![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/a3d825-d7a7-47cc-a0ca-9666edeee1e3/1/WopS3JmPEUjAeCkL27TTzcPwPLw.mft
File: WopS3JmPEUjAeCkL27TTzcPwPLw.mft (raw, json)
Hash identifier: 8qI99yIrf60cUVokD56CY9uoUNcYXFEnYp3uQLquVhE=
Subject key identifier: 41:6B:4A:1C:14:62:83:BE:A8:08:C4:2F:FA:73:4F:F9:D3:22:D9:CA
Authority key identifier: 5A:8A:52:DC:99:8F:11:48:C0:78:29:0B:DB:B4:D3:CD:C3:F0:3C:BC
Certificate issuer: /CN=5a8a52dc998f1148c078290bdbb4d3cdc3f03cbc
Certificate serial: 019512106156EFF82F4486CBD6CF8BF835FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WopS3JmPEUjAeCkL27TTzcPwPLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/a3d825-d7a7-47cc-a0ca-9666edeee1e3/1/WopS3JmPEUjAeCkL27TTzcPwPLw.mft
Manifest number: 083F
Signing time: Mon 17 Feb 2025 04:00:18 +0000
Manifest this update: Mon 17 Feb 2025 04:00:18 +0000
Manifest next update: Tue 18 Feb 2025 04:00:18 +0000
Files and hashes: 1: DTuRKBc5DWAml25DkyA602e9E2c.roa (hash: 5dE22gWyeJTuF6kqg31h2vC+gEZF7bnxpO0rszd82sI=)
2: WopS3JmPEUjAeCkL27TTzcPwPLw.crl (hash: 1t/swq69dW3WRlS46pKMkw4mEDSa2w9DXgMNjqNyPco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/a3d825-d7a7-47cc-a0ca-9666edeee1e3/1/WopS3JmPEUjAeCkL27TTzcPwPLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/a3d825-d7a7-47cc-a0ca-9666edeee1e3/1/WopS3JmPEUjAeCkL27TTzcPwPLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WopS3JmPEUjAeCkL27TTzcPwPLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:61:56:ef:f8:2f:44:86:cb:d6:cf:8b:f8:35:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a8a52dc998f1148c078290bdbb4d3cdc3f03cbc
Validity
Not Before: Feb 17 04:00:18 2025 GMT
Not After : Feb 18 04:00:18 2025 GMT
Subject: CN=416b4a1c146283bea808c42ffa734ff9d322d9ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a5:0d:c1:ba:8b:8e:9a:b6:05:bb:a5:79:05:
37:92:bb:1d:74:c1:9b:fe:ee:b0:fa:71:09:91:c9:
6f:06:22:b9:95:87:d0:97:4a:64:3b:ee:f0:a0:21:
10:ea:1b:fe:f0:1b:65:44:14:63:bc:a9:86:7e:f2:
63:38:1f:ef:2b:96:e5:0c:f3:e7:f7:9c:4d:b2:6f:
55:43:11:f2:d6:e7:eb:9a:d4:21:08:0e:31:62:51:
82:51:80:77:fd:cb:e2:77:a8:a9:50:25:3f:b8:0e:
29:fc:45:37:d6:93:8f:a9:5f:0a:33:c3:5c:99:fe:
d0:6c:e5:4b:8a:ae:76:5d:47:c8:f6:5b:30:7d:ee:
ab:5b:59:d7:78:08:64:22:ce:3a:6f:85:60:f2:24:
b4:43:4e:1d:38:ce:00:3d:78:9d:fc:44:58:52:93:
23:a3:6a:36:fc:cc:75:4d:02:c5:f1:25:0f:ea:65:
5a:a3:d2:1e:c0:9c:56:9c:4f:c0:0b:3c:0d:31:3f:
9c:59:b9:fa:ca:91:27:ea:70:ea:65:42:83:30:59:
09:d0:9e:99:c3:ab:cb:03:5a:97:a7:25:c7:f4:d6:
4b:9c:93:05:08:46:ab:82:7b:8f:0e:c9:5c:b0:18:
9e:23:4b:95:0d:de:7a:0a:12:02:aa:1a:8d:0f:f9:
ac:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:6B:4A:1C:14:62:83:BE:A8:08:C4:2F:FA:73:4F:F9:D3:22:D9:CA
X509v3 Authority Key Identifier:
keyid:5A:8A:52:DC:99:8F:11:48:C0:78:29:0B:DB:B4:D3:CD:C3:F0:3C:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WopS3JmPEUjAeCkL27TTzcPwPLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a3d825-d7a7-47cc-a0ca-9666edeee1e3/1/WopS3JmPEUjAeCkL27TTzcPwPLw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a3d825-d7a7-47cc-a0ca-9666edeee1e3/1/WopS3JmPEUjAeCkL27TTzcPwPLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:86:1e:12:2c:45:f7:a0:1e:1c:6c:be:4c:c0:46:b1:6d:82:
e8:27:c3:86:25:a4:a9:a7:b9:65:9a:34:a9:ee:ab:94:6a:f4:
30:0b:ac:7a:70:32:a2:bb:0f:72:98:a2:d6:df:61:8d:9e:16:
be:08:8e:9b:f2:9d:67:dc:44:b1:f8:80:9f:3d:b8:d6:cd:0f:
28:75:73:9f:2c:bd:bb:da:92:1d:9a:e9:cf:93:03:b0:06:e1:
92:99:2d:9e:3a:57:c5:f8:b8:70:eb:fc:2f:0d:ef:1e:92:0e:
cc:48:8e:dc:0c:65:8c:fe:b3:bf:2c:74:c2:a6:c9:b9:3c:c6:
4d:df:e3:f2:f9:79:9f:e6:66:17:bf:58:b6:ad:8a:db:66:d5:
b3:51:b3:2a:66:7b:48:d9:3c:05:a3:98:91:15:23:26:82:94:
c5:e3:66:9d:4a:a4:55:82:73:e1:3d:7e:86:a6:34:e0:ee:8b:
e2:02:1b:c0:e8:68:1c:f2:41:64:68:7e:23:65:ac:14:24:34:
c1:ef:0c:ca:e3:e8:fd:7b:ba:f2:a0:2f:7f:3a:a1:2a:12:a2:
20:3d:c3:a6:51:ae:92:cd:4d:2e:56:f8:c2:53:16:fc:46:09:
c6:14:f4:ad:37:09:aa:9e:6e:f2:02:cc:ec:d7:9f:df:b9:d9:
02:01:5e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:37:46 2025 by rpki-client