![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/dd00c1-728a-4abb-8cc2-c9640d250afc/1/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.mft
File: Wl1FZU-ll9NSLtoWiDkZPr54Lu8.mft (raw, json)
Hash identifier: aHP8Du0yQO1f2blStfibhx1hrAzl9+BUa+12Bvzz64o=
Subject key identifier: DB:AD:8B:A9:07:32:B4:DD:C1:75:8D:C3:20:D5:CF:82:01:08:D7:88
Authority key identifier: 5A:5D:45:65:4F:A5:97:D3:52:2E:DA:16:88:39:19:3E:BE:78:2E:EF
Certificate issuer: /CN=5a5d45654fa597d3522eda168839193ebe782eef
Certificate serial: 019510C778851C71C300F4C5EF0AA6DD0C33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/dd00c1-728a-4abb-8cc2-c9640d250afc/1/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.mft
Manifest number: 0697
Signing time: Sun 16 Feb 2025 22:01:02 +0000
Manifest this update: Sun 16 Feb 2025 22:01:02 +0000
Manifest next update: Mon 17 Feb 2025 22:01:02 +0000
Files and hashes: 1: 9VRbY37PKRH0-UJUOvI3sW7GRqg.roa (hash: JnDLn69G2OWz5ad5UI+dtO7s/dZ3uGdaBQeH20/IDXs=)
2: Wl1FZU-ll9NSLtoWiDkZPr54Lu8.crl (hash: JyaKMW5rSDCbuWUwrLGZr2k2EulQS28qsYe0YopSIV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/dd00c1-728a-4abb-8cc2-c9640d250afc/1/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/dd00c1-728a-4abb-8cc2-c9640d250afc/1/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:78:85:1c:71:c3:00:f4:c5:ef:0a:a6:dd:0c:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a5d45654fa597d3522eda168839193ebe782eef
Validity
Not Before: Feb 16 22:01:02 2025 GMT
Not After : Feb 17 22:01:02 2025 GMT
Subject: CN=dbad8ba90732b4ddc1758dc320d5cf820108d788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:f4:8b:73:b3:43:ec:99:a6:a5:46:14:63:32:
b1:6c:91:c1:01:4d:59:11:6c:c7:d0:16:00:44:ee:
8c:79:96:43:66:bc:fd:82:b6:ff:6e:b2:21:7f:6b:
1e:e7:d9:81:2e:ce:e5:76:4e:a1:bd:da:19:d0:0c:
da:05:a9:c6:fa:21:44:bd:f6:9c:3d:73:9a:30:ce:
92:2e:04:34:0c:08:27:d9:82:f8:2c:80:02:94:3f:
3b:fe:8f:e6:f1:57:ca:db:e0:8d:af:6c:3b:4d:60:
e7:09:b8:70:f6:a0:a3:c4:78:8e:8b:bd:05:23:8b:
c6:04:9a:b7:fe:e3:35:3f:e6:52:c4:66:2b:1b:ac:
be:d1:bc:3e:e4:17:33:88:e9:c6:a4:10:23:a4:e2:
77:31:4f:e0:f0:85:5d:ea:f7:14:78:a0:1f:91:43:
3f:46:36:ee:80:74:03:cb:33:6b:79:e9:88:0e:21:
2f:6f:28:a8:d5:a3:62:ea:b0:2f:c7:e3:85:16:03:
f8:fb:59:1c:26:32:60:6a:70:e5:f9:a5:22:2c:f2:
55:88:c7:38:7f:c3:00:ce:71:fd:37:76:b3:fa:23:
10:ec:ad:6e:02:80:7d:45:fa:c1:40:66:b5:3d:ab:
4e:c1:61:13:e6:8c:23:6d:c0:4e:70:bd:16:df:33:
8e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:AD:8B:A9:07:32:B4:DD:C1:75:8D:C3:20:D5:CF:82:01:08:D7:88
X509v3 Authority Key Identifier:
keyid:5A:5D:45:65:4F:A5:97:D3:52:2E:DA:16:88:39:19:3E:BE:78:2E:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/dd00c1-728a-4abb-8cc2-c9640d250afc/1/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/dd00c1-728a-4abb-8cc2-c9640d250afc/1/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:5f:d4:53:e0:c8:e2:72:4f:00:c7:43:9c:db:5d:04:b3:f2:
34:9e:47:6a:7c:cf:42:36:21:75:2b:ab:38:d1:6a:02:bb:6b:
b3:d7:74:fe:57:a8:9c:6f:63:37:80:b7:00:d0:86:42:b1:61:
86:6b:0a:54:0e:32:43:b6:ac:1a:d4:fa:cb:a6:29:59:3f:b2:
88:22:af:52:3c:17:55:d3:6d:94:84:c5:12:21:82:63:69:7f:
c5:5c:a6:17:7c:7f:94:fa:a2:6f:e9:be:51:dc:ac:ee:9e:48:
79:58:e6:10:a2:6c:ea:d3:eb:09:ce:77:dd:47:77:31:f8:a4:
b2:4a:5f:36:6e:ee:90:da:0d:3e:b3:15:12:77:ff:1f:1a:f4:
79:e0:4d:02:8e:d4:60:a2:7c:e9:48:7d:33:ad:f4:dd:8b:50:
ac:52:3a:a0:9d:9b:db:fe:b5:3c:3b:37:ea:4d:b6:58:ab:a3:
b8:c7:8b:fa:f8:82:92:15:94:92:51:a5:e8:9e:a5:cf:78:c7:
62:7e:e5:24:2c:c8:b2:e8:44:90:f6:cb:c6:04:cc:2c:3e:d9:
01:6d:b9:62:66:58:62:84:97:65:9b:0f:67:fb:cf:b8:57:5e:
0e:93:b9:0e:16:9a:a8:a4:be:f1:0e:8e:c5:0d:41:c6:72:9e:
ef:b0:cd:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:04:20 2025 by rpki-client