![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/bbf75d-c1dd-44b0-a5e0-cdcc704b38a7/1/LQwhz_qAtaHly9Yxkw5_xV_d_Eg.mft
File: LQwhz_qAtaHly9Yxkw5_xV_d_Eg.mft (raw, json)
Hash identifier: X8LmrbXLgjg9pnMZzPVwIs1uMnh42VyPxzExTDINShY=
Subject key identifier: EA:EE:CF:91:29:FB:1E:C6:F2:42:25:EF:39:F9:41:24:67:C8:97:3F
Authority key identifier: 2D:0C:21:CF:FA:80:B5:A1:E5:CB:D6:31:93:0E:7F:C5:5F:DD:FC:48
Certificate issuer: /CN=2d0c21cffa80b5a1e5cbd631930e7fc55fddfc48
Certificate serial: 01951134BCFDC84A4FBF02239164C01E3DA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LQwhz_qAtaHly9Yxkw5_xV_d_Eg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/bbf75d-c1dd-44b0-a5e0-cdcc704b38a7/1/LQwhz_qAtaHly9Yxkw5_xV_d_Eg.mft
Manifest number: 12EA
Signing time: Mon 17 Feb 2025 00:00:23 +0000
Manifest this update: Mon 17 Feb 2025 00:00:23 +0000
Manifest next update: Tue 18 Feb 2025 00:00:23 +0000
Files and hashes: 1: LQwhz_qAtaHly9Yxkw5_xV_d_Eg.crl (hash: 9hZfm1wHOiMstCGcoyGOCQQoik4Z1jOEIJqjg1jb9qk=)
2: WnteyksBXxvh50Fr3JRktkxQELU.roa (hash: VZ2ULNlKhReA1wdNSeA4G9O7QzDbzJEXTzE8wy4jEPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/bbf75d-c1dd-44b0-a5e0-cdcc704b38a7/1/LQwhz_qAtaHly9Yxkw5_xV_d_Eg.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/bbf75d-c1dd-44b0-a5e0-cdcc704b38a7/1/LQwhz_qAtaHly9Yxkw5_xV_d_Eg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LQwhz_qAtaHly9Yxkw5_xV_d_Eg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:bc:fd:c8:4a:4f:bf:02:23:91:64:c0:1e:3d:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d0c21cffa80b5a1e5cbd631930e7fc55fddfc48
Validity
Not Before: Feb 17 00:00:23 2025 GMT
Not After : Feb 18 00:00:23 2025 GMT
Subject: CN=eaeecf9129fb1ec6f24225ef39f9412467c8973f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:72:05:5e:1a:42:f4:b0:1f:f7:f9:88:8a:df:
f0:ff:89:31:04:ab:bf:a0:bf:d5:d3:d7:cf:46:74:
78:e9:23:99:d7:55:08:17:86:87:7d:9a:f5:1c:fa:
fc:30:37:2e:74:4f:8a:54:08:0e:fe:af:c7:84:b2:
5e:d6:2d:61:98:46:a7:ed:50:b1:30:51:b2:a2:b2:
fb:60:59:9e:f0:7d:c0:4d:57:5e:b4:6c:20:38:fe:
3b:b2:e7:96:1d:9f:f2:c1:0f:1c:5a:a1:9f:75:59:
e0:16:9a:be:1d:bb:73:37:ac:67:ef:58:6f:80:68:
c0:1b:b2:28:08:2d:02:46:29:84:b4:69:fc:b5:70:
ef:29:e0:06:a5:9f:49:fa:a9:26:d7:64:46:6c:c2:
9e:e2:a2:d7:8d:04:63:8e:07:f0:78:aa:c7:06:cf:
b7:bf:c0:90:e6:02:7c:d3:1f:d2:ce:bd:3b:ed:78:
99:53:56:e6:fc:48:5d:9f:67:f6:c2:1a:60:b7:ef:
6a:a3:0b:f2:39:67:cf:b6:ed:89:5a:1f:f6:47:1a:
19:85:cd:ed:7b:87:dc:24:1d:01:eb:54:4f:ff:55:
3f:ff:2c:24:9c:1c:58:0b:a5:d5:e5:a4:b7:3c:2b:
78:bb:a0:06:27:f4:6f:30:be:eb:cf:43:67:42:9c:
bc:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:EE:CF:91:29:FB:1E:C6:F2:42:25:EF:39:F9:41:24:67:C8:97:3F
X509v3 Authority Key Identifier:
keyid:2D:0C:21:CF:FA:80:B5:A1:E5:CB:D6:31:93:0E:7F:C5:5F:DD:FC:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LQwhz_qAtaHly9Yxkw5_xV_d_Eg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/bbf75d-c1dd-44b0-a5e0-cdcc704b38a7/1/LQwhz_qAtaHly9Yxkw5_xV_d_Eg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/bbf75d-c1dd-44b0-a5e0-cdcc704b38a7/1/LQwhz_qAtaHly9Yxkw5_xV_d_Eg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:f2:30:c2:02:65:2b:d7:81:c2:f0:b6:1e:a5:b1:7a:57:b5:
ce:7e:65:38:7c:63:e9:6a:fd:fc:8e:82:8c:3a:3b:0b:85:8a:
22:b4:40:52:e3:33:75:89:40:40:8a:58:ca:69:27:fb:ae:8c:
cc:88:10:ed:75:f4:bf:33:e4:05:24:47:64:c9:c6:dc:3d:c2:
74:31:e8:bb:c5:29:83:61:e4:61:11:f2:ba:a3:b6:ea:d8:48:
a6:00:a5:31:7f:24:2a:44:65:f5:a7:1b:ad:b7:7c:b0:7e:a5:
cc:9d:14:6e:67:a7:8a:08:8d:d1:84:63:82:49:80:bd:2e:64:
9d:c7:7e:a1:ce:d5:bd:62:29:a4:07:74:fd:eb:9a:6b:d1:f5:
27:56:fc:7e:ad:5f:d1:74:36:29:cc:ae:61:4f:a6:ec:fb:4e:
e4:46:6e:9e:a0:69:83:45:5d:bb:31:e9:79:3f:97:66:91:90:
cd:24:97:0f:a5:67:fe:5f:bf:3a:ee:de:5c:43:0c:3e:f7:62:
9c:87:94:90:fa:15:9a:5d:ea:72:6f:42:73:9a:54:25:98:81:
26:80:6e:89:7f:78:1e:15:41:df:36:64:cc:95:11:12:32:d4:
d1:f1:a8:aa:b5:dd:28:37:6a:1f:f0:d8:a4:a5:df:94:01:5e:
fb:24:77:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:11:34 2025 by rpki-client