![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/ed188a-0fff-4f0f-a26d-251a9c864d26/1/sQvyxqnxpCuKzuASWfkfUUSrivU.mft
File: sQvyxqnxpCuKzuASWfkfUUSrivU.mft (raw, json)
Hash identifier: 5Y1+aHP0bVnphy/a9RbHRT6FGWdZh6UFi6pnYnkJg7o=
Subject key identifier: DC:8E:D9:F3:71:93:F3:0C:2F:0F:A4:4D:EF:82:69:F1:51:0C:09:11
Authority key identifier: B1:0B:F2:C6:A9:F1:A4:2B:8A:CE:E0:12:59:F9:1F:51:44:AB:8A:F5
Certificate issuer: /CN=b10bf2c6a9f1a42b8acee01259f91f5144ab8af5
Certificate serial: 0195116BB3C74657125208E0081E097E7B9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sQvyxqnxpCuKzuASWfkfUUSrivU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/ed188a-0fff-4f0f-a26d-251a9c864d26/1/sQvyxqnxpCuKzuASWfkfUUSrivU.mft
Manifest number: 03EE
Signing time: Mon 17 Feb 2025 01:00:25 +0000
Manifest this update: Mon 17 Feb 2025 01:00:25 +0000
Manifest next update: Tue 18 Feb 2025 01:00:25 +0000
Files and hashes: 1: RagZVp33x_ZhRPfhRcY-ePMpfNA.roa (hash: gMsYucRSntBj1BaVj8EkbP09b3qQ09XAtS6QWD6kZsw=)
2: sQvyxqnxpCuKzuASWfkfUUSrivU.crl (hash: x9MY0ftvXJWFXFmFXBM8qO0kE8adJ552l5Em44YrHvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/ed188a-0fff-4f0f-a26d-251a9c864d26/1/sQvyxqnxpCuKzuASWfkfUUSrivU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/ed188a-0fff-4f0f-a26d-251a9c864d26/1/sQvyxqnxpCuKzuASWfkfUUSrivU.mft
rsync://rpki.ripe.net/repository/DEFAULT/sQvyxqnxpCuKzuASWfkfUUSrivU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6b:b3:c7:46:57:12:52:08:e0:08:1e:09:7e:7b:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b10bf2c6a9f1a42b8acee01259f91f5144ab8af5
Validity
Not Before: Feb 17 01:00:25 2025 GMT
Not After : Feb 18 01:00:25 2025 GMT
Subject: CN=dc8ed9f37193f30c2f0fa44def8269f1510c0911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:28:25:67:00:54:bd:00:6f:74:bf:4f:3b:e1:
24:8b:2a:9f:75:7f:ba:b5:6e:c8:58:a5:53:71:5c:
c4:e1:45:6c:61:31:85:bd:9b:c5:e1:71:2b:68:e4:
c2:39:30:1f:f4:50:6e:33:98:cb:3c:5c:e8:46:9d:
db:18:85:03:22:68:1e:dd:dd:a1:63:61:88:55:b3:
2b:63:f3:fe:6a:1d:1b:da:75:a6:e4:f9:01:13:15:
29:88:5d:07:65:bf:28:e5:f2:b9:a2:97:35:49:0b:
a4:0b:52:e5:0b:21:54:c2:0d:cd:60:b6:27:de:92:
b2:ea:0a:26:50:fb:46:f2:ad:68:26:b4:30:8b:f1:
cd:d0:12:65:aa:bb:2d:69:78:3a:b4:97:57:0d:b7:
fb:10:05:13:af:1b:31:98:f9:a8:d1:cc:20:20:dd:
41:8d:40:e4:32:48:bb:ac:cb:a2:df:99:69:dc:9a:
d6:35:17:64:dd:d7:2f:17:2a:45:01:0e:4a:d2:99:
5b:94:bb:e6:d9:77:a9:46:86:7a:dd:59:a9:16:24:
93:14:15:a8:6b:ee:c6:3b:90:ec:10:c0:65:5c:bd:
2b:7a:dd:9e:3c:05:fd:14:90:de:89:e7:d6:32:77:
78:b1:cf:25:48:4b:b7:b9:aa:7c:8d:53:9a:e8:3c:
e8:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:8E:D9:F3:71:93:F3:0C:2F:0F:A4:4D:EF:82:69:F1:51:0C:09:11
X509v3 Authority Key Identifier:
keyid:B1:0B:F2:C6:A9:F1:A4:2B:8A:CE:E0:12:59:F9:1F:51:44:AB:8A:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sQvyxqnxpCuKzuASWfkfUUSrivU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/ed188a-0fff-4f0f-a26d-251a9c864d26/1/sQvyxqnxpCuKzuASWfkfUUSrivU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/ed188a-0fff-4f0f-a26d-251a9c864d26/1/sQvyxqnxpCuKzuASWfkfUUSrivU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:f1:52:1c:43:e5:88:e0:b9:66:ed:b9:e3:88:af:9c:67:4a:
58:00:40:9d:f8:1d:8f:f5:53:db:de:4b:13:ba:10:a9:3a:b6:
2a:4d:a1:23:af:70:4f:3d:b1:2c:e2:c6:d8:72:a6:fe:47:20:
ae:e5:33:03:f4:0a:60:53:89:2a:bb:70:9e:bc:4c:4e:e6:c8:
7b:fd:77:18:17:ce:8c:b8:2c:21:3f:38:90:7e:74:4f:19:5c:
57:66:61:be:b1:50:02:f9:fe:2a:fe:ed:d3:5b:84:cb:2c:9a:
dc:7f:62:51:01:3b:66:c0:7c:c3:38:5e:a9:ce:5d:3e:9d:3e:
08:7f:13:e3:4e:bb:e6:35:72:5d:bc:e3:e5:93:c4:c1:2d:ba:
29:9d:7b:cc:7c:9c:13:a9:b5:b7:28:51:27:f3:8c:00:97:00:
36:84:32:1b:11:59:d3:21:c9:c2:02:8b:06:06:2a:62:84:35:
93:1b:40:13:99:52:17:4c:e4:ce:f7:f4:b4:3a:7a:75:f6:4d:
82:da:7f:17:ba:c8:31:79:3b:9d:2b:fa:04:71:17:67:07:87:
5d:93:01:e6:c8:5b:7e:d3:2e:67:6a:d2:ea:12:44:4b:b0:08:
97:fb:67:62:89:8b:98:29:5a:95:e3:0b:b4:e8:b9:c1:a9:28:
b1:bc:11:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:16:41 2025 by rpki-client