![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.mft
File: c7vCE8b5C9jwBxOerm_gyvpDXs4.mft (raw, json)
Hash identifier: ccuIL/ZeIzC3rVBCv8K8sI6g2BGY3V3uWamiV9TCCDI=
Subject key identifier: 4E:BE:FA:F4:73:0D:BD:3F:99:B8:EB:90:DA:A5:0B:7A:54:AC:7E:EB
Authority key identifier: 73:BB:C2:13:C6:F9:0B:D8:F0:07:13:9E:AE:6F:E0:CA:FA:43:5E:CE
Certificate issuer: /CN=73bbc213c6f90bd8f007139eae6fe0cafa435ece
Certificate serial: 019510FE0D47033B36D957730B32E3235325
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c7vCE8b5C9jwBxOerm_gyvpDXs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.mft
Manifest number: 0909
Signing time: Sun 16 Feb 2025 23:00:39 +0000
Manifest this update: Sun 16 Feb 2025 23:00:39 +0000
Manifest next update: Mon 17 Feb 2025 23:00:39 +0000
Files and hashes: 1: a_ivjW0ZGGTiDvZcTfc91f_pyXs.roa (hash: W9scHoBGox42TFL0zLwjs6jy/UbNIHRPLGTm7dHLpDs=)
2: c7vCE8b5C9jwBxOerm_gyvpDXs4.crl (hash: vCmbe4NqB9IGmja/TqrwmK5Uxa8J0z5W0erfJCQ+1jE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/c7vCE8b5C9jwBxOerm_gyvpDXs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fe:0d:47:03:3b:36:d9:57:73:0b:32:e3:23:53:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73bbc213c6f90bd8f007139eae6fe0cafa435ece
Validity
Not Before: Feb 16 23:00:39 2025 GMT
Not After : Feb 17 23:00:39 2025 GMT
Subject: CN=4ebefaf4730dbd3f99b8eb90daa50b7a54ac7eeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:43:33:9e:78:33:6c:6f:92:00:ae:86:fb:04:
c3:ee:68:03:d5:e8:20:24:b1:60:a5:20:63:1e:a6:
92:f6:b0:49:4c:54:f3:63:ae:e3:38:23:ee:54:fd:
5d:97:83:ef:b0:36:1a:7d:78:02:48:03:91:04:01:
48:34:a1:04:35:e4:96:35:09:15:ff:c9:cd:5a:db:
eb:04:7e:eb:a5:75:6a:8b:61:48:94:af:c4:a0:f5:
8d:4f:81:b1:e9:dd:04:3f:5c:e1:ac:ba:c1:d6:4f:
1a:94:d6:4d:dd:70:33:09:b5:df:44:ec:dd:12:af:
d8:9e:d9:92:b0:b8:3b:16:0b:79:b7:47:94:44:e1:
76:d5:3c:34:95:16:d6:c2:33:09:9f:6b:5c:3b:61:
10:1d:58:a8:f3:e1:7b:a7:d4:8a:8d:bd:e7:8f:bf:
23:f7:40:f1:76:fa:3e:38:fa:04:b2:57:35:df:90:
0f:35:7e:e0:ef:78:07:0b:4c:26:51:e3:8d:18:f2:
f9:cd:90:e9:c2:03:a5:5b:2e:9a:c2:01:9d:60:7d:
fb:f8:27:91:8a:71:7f:39:1a:38:75:e4:86:0c:21:
96:cc:95:29:e9:1c:94:a9:8d:da:7d:45:96:8f:6c:
f0:50:7d:d7:fe:73:18:14:bf:ca:6d:86:f9:b2:23:
24:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:BE:FA:F4:73:0D:BD:3F:99:B8:EB:90:DA:A5:0B:7A:54:AC:7E:EB
X509v3 Authority Key Identifier:
keyid:73:BB:C2:13:C6:F9:0B:D8:F0:07:13:9E:AE:6F:E0:CA:FA:43:5E:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7vCE8b5C9jwBxOerm_gyvpDXs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:2b:3a:f2:32:5a:ca:8a:ee:e7:cd:37:81:c8:d8:c8:8f:40:
cf:64:a0:c5:62:18:0d:cb:24:4d:29:64:e9:13:74:6a:ee:15:
fb:35:23:14:3d:a0:96:80:59:38:62:bc:c0:64:6a:e2:86:50:
95:58:a0:d5:6a:2c:ac:38:f5:a7:4c:bb:45:bb:c0:01:a0:d7:
e7:aa:5e:78:43:80:be:7f:8a:fa:56:bb:4c:71:54:9a:26:be:
45:64:75:cb:60:01:55:4a:e4:02:05:91:c1:cc:74:78:a4:89:
6e:2d:31:8d:17:5c:2a:2d:92:54:4f:ff:d2:ec:50:64:78:7c:
e9:0e:93:87:0f:88:7d:4a:3c:c0:16:64:4d:65:e6:a2:7d:e5:
2c:64:65:1b:dd:47:bf:89:1e:cb:d0:20:86:4a:b5:af:ea:54:
d2:0a:5f:15:e4:92:bf:87:5a:52:3b:6f:18:a3:61:b2:ae:83:
b2:bd:90:15:f3:33:7c:71:26:bf:af:2e:94:73:09:61:da:87:
4c:50:b5:07:c6:6f:c2:11:43:4b:35:18:0e:c2:5b:1f:b8:dd:
ee:e6:23:88:99:27:71:71:82:73:24:05:02:5b:ac:46:c4:24:
83:0e:fe:2b:06:7e:7c:95:11:2d:84:3d:e5:b6:6f:b2:47:19:
4a:88:f4:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:05:05 2025 by rpki-client