![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/722bd6-bcef-434f-b011-948d86913538/1/WwrDjepqcErbq6k4HB3AI1bTqpA.mft
File: WwrDjepqcErbq6k4HB3AI1bTqpA.mft (raw, json)
Hash identifier: mMTWzPWZet7P72W243zKan6eelgC9T009UHyuVz9a/k=
Subject key identifier: 4D:13:BE:63:9A:36:D5:67:A4:C5:7B:CD:B2:20:C0:7A:39:CF:D9:54
Authority key identifier: 5B:0A:C3:8D:EA:6A:70:4A:DB:AB:A9:38:1C:1D:C0:23:56:D3:AA:90
Certificate issuer: /CN=5b0ac38dea6a704adbaba9381c1dc02356d3aa90
Certificate serial: 019511349297A7FC56131302E30D5167058B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WwrDjepqcErbq6k4HB3AI1bTqpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/722bd6-bcef-434f-b011-948d86913538/1/WwrDjepqcErbq6k4HB3AI1bTqpA.mft
Manifest number: 07B2
Signing time: Mon 17 Feb 2025 00:00:12 +0000
Manifest this update: Mon 17 Feb 2025 00:00:12 +0000
Manifest next update: Tue 18 Feb 2025 00:00:12 +0000
Files and hashes: 1: WwrDjepqcErbq6k4HB3AI1bTqpA.crl (hash: s1yL2+EB30xhAgl9fZOkQn2UBvhh4AgLt0kLLsBRz58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/722bd6-bcef-434f-b011-948d86913538/1/WwrDjepqcErbq6k4HB3AI1bTqpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/722bd6-bcef-434f-b011-948d86913538/1/WwrDjepqcErbq6k4HB3AI1bTqpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/WwrDjepqcErbq6k4HB3AI1bTqpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:92:97:a7:fc:56:13:13:02:e3:0d:51:67:05:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b0ac38dea6a704adbaba9381c1dc02356d3aa90
Validity
Not Before: Feb 17 00:00:12 2025 GMT
Not After : Feb 18 00:00:12 2025 GMT
Subject: CN=4d13be639a36d567a4c57bcdb220c07a39cfd954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e9:42:58:f9:7e:43:ad:7a:b2:bf:22:dd:e8:
aa:a1:03:51:43:61:67:2c:3d:74:89:9b:dd:2b:30:
f6:f6:6d:7c:f7:75:41:9b:27:4c:ac:2d:73:5a:f1:
37:25:b6:7d:6c:9a:98:95:24:61:ca:ed:07:29:65:
c1:b1:63:75:9b:b6:bd:7f:e9:82:8f:8c:99:97:ba:
68:21:82:e7:60:07:b5:e2:40:1a:68:84:d5:97:83:
0c:01:42:f2:8e:00:c0:f8:2c:98:6e:67:20:31:46:
74:1c:4e:90:50:05:03:af:4e:3b:8e:ca:91:e3:a2:
8c:33:ba:cd:23:b3:99:11:b7:f3:62:80:85:71:ec:
37:bd:ac:1c:b4:10:91:4f:02:1d:fb:f1:6b:68:00:
60:ca:62:77:4f:ad:e5:09:7a:13:e3:a3:be:bb:35:
6d:7e:53:02:f7:e2:d7:db:e4:d7:28:85:7a:5d:e5:
79:1c:c6:99:a3:96:89:a2:61:b1:3d:d7:33:ea:ed:
5a:68:ca:ce:42:84:7a:98:90:5c:e5:46:e7:e5:c0:
8a:b1:8d:77:2a:c5:71:78:83:b0:a3:76:19:61:56:
b2:c1:63:8f:97:1f:85:82:ca:48:69:e2:d2:42:36:
94:2c:d6:7a:e1:a6:9c:09:25:49:89:25:b9:3c:3b:
d3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:13:BE:63:9A:36:D5:67:A4:C5:7B:CD:B2:20:C0:7A:39:CF:D9:54
X509v3 Authority Key Identifier:
keyid:5B:0A:C3:8D:EA:6A:70:4A:DB:AB:A9:38:1C:1D:C0:23:56:D3:AA:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WwrDjepqcErbq6k4HB3AI1bTqpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/722bd6-bcef-434f-b011-948d86913538/1/WwrDjepqcErbq6k4HB3AI1bTqpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/722bd6-bcef-434f-b011-948d86913538/1/WwrDjepqcErbq6k4HB3AI1bTqpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:13:19:cb:54:d3:01:0b:25:a4:e4:a2:9c:45:57:32:ff:52:
cb:6d:0f:29:d5:58:d6:a4:df:a4:02:4b:23:7f:c8:1f:00:20:
07:e3:7c:4a:2c:88:a6:fe:55:5e:fb:93:eb:ea:68:96:fb:41:
1f:b5:c3:67:80:c1:48:26:4e:e4:b3:0f:9d:97:be:f8:28:e1:
e7:6b:c8:b4:a2:15:62:64:30:95:03:ee:58:26:30:56:97:08:
96:8a:10:5c:6e:eb:b8:2e:1b:69:06:ba:b2:d5:77:23:b4:b5:
2d:1c:dc:1b:1d:e1:59:a9:db:3c:6d:2a:eb:02:73:5d:d4:c0:
58:af:b1:ef:ad:a6:25:f0:db:d2:5b:98:43:39:f1:b8:9f:5c:
d2:af:c2:b6:e7:29:a2:e6:94:b9:b9:70:a1:49:3e:80:78:a3:
22:fe:06:93:fd:2a:12:a3:e6:73:e9:ac:56:7f:64:5f:df:ba:
c0:7c:52:66:3b:09:50:65:6c:8d:00:cc:aa:24:d9:d7:3d:04:
01:40:68:35:d6:20:57:1e:aa:d4:ef:f0:fb:1a:4b:80:e6:6a:
eb:9a:71:ad:a0:79:c8:c9:92:b7:e5:b6:68:2f:ce:97:4e:7f:
bd:b4:a0:db:71:40:4f:89:e9:c3:d9:6d:dc:65:b1:ef:4b:a5:
71:96:17:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:20:35 2025 by rpki-client