![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/PeRZjiFzZQGnOUTBBxFMhQx9iwk.mft
File: PeRZjiFzZQGnOUTBBxFMhQx9iwk.mft (raw, json)
Hash identifier: tAw/3xJ2y1xOfVbNjFfIns1IlGiHlBLUEIHXpPNprKk=
Subject key identifier: 8D:BC:64:E7:C8:F5:BA:34:62:9D:16:4F:01:F4:19:74:E5:13:CF:5A
Authority key identifier: 3D:E4:59:8E:21:73:65:01:A7:39:44:C1:07:11:4C:85:0C:7D:8B:09
Certificate issuer: /CN=3de4598e21736501a73944c107114c850c7d8b09
Certificate serial: 019510C72FE92B6A3BC51A51A0B17739D0E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeRZjiFzZQGnOUTBBxFMhQx9iwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/PeRZjiFzZQGnOUTBBxFMhQx9iwk.mft
Manifest number: 117D
Signing time: Sun 16 Feb 2025 22:00:43 +0000
Manifest this update: Sun 16 Feb 2025 22:00:43 +0000
Manifest next update: Mon 17 Feb 2025 22:00:43 +0000
Files and hashes: 1: PeRZjiFzZQGnOUTBBxFMhQx9iwk.crl (hash: vQjSUtmof+MIplpqhzqpbu9nQFbEGzDNuvGo0aEuFb0=)
2: UMngkvwaRjIoN5eBBlFi84sCo3g.roa (hash: a8obNUaAoXy5QpQYwb8sCwj2NbkRTv7ZWZ/OkpJ4CGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/PeRZjiFzZQGnOUTBBxFMhQx9iwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/PeRZjiFzZQGnOUTBBxFMhQx9iwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeRZjiFzZQGnOUTBBxFMhQx9iwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:2f:e9:2b:6a:3b:c5:1a:51:a0:b1:77:39:d0:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de4598e21736501a73944c107114c850c7d8b09
Validity
Not Before: Feb 16 22:00:43 2025 GMT
Not After : Feb 17 22:00:43 2025 GMT
Subject: CN=8dbc64e7c8f5ba34629d164f01f41974e513cf5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7f:4b:c6:ef:d9:28:d4:f3:a2:d4:a5:c4:91:
28:51:70:01:c7:8f:c4:c4:6a:16:7b:27:9d:a7:94:
f7:4d:ff:c5:93:b9:26:da:d9:78:d1:e9:ed:0e:47:
b3:bf:2b:10:78:dd:7f:29:d9:92:89:3d:d0:dd:59:
f2:31:28:1c:0c:bb:7d:b8:28:09:e7:a5:47:bf:e5:
08:71:88:41:b1:91:8e:ee:6a:be:b9:b2:88:cf:f2:
63:4e:e1:ac:1e:a3:fc:6a:44:4d:c3:bd:a7:14:cf:
a2:9a:49:71:aa:2a:eb:1f:c6:4a:19:3a:94:b2:a0:
01:f7:49:66:7b:e5:9c:27:b1:2b:76:a2:14:7a:36:
2d:a9:7c:7b:f8:b9:02:25:88:bf:54:dd:3c:c8:4d:
fe:ea:c3:3a:ac:9a:50:e2:93:81:cb:cd:6c:a9:8c:
79:b2:48:95:fd:d8:0c:ba:d5:eb:06:42:a1:7c:4b:
a5:e7:89:c1:0f:46:8e:23:89:25:9a:e9:09:16:68:
dd:fe:dc:0c:d8:3f:c5:23:a7:1e:54:ce:80:5b:04:
ca:a5:6e:a4:4d:65:17:c8:09:7c:cd:d1:cd:b0:d9:
cd:12:6b:17:ed:19:12:7a:0f:b0:ac:2e:d1:e1:7f:
ef:7c:13:7e:e6:6c:35:cd:11:81:86:e6:47:15:18:
e4:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:BC:64:E7:C8:F5:BA:34:62:9D:16:4F:01:F4:19:74:E5:13:CF:5A
X509v3 Authority Key Identifier:
keyid:3D:E4:59:8E:21:73:65:01:A7:39:44:C1:07:11:4C:85:0C:7D:8B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeRZjiFzZQGnOUTBBxFMhQx9iwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/PeRZjiFzZQGnOUTBBxFMhQx9iwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/PeRZjiFzZQGnOUTBBxFMhQx9iwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:c8:0b:8e:c1:42:1a:1e:c3:80:bb:b5:bf:d2:23:ef:0e:7a:
8e:96:38:21:8d:3f:d3:5b:3e:fd:e2:cf:02:2d:7f:ac:85:1d:
4a:85:21:78:7f:0e:c8:e7:0e:16:c2:0c:f0:c2:bb:0a:a3:25:
f7:7f:58:58:81:04:0e:33:29:9d:92:80:0d:c5:5e:39:bf:17:
aa:b1:37:aa:ee:d7:43:3b:cc:87:4f:49:20:dd:7f:a4:50:8a:
58:b6:d5:c5:39:b8:cc:ab:b1:a9:6a:be:53:bd:ec:d1:c6:84:
af:a1:a4:5f:56:38:4a:ff:d3:94:af:17:93:04:15:76:71:28:
8a:1c:45:f3:99:13:d5:e5:6b:28:59:d3:1b:af:2b:3c:17:de:
69:2c:25:22:7c:38:71:98:98:d0:2e:84:5f:42:61:cd:31:1a:
08:b1:79:cf:de:25:8f:01:28:52:c8:cb:fb:6e:10:0e:73:26:
c3:96:25:07:9e:7d:7c:c9:f3:de:4f:b2:3c:d8:ff:ff:85:91:
6b:24:5f:6a:5b:da:2f:b3:e2:3f:b4:19:00:4c:78:b2:39:90:
3b:b9:96:1c:fd:82:86:ec:a5:36:fc:8c:7b:d6:11:98:94:14:
47:7f:8e:a9:9d:35:2d:f2:b3:53:09:11:09:c9:0b:a9:27:5f:
e9:80:66:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:42:08 2025 by rpki-client