![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/73cdd0-0649-4fe9-9971-0be6337bf6b6/1/Sb8yq_d_QSwhD0CYItE5jsO-2ps.mft
File: Sb8yq_d_QSwhD0CYItE5jsO-2ps.mft (raw, json)
Hash identifier: fsDlii4STHLuUl+DWkLgTPSipMLzbr4nkhBkzSDf3Xg=
Subject key identifier: 60:8A:6A:DA:D6:A4:A3:4E:2C:64:3A:10:65:9F:F2:AB:A2:0E:94:38
Authority key identifier: 49:BF:32:AB:F7:7F:41:2C:21:0F:40:98:22:D1:39:8E:C3:BE:DA:9B
Certificate issuer: /CN=49bf32abf77f412c210f409822d1398ec3beda9b
Certificate serial: 019512472A88C451B2B620C3D2BA61863B8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sb8yq_d_QSwhD0CYItE5jsO-2ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/73cdd0-0649-4fe9-9971-0be6337bf6b6/1/Sb8yq_d_QSwhD0CYItE5jsO-2ps.mft
Manifest number: 1455
Signing time: Mon 17 Feb 2025 05:00:08 +0000
Manifest this update: Mon 17 Feb 2025 05:00:08 +0000
Manifest next update: Tue 18 Feb 2025 05:00:08 +0000
Files and hashes: 1: 5syV7PgPBQbiBbuoFj10-aiKKG0.roa (hash: lK1gem+kZrAq5cKIs+CpHdM5BUtwnIwQ62pWDxE9JKs=)
2: Sb8yq_d_QSwhD0CYItE5jsO-2ps.crl (hash: F/u//tT4z8fPmPjbAVVwYY4SAZrY164aGYCmRVRXOlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/73cdd0-0649-4fe9-9971-0be6337bf6b6/1/Sb8yq_d_QSwhD0CYItE5jsO-2ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/73cdd0-0649-4fe9-9971-0be6337bf6b6/1/Sb8yq_d_QSwhD0CYItE5jsO-2ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sb8yq_d_QSwhD0CYItE5jsO-2ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:47:2a:88:c4:51:b2:b6:20:c3:d2:ba:61:86:3b:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bf32abf77f412c210f409822d1398ec3beda9b
Validity
Not Before: Feb 17 05:00:08 2025 GMT
Not After : Feb 18 05:00:08 2025 GMT
Subject: CN=608a6adad6a4a34e2c643a10659ff2aba20e9438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8d:81:46:14:84:c8:3d:c3:7a:40:15:d8:0e:
1e:c0:5a:69:68:fe:57:f1:d1:61:2e:99:a4:06:8b:
c4:13:aa:92:40:f7:31:1d:89:bb:89:e2:a2:5c:49:
f1:01:95:13:76:c0:ba:0d:37:7d:b0:31:a1:63:cc:
c6:9a:93:37:28:b8:84:54:b2:1e:a9:27:e5:e7:f8:
b4:06:1b:7d:fb:93:0a:bc:45:2d:49:31:1c:65:ac:
28:65:90:02:1a:71:a2:87:cd:dc:a8:55:dc:25:7d:
21:fc:97:f5:05:db:94:a5:99:6a:36:65:d1:ef:14:
5f:bd:0f:b8:f6:3a:d6:6d:e8:06:8a:c0:35:aa:80:
81:da:b5:d6:71:3c:e2:7f:2b:de:70:f9:b4:83:b8:
fc:45:a4:ec:1c:26:17:de:1c:4d:a3:24:7e:c2:61:
52:2d:be:83:59:7f:58:96:23:fe:7a:a1:6c:da:dc:
ea:be:e5:90:dc:ad:5e:82:73:6c:0f:64:e0:f8:94:
73:34:20:56:35:b0:08:56:e2:7c:90:61:89:9e:2d:
66:7b:9e:e1:59:ab:3b:d0:20:ae:99:0e:19:f0:23:
2a:4e:f9:e6:66:29:04:83:01:2a:3a:b3:e4:c0:d8:
80:94:f6:12:4b:c1:3a:a6:7b:73:5f:90:e1:85:20:
a7:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:8A:6A:DA:D6:A4:A3:4E:2C:64:3A:10:65:9F:F2:AB:A2:0E:94:38
X509v3 Authority Key Identifier:
keyid:49:BF:32:AB:F7:7F:41:2C:21:0F:40:98:22:D1:39:8E:C3:BE:DA:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sb8yq_d_QSwhD0CYItE5jsO-2ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/73cdd0-0649-4fe9-9971-0be6337bf6b6/1/Sb8yq_d_QSwhD0CYItE5jsO-2ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/73cdd0-0649-4fe9-9971-0be6337bf6b6/1/Sb8yq_d_QSwhD0CYItE5jsO-2ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:1d:bc:1d:45:54:73:01:44:e0:4d:e8:92:21:4a:55:48:60:
0f:bd:66:92:b7:e3:30:b0:96:93:38:3d:ea:75:e2:0c:6c:05:
42:f2:fe:75:ba:86:e9:fd:f6:fa:54:15:81:54:3b:da:94:5a:
b2:b1:5e:cc:7d:f6:8b:aa:d0:e0:6c:0a:8f:80:c7:3f:0a:26:
85:13:28:29:7c:9d:19:e3:62:0a:45:da:4f:be:f4:fa:7d:b5:
47:60:05:01:a0:12:f1:2b:97:5a:45:f0:19:c6:3a:c0:c6:a1:
d6:5c:09:a4:4d:f1:63:11:65:4c:7b:0d:7f:54:35:12:21:70:
b9:b2:9a:1d:01:fa:95:4f:7c:0b:2c:25:e4:4e:dd:71:44:90:
e2:2c:2e:9b:27:f3:45:14:aa:d4:7b:7c:c5:ed:51:a9:4d:d3:
a5:d5:ad:6a:03:aa:ab:1f:0a:cc:55:ed:83:70:85:ff:36:dc:
7b:cd:2b:02:f3:49:94:95:c9:c2:3d:2c:73:fb:0e:6d:9a:2e:
e3:a2:99:50:2b:80:4d:e0:b6:9f:a9:3a:cf:28:98:0e:bc:1f:
d3:f4:58:87:18:ae:d6:1a:27:23:4f:e3:a1:35:5a:b6:32:6d:
18:10:a1:9b:8a:97:80:94:5e:8c:93:33:ce:39:e3:41:10:cc:
01:9e:2c:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:22:19 2025 by rpki-client