![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/dafa00-df08-408d-a8cf-7289d01ed054/1/bq0LWp5EY4gC_LRukPqjrbUWv4g.mft
File: bq0LWp5EY4gC_LRukPqjrbUWv4g.mft (raw, json)
Hash identifier: NuMLy+qL04s3/L9Y1zFnm7GIFMtE81kZsI/J5rQyx9s=
Subject key identifier: 1E:5A:CA:38:CD:36:A3:6F:24:F0:6D:F8:C5:7F:1D:B3:1B:A1:45:A3
Authority key identifier: 6E:AD:0B:5A:9E:44:63:88:02:FC:B4:6E:90:FA:A3:AD:B5:16:BF:88
Certificate issuer: /CN=6ead0b5a9e44638802fcb46e90faa3adb516bf88
Certificate serial: 019510C6E8128624F42F147BD9F6F60DECB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bq0LWp5EY4gC_LRukPqjrbUWv4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/dafa00-df08-408d-a8cf-7289d01ed054/1/bq0LWp5EY4gC_LRukPqjrbUWv4g.mft
Manifest number: 1454
Signing time: Sun 16 Feb 2025 22:00:25 +0000
Manifest this update: Sun 16 Feb 2025 22:00:25 +0000
Manifest next update: Mon 17 Feb 2025 22:00:25 +0000
Files and hashes: 1: bq0LWp5EY4gC_LRukPqjrbUWv4g.crl (hash: Id1wWglEdTVhmhFM4Y+whS7viM1PH9ao3gNyam1iNyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/dafa00-df08-408d-a8cf-7289d01ed054/1/bq0LWp5EY4gC_LRukPqjrbUWv4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/dafa00-df08-408d-a8cf-7289d01ed054/1/bq0LWp5EY4gC_LRukPqjrbUWv4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/bq0LWp5EY4gC_LRukPqjrbUWv4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c6:e8:12:86:24:f4:2f:14:7b:d9:f6:f6:0d:ec:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ead0b5a9e44638802fcb46e90faa3adb516bf88
Validity
Not Before: Feb 16 22:00:25 2025 GMT
Not After : Feb 17 22:00:25 2025 GMT
Subject: CN=1e5aca38cd36a36f24f06df8c57f1db31ba145a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4f:b1:9c:99:44:96:fe:7c:c7:71:40:2b:22:
2c:87:c4:85:ef:05:7e:c4:4c:e8:27:75:a2:69:6e:
cf:f3:84:68:02:85:ba:c9:05:22:f1:36:0b:16:77:
a2:4f:f2:42:8c:21:fc:ec:8a:50:9a:24:0c:7f:b0:
9a:bd:1b:bc:8f:49:04:c3:29:4a:9d:27:81:29:27:
cf:35:6d:35:8f:c1:aa:2d:fe:a2:95:e2:9c:9c:48:
58:ce:5c:06:74:52:d6:d5:56:c5:a2:dc:7d:98:e3:
a2:73:ee:2e:4a:67:a3:39:c9:da:96:db:29:86:e8:
40:0f:e1:e8:b2:37:50:a6:62:7d:b8:90:ee:cd:72:
ee:95:c9:ed:0f:14:c5:a9:f0:0c:0d:b9:9b:1d:29:
3e:28:e6:42:ac:2b:a9:fd:5c:f8:0c:a7:80:6b:a1:
a6:b8:15:d2:0f:d5:91:c4:4f:98:cd:80:de:5f:e1:
a0:a8:39:88:bf:2e:1a:40:d5:26:f4:79:2a:d4:a5:
99:24:d2:0c:2c:8d:89:7e:39:d9:c0:1d:a2:cd:3a:
0a:6a:33:e1:db:9c:23:c2:da:79:4c:17:c8:e4:57:
6f:ac:f7:af:3d:6f:d7:04:9a:cf:c0:41:c6:d6:28:
c2:15:a3:fe:c6:23:72:eb:06:4a:77:32:60:cc:cd:
ee:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:5A:CA:38:CD:36:A3:6F:24:F0:6D:F8:C5:7F:1D:B3:1B:A1:45:A3
X509v3 Authority Key Identifier:
keyid:6E:AD:0B:5A:9E:44:63:88:02:FC:B4:6E:90:FA:A3:AD:B5:16:BF:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bq0LWp5EY4gC_LRukPqjrbUWv4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/dafa00-df08-408d-a8cf-7289d01ed054/1/bq0LWp5EY4gC_LRukPqjrbUWv4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/dafa00-df08-408d-a8cf-7289d01ed054/1/bq0LWp5EY4gC_LRukPqjrbUWv4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:90:ea:f9:50:b0:22:d3:72:52:78:00:83:8b:89:5b:4e:95:
87:96:9f:0f:4b:05:77:5a:87:23:ba:f8:39:53:a5:3a:cf:69:
52:5c:9f:c7:ac:32:f5:a2:da:ec:48:1c:b5:c7:0a:fb:a8:14:
51:7a:b3:ed:21:b4:17:ce:9f:21:2c:8e:a4:40:d9:f2:33:5a:
aa:01:44:7c:1c:24:0c:fa:83:64:10:25:a9:a2:fa:7b:f1:b4:
04:50:25:d6:7f:bc:60:5d:5d:75:ab:48:9d:b6:84:dc:61:5f:
b4:25:45:c3:5d:b4:c8:d3:60:34:4b:fe:06:e2:fc:7c:df:5d:
e6:f5:72:86:8f:56:da:b6:e6:9e:fe:c6:32:6f:7a:e3:d5:b1:
06:75:35:ef:a3:12:73:d7:6b:48:56:eb:1a:61:8e:27:da:74:
9b:12:28:72:5f:1c:8a:72:75:de:50:d0:b8:e7:e5:df:f9:c0:
3e:42:6b:e6:08:5f:0e:6b:1b:a9:33:5e:57:c8:11:e0:b0:14:
d1:71:ae:b9:25:04:9e:54:6d:1a:23:70:bc:d6:ec:62:b2:11:
77:29:8f:9b:ee:b3:f4:8f:f0:36:c9:7c:f3:48:88:6c:af:55:
fd:89:bb:e0:63:ff:cb:e4:d6:5a:e5:8c:ac:3c:a9:58:6a:77:
ea:94:02:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:23:29 2025 by rpki-client