![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.mft
File: qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.mft (raw, json)
Hash identifier: ypK75Y9v/XaEE3S6v/IlLtLXpND+k4CesWPdH5ca6EY=
Subject key identifier: 33:42:CE:B7:37:F5:F9:46:BD:37:66:48:2D:66:0A:5E:B7:89:4C:87
Authority key identifier: A9:8E:59:43:C3:55:D4:8C:00:4E:6B:F4:A3:B6:CD:B8:C3:0A:DC:4C
Certificate issuer: /CN=a98e5943c355d48c004e6bf4a3b6cdb8c30adc4c
Certificate serial: 019510C72496193081E25D1D3A22F238BA34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.mft
Manifest number: 1456
Signing time: Sun 16 Feb 2025 22:00:41 +0000
Manifest this update: Sun 16 Feb 2025 22:00:41 +0000
Manifest next update: Mon 17 Feb 2025 22:00:41 +0000
Files and hashes: 1: USQ6h1BmGX_5l6r9JsziO1Ui1Vw.roa (hash: W3xrS1zgc7QMM+ux8ilDAtn6lUWxhEYKoHwrzSB4Kb8=)
2: qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.crl (hash: VHNepkEU4UVvYb/xR/QhBIS+4yGNzBoJEl5Vgrc16uA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.mft
rsync://rpki.ripe.net/repository/DEFAULT/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:24:96:19:30:81:e2:5d:1d:3a:22:f2:38:ba:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a98e5943c355d48c004e6bf4a3b6cdb8c30adc4c
Validity
Not Before: Feb 16 22:00:41 2025 GMT
Not After : Feb 17 22:00:41 2025 GMT
Subject: CN=3342ceb737f5f946bd3766482d660a5eb7894c87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:8b:6f:c4:f0:b5:42:c8:ee:35:d0:6c:52:fe:
bb:15:09:df:ec:2f:75:c7:bb:bd:a6:42:ea:92:12:
9e:bb:41:b5:6f:bd:a3:ab:5f:22:ff:1f:67:ef:f3:
22:b7:b6:74:85:6e:36:3d:37:52:7e:01:90:f1:22:
e3:3a:85:05:11:12:5e:8d:75:a8:07:7d:98:ff:ca:
f5:09:9e:b1:cc:69:6d:33:0b:b6:b1:e1:0c:30:3e:
5a:f0:2c:bb:d1:86:0e:37:01:b0:ad:a5:ac:bb:a4:
88:66:4a:94:d3:6a:8c:0b:e3:a5:2c:42:9e:4e:47:
df:10:47:5f:00:93:0b:4c:ba:4b:75:5b:aa:77:c1:
74:dc:a4:bb:69:cf:7c:52:cb:61:35:a7:44:b7:ca:
c9:f5:4d:b3:d7:f9:17:f4:a6:80:cb:e1:ed:19:8a:
be:4a:09:e7:e2:a0:61:cc:70:ef:26:59:0e:a1:20:
3f:25:5e:0f:c1:9f:52:96:64:fa:43:2f:e1:4c:08:
9b:08:0c:52:bb:97:b6:26:5f:13:2f:b3:f7:bb:d9:
c0:03:01:0d:2f:02:e7:49:e7:d3:31:85:d5:07:f7:
d9:e9:09:58:5e:93:6d:15:30:ec:92:02:59:49:b4:
86:a8:87:5f:3e:3c:41:65:81:75:e8:e4:52:cf:d5:
d7:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:42:CE:B7:37:F5:F9:46:BD:37:66:48:2D:66:0A:5E:B7:89:4C:87
X509v3 Authority Key Identifier:
keyid:A9:8E:59:43:C3:55:D4:8C:00:4E:6B:F4:A3:B6:CD:B8:C3:0A:DC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:0a:cd:47:36:a5:c2:30:0d:8a:49:da:e2:d8:b6:40:29:f3:
bb:03:8b:11:89:ca:88:a9:06:0a:d2:31:06:3b:8e:30:96:d1:
76:4d:45:bb:18:72:83:b0:18:ed:fa:d5:e9:d1:95:c5:f2:10:
47:1a:9f:68:7f:e7:40:f1:18:0a:aa:bb:55:7c:29:e2:61:23:
62:65:8f:49:f5:7a:cf:00:e6:4c:6d:8f:61:2f:c1:95:00:0b:
94:d8:7f:63:53:5d:2f:e0:2e:65:ea:e4:83:e7:81:ba:c3:bc:
d9:98:da:78:4d:54:62:ef:1b:a0:e2:35:b8:30:f4:10:a2:39:
89:8c:e6:fc:19:2f:ac:be:cd:d7:02:4e:54:72:6d:ba:f3:1e:
c3:f2:94:8d:43:b1:de:cb:1d:2e:44:6e:92:f6:9e:81:cd:40:
53:22:a6:4d:ba:9f:eb:0d:9c:8a:df:e0:42:ef:b7:ba:1c:71:
cd:e1:c1:54:62:d9:a3:ff:de:85:91:f9:80:f9:19:0a:cc:32:
08:fd:93:16:5b:83:5e:9d:0c:63:46:9b:59:76:73:1f:81:5e:
f2:ce:ae:a1:47:69:09:e3:89:e2:28:0a:c4:4b:e4:f6:b8:56:
e8:bd:03:a5:3a:7b:2a:76:2f:85:f0:45:36:e8:cf:c1:61:20:
d8:06:40:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:25:44 2025 by rpki-client