![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/5bb1d0-634e-46fc-a75a-0c9aa6696b49/1/5cePoZk9RRL-JDa4ztqL_JKdZX0.mft
File: 5cePoZk9RRL-JDa4ztqL_JKdZX0.mft (raw, json)
Hash identifier: 9jg3/6nkHqxXKDBosZIiBn89KMcKV3spwINts0QzR6E=
Subject key identifier: DF:1A:96:4D:24:54:EF:4A:FE:BF:BE:0F:10:F0:BA:91:93:73:16:BE
Authority key identifier: E5:C7:8F:A1:99:3D:45:12:FE:24:36:B8:CE:DA:8B:FC:92:9D:65:7D
Certificate issuer: /CN=e5c78fa1993d4512fe2436b8ceda8bfc929d657d
Certificate serial: 019511A2D1D6F94458E5EDCE6B1F72733E8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5cePoZk9RRL-JDa4ztqL_JKdZX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/5bb1d0-634e-46fc-a75a-0c9aa6696b49/1/5cePoZk9RRL-JDa4ztqL_JKdZX0.mft
Manifest number: 0796
Signing time: Mon 17 Feb 2025 02:00:38 +0000
Manifest this update: Mon 17 Feb 2025 02:00:38 +0000
Manifest next update: Tue 18 Feb 2025 02:00:38 +0000
Files and hashes: 1: 5cePoZk9RRL-JDa4ztqL_JKdZX0.crl (hash: pRNOlkdjBVL3Whj+lPCbtcp8Z/UjB96apSKuJABS9p0=)
2: sxXzCHmD4CxDgty1OLpDx0DtMMI.roa (hash: /ld9Wsyv6zrLHEXivfqQOk2cQ1fruSCWz5YkqZ+WXCE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/5bb1d0-634e-46fc-a75a-0c9aa6696b49/1/5cePoZk9RRL-JDa4ztqL_JKdZX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/5bb1d0-634e-46fc-a75a-0c9aa6696b49/1/5cePoZk9RRL-JDa4ztqL_JKdZX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/5cePoZk9RRL-JDa4ztqL_JKdZX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:d1:d6:f9:44:58:e5:ed:ce:6b:1f:72:73:3e:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5c78fa1993d4512fe2436b8ceda8bfc929d657d
Validity
Not Before: Feb 17 02:00:38 2025 GMT
Not After : Feb 18 02:00:38 2025 GMT
Subject: CN=df1a964d2454ef4afebfbe0f10f0ba91937316be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ef:36:c6:83:37:21:8c:6e:9d:f6:33:a1:7b:
02:28:89:3c:6e:37:a9:cf:69:5f:43:e4:b1:6d:5b:
61:d3:21:f8:a7:f9:5c:04:e6:ef:86:4e:ac:14:41:
1a:31:bf:bb:1c:73:d9:f4:27:4d:b9:e1:e9:66:52:
61:31:4c:53:af:e4:06:ff:9a:80:e8:22:42:5a:68:
34:72:6a:58:4c:25:8a:b7:57:a2:d6:7e:dc:6e:77:
9f:6d:a5:7e:f1:4a:18:55:cf:6d:e1:00:c7:17:7b:
0f:a9:aa:fd:0e:c0:24:26:5e:53:55:4f:a6:72:ea:
a7:cc:86:12:f3:9c:60:ba:95:6e:71:9c:2c:26:10:
fb:bc:b1:3d:12:f2:a3:8b:79:df:0d:5d:8a:94:d6:
a6:ec:59:f3:26:13:ba:23:3a:4b:03:62:f6:bf:b6:
8a:e9:cb:c0:8a:af:9c:47:ea:35:3f:76:6f:9e:3d:
f8:51:31:48:6e:2a:bd:60:93:00:f7:e4:e6:ce:73:
fd:6f:1f:21:cf:9a:0b:d5:70:a2:f4:43:41:5e:98:
e2:fa:45:20:53:f4:de:50:2b:12:69:aa:36:3f:38:
5c:0c:5f:58:de:18:ce:13:a0:1d:cb:90:ff:d2:66:
8a:b7:51:dc:f0:f5:fd:10:49:f0:18:a7:95:83:f0:
77:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:1A:96:4D:24:54:EF:4A:FE:BF:BE:0F:10:F0:BA:91:93:73:16:BE
X509v3 Authority Key Identifier:
keyid:E5:C7:8F:A1:99:3D:45:12:FE:24:36:B8:CE:DA:8B:FC:92:9D:65:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5cePoZk9RRL-JDa4ztqL_JKdZX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/5bb1d0-634e-46fc-a75a-0c9aa6696b49/1/5cePoZk9RRL-JDa4ztqL_JKdZX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/5bb1d0-634e-46fc-a75a-0c9aa6696b49/1/5cePoZk9RRL-JDa4ztqL_JKdZX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:6d:54:30:a1:a5:88:ce:a1:e5:37:08:2b:e0:4c:57:e7:1c:
0f:70:ba:cc:86:96:35:0a:2a:53:76:c8:13:91:b1:48:ed:93:
2d:f9:d8:5d:73:c4:7a:f5:e1:9e:a5:c4:34:d5:ab:63:26:99:
a5:5c:e0:fd:1d:35:74:e3:46:d8:9d:d6:7f:a8:e0:7b:2e:f8:
f0:3c:ae:01:6b:e5:4b:c3:6a:11:eb:3b:13:dd:ea:f2:62:c1:
99:c4:57:cd:a8:b2:1e:70:f6:71:0e:f6:bb:c2:09:51:6d:c3:
de:55:33:c6:ee:55:69:81:00:71:6e:d6:97:71:d8:3b:fa:03:
ad:14:4f:54:85:19:cb:a4:f2:83:59:c3:ee:49:05:10:d7:cf:
3b:3d:66:25:33:35:97:51:d2:65:af:f9:86:da:b0:91:e6:b6:
42:7e:fc:94:78:c9:15:75:cd:11:60:d1:ae:6d:fc:1f:5e:b8:
11:5f:c4:0a:e2:ce:2e:81:3d:7e:a2:b7:c9:6c:b0:37:08:38:
20:17:4f:60:ca:5a:10:f3:3f:d3:0b:d9:15:70:ee:99:ea:90:
da:bf:0d:48:5a:c5:b7:8a:c2:9d:10:a4:cb:ce:28:b1:07:49:
02:2f:e9:cb:cc:2f:d6:d9:6c:43:5e:b5:de:b1:c6:e9:7a:10:
40:e7:6d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:36:15 2025 by rpki-client