![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/7ea195-2fbe-4806-a82d-16b44c4935ea/1/L8Q4zYqusa0kLtSbT_KHydD0Ow4.mft
File: L8Q4zYqusa0kLtSbT_KHydD0Ow4.mft (raw, json)
Hash identifier: FcO1lC1mqs4EQzC9xwNz/2UF3+QZ90TtICstmGT5Krc=
Subject key identifier: 6D:0E:9A:32:A0:82:2E:51:27:C5:3F:98:41:73:1D:61:32:40:04:B3
Authority key identifier: 2F:C4:38:CD:8A:AE:B1:AD:24:2E:D4:9B:4F:F2:87:C9:D0:F4:3B:0E
Certificate issuer: /CN=2fc438cd8aaeb1ad242ed49b4ff287c9d0f43b0e
Certificate serial: 0195116C178884E99FA376E3E169496AA0CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L8Q4zYqusa0kLtSbT_KHydD0Ow4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/7ea195-2fbe-4806-a82d-16b44c4935ea/1/L8Q4zYqusa0kLtSbT_KHydD0Ow4.mft
Manifest number: 09BB
Signing time: Mon 17 Feb 2025 01:00:51 +0000
Manifest this update: Mon 17 Feb 2025 01:00:51 +0000
Manifest next update: Tue 18 Feb 2025 01:00:51 +0000
Files and hashes: 1: GofoKymii5U39NPDECdDJtD2TH0.roa (hash: ePVDpp/IL/yJ1aEgP104JCCy3cNXznxaF2wO6kp9DYI=)
2: L8Q4zYqusa0kLtSbT_KHydD0Ow4.crl (hash: 1p5Ht+ysY8o2SNgP2IorbAwXYaqbFibpoKoPPEVLx0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/7ea195-2fbe-4806-a82d-16b44c4935ea/1/L8Q4zYqusa0kLtSbT_KHydD0Ow4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/7ea195-2fbe-4806-a82d-16b44c4935ea/1/L8Q4zYqusa0kLtSbT_KHydD0Ow4.mft
rsync://rpki.ripe.net/repository/DEFAULT/L8Q4zYqusa0kLtSbT_KHydD0Ow4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6c:17:88:84:e9:9f:a3:76:e3:e1:69:49:6a:a0:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fc438cd8aaeb1ad242ed49b4ff287c9d0f43b0e
Validity
Not Before: Feb 17 01:00:51 2025 GMT
Not After : Feb 18 01:00:51 2025 GMT
Subject: CN=6d0e9a32a0822e5127c53f9841731d61324004b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:14:07:9a:df:9f:d6:58:42:c8:ed:0c:0a:fe:
46:8c:7f:05:0c:6e:6d:28:69:0a:43:5f:46:b7:36:
28:a5:7d:6b:b5:e3:77:57:b1:1f:04:5f:22:84:a7:
2c:0b:a0:19:1a:2a:7d:6f:3d:64:6e:a2:b7:e0:58:
41:f2:ec:c4:13:4c:43:cb:2d:27:af:54:b0:9c:e2:
68:73:87:a6:c4:d9:8f:fd:18:ea:6d:29:e8:56:61:
bd:7f:ea:fc:a6:ef:d3:2b:62:74:ee:df:03:fe:fa:
35:a2:97:50:0b:b6:3a:1c:fd:27:d9:69:af:fe:2a:
1f:c7:77:4c:c2:a1:7a:7f:b4:0b:9c:34:8a:38:95:
b8:60:dd:da:9c:eb:f5:9b:63:09:de:1d:c1:16:a2:
dd:1c:90:55:d0:82:77:15:80:53:ba:e0:af:a7:85:
d9:5a:09:18:40:b4:01:0a:a9:96:4a:eb:14:4d:b2:
d0:cb:e3:ce:04:ab:b6:53:44:75:a9:3e:a0:a9:0f:
f5:ad:2b:ac:e7:aa:2f:1f:06:19:f0:7b:28:37:db:
ee:fe:26:8c:87:cc:06:8f:71:55:32:af:ea:36:99:
72:40:c8:70:cf:ed:f8:b0:11:ef:4a:cb:a7:1f:b6:
ec:77:60:7e:a0:55:c2:73:42:d4:f6:67:bd:82:f5:
a5:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:0E:9A:32:A0:82:2E:51:27:C5:3F:98:41:73:1D:61:32:40:04:B3
X509v3 Authority Key Identifier:
keyid:2F:C4:38:CD:8A:AE:B1:AD:24:2E:D4:9B:4F:F2:87:C9:D0:F4:3B:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8Q4zYqusa0kLtSbT_KHydD0Ow4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/7ea195-2fbe-4806-a82d-16b44c4935ea/1/L8Q4zYqusa0kLtSbT_KHydD0Ow4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/7ea195-2fbe-4806-a82d-16b44c4935ea/1/L8Q4zYqusa0kLtSbT_KHydD0Ow4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:38:6f:d0:30:c3:ea:35:67:3b:94:21:cb:4f:3e:64:2d:e1:
41:f4:b0:d7:4a:b0:eb:9c:40:18:38:8e:fb:9e:cf:05:a7:59:
9e:b5:b9:b3:fa:20:2b:62:5d:39:8f:80:e1:ec:19:7b:ef:8e:
5d:36:fc:2d:bc:37:0b:fd:39:39:33:ac:c4:d8:97:fa:06:e7:
ca:c5:e7:d5:cf:9d:d4:cc:49:3f:82:e3:0e:79:f6:d0:76:9d:
5a:2c:77:e7:f8:97:33:cc:15:78:91:93:0a:5e:06:a4:66:d2:
f2:a2:e3:a5:19:98:fd:4e:ad:84:d5:4b:8c:59:68:d7:06:b9:
91:43:79:7b:4e:2f:18:ec:55:15:a0:8f:8c:a5:97:83:da:bb:
77:03:75:e5:a2:5d:29:99:3c:71:9f:c6:9b:35:f8:43:fd:08:
f9:21:cc:3b:fc:9a:c3:01:19:3a:55:6a:63:6b:d6:4d:24:9d:
08:04:5b:68:6a:51:ea:5b:e4:66:51:ce:72:05:98:6b:83:a4:
88:47:f1:b2:1a:34:70:ec:ad:0e:e1:72:32:c4:d1:2e:bf:86:
ef:9e:65:17:9b:fe:78:56:9b:a1:13:b9:3f:f8:9f:58:e1:8a:
93:86:66:73:11:fc:be:3d:c4:6c:f9:46:07:10:8b:bc:ca:13:
9a:bb:58:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:23:58 2025 by rpki-client