![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/af4d63-9f58-4bbd-8d25-91d1a06863ae/1/frkrON8ZfKLLrjAmkyJrI_MqP3Y.mft
File: frkrON8ZfKLLrjAmkyJrI_MqP3Y.mft (raw, json)
Hash identifier: yE+qLtpq+GCADCRCSB4YZTz/yBYIdbcqaYnbdzGfECs=
Subject key identifier: 31:52:05:ED:7F:8A:98:53:E6:BF:FB:C1:38:04:6D:85:F4:79:48:A9
Authority key identifier: 7E:B9:2B:38:DF:19:7C:A2:CB:AE:30:26:93:22:6B:23:F3:2A:3F:76
Certificate issuer: /CN=7eb92b38df197ca2cbae302693226b23f32a3f76
Certificate serial: 019511A3074CDE83140E97EF6F399CFF49BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/frkrON8ZfKLLrjAmkyJrI_MqP3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/af4d63-9f58-4bbd-8d25-91d1a06863ae/1/frkrON8ZfKLLrjAmkyJrI_MqP3Y.mft
Manifest number: 07FD
Signing time: Mon 17 Feb 2025 02:00:51 +0000
Manifest this update: Mon 17 Feb 2025 02:00:51 +0000
Manifest next update: Tue 18 Feb 2025 02:00:51 +0000
Files and hashes: 1: D2PvKy2Fh2cO6iDJdJDdwrPKV3Y.roa (hash: iOwjeX+ly9me24ya3PbZf2MmDFD7bpYOFi09vEBVm6M=)
2: frkrON8ZfKLLrjAmkyJrI_MqP3Y.crl (hash: ivToUu86W5cnM3DmpKtN4Yr7L1zkQSv2Ta0WeS1N4k0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/af4d63-9f58-4bbd-8d25-91d1a06863ae/1/frkrON8ZfKLLrjAmkyJrI_MqP3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/af4d63-9f58-4bbd-8d25-91d1a06863ae/1/frkrON8ZfKLLrjAmkyJrI_MqP3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/frkrON8ZfKLLrjAmkyJrI_MqP3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a3:07:4c:de:83:14:0e:97:ef:6f:39:9c:ff:49:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7eb92b38df197ca2cbae302693226b23f32a3f76
Validity
Not Before: Feb 17 02:00:51 2025 GMT
Not After : Feb 18 02:00:51 2025 GMT
Subject: CN=315205ed7f8a9853e6bffbc138046d85f47948a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:1b:4d:b5:0f:9e:76:a4:9b:94:51:73:b1:84:
1d:00:ea:61:fa:38:69:2b:28:d8:fb:d1:04:13:40:
f9:cc:5d:55:0b:14:ab:de:5e:c7:d2:d9:bc:e4:96:
6c:4a:1d:38:34:fb:98:31:db:41:30:9c:d0:df:b8:
7c:56:16:f6:76:50:23:7f:60:2f:86:1b:91:f2:6b:
bf:52:47:c5:c4:2e:7d:27:b4:00:33:37:b2:e7:31:
8b:ca:c1:8e:22:e7:96:61:0d:9e:e8:5d:83:73:8f:
29:83:b7:7e:e3:6b:c6:cb:a5:02:52:a3:30:b7:f3:
15:30:08:d3:a7:c2:81:8d:34:47:e5:cf:32:f1:a2:
34:64:82:d6:c5:e3:47:06:42:73:c7:0d:80:0c:52:
66:26:63:75:14:d5:66:f1:72:8d:39:ff:23:72:44:
27:d8:24:eb:ea:34:fc:e7:f8:d1:43:79:6c:d6:58:
8d:0f:91:41:d1:b6:6b:a3:de:56:e9:19:27:1b:9b:
d5:f2:b2:1b:65:a6:94:dd:4f:32:9b:69:21:7b:81:
36:7d:5d:be:e0:02:bb:f7:5f:20:3a:cd:49:41:ba:
df:6e:8f:1d:b4:8e:ce:45:14:c9:3e:37:2a:ba:33:
e5:f5:c2:3b:0a:e2:30:08:14:a5:29:80:0b:8b:74:
ab:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:52:05:ED:7F:8A:98:53:E6:BF:FB:C1:38:04:6D:85:F4:79:48:A9
X509v3 Authority Key Identifier:
keyid:7E:B9:2B:38:DF:19:7C:A2:CB:AE:30:26:93:22:6B:23:F3:2A:3F:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/frkrON8ZfKLLrjAmkyJrI_MqP3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/af4d63-9f58-4bbd-8d25-91d1a06863ae/1/frkrON8ZfKLLrjAmkyJrI_MqP3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/af4d63-9f58-4bbd-8d25-91d1a06863ae/1/frkrON8ZfKLLrjAmkyJrI_MqP3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:8e:ee:4a:5c:91:4f:d9:d6:5a:a0:06:e2:19:ac:be:46:5a:
2a:44:67:59:09:ba:18:92:ec:8e:21:2c:d8:d8:d1:d1:f3:8f:
a2:a7:b3:8e:06:28:ed:5a:b3:c9:e4:69:33:b6:0f:12:4d:d3:
a0:57:cb:41:52:78:52:32:1b:c4:1f:59:3a:6f:d0:cc:b1:46:
0f:13:1c:2a:87:dd:06:01:88:b7:74:5e:e5:4d:f6:4d:6a:82:
88:4d:63:c2:c9:a3:d9:66:5a:2e:ef:14:7d:66:50:2a:d6:86:
c7:be:84:97:c9:ad:80:d5:ea:bc:71:ea:ab:69:99:22:ab:ff:
83:0b:6a:19:2b:5c:ab:8d:ca:c4:a8:de:b8:56:8e:51:58:57:
35:f7:c3:ec:c1:ef:58:4d:ea:55:28:f8:ab:22:e8:98:c0:52:
a1:6c:7f:e8:8c:6f:a7:7d:e0:cd:f2:de:a0:8b:5d:54:b4:10:
4c:0c:69:24:ee:49:1f:d7:12:88:e3:2d:97:9b:05:17:c5:05:
47:0e:05:ae:b0:17:61:1d:50:76:80:47:e4:f6:19:20:26:3b:
35:43:ec:64:47:88:4a:b8:b0:8a:60:54:ba:b0:0a:01:d0:4a:
67:b8:b5:a0:e1:6d:ae:c1:76:86:0a:7f:8d:f0:51:64:eb:cb:
22:2d:19:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:53:05 2025 by rpki-client