![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/42cfae-e29d-4d94-ba52-c41d99f17fda/1/51ZNDMfaBfpYz72MKpQ1yzNizeI.mft
File: 51ZNDMfaBfpYz72MKpQ1yzNizeI.mft (raw, json)
Hash identifier: ecgZ7BBLY3kg6OYaif0Sm6P3+jHpMagOhs7m3jCM2kY=
Subject key identifier: 38:A3:89:36:AA:23:66:A8:06:D9:D2:07:F4:D4:D2:54:A7:1F:68:32
Authority key identifier: E7:56:4D:0C:C7:DA:05:FA:58:CF:BD:8C:2A:94:35:CB:33:62:CD:E2
Certificate issuer: /CN=e7564d0cc7da05fa58cfbd8c2a9435cb3362cde2
Certificate serial: 019512108C1EB0257DB2AD966576FC801D6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51ZNDMfaBfpYz72MKpQ1yzNizeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/42cfae-e29d-4d94-ba52-c41d99f17fda/1/51ZNDMfaBfpYz72MKpQ1yzNizeI.mft
Manifest number: 03F1
Signing time: Mon 17 Feb 2025 04:00:29 +0000
Manifest this update: Mon 17 Feb 2025 04:00:29 +0000
Manifest next update: Tue 18 Feb 2025 04:00:29 +0000
Files and hashes: 1: 51ZNDMfaBfpYz72MKpQ1yzNizeI.crl (hash: ot1oQRFdR/74X0Mri8jQILk/QcjlREbmYvt+v2cps5A=)
2: Ylfj2CG1V0DaK4f8uH_BBUtoGWA.roa (hash: CAUuMYHSplNovMOYBe0Qjx/057sd/Jrw0wK6ui3RBo4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/42cfae-e29d-4d94-ba52-c41d99f17fda/1/51ZNDMfaBfpYz72MKpQ1yzNizeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/42cfae-e29d-4d94-ba52-c41d99f17fda/1/51ZNDMfaBfpYz72MKpQ1yzNizeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/51ZNDMfaBfpYz72MKpQ1yzNizeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:8c:1e:b0:25:7d:b2:ad:96:65:76:fc:80:1d:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7564d0cc7da05fa58cfbd8c2a9435cb3362cde2
Validity
Not Before: Feb 17 04:00:29 2025 GMT
Not After : Feb 18 04:00:29 2025 GMT
Subject: CN=38a38936aa2366a806d9d207f4d4d254a71f6832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:7f:5d:6c:71:87:ed:c7:5d:df:08:70:53:24:
a9:a4:77:3e:73:c1:5f:80:c8:64:82:e0:5a:0a:e7:
b0:4b:c2:53:f9:97:e3:ec:e0:81:3e:36:5b:8a:68:
7d:aa:d5:50:6e:2c:86:4c:d4:b3:d6:f8:ff:0a:4b:
f4:f2:62:83:3d:bf:e1:09:c1:b1:37:88:12:c4:78:
8a:9f:18:bc:a0:30:a6:f9:39:01:c9:f6:dc:43:4a:
a5:f4:84:07:29:60:b1:ba:09:c1:f2:93:d1:3a:8d:
3b:d0:fa:40:67:95:24:1a:1b:42:56:ce:58:b4:71:
68:db:f5:67:05:04:0a:5e:b9:f0:d3:12:cf:9d:2c:
38:e1:78:fe:a9:1a:5c:d4:eb:34:ce:cf:fb:cf:57:
bc:f0:3b:17:31:a0:da:05:5b:f3:54:99:1d:76:12:
fc:1e:d4:b4:dc:da:94:e5:b5:22:e4:ab:c8:81:68:
d5:d3:75:1e:48:bb:8d:ca:f3:8e:97:82:17:1b:3e:
7f:6e:53:e0:d3:59:59:3b:80:dc:8c:6e:24:ea:f7:
30:da:de:ea:a2:1c:6a:7b:e2:44:24:6f:6c:e9:54:
bc:1a:d3:04:73:f9:94:3a:19:8b:cf:ea:fd:d0:9d:
db:70:26:48:0c:be:07:b4:b0:44:a3:d4:6c:ed:51:
5c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:A3:89:36:AA:23:66:A8:06:D9:D2:07:F4:D4:D2:54:A7:1F:68:32
X509v3 Authority Key Identifier:
keyid:E7:56:4D:0C:C7:DA:05:FA:58:CF:BD:8C:2A:94:35:CB:33:62:CD:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51ZNDMfaBfpYz72MKpQ1yzNizeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/42cfae-e29d-4d94-ba52-c41d99f17fda/1/51ZNDMfaBfpYz72MKpQ1yzNizeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/42cfae-e29d-4d94-ba52-c41d99f17fda/1/51ZNDMfaBfpYz72MKpQ1yzNizeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:95:e6:42:4d:72:19:e4:cb:81:40:bd:18:4f:98:fd:3d:75:
6d:64:c1:f7:6a:42:92:8a:bb:80:87:69:dc:5e:6f:cf:cb:c9:
ed:6e:47:90:bd:c7:8c:0e:34:47:e7:24:ea:a3:1d:ad:74:a5:
f3:64:ff:3c:2b:31:f5:5a:1f:72:51:0f:07:7f:8c:b3:12:ba:
0e:1f:42:80:ea:f7:c8:df:9e:cf:31:a8:a3:b7:20:3c:76:73:
76:50:e2:37:82:60:25:88:8b:06:e8:f7:14:4d:2b:00:c0:55:
00:d1:77:32:d7:1f:39:f9:e9:2d:c6:80:82:bb:e6:0d:b1:98:
25:4a:36:13:f8:e3:d0:7a:88:bb:5f:79:44:62:7e:08:fa:09:
5b:66:f9:c6:cf:44:fb:b0:80:7a:9a:0e:6b:e4:18:bf:86:cf:
dd:85:16:c1:2c:1b:e9:2e:22:a5:1a:54:16:0e:fd:6b:d7:f5:
f8:58:9e:94:21:b6:16:1b:86:af:26:17:b3:17:88:08:83:56:
62:88:08:77:32:08:e4:df:6d:73:86:8f:a2:6a:0a:92:1d:68:
5c:1c:03:5b:e6:58:8a:9f:28:dd:ca:84:2e:e3:ba:f7:5e:5f:
4b:25:05:fa:3d:0a:4c:93:b5:96:33:20:95:41:a4:c2:69:f6:
6b:2c:be:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:29:24 2025 by rpki-client