![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/FUA-FXyC9176fFSpvH0NG_AbHK4.mft
File: FUA-FXyC9176fFSpvH0NG_AbHK4.mft (raw, json)
Hash identifier: KCOjv5e6iUDr3OhEAx4uSl8A0vgsinklIqgBrTaOlXg=
Subject key identifier: 9F:F9:4B:FB:C3:40:1A:26:81:A4:CB:48:B0:71:0C:B5:7B:56:1B:FF
Authority key identifier: 15:40:3E:15:7C:82:F7:5E:FA:7C:54:A9:BC:7D:0D:1B:F0:1B:1C:AE
Certificate issuer: /CN=15403e157c82f75efa7c54a9bc7d0d1bf01b1cae
Certificate serial: 019511A2D07918834660748CC0FBEFA43BE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FUA-FXyC9176fFSpvH0NG_AbHK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/FUA-FXyC9176fFSpvH0NG_AbHK4.mft
Manifest number: 1459
Signing time: Mon 17 Feb 2025 02:00:37 +0000
Manifest this update: Mon 17 Feb 2025 02:00:37 +0000
Manifest next update: Tue 18 Feb 2025 02:00:37 +0000
Files and hashes: 1: 9svdSi4VMR39LcPpfRqTZ_ivzWU.roa (hash: qkFZEN8wS5/7d3PWnlFnfBgG42VLZsiC6RIzbDuNeoI=)
2: FUA-FXyC9176fFSpvH0NG_AbHK4.crl (hash: Eo0cp+2W3go7S12lPvn5+XfKJIXeLg7tYeLXYvneO8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/FUA-FXyC9176fFSpvH0NG_AbHK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/FUA-FXyC9176fFSpvH0NG_AbHK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FUA-FXyC9176fFSpvH0NG_AbHK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:d0:79:18:83:46:60:74:8c:c0:fb:ef:a4:3b:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15403e157c82f75efa7c54a9bc7d0d1bf01b1cae
Validity
Not Before: Feb 17 02:00:37 2025 GMT
Not After : Feb 18 02:00:37 2025 GMT
Subject: CN=9ff94bfbc3401a2681a4cb48b0710cb57b561bff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:93:4a:db:07:80:b8:5d:d5:21:af:f5:66:8b:
a9:43:4d:35:b3:53:ec:7a:33:2f:42:d9:32:eb:11:
0e:36:4d:9d:6b:89:96:f2:8c:07:30:a8:b5:0c:07:
0e:94:84:06:ad:2f:2a:0f:70:ea:c5:ca:b0:c6:75:
12:48:79:5b:ea:f2:bd:3f:dd:6f:55:f5:83:00:ed:
99:cd:f3:7a:1e:20:b7:4a:2f:d7:c9:17:49:f4:13:
31:23:b0:87:fe:90:5f:7d:91:33:af:51:55:aa:8f:
9e:55:02:c8:8e:58:4d:7c:70:74:dd:8c:5d:99:a5:
ec:83:1e:75:6d:cb:a9:00:31:1b:bc:39:cd:59:b2:
26:b9:77:36:2b:bb:72:d0:7b:63:b0:a3:ff:1c:55:
d6:34:53:2f:69:80:52:d0:4d:76:a2:2f:ca:9b:44:
13:4e:c7:cc:ae:c6:57:e8:fd:1c:cf:06:f0:d7:db:
96:8b:24:49:56:57:77:fc:de:c9:f4:78:cb:ea:f9:
c7:7a:11:07:6c:d8:c6:1e:cd:91:fb:43:c5:1e:63:
37:83:e1:05:8c:65:04:f2:14:4f:a5:22:b9:8b:02:
20:55:6d:af:1f:17:5b:a6:08:fd:35:3c:54:11:36:
4d:ed:93:31:da:3b:8a:5f:23:0f:d6:4d:a3:43:6c:
87:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:F9:4B:FB:C3:40:1A:26:81:A4:CB:48:B0:71:0C:B5:7B:56:1B:FF
X509v3 Authority Key Identifier:
keyid:15:40:3E:15:7C:82:F7:5E:FA:7C:54:A9:BC:7D:0D:1B:F0:1B:1C:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FUA-FXyC9176fFSpvH0NG_AbHK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/FUA-FXyC9176fFSpvH0NG_AbHK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/FUA-FXyC9176fFSpvH0NG_AbHK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:d4:99:7d:33:c8:fb:92:95:fd:27:0a:53:db:17:a1:e5:51:
20:46:5f:1d:ef:85:de:5d:d4:14:36:b8:d4:c0:84:95:e3:ab:
dd:cd:a9:51:2a:ab:90:20:fc:72:b5:b5:5f:9a:af:25:95:b3:
27:04:d7:52:c7:97:0a:8f:9f:94:36:6e:d2:69:f7:1c:02:c4:
ab:b3:b4:e4:cd:fe:f4:1d:c1:a0:f1:1e:96:bd:ec:f1:ca:7b:
fe:cb:1e:aa:ee:34:cb:15:9c:00:2c:5d:28:af:5c:e9:ce:d9:
d1:c5:85:f1:a0:26:e6:7d:97:c9:df:bc:34:87:0a:10:78:e5:
dd:35:50:e0:ae:f9:c7:52:d1:a1:30:b4:f6:9a:d5:98:4e:de:
c6:1a:77:26:ed:ed:89:b9:54:45:f5:05:7a:1a:5f:9c:5b:b5:
ab:f9:57:17:6a:a4:b0:0c:0d:a9:fb:ca:3c:13:92:2e:d8:a2:
5c:82:cc:ac:91:24:37:a8:3e:ad:12:20:b6:d3:1f:eb:30:45:
dc:34:6e:81:9d:c8:bc:c8:11:d5:41:c3:05:4e:c2:54:36:e3:
3e:e5:84:6e:4c:ab:b0:c6:31:d5:78:e0:e7:66:a3:e2:15:18:
cb:8f:0d:3d:de:af:68:58:78:42:7e:41:6b:fc:8f:90:40:db:
22:17:af:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:10:52 2025 by rpki-client