![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/57ffc5-584f-4bfa-ab85-b9153b3320c1/1/7YUEg8zhM3scbC_d6pxdu0p-GRo.mft
File: 7YUEg8zhM3scbC_d6pxdu0p-GRo.mft (raw, json)
Hash identifier: gZ40JNpZO64O/Jon0oealbtZCBEUrw1k+2cNU5p3aK8=
Subject key identifier: C9:AB:B9:1E:89:F9:EA:4A:68:5F:81:CC:34:B3:6B:B9:B8:BA:A1:11
Authority key identifier: ED:85:04:83:CC:E1:33:7B:1C:6C:2F:DD:EA:9C:5D:BB:4A:7E:19:1A
Certificate issuer: /CN=ed850483cce1337b1c6c2fddea9c5dbb4a7e191a
Certificate serial: 019511348247C1BBA68AA133AB62F5EEDA61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7YUEg8zhM3scbC_d6pxdu0p-GRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/57ffc5-584f-4bfa-ab85-b9153b3320c1/1/7YUEg8zhM3scbC_d6pxdu0p-GRo.mft
Manifest number: 1454
Signing time: Mon 17 Feb 2025 00:00:08 +0000
Manifest this update: Mon 17 Feb 2025 00:00:08 +0000
Manifest next update: Tue 18 Feb 2025 00:00:08 +0000
Files and hashes: 1: 7YUEg8zhM3scbC_d6pxdu0p-GRo.crl (hash: 6jhIsmyuFsEzs+JwkPsfqRpspTVavleKuJQZiwkYaKQ=)
2: dkZNbopwMIyrpNTLtKS1BEFrSe4.roa (hash: WHiCQDL82pBvjlz/Bz6xK48gzCLCBs8LyNMasCyQoiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/57ffc5-584f-4bfa-ab85-b9153b3320c1/1/7YUEg8zhM3scbC_d6pxdu0p-GRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/57ffc5-584f-4bfa-ab85-b9153b3320c1/1/7YUEg8zhM3scbC_d6pxdu0p-GRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7YUEg8zhM3scbC_d6pxdu0p-GRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:82:47:c1:bb:a6:8a:a1:33:ab:62:f5:ee:da:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed850483cce1337b1c6c2fddea9c5dbb4a7e191a
Validity
Not Before: Feb 17 00:00:08 2025 GMT
Not After : Feb 18 00:00:08 2025 GMT
Subject: CN=c9abb91e89f9ea4a685f81cc34b36bb9b8baa111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b2:35:74:e3:3b:3a:05:3d:2f:16:7a:c8:e7:
bd:9c:83:7b:71:52:03:c0:db:3c:4f:18:7d:36:9b:
37:82:c5:3a:ad:ba:e1:a8:e8:e9:63:bf:9a:da:fd:
fa:31:f9:c9:f0:f7:26:1b:e0:a5:f8:16:b1:23:6c:
e4:1e:f4:af:6e:00:3e:c8:4f:83:31:70:01:47:94:
c8:56:4b:e0:ed:ed:91:67:fe:9b:82:40:09:46:06:
03:0f:66:5f:71:86:a2:60:c0:80:e0:11:31:ef:0a:
b8:b7:5b:d4:7d:80:6c:c1:4b:5d:29:5a:d0:eb:05:
1b:67:ef:1d:bc:43:ed:51:f6:38:f6:88:9b:cd:07:
1e:f8:8d:bf:4e:71:15:2f:90:8c:a7:c0:50:60:a9:
8b:5a:7a:a4:47:40:54:8f:91:45:07:ba:ec:21:5b:
93:20:eb:1e:c1:4b:c1:c7:fd:15:ec:0f:81:8b:e2:
33:6d:b5:38:c6:a4:05:13:9a:82:16:f0:6d:f9:22:
a6:8f:2c:af:f1:ac:a8:14:80:d6:95:d3:d0:2a:9b:
bb:61:e0:3d:5d:f9:6a:48:51:9c:d8:73:ec:72:89:
13:50:22:64:83:b5:de:8b:1b:4a:b0:93:20:3b:55:
af:d9:93:29:34:26:84:ae:a8:2a:2a:4b:c2:23:99:
94:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:AB:B9:1E:89:F9:EA:4A:68:5F:81:CC:34:B3:6B:B9:B8:BA:A1:11
X509v3 Authority Key Identifier:
keyid:ED:85:04:83:CC:E1:33:7B:1C:6C:2F:DD:EA:9C:5D:BB:4A:7E:19:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7YUEg8zhM3scbC_d6pxdu0p-GRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/57ffc5-584f-4bfa-ab85-b9153b3320c1/1/7YUEg8zhM3scbC_d6pxdu0p-GRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/57ffc5-584f-4bfa-ab85-b9153b3320c1/1/7YUEg8zhM3scbC_d6pxdu0p-GRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:9f:21:ab:13:82:bb:8b:5d:40:14:30:74:aa:8b:44:71:2e:
e6:bd:6e:85:aa:0d:e5:59:0e:6d:e0:a1:ef:5a:c6:e9:d6:e4:
97:a6:0c:dd:ef:e2:21:89:95:e5:61:c2:84:b7:6a:d3:da:c2:
ab:4f:98:a2:b2:f3:f6:28:a3:30:1c:3b:7d:14:72:b7:da:60:
4e:c0:ad:e7:bc:68:0c:62:9f:93:6b:1f:e1:6c:5d:5d:94:af:
7b:f2:38:93:dc:5d:06:1b:f4:03:da:01:0d:33:f5:19:71:45:
1a:e3:aa:e3:de:b1:de:c6:c5:37:c7:07:86:1a:20:ea:d8:10:
64:fd:e1:45:ea:4c:05:f3:a3:53:49:1e:30:cc:2c:1e:71:ba:
a3:5f:ce:3d:c5:cb:ef:47:f1:bf:2a:cf:5b:8f:94:5b:27:42:
c2:12:c6:4f:28:c3:92:a4:a2:92:92:ad:ce:cf:b8:05:03:4c:
14:a0:15:fb:6e:23:ed:80:8f:8b:ca:7c:84:cb:2a:ca:5c:b2:
59:06:37:e6:bc:10:9f:29:ec:0b:ea:f4:05:52:f6:9b:f1:38:
4c:cc:d8:ec:b1:8a:4e:fd:ce:bd:e9:19:56:4a:c6:23:70:23:
f2:ff:04:16:17:68:66:f8:77:28:6c:c0:24:86:bb:6a:f2:88:
e8:ec:ec:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:03:26 2025 by rpki-client