![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft
File: _sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft (raw, json)
Hash identifier: rsQ/LLF8MUL75rswW+6u768UDwng7OkQK0Z6xckn+w4=
Subject key identifier: 6F:C1:25:A8:6B:B1:8E:CF:C0:7B:1B:5A:13:D7:F4:EC:C6:C8:9F:C6
Authority key identifier: FE:C3:5D:4F:2F:2D:24:7E:A0:8C:4A:01:17:D3:28:E4:E8:ED:F1:52
Certificate issuer: /CN=fec35d4f2f2d247ea08c4a0117d328e4e8edf152
Certificate serial: 019510C76E547FD00FFE186F72E4C15C6175
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft
Manifest number: 1459
Signing time: Sun 16 Feb 2025 22:01:00 +0000
Manifest this update: Sun 16 Feb 2025 22:01:00 +0000
Manifest next update: Mon 17 Feb 2025 22:01:00 +0000
Files and hashes: 1: 2x8hugS4Ui9KaT-LaqdbUf0gqfo.roa (hash: gyN6UkhIgLwcwZrGZA7Bh/uxosleTdxZNErSNAXGOno=)
2: _sNdTy8tJH6gjEoBF9Mo5Ojt8VI.crl (hash: TaI/moCDMUBYgoqVviMxo4I9wlY7+q/ztrtyvyiXWyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:6e:54:7f:d0:0f:fe:18:6f:72:e4:c1:5c:61:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fec35d4f2f2d247ea08c4a0117d328e4e8edf152
Validity
Not Before: Feb 16 22:01:00 2025 GMT
Not After : Feb 17 22:01:00 2025 GMT
Subject: CN=6fc125a86bb18ecfc07b1b5a13d7f4ecc6c89fc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:79:2f:61:fc:65:67:3f:0b:36:4d:19:46:e2:
7c:67:d1:bc:bf:c4:91:c7:45:41:38:e0:89:f7:2a:
ac:96:a1:c1:4b:5d:6d:d9:83:b2:df:7a:64:37:49:
ec:e7:08:94:bc:2e:b0:e7:7b:f3:02:9d:6e:71:7a:
a0:62:8b:b9:01:69:7d:75:47:c2:43:0b:26:c2:2a:
5b:5a:44:57:a7:2a:f4:4a:4f:d7:db:50:7c:e2:40:
f4:e0:e9:20:dc:15:92:c2:13:ac:09:e6:9b:e5:37:
51:c7:47:18:88:e8:ce:4f:4e:e7:24:0f:7c:06:37:
ff:50:43:f6:aa:60:54:2a:48:f5:79:68:f9:4c:bb:
6c:78:76:b8:43:d8:55:b3:1a:37:6b:ce:5d:5c:02:
c4:fc:1f:26:34:a1:8d:66:08:cb:75:47:52:3f:85:
85:a1:74:5f:74:77:14:63:51:aa:57:9a:84:92:39:
69:26:12:66:fd:be:19:5f:92:c2:aa:77:c8:82:fe:
a5:78:6f:0f:8b:21:24:f1:2e:65:95:7a:75:a3:6f:
7d:5b:03:33:3c:16:d4:e4:83:bf:c9:5a:30:14:e3:
37:dc:e4:03:1c:07:1b:8f:c7:0e:be:4d:a4:4b:72:
61:4a:be:21:38:ef:4d:4d:e3:26:60:73:45:d6:5c:
fc:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:C1:25:A8:6B:B1:8E:CF:C0:7B:1B:5A:13:D7:F4:EC:C6:C8:9F:C6
X509v3 Authority Key Identifier:
keyid:FE:C3:5D:4F:2F:2D:24:7E:A0:8C:4A:01:17:D3:28:E4:E8:ED:F1:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:b6:a5:a7:24:44:d4:b8:4d:cf:57:75:01:f6:42:89:81:f7:
bc:5b:cb:8a:fb:6b:51:a5:0f:d7:2c:06:6e:60:80:91:a8:7b:
64:f3:c0:21:7c:18:eb:19:05:57:4b:d3:73:ee:94:84:ad:fc:
bf:72:4f:13:8e:1f:18:60:ec:c4:c3:74:e9:b3:41:1f:d3:15:
44:19:89:4e:61:1b:46:58:03:5b:27:c4:0b:33:ae:1d:15:ad:
29:57:3a:ff:d4:3c:9a:a7:61:1c:d1:e4:66:82:f7:08:c9:75:
b9:78:e3:10:e9:b6:b9:e9:99:29:80:bc:ed:5c:c7:a4:6d:67:
01:19:94:53:85:07:ef:64:12:3d:8e:8e:11:4e:1c:6a:d3:7b:
f2:86:9e:e7:ff:c0:f1:03:6a:0e:d3:58:d8:fa:8e:66:05:a2:
ae:50:1b:bd:d6:f3:42:c7:2f:7e:1f:7d:6a:01:61:d6:8d:8c:
21:70:09:ce:86:1f:fb:c9:80:d2:25:0c:c6:36:63:cc:eb:0a:
46:27:fc:a5:81:1f:19:20:80:b3:bb:41:ee:c0:76:75:63:4e:
3b:79:48:80:eb:e1:9f:d0:4f:5c:d3:75:3c:78:1e:f9:38:1a:
f9:10:e6:c2:96:8e:69:d4:86:71:f5:ac:e0:2e:bd:6d:f4:fe:
eb:ff:a0:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:38:29 2025 by rpki-client