![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/729f92-5f03-4158-90ac-6d428f1c15fd/1/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.mft
File: GJlHqaXYjMYsyJgmjyvK_Wp__Fs.mft (raw, json)
Hash identifier: trSiXWooII1iYCFT5U4yJ6mVz5avN9WWkwyzQQ47EpA=
Subject key identifier: FA:D5:64:15:A8:4A:CC:15:73:2B:64:7E:6B:08:30:2E:5B:B6:CF:0F
Authority key identifier: 18:99:47:A9:A5:D8:8C:C6:2C:C8:98:26:8F:2B:CA:FD:6A:7F:FC:5B
Certificate issuer: /CN=189947a9a5d88cc62cc898268f2bcafd6a7ffc5b
Certificate serial: 019510C78386F866C5C9E2C7DBEE10DAFE87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/729f92-5f03-4158-90ac-6d428f1c15fd/1/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.mft
Manifest number: 1457
Signing time: Sun 16 Feb 2025 22:01:05 +0000
Manifest this update: Sun 16 Feb 2025 22:01:05 +0000
Manifest next update: Mon 17 Feb 2025 22:01:05 +0000
Files and hashes: 1: GJlHqaXYjMYsyJgmjyvK_Wp__Fs.crl (hash: R2drUv/hSJ4bA/Op4nxZY2BFupqBABHQiL+8IsqCM8A=)
2: YuDsO55F13UZ0cxSF251Oa2EzOk.roa (hash: E2zFm6YI+MUI5s6ZcM5A4TjlG7YlaadinjimTXzpUsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/729f92-5f03-4158-90ac-6d428f1c15fd/1/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/729f92-5f03-4158-90ac-6d428f1c15fd/1/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:83:86:f8:66:c5:c9:e2:c7:db:ee:10:da:fe:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=189947a9a5d88cc62cc898268f2bcafd6a7ffc5b
Validity
Not Before: Feb 16 22:01:05 2025 GMT
Not After : Feb 17 22:01:05 2025 GMT
Subject: CN=fad56415a84acc15732b647e6b08302e5bb6cf0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b5:0a:06:b0:6f:d4:34:2d:2a:13:ba:0f:01:
50:5f:c5:3c:1f:eb:9b:07:7e:51:4d:71:c0:e7:16:
e7:88:37:19:c5:61:a9:69:35:b2:47:12:3f:88:03:
e6:80:a5:1d:fa:43:5d:35:b0:b0:4b:be:a8:82:f1:
35:fa:e6:0f:f7:20:f5:b0:b6:a7:96:21:6a:8c:1e:
b9:fb:6a:84:73:3f:d2:c0:74:1b:8a:10:a8:b4:14:
9f:89:f5:a9:a7:04:a1:b6:a7:fc:0c:de:d4:a6:ec:
81:df:b0:9b:26:2c:8d:88:47:f8:cf:05:0b:a4:94:
3a:73:10:e9:2d:db:9f:0c:98:ee:67:2e:4c:c0:d7:
ef:a3:ba:78:48:79:73:7a:6d:83:91:7e:ca:35:bf:
da:b1:3f:25:a9:6e:b3:55:03:1b:8d:58:d0:2c:53:
5b:34:42:16:7e:52:11:fc:92:70:c1:5c:5e:6e:9c:
60:00:7a:fe:64:2c:f6:63:41:8c:fc:28:a9:f4:94:
c7:2b:0e:11:7d:08:bb:a5:b2:37:0b:fe:a5:58:db:
c6:ff:b8:76:cd:66:54:b3:7a:24:f0:1f:09:37:2f:
3c:50:54:17:76:33:3e:a3:8e:52:55:c6:46:5f:e0:
ef:d5:16:ed:22:57:a6:87:10:29:d8:d3:d7:e2:5e:
87:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:D5:64:15:A8:4A:CC:15:73:2B:64:7E:6B:08:30:2E:5B:B6:CF:0F
X509v3 Authority Key Identifier:
keyid:18:99:47:A9:A5:D8:8C:C6:2C:C8:98:26:8F:2B:CA:FD:6A:7F:FC:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/729f92-5f03-4158-90ac-6d428f1c15fd/1/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/729f92-5f03-4158-90ac-6d428f1c15fd/1/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:73:7a:61:a6:07:6e:5b:cd:bf:60:a8:d5:ee:01:a4:fd:39:
82:71:7d:f8:5b:d1:35:0f:28:11:f8:d3:e6:8a:4d:83:2c:45:
97:8b:ed:3e:16:3b:8f:b7:b9:37:1c:db:2f:24:50:95:32:f3:
af:10:3c:cd:91:e7:7c:ff:47:cf:dd:14:be:0a:47:6d:ce:aa:
34:ec:34:98:78:d8:b3:48:a6:18:6d:37:08:7f:27:9f:58:fa:
cc:a0:5f:37:4e:5d:98:14:cb:59:b8:d9:e1:a7:b7:99:d3:91:
96:8b:dc:3e:d9:8c:29:a9:27:b8:a6:e4:9e:4d:1e:4c:ad:4d:
8d:95:aa:86:c4:4e:d8:22:c9:51:d3:48:80:d7:ed:8f:4f:6e:
91:ab:b8:f7:8e:cc:d5:90:91:c2:7f:e4:c5:47:73:7c:0f:43:
13:2d:00:2e:00:22:bb:8d:6e:fd:ea:9d:af:10:29:b2:50:ed:
cf:7a:1e:2b:e9:41:8d:cb:ad:61:e9:17:cd:47:ca:8a:31:f1:
a1:22:6b:51:16:ae:ec:49:22:07:69:18:41:7f:6b:ba:10:69:
ed:46:c3:cd:02:7c:9c:57:ac:6c:74:f6:67:6e:e6:11:c5:47:
a9:9c:2f:d9:1d:df:bf:51:c0:96:95:7d:52:73:02:fe:1e:20:
61:01:fe:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:04:45 2025 by rpki-client