![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/1f3322-6af7-47ab-8dc5-99a11f6385ab/1/C-vO5NIzea7YGuz_x6dCs1rN3bM.mft
File: C-vO5NIzea7YGuz_x6dCs1rN3bM.mft (raw, json)
Hash identifier: VHO424FcWpl9hxdd9Q6hVkCzKdbPyfmuYjWbut14j4U=
Subject key identifier: B9:F9:0D:CF:A5:B5:AF:CE:AD:4C:FA:9B:5B:78:0B:C6:FD:69:46:60
Authority key identifier: 0B:EB:CE:E4:D2:33:79:AE:D8:1A:EC:FF:C7:A7:42:B3:5A:CD:DD:B3
Certificate issuer: /CN=0bebcee4d23379aed81aecffc7a742b35acdddb3
Certificate serial: 01951157360AF1F52DFC4ABFFC42EF0ACF08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-vO5NIzea7YGuz_x6dCs1rN3bM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/1f3322-6af7-47ab-8dc5-99a11f6385ab/1/C-vO5NIzea7YGuz_x6dCs1rN3bM.mft
Manifest number: 0420
Signing time: Mon 17 Feb 2025 00:38:02 +0000
Manifest this update: Mon 17 Feb 2025 00:38:02 +0000
Manifest next update: Tue 18 Feb 2025 00:38:02 +0000
Files and hashes: 1: AUtsyV4GoOAXKw9J3JJYlvWZMCo.roa (hash: /0BCHflij9PTsqkAVxlV2lPjueYr2KbGYcBxxZ+N59s=)
2: C-vO5NIzea7YGuz_x6dCs1rN3bM.crl (hash: vFGF9a31zrzdMyQXG8Sr7/xRzEGg7eeM6BpnLLIwLEY=)
3: mV1hZytX8BcNK6MuHKBDE6HH6LY.roa (hash: Izn1ppuqIeq4brUj4agoXptLWgkQ3/6X3t/Q9E4R05U=)
4: tsJwFZrDXIRwjLakU6dbnqENzD0.roa (hash: wlsUyedxgDvePxXhoMuofoRM97SDv+ta+Oc6E/8MG7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/1f3322-6af7-47ab-8dc5-99a11f6385ab/1/C-vO5NIzea7YGuz_x6dCs1rN3bM.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/1f3322-6af7-47ab-8dc5-99a11f6385ab/1/C-vO5NIzea7YGuz_x6dCs1rN3bM.mft
rsync://rpki.ripe.net/repository/DEFAULT/C-vO5NIzea7YGuz_x6dCs1rN3bM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:57:36:0a:f1:f5:2d:fc:4a:bf:fc:42:ef:0a:cf:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bebcee4d23379aed81aecffc7a742b35acdddb3
Validity
Not Before: Feb 17 00:38:02 2025 GMT
Not After : Feb 18 00:38:02 2025 GMT
Subject: CN=b9f90dcfa5b5afcead4cfa9b5b780bc6fd694660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f5:b8:d7:35:8c:fc:79:02:68:e2:fb:00:e8:
c1:e9:3e:f5:61:15:e6:a3:37:45:4e:64:ba:2a:f1:
3d:55:3e:9a:09:0f:ed:bc:87:3d:5b:1b:a6:5d:b8:
e0:65:9a:88:fe:f9:aa:24:72:4a:fb:9b:56:a3:16:
53:76:7e:e2:35:9b:18:b5:d7:68:3e:7b:34:03:56:
ba:8d:58:21:68:c1:72:97:2e:65:57:82:c6:0b:ef:
03:4f:d5:e5:0a:f5:0d:56:f0:5a:13:44:2b:02:1a:
2f:fc:a7:6d:e7:1b:84:dc:d0:a1:f4:b1:b9:0f:ad:
80:8f:a8:8a:d7:6a:08:ec:dd:70:91:f9:8e:1e:51:
7b:03:1d:c5:f5:0b:c0:61:e4:6b:a0:a3:55:e0:f2:
08:73:5a:1b:1f:2d:a3:cb:64:fc:ba:05:8b:2e:7d:
c4:8b:d9:16:3a:3f:51:c4:66:0c:be:b5:32:e5:c3:
12:a8:3d:57:d7:2b:49:a3:47:0c:00:6e:6a:8b:1e:
c1:e7:44:fa:66:24:72:83:1e:dd:27:38:36:cc:3e:
37:d3:34:b9:88:74:b0:bb:50:5e:32:2f:00:e6:23:
12:e6:b6:61:18:35:68:03:39:92:ec:c9:c8:2a:bb:
d8:8c:eb:9f:72:aa:6b:44:61:de:84:4e:9c:26:9a:
17:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:F9:0D:CF:A5:B5:AF:CE:AD:4C:FA:9B:5B:78:0B:C6:FD:69:46:60
X509v3 Authority Key Identifier:
keyid:0B:EB:CE:E4:D2:33:79:AE:D8:1A:EC:FF:C7:A7:42:B3:5A:CD:DD:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-vO5NIzea7YGuz_x6dCs1rN3bM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1f3322-6af7-47ab-8dc5-99a11f6385ab/1/C-vO5NIzea7YGuz_x6dCs1rN3bM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1f3322-6af7-47ab-8dc5-99a11f6385ab/1/C-vO5NIzea7YGuz_x6dCs1rN3bM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:a6:8a:c2:1d:dd:57:7a:80:a4:67:15:d2:8f:89:47:e0:88:
84:87:a8:98:76:db:af:b5:21:50:12:6a:39:05:42:a2:04:4f:
ee:83:33:46:a1:00:a1:2e:8c:2f:48:dd:d7:5a:7e:50:c4:cb:
24:0c:bb:bd:b9:e7:a7:5a:ec:6a:a5:9e:42:58:85:04:11:08:
b5:a2:b1:8c:1d:85:e7:e5:c2:a8:d4:4b:d3:93:19:6e:73:f1:
87:78:23:37:00:ae:b1:de:ea:5d:04:2f:cd:d8:76:f9:a3:84:
09:f3:2f:5e:ac:78:65:58:e1:08:42:c8:b1:33:5c:21:19:8e:
12:b2:97:87:0a:c3:7b:f7:c4:6e:c6:5d:49:da:25:49:2f:ea:
ee:3b:39:f9:fe:8d:be:4b:1e:24:c1:35:a7:fa:97:5d:38:53:
0a:c3:13:8c:4e:ec:c1:14:f3:fb:8a:e9:74:4e:af:54:88:1c:
12:bb:b3:4e:04:04:69:84:cb:35:69:cf:6d:c2:9e:6e:5c:6d:
9f:f4:73:47:e0:a2:79:ec:47:de:28:fa:4e:9f:89:cb:e7:0f:
53:b1:f8:b1:f9:97:c2:17:e2:b3:76:e2:e8:6a:99:3b:63:15:
db:79:f1:fa:54:2e:58:3a:c7:a4:24:da:a8:44:8c:e9:d8:2d:
3e:34:96:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:14:54 2025 by rpki-client