![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft
File: 5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft (raw, json)
Hash identifier: Q2toT0htnVpAWs4i//MX4x7S4GqunldxhZKp3+nL9R0=
Subject key identifier: ED:3E:4C:61:CE:2C:97:0D:A0:C5:DB:E8:56:84:5E:F5:07:4B:3C:9A
Authority key identifier: E7:18:51:20:E7:A3:B9:62:B9:FF:E4:AB:ED:16:D0:AA:3A:32:05:18
Certificate issuer: /CN=e7185120e7a3b962b9ffe4abed16d0aa3a320518
Certificate serial: 019510C8266C03B1AD88FD6998C820EC15A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5xhRIOejuWK5_-Sr7RbQqjoyBRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft
Manifest number: 0E29
Signing time: Sun 16 Feb 2025 22:01:47 +0000
Manifest this update: Sun 16 Feb 2025 22:01:47 +0000
Manifest next update: Mon 17 Feb 2025 22:01:47 +0000
Files and hashes: 1: 5xhRIOejuWK5_-Sr7RbQqjoyBRg.crl (hash: Z+ZmJD4kJWefEqieTg5enQCCMrr8f/5ICFwF3ewNAkA=)
2: FrjAEg86v5SV-4VLldw-NEA5C1M.roa (hash: Rm7Xoat+7nBF56KNvwJMCJ6wscvSb/PfpXRNxa3KAIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/5xhRIOejuWK5_-Sr7RbQqjoyBRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c8:26:6c:03:b1:ad:88:fd:69:98:c8:20:ec:15:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7185120e7a3b962b9ffe4abed16d0aa3a320518
Validity
Not Before: Feb 16 22:01:47 2025 GMT
Not After : Feb 17 22:01:47 2025 GMT
Subject: CN=ed3e4c61ce2c970da0c5dbe856845ef5074b3c9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c7:75:06:dc:e8:35:d0:3a:5c:db:70:4f:dc:
9a:48:a9:70:44:e6:d4:38:52:4e:8b:02:78:0a:89:
97:99:fd:12:12:5f:56:a8:b1:32:68:ff:7f:df:75:
16:1b:77:0a:22:33:9b:a3:f6:83:3c:19:95:af:60:
ea:77:df:8e:b0:d1:c2:e1:ab:7e:90:8b:55:cd:91:
5a:6e:85:4a:83:32:b5:fd:82:b1:a5:e5:7f:be:29:
7b:12:6a:ac:41:9d:a4:9f:1d:e9:d0:d0:af:a6:01:
0c:57:05:90:cb:cf:2b:01:cc:76:9e:86:b9:e2:3c:
64:db:22:ec:a3:56:bc:1d:b9:1e:20:50:da:bf:d3:
7d:1f:c3:a0:5d:f0:09:bf:c8:20:b4:b0:2a:01:e9:
a9:e0:44:88:d3:6c:70:36:ce:22:95:3c:8e:f5:a8:
d4:f0:a4:45:1b:cc:4d:d9:50:6d:24:5c:4a:7e:8d:
b8:d9:74:48:bf:85:30:2f:e6:f7:67:3e:65:03:0f:
25:2a:29:0a:44:50:30:8e:13:22:95:6f:77:64:d3:
df:54:3f:fc:da:eb:a2:f2:8a:89:2e:01:40:8b:d8:
d6:3b:44:be:67:a8:8c:7c:5b:7b:1a:15:09:97:f6:
ff:69:79:ec:fb:51:4a:46:aa:45:21:1e:a0:0a:f1:
a2:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:3E:4C:61:CE:2C:97:0D:A0:C5:DB:E8:56:84:5E:F5:07:4B:3C:9A
X509v3 Authority Key Identifier:
keyid:E7:18:51:20:E7:A3:B9:62:B9:FF:E4:AB:ED:16:D0:AA:3A:32:05:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5xhRIOejuWK5_-Sr7RbQqjoyBRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:95:42:7a:25:28:8c:8e:dd:db:4f:0a:04:0e:4d:01:81:ac:
3f:6a:8d:2e:58:1d:6a:0d:31:32:5f:01:58:7a:ae:a0:e9:d6:
69:f3:ae:a8:8d:b0:d2:01:30:13:98:7c:05:81:62:4b:79:4f:
e2:67:b3:52:e3:d0:58:b9:ed:bc:d7:34:b1:2c:53:09:73:3b:
d8:85:19:0e:b2:57:5d:08:cb:cc:f5:69:b7:e7:74:39:8a:2e:
fe:1f:ac:f8:a0:16:31:90:79:10:1b:c4:32:7f:a4:fc:e8:ad:
4f:42:10:42:f8:6f:e1:5b:9e:0c:a4:fc:0a:ca:07:7c:65:b4:
64:05:78:d3:21:72:f0:ff:8c:fc:86:d4:af:65:45:a6:d6:35:
ab:57:c8:c0:f3:07:f3:76:b1:56:bc:9f:92:86:e0:c5:75:6e:
f8:a5:1d:37:71:12:a0:0e:dd:4d:a2:f4:27:f4:49:41:58:dd:
b6:11:61:aa:54:a3:33:e5:49:4d:d5:66:0b:5b:03:0b:91:2e:
d5:32:c4:4e:d8:b9:a3:9b:08:cc:de:3d:3c:40:36:ac:5a:e1:
3c:1a:0f:c7:6d:67:39:29:23:2b:37:06:c8:83:68:bb:e7:34:
90:96:c0:13:2c:8f:da:22:7c:10:9e:4c:b0:1c:36:94:93:32:
00:76:a9:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:25:33 2025 by rpki-client