![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/eb063f-4c3c-4971-ae50-66482071b819/1/hpPf7hdoc561l2wkW1rQBbMljsY.mft
File: hpPf7hdoc561l2wkW1rQBbMljsY.mft (raw, json)
Hash identifier: V05hSevU3Ss2S02LWsT/b+tUFgPIjllOiGNJb7vYqVM=
Subject key identifier: E1:FB:2E:17:0E:78:3F:1F:66:CC:F9:8E:16:DB:11:E7:CD:23:6C:74
Authority key identifier: 86:93:DF:EE:17:68:73:9E:B5:97:6C:24:5B:5A:D0:05:B3:25:8E:C6
Certificate issuer: /CN=8693dfee1768739eb5976c245b5ad005b3258ec6
Certificate serial: 01951135106538CBCC1BC26E4DA2C53B0C90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hpPf7hdoc561l2wkW1rQBbMljsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/eb063f-4c3c-4971-ae50-66482071b819/1/hpPf7hdoc561l2wkW1rQBbMljsY.mft
Manifest number: 1457
Signing time: Mon 17 Feb 2025 00:00:44 +0000
Manifest this update: Mon 17 Feb 2025 00:00:44 +0000
Manifest next update: Tue 18 Feb 2025 00:00:44 +0000
Files and hashes: 1: heJEz4aIV8pCovQNxPGHm98CLzg.roa (hash: oSOD/5s+DowUJTv2duSzog5oYqkTO1A7yRox3C69klU=)
2: hpPf7hdoc561l2wkW1rQBbMljsY.crl (hash: SFJg59RHwMZpc5LgAVacyZj3nRkvH/cgdhWgcwHkg4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/eb063f-4c3c-4971-ae50-66482071b819/1/hpPf7hdoc561l2wkW1rQBbMljsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/eb063f-4c3c-4971-ae50-66482071b819/1/hpPf7hdoc561l2wkW1rQBbMljsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hpPf7hdoc561l2wkW1rQBbMljsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:35:10:65:38:cb:cc:1b:c2:6e:4d:a2:c5:3b:0c:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8693dfee1768739eb5976c245b5ad005b3258ec6
Validity
Not Before: Feb 17 00:00:44 2025 GMT
Not After : Feb 18 00:00:44 2025 GMT
Subject: CN=e1fb2e170e783f1f66ccf98e16db11e7cd236c74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a7:c0:29:3b:2e:4f:52:46:1e:43:3a:43:44:
1e:76:a2:d1:53:a7:ee:b6:70:6e:6b:1d:65:a0:76:
7b:25:98:df:bf:8a:6c:3b:22:b2:9a:f1:20:90:c6:
65:b9:4c:8c:c5:a8:8e:1a:07:30:0d:59:cc:df:4c:
2d:c2:54:48:a2:9d:2a:71:3f:9b:71:aa:fd:96:3b:
ed:d2:8e:25:72:2f:30:0f:10:c3:ba:e6:9e:fb:93:
19:47:96:ea:bc:2f:f4:79:03:55:7f:87:50:be:e6:
22:cf:c5:41:a9:c0:7d:49:bf:7b:82:47:11:10:20:
27:fa:27:78:0f:9e:de:28:d1:8a:8c:5b:e0:4b:3a:
90:a3:9c:ea:df:3b:3d:22:62:1c:72:51:26:96:ce:
55:15:4e:87:af:91:99:71:c9:d5:80:cd:39:a9:eb:
10:f6:71:6d:5f:45:9e:57:77:55:eb:79:4b:23:de:
8d:67:53:fe:5e:b8:38:95:9f:39:11:04:a4:ba:3a:
cc:e4:32:f4:35:f0:e4:4c:25:c0:2e:f0:11:ad:57:
92:49:01:21:16:65:4e:8a:a9:4f:01:ab:95:05:84:
d1:1d:c7:af:ce:f1:44:95:8e:8f:58:1a:be:6c:bd:
09:8c:c4:1e:d9:1b:77:af:59:ee:a0:bc:b1:fd:0d:
87:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:FB:2E:17:0E:78:3F:1F:66:CC:F9:8E:16:DB:11:E7:CD:23:6C:74
X509v3 Authority Key Identifier:
keyid:86:93:DF:EE:17:68:73:9E:B5:97:6C:24:5B:5A:D0:05:B3:25:8E:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hpPf7hdoc561l2wkW1rQBbMljsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eb063f-4c3c-4971-ae50-66482071b819/1/hpPf7hdoc561l2wkW1rQBbMljsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eb063f-4c3c-4971-ae50-66482071b819/1/hpPf7hdoc561l2wkW1rQBbMljsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:0e:59:63:db:b7:c1:26:62:c4:ba:be:99:ec:93:e5:92:4a:
5e:64:16:9d:71:9d:97:17:48:1d:4d:c8:5c:c8:cb:80:ce:1d:
27:7e:fa:c3:59:f5:d8:84:be:02:b9:f4:d6:fe:75:5f:c2:ae:
4c:a5:9b:3f:ff:b5:58:b8:64:da:c4:b3:58:f1:9f:71:f5:ca:
22:3a:ba:f5:64:92:2c:7f:93:6b:d1:d6:23:bb:a9:35:cd:bd:
83:c7:54:55:0a:0e:97:df:f9:06:5d:1e:9c:72:fb:a8:38:fa:
71:ea:f3:2e:7a:8d:cd:d6:34:46:5e:91:c6:d1:0e:38:d7:33:
bf:cb:a0:cf:65:81:5d:d6:77:6b:b6:cc:ac:58:8f:b4:5b:2f:
66:83:57:61:82:c7:e4:56:d5:9e:c4:c5:32:4c:d2:0d:fb:c5:
19:e4:4e:90:79:5a:70:00:28:78:8c:3c:a6:b3:54:f4:2f:a7:
2b:20:c7:7d:f7:fb:fe:e8:71:dd:db:e2:c3:a2:01:e2:a4:2c:
9c:0b:d2:b5:54:cb:15:00:2d:ba:8e:9a:7d:68:dd:f5:d0:1c:
ef:77:9d:1c:d5:1d:d7:f4:5b:67:00:90:14:ac:14:e3:bd:52:
9a:da:fc:77:47:67:73:60:d2:a3:eb:ff:04:5d:a9:0e:f3:72:
9e:56:b6:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:58:43 2025 by rpki-client