ade9/1/mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.mft
Manifest number: 1454
Signing time: Mon 17 Feb 2025 04:00:45 +0000
Manifest this update: Mon 17 Feb 2025 04:00:45 +0000
Manifest next update: Tue 18 Feb 2025 04:00:45 +0000
Files and hashes: 1: mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.crl (hash: 4JZvT2gA0h1L9Q0JnZOyRZbl4s6OSo2DIYCdUNQwS4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/af1aae-c5f9-42c7-a7ff-e296f818ade9/1/mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/af1aae-c5f9-42c7-a7ff-e296f818ade9/1/mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:ce:65:47:80:85:7b:c2:ca:32:98:23:6c:2b:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=990d9fe793b18eef91dc76fbcba2b2cfc52e0bc4
Validity
Not Before: Feb 17 04:00:45 2025 GMT
Not After : Feb 18 04:00:45 2025 GMT
Subject: CN=04f33e907382c7a135049f9296031ca2938e2a09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3a:aa:65:d8:95:28:3b:40:01:50:19:c5:6c:
3f:e1:de:82:b9:56:e9:1e:16:d4:dd:a2:3e:4a:3a:
de:ae:06:78:62:34:96:19:7d:b2:50:6b:00:5a:00:
af:cd:0e:28:6b:a1:dd:dd:0e:1a:21:c9:2d:cc:f9:
0b:be:b2:37:cb:89:87:5f:ef:17:8b:c6:60:13:b6:
61:e6:f6:c2:64:92:c6:09:62:9f:a0:99:fd:bd:cb:
e7:94:35:8f:bf:2d:26:d3:01:72:5f:d9:e9:a0:a2:
19:dd:04:34:10:b4:84:e0:4e:3a:79:60:7e:c7:0e:
96:50:36:90:54:e6:2a:0d:a2:33:af:67:00:d9:e3:
a7:94:b3:a9:47:62:10:30:28:1b:12:e9:1a:c9:20:
f1:df:56:6a:e6:fd:ac:04:5e:0b:2d:d5:36:a9:43:
ca:bf:b9:22:24:c8:7e:57:07:8b:d7:d3:b2:21:22:
9d:ea:02:87:7b:ba:37:90:dd:0a:c7:b3:9e:3b:05:
a3:9e:16:88:b6:e3:f1:6d:5e:bf:d0:37:c1:95:1a:
d2:52:03:32:76:5f:c1:ae:d0:25:28:c9:15:90:22:
1a:79:0c:95:55:13:bb:fe:0d:d7:54:42:08:e9:2b:
8c:06:3a:68:8b:ba:ba:bb:f9:de:a6:92:37:46:e7:
e5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:F3:3E:90:73:82:C7:A1:35:04:9F:92:96:03:1C:A2:93:8E:2A:09
X509v3 Authority Key Identifier:
keyid:99:0D:9F:E7:93:B1:8E:EF:91:DC:76:FB:CB:A2:B2:CF:C5:2E:0B:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/af1aae-c5f9-42c7-a7ff-e296f818ade9/1/mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/af1aae-c5f9-42c7-a7ff-e296f818ade9/1/mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:82:7a:b5:ad:92:d9:fe:ec:24:25:b3:70:23:66:c3:c1:0f:
3e:41:9f:cb:db:23:c5:6d:23:d7:04:9f:82:ab:36:33:e4:b3:
48:33:75:4e:63:b7:d3:94:71:53:b7:1e:a9:bf:28:fe:5b:af:
e5:96:b8:50:a2:43:72:b8:d5:ca:49:b5:dc:c8:5c:78:5c:62:
09:4f:23:d1:c0:02:a6:cd:14:ee:b1:3b:43:26:4e:24:8d:94:
e8:21:7f:a6:05:b8:b2:24:d4:f8:24:e4:51:5c:16:dc:3f:91:
24:a2:a0:ee:f8:69:48:90:21:af:4a:5e:75:ef:d8:ad:d3:7e:
5f:72:72:23:76:a5:b5:11:11:13:35:7a:9f:b3:38:58:0d:25:
6d:85:b5:cb:b9:f8:69:ae:72:1a:1b:4c:82:d6:f0:b4:32:13:
96:e7:02:20:65:f6:e5:6b:36:ef:2c:9e:d5:18:d1:03:a3:c1:
5d:7a:f9:50:d5:b5:61:1a:6f:55:28:bc:61:ab:9e:0d:a6:df:
f3:6d:f5:ba:b4:5e:d1:a4:2f:fd:28:61:12:ce:28:1f:9d:49:
b9:da:fe:58:d8:aa:fe:c8:69:87:5b:6b:89:bb:cd:0c:38:bf:
82:66:b6:12:02:58:90:dc:8d:a6:4a:50:6a:76:d2:e7:b6:1c:
92:05:20:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:48:05 2025 by rpki-client