![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/f4820f-e815-44f3-af65-1aa034a2af9c/1/vQScpC4dgs4ntUu_0Bd4HVRaebc.mft
File: vQScpC4dgs4ntUu_0Bd4HVRaebc.mft (raw, json)
Hash identifier: fdU6uyT1QdLn5cNaw6RltcNtJphkY1e99pKOJzVvspc=
Subject key identifier: FB:7B:AE:F2:48:38:B8:B9:7F:64:AC:69:E4:2D:2E:41:ED:88:90:82
Authority key identifier: BD:04:9C:A4:2E:1D:82:CE:27:B5:4B:BF:D0:17:78:1D:54:5A:79:B7
Certificate issuer: /CN=bd049ca42e1d82ce27b54bbfd017781d545a79b7
Certificate serial: 019512103F0770BFEE28D5EFCFD12222DC31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vQScpC4dgs4ntUu_0Bd4HVRaebc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/f4820f-e815-44f3-af65-1aa034a2af9c/1/vQScpC4dgs4ntUu_0Bd4HVRaebc.mft
Manifest number: 063C
Signing time: Mon 17 Feb 2025 04:00:09 +0000
Manifest this update: Mon 17 Feb 2025 04:00:09 +0000
Manifest next update: Tue 18 Feb 2025 04:00:09 +0000
Files and hashes: 1: pJxbAynYAVMuxCYI9fjMWPnEqnE.roa (hash: X09w84W5zdqhQp1J0A98/qFI2PJLHu66aEtf6RsnuSc=)
2: vQScpC4dgs4ntUu_0Bd4HVRaebc.crl (hash: MsabwAG2/oZsqMtD13reo7PwPHQ3/m0DaEoNMV9Armw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/f4820f-e815-44f3-af65-1aa034a2af9c/1/vQScpC4dgs4ntUu_0Bd4HVRaebc.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/f4820f-e815-44f3-af65-1aa034a2af9c/1/vQScpC4dgs4ntUu_0Bd4HVRaebc.mft
rsync://rpki.ripe.net/repository/DEFAULT/vQScpC4dgs4ntUu_0Bd4HVRaebc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:3f:07:70:bf:ee:28:d5:ef:cf:d1:22:22:dc:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd049ca42e1d82ce27b54bbfd017781d545a79b7
Validity
Not Before: Feb 17 04:00:09 2025 GMT
Not After : Feb 18 04:00:09 2025 GMT
Subject: CN=fb7baef24838b8b97f64ac69e42d2e41ed889082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f6:f3:6d:40:b0:89:d9:65:2a:0d:e1:cb:02:
03:02:64:f6:24:f9:a5:d5:4c:d7:42:9e:40:50:a7:
55:7d:b2:bb:6a:11:74:4d:a7:9a:df:b1:1e:28:f6:
b6:98:10:ad:00:c0:83:82:65:96:2a:17:1c:04:04:
85:de:9d:fc:35:77:12:0d:f9:1a:b1:a7:25:3c:46:
22:fd:8d:94:1b:cf:c2:46:5e:d9:00:e5:be:0e:21:
9e:2f:fb:56:f4:02:f8:1e:66:a0:3a:f6:73:47:d2:
6b:bd:8a:91:8a:5a:78:8c:cf:70:c6:dc:91:ce:6c:
c5:20:30:6a:8f:5c:ad:9f:83:02:8e:ab:84:77:11:
70:11:63:4e:ba:d2:fa:b6:a0:2d:cf:17:d0:12:3b:
61:af:dd:38:5f:16:80:eb:25:6b:01:eb:96:d1:20:
cb:57:b3:a0:9c:94:df:47:77:23:8f:68:34:31:54:
48:ce:7a:ed:70:7a:da:f0:da:33:bb:61:16:24:ce:
07:20:d0:76:91:8e:17:9e:b4:82:97:e0:c7:72:ad:
98:42:ee:5a:e1:3c:78:87:38:cc:64:5d:23:ef:ae:
ca:70:f2:d2:84:bb:11:09:63:d8:d2:cc:ea:fa:cd:
12:8d:99:b6:b6:ff:f5:14:ae:96:ba:e8:be:14:4d:
55:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:7B:AE:F2:48:38:B8:B9:7F:64:AC:69:E4:2D:2E:41:ED:88:90:82
X509v3 Authority Key Identifier:
keyid:BD:04:9C:A4:2E:1D:82:CE:27:B5:4B:BF:D0:17:78:1D:54:5A:79:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vQScpC4dgs4ntUu_0Bd4HVRaebc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f4820f-e815-44f3-af65-1aa034a2af9c/1/vQScpC4dgs4ntUu_0Bd4HVRaebc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f4820f-e815-44f3-af65-1aa034a2af9c/1/vQScpC4dgs4ntUu_0Bd4HVRaebc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:e5:1e:35:0c:01:d8:43:44:4a:5d:e9:33:fd:12:a1:91:4b:
76:a5:d4:e4:8b:cf:31:b7:00:e6:5a:02:f7:ef:9e:d1:94:d2:
33:62:63:72:72:ee:9f:61:8c:d5:69:d7:da:60:fd:a3:ca:d1:
80:e3:03:5c:70:60:22:c1:fe:6d:27:2f:04:7d:75:79:6e:fd:
77:a3:a7:06:af:5c:9b:32:57:54:a0:17:04:3e:f1:78:55:6f:
2e:20:af:dc:fb:58:cd:5f:74:04:e2:1b:ac:b8:b5:fb:53:01:
73:f5:68:04:a7:e4:8e:6e:b2:62:a4:e8:a7:fb:9f:d5:b7:d2:
79:4b:64:cc:b9:66:d3:85:8b:8a:df:8d:bf:1c:ff:76:a5:46:
e6:11:78:ae:10:0e:44:80:1e:dd:c1:46:32:ca:5f:18:5d:15:
57:4f:ac:48:07:7f:aa:62:a8:71:38:56:a3:18:75:27:40:8d:
27:ba:c6:86:9e:55:a6:86:4f:7b:40:26:2f:91:77:09:d3:b1:
90:37:4f:83:cd:10:d7:7d:6c:aa:45:57:55:97:5d:64:b5:32:
59:24:64:54:9e:92:f6:0b:04:f1:54:c3:7f:e2:c9:11:ed:96:
53:fa:10:eb:5f:b2:f7:5d:ea:c2:f3:65:4d:44:ba:74:0f:06:
fb:ad:1a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:58:31 2025 by rpki-client