![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/256fab-de97-4679-a465-b96d6714a174/1/weJGTdbQQjCVFffltk6mXAibRhY.mft
File: weJGTdbQQjCVFffltk6mXAibRhY.mft (raw, json)
Hash identifier: ZmCeWzfE9PTmhRTBbuSM8sZGPBW2rie/ACtug5FohAk=
Subject key identifier: EB:54:50:D0:74:9E:16:20:5C:B0:7A:EE:8D:6A:B7:D9:A8:B2:6C:94
Authority key identifier: C1:E2:46:4D:D6:D0:42:30:95:15:F7:E5:B6:4E:A6:5C:08:9B:46:16
Certificate issuer: /CN=c1e2464dd6d042309515f7e5b64ea65c089b4616
Certificate serial: 01951134C1C94C4EE78BCFA7E9CE2EF2BF54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/weJGTdbQQjCVFffltk6mXAibRhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/256fab-de97-4679-a465-b96d6714a174/1/weJGTdbQQjCVFffltk6mXAibRhY.mft
Manifest number: 1456
Signing time: Mon 17 Feb 2025 00:00:24 +0000
Manifest this update: Mon 17 Feb 2025 00:00:24 +0000
Manifest next update: Tue 18 Feb 2025 00:00:24 +0000
Files and hashes: 1: DgGyGbwI_Z-hbBwqBMhZZb6vSwc.roa (hash: YoSjsmqBi7UGbr0YdaEV1pXh33zn8N/CDmlmvP42wg0=)
2: weJGTdbQQjCVFffltk6mXAibRhY.crl (hash: /tchBNXGRwpg6MPVzP5ed3oCDVZsBgdXsv4Zb3ff1dI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/256fab-de97-4679-a465-b96d6714a174/1/weJGTdbQQjCVFffltk6mXAibRhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/256fab-de97-4679-a465-b96d6714a174/1/weJGTdbQQjCVFffltk6mXAibRhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/weJGTdbQQjCVFffltk6mXAibRhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:c1:c9:4c:4e:e7:8b:cf:a7:e9:ce:2e:f2:bf:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1e2464dd6d042309515f7e5b64ea65c089b4616
Validity
Not Before: Feb 17 00:00:24 2025 GMT
Not After : Feb 18 00:00:24 2025 GMT
Subject: CN=eb5450d0749e16205cb07aee8d6ab7d9a8b26c94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:79:06:77:67:b2:99:16:4e:eb:c6:b1:5c:56:
5e:1f:39:06:b8:96:f4:51:b6:4b:d3:fc:fc:f9:f3:
80:92:f2:ab:7a:38:bc:a8:f0:e2:e1:8e:01:cc:60:
eb:e9:fb:e3:10:cd:9a:e8:a0:19:c7:41:96:9e:54:
d8:d7:cd:bc:1d:af:97:55:10:0e:78:1a:ff:19:0f:
38:86:e6:11:64:48:c3:74:95:f7:1f:04:9d:09:9b:
45:37:58:ad:e1:13:a4:8f:65:d4:3e:77:b5:53:2c:
5f:98:5b:ed:40:56:1d:2d:e2:c8:49:35:d7:54:b5:
51:8d:be:3b:aa:fb:8d:b0:d0:08:aa:e6:f6:00:92:
b6:95:2e:40:a1:17:ed:fd:8d:a8:91:84:ef:e6:90:
f7:86:30:fc:82:1c:8f:07:22:a4:ce:29:28:c6:26:
03:90:32:27:f4:b6:b2:95:07:43:d7:4b:68:16:04:
b9:fa:6a:9b:48:af:bf:a3:cb:f2:c7:ac:2d:bb:bc:
42:40:0a:ec:4d:c3:2c:2a:72:28:d9:50:e9:50:4d:
a6:9a:75:67:a7:21:c1:e3:19:a3:68:fc:40:c5:06:
ec:fa:24:ff:03:a6:cd:6f:95:b3:fe:a3:97:2d:9b:
06:5c:f9:b4:48:b5:8d:da:bd:3f:4f:cd:eb:85:5c:
e8:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:54:50:D0:74:9E:16:20:5C:B0:7A:EE:8D:6A:B7:D9:A8:B2:6C:94
X509v3 Authority Key Identifier:
keyid:C1:E2:46:4D:D6:D0:42:30:95:15:F7:E5:B6:4E:A6:5C:08:9B:46:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/weJGTdbQQjCVFffltk6mXAibRhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/256fab-de97-4679-a465-b96d6714a174/1/weJGTdbQQjCVFffltk6mXAibRhY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/256fab-de97-4679-a465-b96d6714a174/1/weJGTdbQQjCVFffltk6mXAibRhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:63:21:b9:16:51:1d:ce:92:2f:a3:ef:c3:a9:3e:87:98:1d:
20:ea:d5:65:93:cd:35:0c:d2:82:55:62:1d:13:b4:4d:f6:3b:
5f:57:71:3e:37:6d:27:a2:dc:66:61:3d:3f:05:45:2a:6b:68:
11:51:ec:f1:e0:00:b8:49:e0:3c:a8:ab:46:d9:e4:02:f7:fb:
3c:62:ff:78:85:23:d1:d9:b4:ee:59:3d:14:4d:fe:a9:8e:59:
03:91:2c:f6:60:a8:3d:db:73:28:d8:2f:0b:dd:fe:a2:cf:83:
ac:48:21:5d:23:ca:99:a0:88:3b:8e:34:2a:e3:35:b2:81:d9:
1e:ae:73:cc:9f:b8:f2:10:b8:eb:7a:ab:13:7f:d3:eb:01:f5:
62:ba:0f:8e:ef:5b:ce:cc:61:21:27:6f:07:4d:cc:44:50:d2:
fe:5d:0e:8e:fd:0d:b6:2f:1c:b9:67:04:8f:bb:38:02:f9:bb:
e4:0d:bc:cf:de:d7:a6:b6:50:58:f6:15:12:95:6e:88:5d:a8:
aa:08:d4:94:f3:9e:fb:60:62:d3:4e:55:68:83:d6:20:c4:82:
53:c3:7e:68:43:33:e9:05:00:d3:60:80:f6:53:8d:d4:cd:01:
af:73:e4:cd:39:90:3b:f8:71:65:cf:29:be:6f:b8:ea:81:45:
9e:fa:10:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:03:52 2025 by rpki-client