![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.mft
File: WwZtuK4WVfw9ikqpnrvZOj_g4-Q.mft (raw, json)
Hash identifier: jfa65olkmTQ4072LcC4g4ZW1I1L/0HRAMso1CBOUJUU=
Subject key identifier: 3D:DD:14:C5:3C:8F:4F:95:7C:2E:B4:CD:63:AD:9D:52:C0:F1:FC:46
Authority key identifier: 5B:06:6D:B8:AE:16:55:FC:3D:8A:4A:A9:9E:BB:D9:3A:3F:E0:E3:E4
Certificate issuer: /CN=5b066db8ae1655fc3d8a4aa99ebbd93a3fe0e3e4
Certificate serial: 01951134C660399E3956DC52D3B971800372
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.mft
Manifest number: 12F4
Signing time: Mon 17 Feb 2025 00:00:26 +0000
Manifest this update: Mon 17 Feb 2025 00:00:26 +0000
Manifest next update: Tue 18 Feb 2025 00:00:26 +0000
Files and hashes: 1: 52gpXjI8Kd7Tv-YmaRlcfsM4RAk.roa (hash: mEm534ZT6ZgaZ/3v86vVc5+tMaW3MbmkjCPIio5FpX8=)
2: WwZtuK4WVfw9ikqpnrvZOj_g4-Q.crl (hash: 17IX0/I0d2K2M+k0IHFh3EjNyLrxZYa5xTuFqG2Qf30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:c6:60:39:9e:39:56:dc:52:d3:b9:71:80:03:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b066db8ae1655fc3d8a4aa99ebbd93a3fe0e3e4
Validity
Not Before: Feb 17 00:00:26 2025 GMT
Not After : Feb 18 00:00:26 2025 GMT
Subject: CN=3ddd14c53c8f4f957c2eb4cd63ad9d52c0f1fc46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e6:1b:42:76:71:f2:9a:77:bb:98:b3:67:4a:
e5:e2:80:cd:b0:35:e3:f3:b4:e6:13:15:68:58:79:
cd:80:e5:99:0a:90:4f:b8:9e:47:6d:fa:b1:51:d8:
2e:82:90:c0:75:ae:c6:11:c9:ab:91:c4:ae:b1:85:
4b:34:9c:93:87:49:7f:6d:04:b2:ec:60:c7:ef:2a:
3d:67:07:3c:93:af:9c:21:d5:e8:1b:28:22:4b:43:
be:a5:ab:56:ae:4d:ef:84:73:2c:36:31:9d:0d:9c:
ce:4d:d2:4b:f2:1a:f2:49:4c:45:35:f5:b6:03:f3:
7b:26:95:1a:dc:82:54:25:6f:7d:e4:17:1a:65:f0:
11:c3:58:4d:ed:01:35:aa:1c:02:4c:9f:f2:a4:dc:
6a:f7:8e:f9:f7:71:40:08:59:31:dc:f5:35:78:d7:
75:9c:87:5e:fe:93:d1:b3:36:ce:6c:48:59:ea:a1:
d0:9b:a1:ff:0c:ac:00:e8:85:0d:a8:b8:2e:21:e9:
c8:e8:d2:e3:60:ac:e9:8e:95:52:95:74:e3:af:36:
35:da:94:4d:2e:33:2f:1b:c9:f4:e6:51:83:78:13:
47:00:cb:8f:9c:a7:8a:c3:f2:41:0a:15:a3:99:ae:
70:ff:5b:3e:49:d6:ad:ec:71:4d:53:db:7c:e5:02:
25:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:DD:14:C5:3C:8F:4F:95:7C:2E:B4:CD:63:AD:9D:52:C0:F1:FC:46
X509v3 Authority Key Identifier:
keyid:5B:06:6D:B8:AE:16:55:FC:3D:8A:4A:A9:9E:BB:D9:3A:3F:E0:E3:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:d0:2e:23:76:54:6a:c3:a6:d2:0f:92:41:cc:b3:9b:0a:b2:
84:b4:52:f1:02:72:6c:f6:5a:1f:cf:ad:f5:8a:ac:5d:2d:35:
ce:bd:85:17:3c:d0:2c:8f:2e:b2:0c:28:75:c4:eb:00:06:75:
98:09:e9:b5:5a:40:35:07:86:6d:36:eb:e7:e0:47:a2:88:e2:
b9:ff:ad:bc:a1:77:bc:53:cb:62:33:4f:ae:28:d5:63:ef:c5:
ba:c6:8c:ab:cb:d6:3f:64:60:a3:68:dd:fb:37:a7:99:37:e6:
b5:df:92:19:27:8d:18:39:93:5f:3f:bd:ee:4d:a0:bb:63:89:
6e:7d:e0:1e:f2:8a:02:62:45:e8:b4:01:79:9c:32:6c:65:8b:
e3:87:94:e4:a3:af:85:cd:bd:96:4b:07:0d:e6:80:7f:f3:23:
21:d5:f7:66:a5:99:11:3d:2c:58:3a:8d:0c:7f:cb:dd:25:aa:
5d:21:59:af:5e:42:8c:61:21:41:53:a5:d2:da:e0:ea:5d:68:
ec:c4:16:03:63:e2:a6:03:31:58:fb:7c:a5:58:7e:2c:32:39:
b0:c8:4c:d8:e6:df:6a:d2:63:52:ae:72:aa:45:68:b3:09:07:
7b:bb:7c:9f:f9:da:09:38:01:59:e7:de:20:bc:48:11:9c:40:
96:0d:62:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:17:11 2025 by rpki-client