![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f251ed-5967-4ddd-932b-7d40b7c8fb01/1/Mqd0J8A3CbM5qVsK2aSsnSySyQM.mft
File: Mqd0J8A3CbM5qVsK2aSsnSySyQM.mft (raw, json)
Hash identifier: Y9/GwrcZRs2uttvrEY8kAjv+qEXljIQB4R7aqGCA92M=
Subject key identifier: ED:D7:18:2B:0E:4A:0F:4A:9A:FB:3F:F1:CF:55:AA:56:18:79:89:CC
Authority key identifier: 32:A7:74:27:C0:37:09:B3:39:A9:5B:0A:D9:A4:AC:9D:2C:92:C9:03
Certificate issuer: /CN=32a77427c03709b339a95b0ad9a4ac9d2c92c903
Certificate serial: 019511354634F8BC6840B2233FCA263EFA9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mqd0J8A3CbM5qVsK2aSsnSySyQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/f251ed-5967-4ddd-932b-7d40b7c8fb01/1/Mqd0J8A3CbM5qVsK2aSsnSySyQM.mft
Manifest number: 145E
Signing time: Mon 17 Feb 2025 00:00:58 +0000
Manifest this update: Mon 17 Feb 2025 00:00:58 +0000
Manifest next update: Tue 18 Feb 2025 00:00:58 +0000
Files and hashes: 1: HmHeQxMY02gAsBxkDWSIqXAFPWk.roa (hash: yFvd3OyXwMNthaAHqIWMziti5jwnDTnfs9Aruq9ufQU=)
2: Mqd0J8A3CbM5qVsK2aSsnSySyQM.crl (hash: EeHqV0usGOciB0RQ0CrUHeUud0CLjWwMGucw/LxxvWE=)
3: Uy1V9b0wFpdMlzDRipTY6OI6NV0.roa (hash: mWAWf/tUyMqSuERI1NnQLYVJLUvPjig1mh8WLVGNkto=)
4: eLZAK6GtA5fTxDAgO34pkWDxDSg.roa (hash: JJF45T8sSlny8vS8g2xIJpL+wlb6VnXLMeh3W/wsIG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/f251ed-5967-4ddd-932b-7d40b7c8fb01/1/Mqd0J8A3CbM5qVsK2aSsnSySyQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/f251ed-5967-4ddd-932b-7d40b7c8fb01/1/Mqd0J8A3CbM5qVsK2aSsnSySyQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mqd0J8A3CbM5qVsK2aSsnSySyQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:35:46:34:f8:bc:68:40:b2:23:3f:ca:26:3e:fa:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32a77427c03709b339a95b0ad9a4ac9d2c92c903
Validity
Not Before: Feb 17 00:00:58 2025 GMT
Not After : Feb 18 00:00:58 2025 GMT
Subject: CN=edd7182b0e4a0f4a9afb3ff1cf55aa56187989cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:c6:b0:4f:49:7b:9c:bf:71:38:2d:ee:01:92:
9d:97:82:d5:64:44:37:6c:75:c3:b2:60:bc:47:9b:
2a:28:21:1a:96:fd:c0:85:d0:21:4a:b9:72:3a:87:
6d:23:ca:d4:50:c1:2d:15:aa:54:57:10:b3:35:6a:
ca:b7:6a:ba:87:b9:06:8d:ac:40:87:e5:43:60:4e:
f8:60:29:83:e0:df:13:a5:e3:bb:14:e7:28:34:9c:
76:c0:ff:72:df:86:09:07:38:a0:00:ea:20:8a:cf:
f6:c6:b1:f3:f9:6a:9b:7b:71:7d:c8:7a:8d:3b:7c:
89:be:ce:1c:30:a6:fa:6d:82:73:54:ae:6d:0a:db:
02:c6:23:b2:9c:c8:fe:d3:01:df:8c:50:52:10:24:
1b:67:20:22:8a:18:a7:f8:bf:93:3a:b1:c8:41:cb:
3b:30:8d:79:d1:0e:b0:11:73:10:10:b7:ea:c8:6e:
c8:9a:fd:a0:68:13:bf:cf:d3:15:64:03:49:7c:e3:
06:e2:e5:d0:27:0b:66:35:82:19:61:a0:c9:a4:51:
e2:19:fb:74:99:8f:5c:88:b9:d3:3e:72:6a:fc:b4:
4d:63:9d:5a:c1:d1:07:14:f4:fd:e1:e6:4d:c0:05:
da:1d:6c:ea:06:e7:2e:f5:fd:44:87:3c:ef:8b:73:
02:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:D7:18:2B:0E:4A:0F:4A:9A:FB:3F:F1:CF:55:AA:56:18:79:89:CC
X509v3 Authority Key Identifier:
keyid:32:A7:74:27:C0:37:09:B3:39:A9:5B:0A:D9:A4:AC:9D:2C:92:C9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mqd0J8A3CbM5qVsK2aSsnSySyQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f251ed-5967-4ddd-932b-7d40b7c8fb01/1/Mqd0J8A3CbM5qVsK2aSsnSySyQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f251ed-5967-4ddd-932b-7d40b7c8fb01/1/Mqd0J8A3CbM5qVsK2aSsnSySyQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:4c:d5:f9:6d:61:ff:18:55:b0:f3:ed:6e:dc:3a:42:88:b3:
66:16:32:29:9d:74:bb:25:b0:69:52:10:fd:63:18:64:c3:62:
50:8f:ba:5a:6c:37:d9:3d:5f:b1:f7:c4:eb:82:e8:d2:28:23:
e3:1e:87:b9:44:d4:69:6f:a0:f4:c2:dc:68:ed:e7:af:3d:68:
ab:8c:0d:c4:15:32:61:f2:31:11:21:ed:04:57:98:30:3c:cc:
a3:93:96:ab:b8:14:09:61:42:da:22:07:6c:45:45:2a:95:d6:
7e:2b:e0:ba:87:2e:ec:3b:fb:2a:63:0d:de:5b:64:65:7c:6b:
7a:a7:bf:a9:ce:b0:de:e3:fb:a2:8e:55:f6:b6:8e:13:4f:94:
c4:f6:e5:b8:e7:4b:f2:06:c8:3c:69:68:5b:1e:e7:b6:d3:ed:
48:65:fd:bb:b7:19:5c:84:c9:c9:b5:b1:10:0f:34:35:8e:5c:
ff:4d:d5:46:2b:e4:1a:5f:3b:05:06:18:e7:76:85:47:1b:22:
ac:44:4c:20:b7:4e:91:27:1d:59:78:d0:04:c4:19:d8:53:b4:
90:37:77:bb:ee:e2:f8:4a:dd:1f:a6:4e:2a:97:ce:62:0b:3b:
f9:1d:cf:0e:83:58:b2:75:9d:62:03:f8:ff:ea:d3:c9:82:8e:
39:a6:8f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:14:54 2025 by rpki-client