![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.mft
File: Q55DIc8hi5Jl1WO1vqUdvxdmzsg.mft (raw, json)
Hash identifier: ebgspgImHuXU8jOoA7MUkIuxengSIeII2Z1lnJCEODg=
Subject key identifier: 36:88:BC:59:A4:EA:91:FC:A1:F3:73:F8:66:C8:D1:15:A5:8D:DC:38
Authority key identifier: 43:9E:43:21:CF:21:8B:92:65:D5:63:B5:BE:A5:1D:BF:17:66:CE:C8
Certificate issuer: /CN=439e4321cf218b9265d563b5bea51dbf1766cec8
Certificate serial: 0195108FE98887FED8AC9B5B21FE4CC4A15D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.mft
Manifest number: 016E
Signing time: Sun 16 Feb 2025 21:00:21 +0000
Manifest this update: Sun 16 Feb 2025 21:00:21 +0000
Manifest next update: Mon 17 Feb 2025 21:00:21 +0000
Files and hashes: 1: Q55DIc8hi5Jl1WO1vqUdvxdmzsg.crl (hash: RXK93rOgeXmPlEXn5XSmvypDlZUWNIMfRYQgw/tyygI=)
2: nK8r6BW7X2Id54DEAsyFnRHZOsA.roa (hash: ++ZMcQT7NmyLhSBPeMlDbkE+/3o7EgGxMfB7gUiQzt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 21:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:8f:e9:88:87:fe:d8:ac:9b:5b:21:fe:4c:c4:a1:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439e4321cf218b9265d563b5bea51dbf1766cec8
Validity
Not Before: Feb 16 21:00:21 2025 GMT
Not After : Feb 17 21:00:21 2025 GMT
Subject: CN=3688bc59a4ea91fca1f373f866c8d115a58ddc38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8c:13:bf:ee:f4:4c:8a:66:6b:b2:ad:64:44:
09:4d:d6:15:8b:47:c5:b8:a7:e0:6d:1a:d9:5a:d7:
3c:3d:9d:80:2b:33:ce:91:eb:a7:4c:ed:dc:7f:eb:
bc:28:3f:18:e9:84:4b:2a:47:81:e3:5c:e9:b6:32:
f3:51:5a:f8:42:a3:85:17:05:8a:54:fb:78:9b:f6:
23:25:89:9f:fe:fa:b1:31:3b:96:6d:4e:89:ff:be:
71:2c:a3:e6:2c:d9:c3:5c:40:1e:15:c5:35:ea:e0:
0d:76:fb:91:e5:6c:00:eb:b8:10:ff:70:de:9f:1f:
63:d1:ce:6f:19:ea:3c:5d:38:da:20:a6:4c:85:5b:
e6:bf:23:b0:47:e4:0d:98:28:30:63:1c:4f:86:26:
ea:dd:c1:97:65:90:1b:7c:17:89:9e:88:e5:17:d7:
2d:4b:6c:1d:d5:ae:bb:ba:89:49:a0:da:86:c4:e2:
e8:71:a1:dc:be:c2:0b:9c:02:19:68:15:d9:f2:ae:
3b:f6:c4:a2:5d:bb:33:11:8b:79:af:28:58:e6:d5:
21:e7:8e:a8:38:f0:20:9d:e6:99:d4:2f:2b:c6:37:
5c:d9:1f:8c:d4:a2:b2:41:88:5a:6b:02:5e:80:1a:
06:57:a9:6f:1a:0e:bb:6a:bf:14:a5:db:a3:2b:cb:
9f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:88:BC:59:A4:EA:91:FC:A1:F3:73:F8:66:C8:D1:15:A5:8D:DC:38
X509v3 Authority Key Identifier:
keyid:43:9E:43:21:CF:21:8B:92:65:D5:63:B5:BE:A5:1D:BF:17:66:CE:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:7f:be:67:2a:9c:7b:b9:4f:3c:1f:cf:53:2e:9a:ec:ca:dd:
5e:76:f0:9d:65:7f:9c:4e:5c:15:20:0a:4d:11:b2:ab:02:46:
d8:82:4f:3f:d4:58:c2:f8:ff:ff:f3:ad:7e:bd:22:ed:9a:9f:
f4:eb:fe:81:df:52:5d:23:df:24:c6:21:78:58:a6:9d:5e:e4:
4a:ab:25:08:a3:59:77:9d:d2:e5:b7:60:34:8b:a0:34:0b:a2:
fb:38:41:4b:be:1c:f2:ab:04:0a:1b:22:2c:44:25:b3:54:9b:
9b:f8:79:ba:8e:00:d7:04:b4:c5:f4:ca:68:89:72:e8:aa:f1:
68:2f:3b:c2:af:be:05:7f:9f:74:b5:fd:04:b7:1a:28:e1:e7:
87:68:09:1e:47:d9:a5:a8:d5:1b:00:68:e0:e3:2c:92:b9:99:
d1:2c:cd:40:92:52:f6:fd:1b:8e:5d:42:89:f9:05:7b:b0:9c:
13:05:36:36:1c:7f:81:d1:78:01:8c:57:47:22:0f:52:e6:66:
fb:cc:8d:3b:a6:0f:8e:65:98:d7:de:d1:d6:b2:dc:a8:44:fb:
c1:89:06:8f:3a:5d:fd:cb:64:39:2f:40:7e:68:cb:ff:29:76:
54:aa:6c:08:39:6d:6e:2d:e6:ee:78:04:83:98:33:a0:52:ec:
6f:6f:4b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:51:02 2025 by rpki-client