![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/e09471-49bd-4f5b-ba1b-fe6cb0ab0751/1/GDzfUiwC4ecUJ_hRYZmC4t0oOXc.mft
File: GDzfUiwC4ecUJ_hRYZmC4t0oOXc.mft (raw, json)
Hash identifier: Txk8SIhb3Dkw2RKZJdW1//YSIr8Viw/Usnj79IzShPE=
Subject key identifier: B9:30:A9:C2:3D:E3:E4:88:F3:9C:85:40:0D:75:8F:AE:53:D2:CB:38
Authority key identifier: 18:3C:DF:52:2C:02:E1:E7:14:27:F8:51:61:99:82:E2:DD:28:39:77
Certificate issuer: /CN=183cdf522c02e1e71427f851619982e2dd283977
Certificate serial: 019510FDEEF7FDEE65438AAD81206760458E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GDzfUiwC4ecUJ_hRYZmC4t0oOXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/e09471-49bd-4f5b-ba1b-fe6cb0ab0751/1/GDzfUiwC4ecUJ_hRYZmC4t0oOXc.mft
Manifest number: 03A2
Signing time: Sun 16 Feb 2025 23:00:31 +0000
Manifest this update: Sun 16 Feb 2025 23:00:31 +0000
Manifest next update: Mon 17 Feb 2025 23:00:31 +0000
Files and hashes: 1: GDzfUiwC4ecUJ_hRYZmC4t0oOXc.crl (hash: gHH+B9lpHJji9hdIcZaa03z+LThAjZeBGnFOX9nIOJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/e09471-49bd-4f5b-ba1b-fe6cb0ab0751/1/GDzfUiwC4ecUJ_hRYZmC4t0oOXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/e09471-49bd-4f5b-ba1b-fe6cb0ab0751/1/GDzfUiwC4ecUJ_hRYZmC4t0oOXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/GDzfUiwC4ecUJ_hRYZmC4t0oOXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fd:ee:f7:fd:ee:65:43:8a:ad:81:20:67:60:45:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=183cdf522c02e1e71427f851619982e2dd283977
Validity
Not Before: Feb 16 23:00:31 2025 GMT
Not After : Feb 17 23:00:31 2025 GMT
Subject: CN=b930a9c23de3e488f39c85400d758fae53d2cb38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e1:dc:03:2e:5c:21:f2:d2:8b:8d:07:53:4b:
82:58:2d:ce:b1:19:32:55:02:26:26:4e:3d:56:3a:
2b:9e:57:45:84:6d:f9:0c:e3:ff:18:8c:84:07:50:
37:8f:b7:6c:3b:82:3d:00:db:89:fc:61:e2:93:4d:
0e:15:59:0d:9a:d4:15:6e:de:af:38:fb:23:5c:18:
63:49:a2:c4:58:26:06:9e:b0:ba:6b:27:2a:cb:6e:
0d:4f:1f:97:62:13:98:34:1e:64:74:a0:49:48:a1:
68:0d:4f:f5:bf:f5:26:7b:37:7b:cc:55:e7:c5:ea:
d3:02:24:dc:7f:bf:b4:0c:c2:fa:3c:6a:65:1e:ab:
13:11:8c:9a:c7:51:a0:48:ba:a2:bf:2d:74:be:22:
d1:48:8c:36:6e:37:ad:03:24:aa:2a:c9:53:df:fc:
60:e1:b3:2f:2a:df:be:f3:39:3e:44:46:49:ee:6a:
a2:e0:b9:8e:ee:e7:dc:0b:7d:d5:91:78:a2:ac:7d:
b8:0a:89:d6:24:21:f4:7f:9a:10:dc:61:84:75:f5:
74:ba:3a:3f:1e:df:e1:d5:79:46:19:76:ea:cf:e3:
e4:6e:64:a3:5b:2f:83:1d:0c:92:c7:d0:15:be:8f:
9f:b5:57:fc:88:89:ca:b8:35:a1:f5:30:d1:ef:48:
76:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:30:A9:C2:3D:E3:E4:88:F3:9C:85:40:0D:75:8F:AE:53:D2:CB:38
X509v3 Authority Key Identifier:
keyid:18:3C:DF:52:2C:02:E1:E7:14:27:F8:51:61:99:82:E2:DD:28:39:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GDzfUiwC4ecUJ_hRYZmC4t0oOXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/e09471-49bd-4f5b-ba1b-fe6cb0ab0751/1/GDzfUiwC4ecUJ_hRYZmC4t0oOXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/e09471-49bd-4f5b-ba1b-fe6cb0ab0751/1/GDzfUiwC4ecUJ_hRYZmC4t0oOXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:fd:8e:37:68:b2:ac:7a:45:ef:c3:9b:01:96:f1:78:01:2c:
2f:b4:96:d3:ce:01:ef:d8:2a:40:2e:2b:52:2f:5e:7b:a2:b0:
4a:1d:ca:d7:22:43:35:a5:58:d8:cd:61:87:8a:85:20:f2:0b:
bf:be:ee:4c:bf:b8:a1:58:35:a0:38:b1:ed:ef:23:93:3a:d4:
5c:7c:4f:d2:ac:d9:3f:cf:10:d3:c7:4c:20:c4:22:bf:26:44:
9e:ba:c4:94:4e:76:5e:59:a2:79:01:b1:a9:ce:21:38:c9:53:
bf:83:81:43:21:fa:00:ca:91:05:04:e5:e2:69:96:de:b5:f2:
ab:99:a4:e4:7d:b3:d6:63:fd:10:f9:3f:88:7f:3b:f1:5f:56:
2d:8b:14:12:80:4c:25:6a:48:ac:1e:95:a6:b8:8c:28:ca:f9:
bb:65:73:9a:a0:ee:cf:41:d4:73:18:f0:38:f4:eb:95:c6:0c:
15:c3:e3:9a:19:4f:bb:2a:b2:8b:1f:24:bb:8e:9a:3f:8f:ce:
b3:2e:3b:18:be:a0:0b:c4:ea:7a:7b:77:18:60:05:db:ba:82:
92:26:93:60:f1:dc:3a:90:66:e6:02:d7:26:58:c2:08:30:cd:
45:79:a1:25:15:6d:fc:fa:34:e7:02:f8:7c:9a:7e:97:76:12:
c4:20:45:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:58 2025 by rpki-client