![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0d3651-987b-4627-ad06-427c035fbc8d/1/XtAC05cM6z3Wh7QwuTaibzeNaSc.mft
File: XtAC05cM6z3Wh7QwuTaibzeNaSc.mft (raw, json)
Hash identifier: y7wr8iklj73bW/sT/cd8ObLr2m5LLpTxlq2O7FRfDUY=
Subject key identifier: 9D:4B:BF:56:EE:07:1C:63:7D:C4:11:82:FA:16:25:71:46:3E:FE:54
Authority key identifier: 5E:D0:02:D3:97:0C:EB:3D:D6:87:B4:30:B9:36:A2:6F:37:8D:69:27
Certificate issuer: /CN=5ed002d3970ceb3dd687b430b936a26f378d6927
Certificate serial: 019510C722EBD391DDD28C49DE6D1AF3DD52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XtAC05cM6z3Wh7QwuTaibzeNaSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0d3651-987b-4627-ad06-427c035fbc8d/1/XtAC05cM6z3Wh7QwuTaibzeNaSc.mft
Manifest number: 06D2
Signing time: Sun 16 Feb 2025 22:00:40 +0000
Manifest this update: Sun 16 Feb 2025 22:00:40 +0000
Manifest next update: Mon 17 Feb 2025 22:00:40 +0000
Files and hashes: 1: XtAC05cM6z3Wh7QwuTaibzeNaSc.crl (hash: uTS1E9yfWTfxI6lmdHBiH3wngSQlftyS11rNAIpVCp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/0d3651-987b-4627-ad06-427c035fbc8d/1/XtAC05cM6z3Wh7QwuTaibzeNaSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/0d3651-987b-4627-ad06-427c035fbc8d/1/XtAC05cM6z3Wh7QwuTaibzeNaSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XtAC05cM6z3Wh7QwuTaibzeNaSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:22:eb:d3:91:dd:d2:8c:49:de:6d:1a:f3:dd:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ed002d3970ceb3dd687b430b936a26f378d6927
Validity
Not Before: Feb 16 22:00:40 2025 GMT
Not After : Feb 17 22:00:40 2025 GMT
Subject: CN=9d4bbf56ee071c637dc41182fa162571463efe54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ac:30:f2:eb:85:d6:79:38:2a:03:2a:4a:95:
f0:00:dc:e1:6f:09:e7:15:89:80:56:5e:50:27:f0:
20:a5:67:df:3f:ae:8b:7c:10:56:ed:9d:99:04:a7:
17:63:2a:b5:86:f6:a6:54:04:94:c1:0a:63:48:1f:
e7:3e:56:c0:8a:e5:a2:26:18:7b:c4:36:56:42:de:
a8:83:9d:51:08:23:81:bc:c7:28:d8:fe:09:4b:43:
5c:f0:ce:01:d7:ce:c8:82:f0:c3:91:2e:df:f1:a2:
b9:72:04:49:89:14:14:cc:5e:48:f8:dd:af:cd:5b:
72:67:8b:d3:2a:0e:22:83:eb:4b:81:ec:3c:22:70:
65:03:93:d9:44:12:94:d3:40:ac:98:25:4e:eb:8e:
78:5d:61:2d:e1:0e:49:23:8f:d8:f7:af:3c:aa:cf:
61:ba:0b:f8:fa:d2:37:0c:8b:47:66:4a:1e:c8:8c:
26:d6:87:a5:b3:40:94:fe:5b:f9:bd:c0:79:c2:e7:
75:1f:55:8a:7a:48:4b:85:34:61:55:cd:da:29:2a:
7a:69:f0:0f:3d:54:d6:e0:a5:bf:78:a2:35:07:c5:
44:f8:5f:41:2c:fd:aa:27:06:a3:71:df:5e:30:0c:
ef:82:ac:36:61:e1:42:3c:ad:b3:67:ad:99:ae:5f:
78:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:4B:BF:56:EE:07:1C:63:7D:C4:11:82:FA:16:25:71:46:3E:FE:54
X509v3 Authority Key Identifier:
keyid:5E:D0:02:D3:97:0C:EB:3D:D6:87:B4:30:B9:36:A2:6F:37:8D:69:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XtAC05cM6z3Wh7QwuTaibzeNaSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0d3651-987b-4627-ad06-427c035fbc8d/1/XtAC05cM6z3Wh7QwuTaibzeNaSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0d3651-987b-4627-ad06-427c035fbc8d/1/XtAC05cM6z3Wh7QwuTaibzeNaSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:6e:bc:2f:e5:d6:99:18:d0:61:d1:18:a4:c4:a3:df:3c:ff:
2f:6f:82:99:66:e8:f3:4b:bc:d6:22:9a:50:21:2d:2b:5b:b7:
dd:ad:f7:53:5d:15:7c:c9:0a:09:01:8d:0b:c2:6e:02:96:43:
bf:01:f1:94:24:70:5f:53:cf:26:67:14:13:ba:41:76:9c:76:
d4:ff:e0:7f:5b:76:4c:c6:2b:2b:ea:a5:e3:30:7b:d6:3f:39:
85:34:0a:82:df:5f:03:f9:92:43:70:31:fe:6a:4f:22:2e:97:
3b:da:7d:52:59:5e:86:ee:bb:e9:74:43:93:87:1b:cc:e7:06:
bf:9d:fe:e8:ba:26:d4:2c:2c:f3:5d:2c:07:34:03:0c:23:70:
68:8d:d1:f5:57:e3:b7:35:40:c3:75:a5:dd:96:03:e8:b6:7c:
88:27:c6:20:03:97:d3:05:cc:9c:1c:2a:ab:86:60:88:19:41:
b6:29:77:a5:2f:5e:3a:bf:07:e6:3f:47:3c:b0:34:33:26:27:
16:05:59:75:c2:44:97:ba:4a:e9:7c:73:fd:7f:8b:3d:77:8c:
66:2e:60:e5:c2:3b:2e:2c:50:a7:be:95:bb:30:cb:d5:14:57:
4a:ca:21:c1:27:6d:9c:64:ee:98:bc:db:53:69:d2:75:cd:c3:
ba:14:e3:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:44:00 2025 by rpki-client