![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/655d53-94c5-4a97-88a1-d277a5f3b9e0/1/P6E212Q_3A0_sdU0Z9irspm3kXE.mft
File: P6E212Q_3A0_sdU0Z9irspm3kXE.mft (raw, json)
Hash identifier: IezCGyeVVVl+rkSqA54KdekWwfE0P1O2n8iPD6kke88=
Subject key identifier: D4:78:69:44:6E:25:F6:CD:B5:42:56:30:4D:17:3E:37:25:4C:71:C2
Authority key identifier: 3F:A1:36:D7:64:3F:DC:0D:3F:B1:D5:34:67:D8:AB:B2:99:B7:91:71
Certificate issuer: /CN=3fa136d7643fdc0d3fb1d53467d8abb299b79171
Certificate serial: 0195108FB5CA485D1A48399A7F984E822516
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P6E212Q_3A0_sdU0Z9irspm3kXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/655d53-94c5-4a97-88a1-d277a5f3b9e0/1/P6E212Q_3A0_sdU0Z9irspm3kXE.mft
Manifest number: 0440
Signing time: Sun 16 Feb 2025 21:00:08 +0000
Manifest this update: Sun 16 Feb 2025 21:00:08 +0000
Manifest next update: Mon 17 Feb 2025 21:00:08 +0000
Files and hashes: 1: P6E212Q_3A0_sdU0Z9irspm3kXE.crl (hash: oohls3SSGq50GJWzn8cmzpRd5ZEsLYBXD5LG6K7gfy0=)
2: aQLWCmdbg9aMVtpUr6kgFp-kl8g.roa (hash: MaYzTmKmtA6VMd+7uLB1yAAfoDrTIUYoMrGwKo2T4Fc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/655d53-94c5-4a97-88a1-d277a5f3b9e0/1/P6E212Q_3A0_sdU0Z9irspm3kXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/655d53-94c5-4a97-88a1-d277a5f3b9e0/1/P6E212Q_3A0_sdU0Z9irspm3kXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/P6E212Q_3A0_sdU0Z9irspm3kXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 21:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:8f:b5:ca:48:5d:1a:48:39:9a:7f:98:4e:82:25:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fa136d7643fdc0d3fb1d53467d8abb299b79171
Validity
Not Before: Feb 16 21:00:08 2025 GMT
Not After : Feb 17 21:00:08 2025 GMT
Subject: CN=d47869446e25f6cdb54256304d173e37254c71c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:49:52:9e:fe:46:6a:67:81:08:ba:66:26:03:
ff:51:c4:0b:2a:0a:ff:dd:73:20:b0:0f:c0:ee:3d:
49:69:65:a2:9b:04:da:7a:9b:d5:e5:4b:18:22:0b:
20:6d:04:42:ae:31:50:49:0a:ed:a6:6e:37:73:81:
34:69:a1:c6:b0:a0:a6:aa:d8:8c:36:17:74:ac:57:
d7:a1:b5:c1:5e:ba:4b:5f:54:91:78:4e:0e:c2:70:
38:a7:84:f4:95:d2:99:6f:98:9c:56:39:7e:89:0f:
be:b4:e2:d0:75:4e:20:4e:63:99:d4:62:ef:b2:b1:
c3:a7:78:fc:79:c4:4e:62:1c:51:63:1b:7e:bb:9f:
8f:27:7c:ea:d3:de:7a:30:8e:53:d6:77:58:ca:d2:
5d:76:af:89:63:01:2f:93:30:90:37:02:ba:fd:55:
c3:6b:a8:b1:ef:33:b9:b2:a3:ee:69:f8:b4:d2:df:
b4:4a:eb:1e:6e:3a:b0:f8:01:f5:92:5a:18:f3:1f:
9b:41:37:df:24:d6:89:09:47:a1:01:f5:d1:d0:0c:
a7:66:19:e1:b3:04:fe:c9:5f:34:02:28:18:ba:5f:
6c:6d:0b:03:5c:45:57:85:5a:13:63:cc:a5:87:5c:
fb:b6:ab:db:b9:0c:d5:7a:73:76:ab:f1:16:4a:f2:
fa:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:78:69:44:6E:25:F6:CD:B5:42:56:30:4D:17:3E:37:25:4C:71:C2
X509v3 Authority Key Identifier:
keyid:3F:A1:36:D7:64:3F:DC:0D:3F:B1:D5:34:67:D8:AB:B2:99:B7:91:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P6E212Q_3A0_sdU0Z9irspm3kXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/655d53-94c5-4a97-88a1-d277a5f3b9e0/1/P6E212Q_3A0_sdU0Z9irspm3kXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/655d53-94c5-4a97-88a1-d277a5f3b9e0/1/P6E212Q_3A0_sdU0Z9irspm3kXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:1b:12:80:38:21:46:c5:2c:f2:01:83:50:de:db:22:21:06:
b5:12:84:55:e7:38:f7:1b:ef:82:6f:12:90:a6:20:f7:b0:c4:
d3:fc:33:7e:e3:49:1e:34:20:1e:3f:4d:93:70:e2:cd:c2:83:
94:63:b7:d4:d3:20:06:19:93:ee:51:de:b5:90:93:b2:72:5a:
09:cb:d6:f2:d3:b3:8c:63:a2:32:8d:7d:64:b9:31:73:18:00:
4e:64:c7:d7:01:9c:0c:a7:9f:36:bb:23:ff:3a:40:f2:e3:34:
c6:22:30:38:6c:92:32:d0:d2:f2:a4:42:72:99:26:af:89:b1:
5b:57:12:19:a2:4f:e8:5d:3b:c0:cb:cc:9d:b7:3d:9b:9a:74:
3b:16:9d:06:04:a1:c2:65:cc:dc:fb:b9:25:8e:e1:e6:f2:c1:
84:fc:ee:44:9f:9f:b6:9c:0f:3a:2f:5d:99:2c:b6:2d:90:cf:
f8:9a:f8:f0:ff:f5:8f:6d:bc:b8:a5:6e:fc:a5:33:99:69:d7:
c2:9f:6e:e9:f2:80:d7:ad:91:77:b2:3c:c5:86:81:c4:12:c5:
7a:e4:8b:9b:f3:a0:97:f6:2a:34:2a:17:ce:d5:8d:7f:b4:43:
86:9f:53:19:75:65:a0:4c:a4:6a:0d:59:75:65:5f:0b:8b:ab:
ce:92:e2:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:28:28 2025 by rpki-client