![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/571244-9c9a-43ac-930c-370c80769831/1/iJiSZOUPOa6IiuMnYQm7qALkWAE.mft
File: iJiSZOUPOa6IiuMnYQm7qALkWAE.mft (raw, json)
Hash identifier: pBT167MF7eajXvTNyShWGGOsS28Zdpi1DUNh8oUh/BU=
Subject key identifier: C5:94:F8:F6:11:F6:E8:9C:F0:E4:28:0A:7E:F2:26:2A:AC:35:CD:27
Authority key identifier: 88:98:92:64:E5:0F:39:AE:88:8A:E3:27:61:09:BB:A8:02:E4:58:01
Certificate issuer: /CN=88989264e50f39ae888ae3276109bba802e45801
Certificate serial: 019512108516CA0857B8D40C4F5B77ACA22E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iJiSZOUPOa6IiuMnYQm7qALkWAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/571244-9c9a-43ac-930c-370c80769831/1/iJiSZOUPOa6IiuMnYQm7qALkWAE.mft
Manifest number: EE
Signing time: Mon 17 Feb 2025 04:00:27 +0000
Manifest this update: Mon 17 Feb 2025 04:00:27 +0000
Manifest next update: Tue 18 Feb 2025 04:00:27 +0000
Files and hashes: 1: e7H9B5-pB3ikZ5-oh15fm0ggCqI.roa (hash: We6P0vvIkU060wWseVebnunaD4trxKPA+u+6dudIhmU=)
2: iJiSZOUPOa6IiuMnYQm7qALkWAE.crl (hash: SDavn1mTyCjObqpWHeROpzU22dzTMw8FJCQcZOjin04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/571244-9c9a-43ac-930c-370c80769831/1/iJiSZOUPOa6IiuMnYQm7qALkWAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/571244-9c9a-43ac-930c-370c80769831/1/iJiSZOUPOa6IiuMnYQm7qALkWAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/iJiSZOUPOa6IiuMnYQm7qALkWAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:85:16:ca:08:57:b8:d4:0c:4f:5b:77:ac:a2:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88989264e50f39ae888ae3276109bba802e45801
Validity
Not Before: Feb 17 04:00:27 2025 GMT
Not After : Feb 18 04:00:27 2025 GMT
Subject: CN=c594f8f611f6e89cf0e4280a7ef2262aac35cd27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:54:ba:af:58:00:f4:17:64:73:68:fb:3d:d1:
92:b5:2a:bb:6a:87:05:ac:90:05:d3:cb:98:69:96:
e5:86:82:e3:4d:37:db:f9:be:a8:7b:6f:2d:71:fa:
5b:c7:ab:2d:22:9e:90:dc:8a:ff:36:33:bd:d0:89:
aa:2a:cf:c8:71:ae:9c:7d:eb:34:5c:1f:fc:a8:8c:
6c:f9:b7:76:1c:b5:c6:69:89:20:9f:8b:e0:3d:36:
8d:c7:a8:e1:7f:c2:e6:d8:81:67:2b:16:d2:6a:47:
81:35:f1:a6:98:01:cb:bb:50:4d:57:96:32:8c:f5:
49:2d:c0:c0:4e:53:86:96:3f:35:76:59:af:da:40:
c1:0d:ab:09:f4:66:05:80:f6:da:13:68:14:dd:8b:
b6:49:5b:87:4b:d8:12:ec:61:10:28:5d:07:dd:68:
08:3f:55:4e:db:89:31:b3:f3:c4:67:87:19:15:8a:
b5:c8:89:d9:07:60:7a:45:26:40:51:9b:b6:28:f3:
08:33:2f:0f:1b:7f:4a:50:13:c6:76:eb:8e:ec:e5:
0c:d9:1d:de:4d:0e:af:21:31:e2:c2:84:65:d7:cf:
ff:e2:32:29:3b:d3:4d:c5:ce:6d:4b:ea:3b:39:01:
16:6b:c5:ef:be:2c:b5:53:64:a2:20:a2:4a:28:fa:
7d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:94:F8:F6:11:F6:E8:9C:F0:E4:28:0A:7E:F2:26:2A:AC:35:CD:27
X509v3 Authority Key Identifier:
keyid:88:98:92:64:E5:0F:39:AE:88:8A:E3:27:61:09:BB:A8:02:E4:58:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iJiSZOUPOa6IiuMnYQm7qALkWAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/571244-9c9a-43ac-930c-370c80769831/1/iJiSZOUPOa6IiuMnYQm7qALkWAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/571244-9c9a-43ac-930c-370c80769831/1/iJiSZOUPOa6IiuMnYQm7qALkWAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:66:15:f0:fd:cd:20:36:37:d3:fb:5b:4d:81:cc:ec:c2:dc:
3e:0c:6b:e6:d5:39:b2:26:7a:9c:8a:69:c2:91:c7:25:32:dc:
7e:28:59:ea:78:37:94:d8:9c:fb:17:ca:72:c0:19:e8:4c:80:
82:87:71:65:89:86:26:3f:92:19:d2:36:61:b0:c6:4d:cf:b5:
32:9a:cd:c5:3d:7c:cd:94:84:e6:cc:16:73:fa:24:fa:cb:1c:
14:ac:6b:99:02:c3:02:b5:ab:68:12:52:ac:d9:bc:22:00:c0:
89:59:44:4c:4f:17:7a:8f:96:98:cf:56:31:67:94:35:af:34:
c5:b2:0e:d6:ef:ce:c2:b2:0e:cc:6b:73:7b:0a:c2:0d:83:87:
9f:77:a4:7b:f7:3e:45:8c:54:e8:27:45:a2:b8:70:15:b3:5f:
08:df:c0:20:4a:50:25:98:ee:d7:54:e3:02:63:72:ee:be:b0:
c9:91:50:f4:67:e9:c1:10:b6:73:ed:6d:59:db:8e:6f:d1:b1:
cd:b1:4d:5a:11:23:89:82:2f:82:96:84:6e:ee:a7:0f:c0:92:
9a:19:e5:69:40:d9:7f:7c:2d:01:d5:2a:ad:e3:3b:c7:ca:c8:
d0:17:90:17:78:e1:e4:7c:45:98:44:4c:85:0d:10:af:93:e5:
ec:54:2f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:10:42 2025 by rpki-client