![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/d49aaa-ee08-4b04-8e83-6df1e0bf1593/1/1R31-9viXy1eU4x53RjD1sQualU.mft
File: 1R31-9viXy1eU4x53RjD1sQualU.mft (raw, json)
Hash identifier: p8EGueJLZoHYvyPZFovJxyTbP9BOtulkGHfGYDZYqFM=
Subject key identifier: EE:D1:A5:8A:AB:2A:D6:E6:99:87:EC:DF:AB:8B:62:FB:16:5E:E4:11
Authority key identifier: D5:1D:F5:FB:DB:E2:5F:2D:5E:53:8C:79:DD:18:C3:D6:C4:2E:6A:55
Certificate issuer: /CN=d51df5fbdbe25f2d5e538c79dd18c3d6c42e6a55
Certificate serial: 019512109AFCC2666BE9BB820245DF80A80A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1R31-9viXy1eU4x53RjD1sQualU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/d49aaa-ee08-4b04-8e83-6df1e0bf1593/1/1R31-9viXy1eU4x53RjD1sQualU.mft
Manifest number: 1452
Signing time: Mon 17 Feb 2025 04:00:32 +0000
Manifest this update: Mon 17 Feb 2025 04:00:32 +0000
Manifest next update: Tue 18 Feb 2025 04:00:32 +0000
Files and hashes: 1: 1R31-9viXy1eU4x53RjD1sQualU.crl (hash: 1xswLXUMqmd23AN9U4reVn7k9diwNebx/+4OOVqn2PI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/d49aaa-ee08-4b04-8e83-6df1e0bf1593/1/1R31-9viXy1eU4x53RjD1sQualU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/d49aaa-ee08-4b04-8e83-6df1e0bf1593/1/1R31-9viXy1eU4x53RjD1sQualU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1R31-9viXy1eU4x53RjD1sQualU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:9a:fc:c2:66:6b:e9:bb:82:02:45:df:80:a8:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d51df5fbdbe25f2d5e538c79dd18c3d6c42e6a55
Validity
Not Before: Feb 17 04:00:32 2025 GMT
Not After : Feb 18 04:00:32 2025 GMT
Subject: CN=eed1a58aab2ad6e69987ecdfab8b62fb165ee411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b6:e3:74:09:f1:fd:c7:29:78:32:43:b4:3b:
00:19:84:ba:9f:34:35:96:11:f3:35:39:08:81:aa:
71:0d:d3:7a:91:97:67:f8:5c:79:11:e0:2a:25:fe:
a0:b8:23:3a:8b:a7:72:46:23:30:ab:fb:47:4a:ba:
fd:02:b4:e8:e6:d3:33:5b:2a:e7:08:e5:ae:21:9e:
a7:ac:18:a7:45:2d:dc:99:88:4b:4d:c1:1e:b0:85:
dc:43:21:ee:9e:4a:2e:92:80:bd:d5:8b:25:91:58:
87:98:14:ae:99:08:5a:91:af:47:44:37:e2:b8:a7:
6e:78:5c:db:cb:72:ba:b0:09:62:2f:b0:35:e7:1e:
1e:20:47:c2:e3:02:85:7c:10:9d:12:46:bd:5b:b3:
da:83:4f:45:51:d7:a7:e5:1c:fe:34:4a:3c:84:83:
59:6c:2e:19:1a:4d:a9:62:af:9b:28:c0:cb:9d:f1:
0b:23:99:f2:a3:1c:45:62:7f:58:ff:bc:52:43:63:
8f:b3:81:15:19:3f:0a:3f:53:4a:26:22:65:7e:26:
35:4e:00:8b:1f:8e:48:d2:68:86:df:37:a1:1f:3a:
3c:b8:47:9a:ec:44:04:99:0f:26:ab:69:39:48:dc:
00:81:c1:e9:c4:24:e6:3c:e8:31:32:5e:e7:dd:e7:
66:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D1:A5:8A:AB:2A:D6:E6:99:87:EC:DF:AB:8B:62:FB:16:5E:E4:11
X509v3 Authority Key Identifier:
keyid:D5:1D:F5:FB:DB:E2:5F:2D:5E:53:8C:79:DD:18:C3:D6:C4:2E:6A:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1R31-9viXy1eU4x53RjD1sQualU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d49aaa-ee08-4b04-8e83-6df1e0bf1593/1/1R31-9viXy1eU4x53RjD1sQualU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d49aaa-ee08-4b04-8e83-6df1e0bf1593/1/1R31-9viXy1eU4x53RjD1sQualU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:48:87:bf:90:5d:da:60:00:9b:34:6b:e3:e2:bd:bd:61:1f:
61:b2:3d:6f:a2:56:98:c6:a8:3a:e5:7d:6c:03:22:a2:46:08:
1b:fd:8c:bf:b8:4f:b7:cb:4a:b8:38:c7:75:25:c8:f4:e5:c0:
ed:41:3f:b1:2c:56:87:dc:20:62:60:7a:1d:82:2c:54:42:be:
25:85:dc:ac:fa:f9:a2:a5:6b:cf:db:5e:f1:68:f4:59:12:26:
35:33:57:a3:a4:53:0f:ca:44:ec:8c:39:ff:c9:13:49:5f:39:
63:d8:88:86:b8:45:03:a3:37:50:7e:29:c0:00:b0:3f:17:be:
bc:b8:37:67:5a:1e:2d:9e:58:e9:01:ad:b8:9a:0c:92:52:13:
45:35:9d:b5:58:80:49:79:77:21:ed:ff:dc:15:f9:35:0a:6a:
0b:8f:6f:01:4f:20:b0:f6:9c:a8:5a:be:58:8f:a3:35:84:a8:
43:3c:79:38:a3:84:fd:bb:89:fb:f9:5e:11:88:10:be:07:21:
4e:4a:b5:d9:c3:99:d4:e8:f4:cd:78:f6:f7:db:c2:44:ec:02:
cc:cc:2b:bf:84:13:4a:9e:91:c3:23:11:72:a6:d0:6b:7f:9d:
be:70:e5:dd:18:0c:7b:a3:ef:f0:ae:d9:a0:27:cc:65:50:e8:
b1:83:a1:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:38:09 2025 by rpki-client