![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/c190b1-562f-45b1-9a07-4bdb58812086/1/e8kubfMbNUWhlv4DW8taJTBqf1Q.mft
File: e8kubfMbNUWhlv4DW8taJTBqf1Q.mft (raw, json)
Hash identifier: gOAvj9OWjGHgNW46oB+/FQ2pE1zUsbeY8JcJPWMHb2w=
Subject key identifier: F4:13:27:D7:8B:1C:24:C9:70:C2:5B:8C:9C:CE:7A:39:75:1D:C2:69
Authority key identifier: 7B:C9:2E:6D:F3:1B:35:45:A1:96:FE:03:5B:CB:5A:25:30:6A:7F:54
Certificate issuer: /CN=7bc92e6df31b3545a196fe035bcb5a25306a7f54
Certificate serial: 019510C73804C51BBEA272092D6B88D72604
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e8kubfMbNUWhlv4DW8taJTBqf1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/c190b1-562f-45b1-9a07-4bdb58812086/1/e8kubfMbNUWhlv4DW8taJTBqf1Q.mft
Manifest number: 04DC
Signing time: Sun 16 Feb 2025 22:00:46 +0000
Manifest this update: Sun 16 Feb 2025 22:00:46 +0000
Manifest next update: Mon 17 Feb 2025 22:00:46 +0000
Files and hashes: 1: e8kubfMbNUWhlv4DW8taJTBqf1Q.crl (hash: aLEvBrbisXh3U3BmRilKvN04X+zNSdm29fi9kThOErA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/c190b1-562f-45b1-9a07-4bdb58812086/1/e8kubfMbNUWhlv4DW8taJTBqf1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/c190b1-562f-45b1-9a07-4bdb58812086/1/e8kubfMbNUWhlv4DW8taJTBqf1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/e8kubfMbNUWhlv4DW8taJTBqf1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:38:04:c5:1b:be:a2:72:09:2d:6b:88:d7:26:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bc92e6df31b3545a196fe035bcb5a25306a7f54
Validity
Not Before: Feb 16 22:00:46 2025 GMT
Not After : Feb 17 22:00:46 2025 GMT
Subject: CN=f41327d78b1c24c970c25b8c9cce7a39751dc269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:91:86:fc:ee:4f:7c:31:92:47:ea:a6:30:61:
3b:9b:8d:f9:65:98:db:62:39:b0:f5:b5:45:64:a7:
ce:78:91:f9:3c:1b:4e:dc:6a:b7:f5:b3:5a:b9:bb:
c6:32:b2:45:45:69:a4:3d:fd:e3:1d:7c:38:5a:5b:
23:7f:17:05:41:d9:8e:23:ef:80:db:07:b9:51:68:
5f:0f:e0:26:9a:b9:43:49:35:0b:89:e6:d0:59:08:
17:8e:33:1b:b6:11:21:bb:1c:58:2e:73:55:80:05:
ae:8b:a8:ec:68:36:a0:fb:3f:6f:14:e8:80:27:d1:
ae:13:84:eb:22:f9:79:c5:33:a8:88:92:e1:7e:ed:
bd:d0:5a:89:86:0d:10:10:dd:79:3d:c9:d0:92:86:
2f:c3:0b:4f:35:df:38:1f:fe:7a:df:01:5a:3a:71:
12:2e:ab:f3:02:1c:5a:90:f2:48:47:be:03:24:0c:
a7:4b:93:8a:62:12:d7:b0:9e:cb:4c:1f:90:54:82:
9a:92:20:e7:d7:09:de:1a:8b:6d:78:85:19:c5:40:
90:6b:c6:56:63:6b:34:14:11:1a:16:f3:d5:29:08:
8f:2e:57:6d:43:a7:e6:d5:46:cb:f2:4c:0e:08:20:
7c:c8:16:f4:1c:c6:60:82:05:5f:c9:fe:70:5f:02:
0d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:13:27:D7:8B:1C:24:C9:70:C2:5B:8C:9C:CE:7A:39:75:1D:C2:69
X509v3 Authority Key Identifier:
keyid:7B:C9:2E:6D:F3:1B:35:45:A1:96:FE:03:5B:CB:5A:25:30:6A:7F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8kubfMbNUWhlv4DW8taJTBqf1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/c190b1-562f-45b1-9a07-4bdb58812086/1/e8kubfMbNUWhlv4DW8taJTBqf1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/c190b1-562f-45b1-9a07-4bdb58812086/1/e8kubfMbNUWhlv4DW8taJTBqf1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:42:a4:70:4d:8e:ca:52:a3:6b:e3:14:d3:11:51:5f:7c:49:
ff:2e:15:62:95:bc:70:f7:26:2b:ae:ff:14:32:4b:d0:e7:f1:
45:3d:f2:c1:7a:78:9f:ca:3d:68:49:74:71:89:b2:df:50:8a:
de:8e:ef:bb:5e:5b:2a:e1:c4:fb:0c:2e:88:0e:54:2d:d8:f7:
52:bf:50:9f:00:24:f1:25:68:71:dd:ff:df:4b:31:32:2a:f9:
42:02:ba:25:07:7b:70:17:16:01:ed:8c:61:55:10:2e:6a:8b:
b6:b5:7b:48:4b:1e:b6:c2:fe:e3:07:e6:78:ca:6e:06:1b:ec:
51:11:e3:84:87:a9:5c:62:20:68:b3:7d:62:5b:17:7b:27:87:
81:1a:9f:e3:45:0c:09:21:70:55:24:4b:a2:b4:ce:fb:48:28:
c3:6c:9c:81:1f:44:e4:00:a3:b7:b6:f2:85:a6:d3:c3:a9:d6:
e1:fe:98:f0:1c:16:2f:34:39:d5:49:7d:b9:e8:5a:22:c3:fa:
3b:cc:38:8d:bc:9e:69:8a:59:da:01:80:e8:97:bb:f7:04:e4:
b1:08:5c:81:1f:04:78:fb:9e:ba:1d:cf:43:dd:4a:52:9d:15:
8b:d5:03:f5:b2:a5:f3:9f:85:2c:c5:39:24:69:6d:bc:31:67:
73:cc:52:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:01:15 2025 by rpki-client