![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft
File: 1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft (raw, json)
Hash identifier: BdvUBtDeQTX/Id8oAHtgxOjhl9t2s6iGntyelvS+m+s=
Subject key identifier: 3C:15:13:A9:16:F9:48:2B:4F:42:43:15:D3:79:95:C0:97:84:A9:0E
Authority key identifier: FB:D3:29:68:AA:AA:91:9C:52:79:1F:FB:07:F9:34:36:B7:4F:D5:08
Certificate issuer: /CN=fbd32968aaaa919c52791ffb07f93436b74fd508
Certificate serial: 0195121072D1D8AA6F1670A38B7D44D487AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft
Manifest number: 08AF
Signing time: Mon 17 Feb 2025 04:00:22 +0000
Manifest this update: Mon 17 Feb 2025 04:00:22 +0000
Manifest next update: Tue 18 Feb 2025 04:00:22 +0000
Files and hashes: 1: 1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.crl (hash: Hw5LrVmI8ollVW26UYE300V1L/ILuWniGooD8mwpPDU=)
2: pkEvxsg0lyUz8ua6CoCuzxPGvFc.roa (hash: EcykeL8rqJYAw+Ypkvc2gvotxsw/oc8iK0wUO0U4PaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:72:d1:d8:aa:6f:16:70:a3:8b:7d:44:d4:87:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbd32968aaaa919c52791ffb07f93436b74fd508
Validity
Not Before: Feb 17 04:00:22 2025 GMT
Not After : Feb 18 04:00:22 2025 GMT
Subject: CN=3c1513a916f9482b4f424315d37995c09784a90e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b9:f7:f4:58:4d:b2:db:e9:74:7d:2f:51:42:
d8:b8:59:c1:b2:17:12:78:68:ac:4e:58:8a:66:2e:
b9:25:b3:96:2e:ec:74:31:a2:70:45:3e:51:31:07:
8d:4d:28:dc:31:da:08:3a:df:e5:9c:48:e3:f7:e5:
c7:8c:d2:7d:ba:c2:9c:87:d9:fe:9b:8c:34:a4:51:
8f:93:22:92:ca:eb:ef:58:5f:a5:b7:c3:8a:93:8a:
4c:fb:dd:b5:01:64:00:3c:16:bd:18:b8:bd:7d:0a:
84:ec:ec:2d:48:f9:7c:09:f0:a4:27:fc:12:17:c0:
bf:8e:79:dc:42:a7:f4:9e:d4:0e:e6:59:fe:bf:4f:
3f:83:a5:35:8f:b3:cc:4d:e7:68:02:4e:25:0e:2d:
cc:60:91:d8:d3:d7:1c:c7:17:5e:78:98:ff:b0:76:
7d:d5:26:85:b0:de:d4:5a:71:74:43:89:29:0f:8a:
b0:48:01:5a:4c:eb:8e:b9:9e:2d:05:26:38:56:b0:
74:8a:ed:44:b3:0f:a1:cb:53:09:8d:12:99:7b:32:
cd:5d:e2:79:b2:c6:bf:df:26:89:de:1c:a0:ba:d3:
60:41:f4:2a:bb:e9:e9:6d:eb:f7:fb:18:92:e0:65:
57:4a:18:36:60:0f:dd:0b:17:25:42:d2:cb:76:47:
ae:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:15:13:A9:16:F9:48:2B:4F:42:43:15:D3:79:95:C0:97:84:A9:0E
X509v3 Authority Key Identifier:
keyid:FB:D3:29:68:AA:AA:91:9C:52:79:1F:FB:07:F9:34:36:B7:4F:D5:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:1d:d8:d5:6f:1a:73:38:44:a0:2d:ee:e2:74:13:f1:56:f3:
d0:68:04:1a:b8:d3:62:55:35:04:e8:6d:46:91:5a:e6:cd:6f:
f7:9a:18:dc:d5:da:b8:8c:e8:0e:e7:33:6e:73:c3:34:94:0a:
bc:2f:1b:99:4e:92:9d:1a:7f:78:35:df:6a:a8:6a:1a:d9:2f:
83:5a:95:78:65:76:02:af:5a:45:7d:3a:93:16:a1:c9:a8:7e:
00:2a:fe:5e:c1:56:cf:dd:2a:3d:99:3c:a6:0f:ec:35:83:a2:
49:68:f5:27:69:a5:01:cf:41:95:cb:5c:8f:96:15:ba:ac:6e:
3f:63:89:11:75:14:31:c8:a6:17:11:7a:cb:27:36:b9:dd:b6:
dd:47:e8:e5:f8:4d:61:0f:0d:e0:e5:cf:0f:d6:e7:33:70:1a:
22:01:6d:6c:89:73:4c:73:e7:e8:44:36:b2:ef:ab:0e:83:19:
75:d8:42:f6:56:8f:f0:81:20:d9:3d:7b:b1:3e:3d:d4:45:57:
07:f6:37:2d:62:2c:91:51:33:33:26:91:ee:37:be:fa:6f:fe:
aa:85:56:57:98:af:ba:fd:bb:e7:b6:22:61:45:9c:08:fb:51:
05:a3:3f:e0:8c:f9:4c:37:01:77:9b:8d:2b:38:75:08:59:9d:
46:0d:b9:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:18:41 2025 by rpki-client