![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/pIJDCLyDtO5W8cDBufv8MRsM1Eo.mft
File: pIJDCLyDtO5W8cDBufv8MRsM1Eo.mft (raw, json)
Hash identifier: SaKazSqMD0B1QGDOAtmIDZ4W6TV6N9XlLnOTjWT7rvw=
Subject key identifier: 7C:42:73:A8:5C:03:E4:5F:3F:8E:D9:62:69:23:EE:34:1F:2A:F0:2C
Authority key identifier: A4:82:43:08:BC:83:B4:EE:56:F1:C0:C1:B9:FB:FC:31:1B:0C:D4:4A
Certificate issuer: /CN=a4824308bc83b4ee56f1c0c1b9fbfc311b0cd44a
Certificate serial: 01951210CF4E1E3501DD808CEE8AC3742B03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pIJDCLyDtO5W8cDBufv8MRsM1Eo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/pIJDCLyDtO5W8cDBufv8MRsM1Eo.mft
Manifest number: 1459
Signing time: Mon 17 Feb 2025 04:00:46 +0000
Manifest this update: Mon 17 Feb 2025 04:00:46 +0000
Manifest next update: Tue 18 Feb 2025 04:00:46 +0000
Files and hashes: 1: C68Jy4vS9ZhrosrQ0hLHm1uIuZY.roa (hash: KriDQtKp0/6qr4HNTZ8vH7ju161mMdjIkNUJn2wDbds=)
2: TTYqeImd9Bx1jE17xCXwGjIy_ds.roa (hash: zl9hhkn8MVjXkdNWr2SWdYWZOS+aR6DMyQIaYbl32sI=)
3: aLyfJT6We20ULVg1UbujnE5UVaI.roa (hash: XttwXUAYz6CHALtumX6fckhDuT6Y4LNJR+NAILB010U=)
4: lixJMjo5-_bNmfYtadlmrrGpsCg.roa (hash: OW5E61Tvo1LN0X4Q2KSxHXhfLjcuHjhFHfnXTwr/DjA=)
5: pIJDCLyDtO5W8cDBufv8MRsM1Eo.crl (hash: 74yDEmib/fSPzpAAMJgnuJmwwYuUvu7xCPu8Uke9wbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/pIJDCLyDtO5W8cDBufv8MRsM1Eo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/pIJDCLyDtO5W8cDBufv8MRsM1Eo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pIJDCLyDtO5W8cDBufv8MRsM1Eo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:cf:4e:1e:35:01:dd:80:8c:ee:8a:c3:74:2b:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4824308bc83b4ee56f1c0c1b9fbfc311b0cd44a
Validity
Not Before: Feb 17 04:00:46 2025 GMT
Not After : Feb 18 04:00:46 2025 GMT
Subject: CN=7c4273a85c03e45f3f8ed9626923ee341f2af02c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:8b:f2:69:b8:80:11:05:d5:d1:6e:45:5f:8a:
2d:fd:76:06:da:63:6c:49:b1:61:c3:f1:58:f0:73:
08:d2:72:45:2b:79:48:53:9d:f3:f2:22:49:7c:ea:
a7:c3:20:de:15:41:ed:94:84:71:de:a5:4b:2e:35:
a9:b0:4f:a2:54:16:a6:8d:73:94:a3:c6:99:86:9f:
5a:99:52:86:07:c8:2a:5e:22:d2:ac:c1:f5:36:68:
20:85:ff:53:68:e2:01:27:ba:87:e9:a4:4d:9d:ff:
ae:2e:ff:5e:ca:88:66:0e:fa:e2:e4:06:a9:cd:8c:
07:27:59:60:2b:35:96:dd:cb:81:45:9b:ab:a7:b5:
10:c3:6e:bf:45:76:7c:ba:48:80:5e:ac:74:29:f1:
7e:77:a5:33:33:26:d0:34:09:4d:3d:b7:5f:4f:7e:
e9:c2:13:5c:67:d8:e7:ed:21:81:8a:82:4b:80:52:
ac:24:8d:13:5f:34:0e:5e:98:08:0c:38:0d:f8:db:
02:ef:1a:25:81:e3:80:e6:11:72:8a:aa:d8:9a:94:
45:82:4b:39:2f:60:35:32:67:52:c8:f8:53:88:cc:
e2:7d:29:38:04:58:6e:5f:a3:d2:c2:fd:b0:25:79:
a2:8d:44:d2:c2:2e:56:59:bd:31:72:d5:4d:0f:e5:
97:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:42:73:A8:5C:03:E4:5F:3F:8E:D9:62:69:23:EE:34:1F:2A:F0:2C
X509v3 Authority Key Identifier:
keyid:A4:82:43:08:BC:83:B4:EE:56:F1:C0:C1:B9:FB:FC:31:1B:0C:D4:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pIJDCLyDtO5W8cDBufv8MRsM1Eo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/pIJDCLyDtO5W8cDBufv8MRsM1Eo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/pIJDCLyDtO5W8cDBufv8MRsM1Eo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:a6:6a:95:7d:05:55:ca:b1:47:1a:ba:6e:c5:a4:b9:d1:42:
77:0e:d0:64:c2:c2:8b:d1:d2:17:5c:2c:bf:32:a8:3f:3d:85:
2f:68:a7:de:a1:94:ca:28:99:a1:fb:60:11:52:15:d7:09:68:
fa:39:f1:08:42:d0:cd:00:94:8e:69:97:85:93:61:b1:fe:d2:
20:b4:be:8f:86:33:6b:45:10:b7:bb:e8:af:8f:57:62:14:b5:
2e:95:57:c7:08:b7:27:33:1b:a2:c9:33:fa:f2:c1:cc:44:c2:
de:d6:63:12:f8:18:d4:73:a1:c7:fd:06:b9:dd:ed:e4:91:fa:
b8:ec:f6:4c:2f:61:b5:ad:1b:dc:3c:b2:c8:59:73:d3:7e:0d:
7a:19:0c:ae:8a:41:e6:30:51:73:e2:5c:23:21:ef:de:1e:7e:
56:07:94:ab:8e:e3:c6:25:05:d2:e4:4e:e2:c4:57:c0:5b:b5:
a9:90:48:7c:91:c2:27:44:c7:45:e5:1a:9d:6d:53:d3:0a:5f:
7f:05:aa:86:7e:50:fe:14:34:1a:4e:d8:45:3e:57:e1:fe:e9:
b7:3b:df:10:ef:46:3a:95:bc:33:ef:f4:cf:96:b7:96:dd:43:
06:fa:14:f3:19:5f:e1:24:09:1d:b7:a6:c9:43:be:12:85:8c:
28:97:58:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:47:57 2025 by rpki-client