![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/715b05-39d8-4261-9bbb-c4856d48846b/1/Ai1YD0oGk1j4-lfvBl4Y9f6TaYA.mft
File: Ai1YD0oGk1j4-lfvBl4Y9f6TaYA.mft (raw, json)
Hash identifier: EDerXfHO+/3A98P2TvOdE8l2Sjatrw2y4bVUW+pd2fs=
Subject key identifier: DC:7D:A3:6B:AD:4D:04:59:80:E1:A9:1C:EC:26:AE:07:34:70:C9:F8
Authority key identifier: 02:2D:58:0F:4A:06:93:58:F8:FA:57:EF:06:5E:18:F5:FE:93:69:80
Certificate issuer: /CN=022d580f4a069358f8fa57ef065e18f5fe936980
Certificate serial: 01950FEAEA53CACC02D77353FF9825255191
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ai1YD0oGk1j4-lfvBl4Y9f6TaYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/715b05-39d8-4261-9bbb-c4856d48846b/1/Ai1YD0oGk1j4-lfvBl4Y9f6TaYA.mft
Manifest number: 087F
Signing time: Sun 16 Feb 2025 18:00:08 +0000
Manifest this update: Sun 16 Feb 2025 18:00:08 +0000
Manifest next update: Mon 17 Feb 2025 18:00:08 +0000
Files and hashes: 1: 7vPaeyI0ln68dhOnAOFd-xv37nM.roa (hash: ZgJ32R2xiY7rG7KLNZLVMbbgQ70wWnVYAoeDmfccZx4=)
2: Ai1YD0oGk1j4-lfvBl4Y9f6TaYA.crl (hash: KXTzW+C1C4IZ8Pz0S1QI6jG6y0FGM7U5Drouhq5Ghe8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/715b05-39d8-4261-9bbb-c4856d48846b/1/Ai1YD0oGk1j4-lfvBl4Y9f6TaYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/715b05-39d8-4261-9bbb-c4856d48846b/1/Ai1YD0oGk1j4-lfvBl4Y9f6TaYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ai1YD0oGk1j4-lfvBl4Y9f6TaYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:0f:ea:ea:53:ca:cc:02:d7:73:53:ff:98:25:25:51:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=022d580f4a069358f8fa57ef065e18f5fe936980
Validity
Not Before: Feb 16 18:00:08 2025 GMT
Not After : Feb 17 18:00:08 2025 GMT
Subject: CN=dc7da36bad4d045980e1a91cec26ae073470c9f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:10:61:9e:74:9e:16:62:80:5e:c8:65:5c:6c:
25:9d:4c:9f:2e:a5:e0:dd:4f:97:28:68:9a:a2:a5:
86:6b:e3:b2:71:8b:0f:10:93:f1:3f:25:e0:2f:65:
cf:6c:ec:3f:58:f0:14:ce:d2:dd:00:66:09:f6:09:
f5:c5:a3:df:d2:34:e8:8c:c8:33:8f:06:d6:50:86:
c2:15:94:0c:2f:5c:bf:f3:46:c7:90:e7:a6:ae:62:
88:3f:64:fe:6f:02:ce:a8:5d:71:1d:1c:5e:ba:13:
58:34:74:4d:17:98:df:df:02:57:83:6f:8a:00:d9:
d2:8e:42:81:d3:7f:95:cd:0f:82:71:6f:1a:f5:30:
85:75:9a:b2:68:81:ff:62:4f:5e:83:71:34:55:e2:
e3:9e:de:03:2e:d6:dc:e3:66:a7:0a:c9:54:0d:95:
d5:00:85:ad:a4:05:6f:74:dc:18:11:e9:fb:86:95:
e7:91:45:a8:15:9a:cd:aa:2b:71:17:5e:24:d2:14:
70:20:d4:ba:e4:02:ad:03:9c:52:cb:86:41:fb:7c:
a1:22:25:67:b5:0e:f4:09:75:af:78:03:04:9c:2a:
c8:a3:d3:f6:b7:40:78:3c:dc:7c:aa:14:d5:db:db:
1e:d4:89:4e:ef:20:45:aa:c3:d5:94:13:55:e4:9c:
df:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:7D:A3:6B:AD:4D:04:59:80:E1:A9:1C:EC:26:AE:07:34:70:C9:F8
X509v3 Authority Key Identifier:
keyid:02:2D:58:0F:4A:06:93:58:F8:FA:57:EF:06:5E:18:F5:FE:93:69:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ai1YD0oGk1j4-lfvBl4Y9f6TaYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/715b05-39d8-4261-9bbb-c4856d48846b/1/Ai1YD0oGk1j4-lfvBl4Y9f6TaYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/715b05-39d8-4261-9bbb-c4856d48846b/1/Ai1YD0oGk1j4-lfvBl4Y9f6TaYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:0e:be:55:be:8f:12:5c:9e:a5:04:7c:16:9f:29:c2:0b:44:
2b:87:76:7b:5d:f7:7b:5a:9a:ac:f8:0b:9f:6d:71:86:e3:85:
2b:6a:9d:ab:f5:33:b7:d8:6a:43:7b:5d:10:a1:10:e4:00:7e:
dd:18:8f:16:cf:55:69:6a:2d:9b:f0:8e:22:51:8d:a2:77:03:
47:c3:13:4e:30:38:0f:a2:9b:93:09:74:c8:a6:7c:e1:b6:2f:
66:b4:82:83:d4:f7:d4:45:01:96:c1:7a:14:09:b4:62:71:9b:
34:0b:57:4b:45:e7:b6:a3:22:ee:8a:64:23:1e:ec:90:7e:da:
3b:fd:03:f8:13:b0:c3:7b:85:74:7e:cb:19:14:00:49:32:cf:
4c:58:c3:cd:5d:e3:23:28:1f:db:5d:69:33:05:fe:45:58:1e:
fc:1d:74:84:ae:57:32:79:e7:ab:d1:8e:8d:b6:66:5a:ed:02:
68:21:28:75:40:6d:19:2a:71:f0:92:67:ef:74:27:59:09:de:
9e:20:52:0f:34:cd:9f:12:76:8f:82:32:dd:d5:74:4f:06:26:
e4:ec:db:c3:b0:86:bd:ce:55:07:4c:b3:2d:0d:0e:74:a3:eb:
40:93:73:e5:61:ce:59:81:bd:e0:10:14:bb:eb:be:69:ed:6c:
0c:bb:52:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:30:16 2025 by rpki-client