![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/36b040-f57b-4ae2-ab42-228733245cd1/1/8WBdCa0sbEN7bC-Gg___viF0_mw.mft
File: 8WBdCa0sbEN7bC-Gg___viF0_mw.mft (raw, json)
Hash identifier: ZeTD0ONifbK8gz5VI/Oig8QmkJ8ewtgHdT6J/2Ls77c=
Subject key identifier: D6:A9:87:66:2B:D5:24:EA:04:EF:16:34:FA:59:CE:92:A6:3D:3C:D7
Authority key identifier: F1:60:5D:09:AD:2C:6C:43:7B:6C:2F:86:83:FF:FF:BE:21:74:FE:6C
Certificate issuer: /CN=f1605d09ad2c6c437b6c2f8683ffffbe2174fe6c
Certificate serial: 019511A26F9569041BE461A150093F5C4A47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8WBdCa0sbEN7bC-Gg___viF0_mw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/36b040-f57b-4ae2-ab42-228733245cd1/1/8WBdCa0sbEN7bC-Gg___viF0_mw.mft
Manifest number: 0DC1
Signing time: Mon 17 Feb 2025 02:00:12 +0000
Manifest this update: Mon 17 Feb 2025 02:00:12 +0000
Manifest next update: Tue 18 Feb 2025 02:00:12 +0000
Files and hashes: 1: 8WBdCa0sbEN7bC-Gg___viF0_mw.crl (hash: ovExhIJkPHwJJyY/utU8qBVun7o9X/FfgRYbM2tN+nM=)
2: j3qkWwGkWnrxhLgyGwrcFzXJWM4.roa (hash: tCyqkdV84n1oHfUiO9Wnf9/3f5vZVsXyCuIYwhEsEzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/36b040-f57b-4ae2-ab42-228733245cd1/1/8WBdCa0sbEN7bC-Gg___viF0_mw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/36b040-f57b-4ae2-ab42-228733245cd1/1/8WBdCa0sbEN7bC-Gg___viF0_mw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8WBdCa0sbEN7bC-Gg___viF0_mw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:6f:95:69:04:1b:e4:61:a1:50:09:3f:5c:4a:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1605d09ad2c6c437b6c2f8683ffffbe2174fe6c
Validity
Not Before: Feb 17 02:00:12 2025 GMT
Not After : Feb 18 02:00:12 2025 GMT
Subject: CN=d6a987662bd524ea04ef1634fa59ce92a63d3cd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f3:1f:9b:42:08:97:10:99:17:b8:ca:a4:ff:
a3:ff:de:e0:55:0b:c1:42:d2:46:42:9f:d4:26:62:
5f:df:59:7c:f8:b3:13:19:14:da:da:58:40:fc:e8:
b1:31:32:cf:1c:39:64:2c:2d:2e:bb:82:a7:7a:a1:
fd:24:fb:02:9d:84:c8:00:68:44:7b:62:fe:8c:88:
e6:b3:12:f6:88:28:94:14:a2:f4:b0:87:54:9e:25:
0a:89:84:d5:07:5b:10:46:3a:2c:75:25:bd:87:6f:
d2:c0:0b:ab:a5:ad:fb:b4:dd:ad:01:a7:44:a1:4e:
3f:76:29:cd:6a:8a:1c:15:df:88:e9:ea:c5:43:a9:
21:0e:d3:0d:5c:32:d3:31:21:c4:78:49:cf:0e:b8:
27:88:d7:63:c2:c0:51:b8:df:bf:c3:3d:3e:40:3e:
02:0a:b7:a7:a3:03:31:51:b6:2c:64:e5:83:b5:e0:
a7:2e:7b:b7:05:2c:9b:8c:ee:40:43:fa:da:01:6d:
7d:3a:8a:a1:c4:e4:76:13:24:2f:46:02:25:ed:e6:
db:89:67:bc:25:93:6b:93:82:cb:28:b5:48:69:02:
34:e1:63:f7:68:13:e2:b2:f1:4d:c4:14:6d:91:f7:
99:45:5e:1a:89:8d:9e:ab:56:be:4b:7f:e9:87:4d:
68:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:A9:87:66:2B:D5:24:EA:04:EF:16:34:FA:59:CE:92:A6:3D:3C:D7
X509v3 Authority Key Identifier:
keyid:F1:60:5D:09:AD:2C:6C:43:7B:6C:2F:86:83:FF:FF:BE:21:74:FE:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WBdCa0sbEN7bC-Gg___viF0_mw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/36b040-f57b-4ae2-ab42-228733245cd1/1/8WBdCa0sbEN7bC-Gg___viF0_mw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/36b040-f57b-4ae2-ab42-228733245cd1/1/8WBdCa0sbEN7bC-Gg___viF0_mw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:e5:81:f8:75:05:89:3f:75:ea:2d:f0:df:d3:23:76:8e:c1:
ff:ef:fd:28:99:28:9b:6d:68:c4:14:ef:20:aa:71:70:6f:d2:
a2:4a:a0:87:4e:4d:fe:fb:db:d5:2c:3c:21:9a:da:4c:c9:8f:
f3:a4:40:fe:34:b1:ea:6b:5f:1a:04:46:ff:29:6c:a1:b0:e4:
20:59:8e:6f:c1:f5:49:e0:ae:31:9b:6c:2a:c6:42:01:4e:69:
d7:a1:a3:15:e2:70:b2:98:cc:6f:a2:c0:1f:97:af:5e:84:0e:
21:94:f8:0c:a3:21:40:29:a9:ab:23:19:c5:0a:e4:db:cd:0e:
b8:da:2e:dd:96:22:e7:db:c9:b8:22:12:17:90:cb:b6:a5:5e:
af:e0:6c:51:c4:fd:37:f3:ff:9a:84:c6:b6:ec:a1:66:6a:84:
a0:4f:1d:56:4c:ac:08:db:3a:93:1e:c8:e3:8e:1e:ba:b2:79:
ee:f7:ae:47:61:8c:e7:95:72:35:2f:23:e9:1a:93:9f:17:02:
43:86:14:6c:47:b6:58:95:af:38:e6:cd:c1:9a:55:71:c4:c1:
5a:e9:b7:c5:ae:78:e4:d9:50:22:09:2c:a5:ee:e7:e0:0a:78:
77:fa:c7:58:aa:c5:94:9b:05:73:f8:17:c2:7d:d0:d2:14:f5:
5f:b9:c7:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:30:14 2025 by rpki-client