![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/84b074-9c8d-48f5-bade-cba49a446d22/1/cwy8R6ajDyPF2EwYCxSIHSC6CsI.mft
File: cwy8R6ajDyPF2EwYCxSIHSC6CsI.mft (raw, json)
Hash identifier: oOAHDuAHFK1g4j511qNuWRlnvCoVQlr1vFP5XLnPK3g=
Subject key identifier: FC:5A:39:0E:CF:41:C0:68:33:C6:7A:19:29:8F:33:B8:82:4F:B2:CF
Authority key identifier: 73:0C:BC:47:A6:A3:0F:23:C5:D8:4C:18:0B:14:88:1D:20:BA:0A:C2
Certificate issuer: /CN=730cbc47a6a30f23c5d84c180b14881d20ba0ac2
Certificate serial: 019511A2A4B3708AFDEDC9D1D39523AA3C73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cwy8R6ajDyPF2EwYCxSIHSC6CsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/84b074-9c8d-48f5-bade-cba49a446d22/1/cwy8R6ajDyPF2EwYCxSIHSC6CsI.mft
Manifest number: F1
Signing time: Mon 17 Feb 2025 02:00:26 +0000
Manifest this update: Mon 17 Feb 2025 02:00:26 +0000
Manifest next update: Tue 18 Feb 2025 02:00:26 +0000
Files and hashes: 1: cwy8R6ajDyPF2EwYCxSIHSC6CsI.crl (hash: HAdQBnzBfZ2EPN+FeLt0GnkHYK29v8fPSdRStQwcRpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/84b074-9c8d-48f5-bade-cba49a446d22/1/cwy8R6ajDyPF2EwYCxSIHSC6CsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/84b074-9c8d-48f5-bade-cba49a446d22/1/cwy8R6ajDyPF2EwYCxSIHSC6CsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cwy8R6ajDyPF2EwYCxSIHSC6CsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:a4:b3:70:8a:fd:ed:c9:d1:d3:95:23:aa:3c:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=730cbc47a6a30f23c5d84c180b14881d20ba0ac2
Validity
Not Before: Feb 17 02:00:26 2025 GMT
Not After : Feb 18 02:00:26 2025 GMT
Subject: CN=fc5a390ecf41c06833c67a19298f33b8824fb2cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e7:37:15:ee:aa:82:55:eb:d0:46:9a:58:87:
a7:b9:ee:79:26:cd:03:7b:69:01:33:14:01:0f:55:
3d:2b:fa:ea:57:1d:a7:0a:aa:a3:a7:ab:99:cd:5c:
83:ee:cf:dd:e5:24:f0:55:ca:3d:c7:a8:0f:b8:9d:
05:2e:f0:f4:62:3c:c2:34:43:e9:cb:cc:01:5b:86:
6b:d7:1d:89:70:0e:75:b5:80:f7:04:8e:a0:58:52:
5a:7a:fd:0e:bb:7f:04:a0:25:41:13:d8:c8:dd:45:
5b:fa:ed:b0:4d:7a:77:d9:db:4e:e1:b4:dc:34:57:
8d:c7:3a:1a:b3:5c:fb:96:33:c8:57:a5:68:91:7d:
39:f4:31:c8:1c:8d:21:c8:c9:b5:ab:e1:d2:8c:e7:
d8:09:38:e4:b4:e5:04:7d:7a:02:cf:95:57:a0:da:
44:aa:1c:5e:63:3a:a8:e3:cd:96:ee:87:0b:5c:96:
8c:e8:18:a6:35:5c:a5:93:e0:32:70:1b:c7:09:93:
ed:12:f6:8d:6a:60:22:0d:7c:fd:0e:b8:34:6d:3a:
30:c8:2f:ba:92:6e:ae:c5:ec:28:4e:40:ec:c8:53:
6f:fd:79:ed:57:73:6b:d9:bb:cc:bc:7c:92:de:26:
06:6b:53:b0:ef:a8:88:a9:22:ea:5f:8f:9e:b7:1c:
9f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:5A:39:0E:CF:41:C0:68:33:C6:7A:19:29:8F:33:B8:82:4F:B2:CF
X509v3 Authority Key Identifier:
keyid:73:0C:BC:47:A6:A3:0F:23:C5:D8:4C:18:0B:14:88:1D:20:BA:0A:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cwy8R6ajDyPF2EwYCxSIHSC6CsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/84b074-9c8d-48f5-bade-cba49a446d22/1/cwy8R6ajDyPF2EwYCxSIHSC6CsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/84b074-9c8d-48f5-bade-cba49a446d22/1/cwy8R6ajDyPF2EwYCxSIHSC6CsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:20:0c:4e:51:4d:47:05:cd:c6:d7:58:66:6e:77:7f:f0:de:
32:e3:13:01:05:da:ec:df:f4:f1:a0:66:36:bf:c8:73:77:5d:
38:c0:16:11:bd:f7:fc:f5:e2:8f:c8:72:92:48:75:65:c1:c5:
5e:22:bc:65:bc:47:6a:54:bd:4d:b1:0b:6c:8e:4f:50:d4:53:
82:08:bb:16:d4:1e:18:69:4c:82:5c:d2:82:b2:6d:c9:90:f4:
5b:44:ad:39:4b:e9:09:d6:e2:16:d0:b7:de:54:77:f6:e0:45:
d2:da:2d:51:fb:26:d6:27:a0:3b:66:2f:4d:2a:8c:c1:81:21:
9a:62:76:59:3b:d5:bd:dd:67:1d:1d:53:de:81:63:01:f4:b6:
ee:89:ce:79:b9:ac:3d:1d:72:7d:61:68:6f:16:44:69:c3:37:
62:12:68:03:50:60:c4:50:37:61:33:6d:6c:3d:f3:f7:12:6f:
73:83:a7:a1:a4:b6:2c:a2:34:50:5b:f5:b3:7b:9b:65:57:7e:
8e:4f:de:20:42:af:a4:26:f2:c3:2b:bc:9c:43:52:dd:8c:82:
01:00:06:f8:e1:5a:9f:9a:00:8b:04:7c:d7:3f:85:ee:a0:76:
09:3b:4c:9c:71:7b:e4:d0:63:d6:63:d3:dc:14:a2:11:80:3b:
d8:cd:4e:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:25:22 2025 by rpki-client