![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a5d00d-6266-46ea-bc8c-4182bedb98a1/1/SdhmPTuWngJTom1UJb7hxdRDs2E.mft
File: SdhmPTuWngJTom1UJb7hxdRDs2E.mft (raw, json)
Hash identifier: FdqQtlJ26rVzgUcMhmDWlBhUINiWZXBdp9NAJZgHNsg=
Subject key identifier: BC:59:D9:23:8E:F2:2A:3B:AF:DF:09:1B:8F:1F:69:5F:C1:3F:85:10
Authority key identifier: 49:D8:66:3D:3B:96:9E:02:53:A2:6D:54:25:BE:E1:C5:D4:43:B3:61
Certificate issuer: /CN=49d8663d3b969e0253a26d5425bee1c5d443b361
Certificate serial: 019510902125B5D6D8BE9FCBC38B7695B707
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SdhmPTuWngJTom1UJb7hxdRDs2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a5d00d-6266-46ea-bc8c-4182bedb98a1/1/SdhmPTuWngJTom1UJb7hxdRDs2E.mft
Manifest number: 05B4
Signing time: Sun 16 Feb 2025 21:00:35 +0000
Manifest this update: Sun 16 Feb 2025 21:00:35 +0000
Manifest next update: Mon 17 Feb 2025 21:00:35 +0000
Files and hashes: 1: 1-Sq9N9tDpqPpCxfnJu3FOlWH6ZA.roa (hash: Tpyvvdu3VZJ5oo8JL4qWFUonGAY9eL3r/UHvnFRq5cY=)
2: SdhmPTuWngJTom1UJb7hxdRDs2E.crl (hash: FFfHjNIjT9qP96a1Y+vyJquCwe9RRPHdJuuHePTAqz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/a5d00d-6266-46ea-bc8c-4182bedb98a1/1/SdhmPTuWngJTom1UJb7hxdRDs2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/a5d00d-6266-46ea-bc8c-4182bedb98a1/1/SdhmPTuWngJTom1UJb7hxdRDs2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/SdhmPTuWngJTom1UJb7hxdRDs2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 21:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:90:21:25:b5:d6:d8:be:9f:cb:c3:8b:76:95:b7:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49d8663d3b969e0253a26d5425bee1c5d443b361
Validity
Not Before: Feb 16 21:00:35 2025 GMT
Not After : Feb 17 21:00:35 2025 GMT
Subject: CN=bc59d9238ef22a3bafdf091b8f1f695fc13f8510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c8:6f:70:60:65:82:5e:03:b1:53:08:75:ca:
03:e3:21:02:e8:d0:64:39:71:b5:51:da:c6:ee:22:
06:46:aa:96:06:36:e2:c3:3a:f9:ff:c7:49:25:bc:
00:5d:c8:62:88:77:19:b9:80:6d:60:35:b0:ed:4d:
0d:14:f0:a6:28:d9:76:97:58:81:b7:dd:3a:91:97:
42:72:1d:24:3e:ba:44:2e:78:8c:2d:af:15:8d:db:
ae:d1:37:53:4b:70:f8:0d:5a:f7:da:be:a1:24:0e:
a5:4c:9f:31:ec:2f:b7:58:d8:56:a6:58:6b:e3:f7:
9e:f0:41:75:25:04:b0:1b:01:29:54:7c:11:10:3e:
e6:2d:76:1d:af:ea:9f:71:86:bf:f4:e5:ff:f8:b4:
34:20:e8:8a:0b:b1:48:c5:6d:05:f8:53:62:c8:d1:
89:eb:af:77:eb:73:85:6e:33:0b:2e:6c:83:fe:8d:
ef:1a:6b:a1:2b:07:e7:7e:61:c6:4a:cb:f4:f1:25:
7e:8e:dd:f9:46:fe:af:f3:39:92:07:46:45:c6:d6:
88:03:5b:df:57:4b:91:46:81:59:c0:56:e0:bc:ce:
f7:a3:e4:4c:07:f6:5a:f9:12:00:80:14:aa:35:90:
67:ee:ff:16:c4:a1:b7:76:37:91:0a:58:7c:88:e2:
e1:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:59:D9:23:8E:F2:2A:3B:AF:DF:09:1B:8F:1F:69:5F:C1:3F:85:10
X509v3 Authority Key Identifier:
keyid:49:D8:66:3D:3B:96:9E:02:53:A2:6D:54:25:BE:E1:C5:D4:43:B3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SdhmPTuWngJTom1UJb7hxdRDs2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a5d00d-6266-46ea-bc8c-4182bedb98a1/1/SdhmPTuWngJTom1UJb7hxdRDs2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a5d00d-6266-46ea-bc8c-4182bedb98a1/1/SdhmPTuWngJTom1UJb7hxdRDs2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:30:91:8d:3f:54:59:9f:83:8c:26:fc:b7:ca:9d:a6:93:bf:
5a:ec:9f:6a:34:45:bf:8b:af:f0:b8:fd:32:71:26:c4:ed:73:
59:d8:de:57:86:d5:1b:e6:19:84:0c:15:51:05:34:60:34:fe:
92:cd:57:12:91:f5:c7:19:03:22:30:9e:ce:cc:43:92:f6:bf:
2d:17:70:9e:86:3b:e2:21:14:f8:fb:6a:e4:39:92:83:ac:bd:
5d:86:96:64:a3:24:c6:31:df:c5:36:f3:53:c3:f9:b0:72:7a:
c6:90:1e:12:d9:b5:57:a3:f2:5f:d3:54:86:f5:ec:56:9b:57:
4e:56:cd:14:95:62:54:62:f4:6e:79:06:10:7e:e9:72:12:f7:
3d:88:ea:0e:22:85:e8:8f:6f:aa:73:f3:1b:a2:e1:10:96:e3:
33:bd:de:5b:7d:9a:e7:92:1d:32:65:7f:0d:bf:02:8b:6b:38:
b3:11:b0:75:74:25:dd:d9:3d:88:39:38:e1:e4:0c:32:7c:f0:
a9:1d:34:60:b1:77:5a:6b:88:80:de:04:b9:3e:17:f2:72:7a:
01:bd:0d:5a:e8:f9:d6:c9:20:f9:9a:00:b2:39:5d:93:62:fb:
19:5a:8a:40:86:33:f9:5a:7b:01:ff:e9:cf:29:0d:52:03:fc:
74:46:7a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:57:17 2025 by rpki-client