![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/51d781-c155-4297-b0b7-c718361d4374/1/rCRVsahZvE1mGBdQVfDsiWB_BS0.mft
File: rCRVsahZvE1mGBdQVfDsiWB_BS0.mft (raw, json)
Hash identifier: kIrt9Ym9nzKtFbZPqTqpo1mLQ7W1GterwvfGgw9KQ6U=
Subject key identifier: 54:00:16:77:D2:0F:82:99:64:3B:82:1D:B1:45:00:69:3C:3C:68:68
Authority key identifier: AC:24:55:B1:A8:59:BC:4D:66:18:17:50:55:F0:EC:89:60:7F:05:2D
Certificate issuer: /CN=ac2455b1a859bc4d6618175055f0ec89607f052d
Certificate serial: 01951210B40F2EFA0F8BA9EF2964F1674225
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rCRVsahZvE1mGBdQVfDsiWB_BS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/51d781-c155-4297-b0b7-c718361d4374/1/rCRVsahZvE1mGBdQVfDsiWB_BS0.mft
Manifest number: 1194
Signing time: Mon 17 Feb 2025 04:00:39 +0000
Manifest this update: Mon 17 Feb 2025 04:00:39 +0000
Manifest next update: Tue 18 Feb 2025 04:00:39 +0000
Files and hashes: 1: rCRVsahZvE1mGBdQVfDsiWB_BS0.crl (hash: vRRNWGMPeqdL3XCRsL4CPxe1S1PfFKaz9Tcm/Sryg3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/51d781-c155-4297-b0b7-c718361d4374/1/rCRVsahZvE1mGBdQVfDsiWB_BS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/51d781-c155-4297-b0b7-c718361d4374/1/rCRVsahZvE1mGBdQVfDsiWB_BS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rCRVsahZvE1mGBdQVfDsiWB_BS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:b4:0f:2e:fa:0f:8b:a9:ef:29:64:f1:67:42:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac2455b1a859bc4d6618175055f0ec89607f052d
Validity
Not Before: Feb 17 04:00:39 2025 GMT
Not After : Feb 18 04:00:39 2025 GMT
Subject: CN=54001677d20f8299643b821db14500693c3c6868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:64:90:66:10:e4:60:3e:d6:d0:36:9e:a2:2a:
18:94:9b:32:be:43:f3:43:1d:9f:f4:6b:05:0d:06:
a4:d6:84:b6:5f:44:33:60:1b:df:6c:bf:8d:ff:7b:
eb:63:91:5c:e7:15:25:34:f9:37:9e:92:1f:6a:15:
63:c5:88:b7:74:bf:4d:7c:d7:70:3f:02:a9:c1:41:
a7:94:12:3f:a2:d5:66:67:b3:29:be:a8:b7:13:69:
0a:0f:b3:88:cb:d5:81:0c:16:43:11:35:50:f4:c4:
f9:73:0a:22:49:c1:43:71:33:0c:2e:4d:48:d7:26:
c4:19:c9:19:fa:8c:d6:3d:80:e5:0a:78:ef:79:5b:
76:96:ba:72:24:24:9c:a1:ed:ec:41:ac:fc:ac:ad:
f1:bc:c8:94:cb:a6:dc:56:d0:bf:23:2d:f9:25:6a:
f5:5f:3e:65:95:bf:70:c2:4c:85:c6:ca:20:0b:1d:
02:72:c9:6b:21:42:29:35:bb:30:97:aa:26:87:5b:
08:a3:09:e3:41:23:7a:4a:a1:c7:55:6c:c8:9d:93:
05:94:7e:dc:c2:da:3c:82:7a:58:b6:00:89:54:2b:
87:97:ad:81:98:a6:e0:ee:b5:81:f9:15:4c:54:af:
f7:27:d3:5b:ce:37:3e:26:31:83:f9:50:c5:ee:01:
d4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:00:16:77:D2:0F:82:99:64:3B:82:1D:B1:45:00:69:3C:3C:68:68
X509v3 Authority Key Identifier:
keyid:AC:24:55:B1:A8:59:BC:4D:66:18:17:50:55:F0:EC:89:60:7F:05:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rCRVsahZvE1mGBdQVfDsiWB_BS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/51d781-c155-4297-b0b7-c718361d4374/1/rCRVsahZvE1mGBdQVfDsiWB_BS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/51d781-c155-4297-b0b7-c718361d4374/1/rCRVsahZvE1mGBdQVfDsiWB_BS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:bc:09:c2:a1:77:98:a1:65:d3:bf:3d:00:cf:de:fd:11:d1:
5f:ff:50:a1:be:12:b4:36:4a:69:5c:aa:2c:67:14:0f:54:5f:
67:28:67:ee:0a:2f:33:c9:b0:8a:7f:36:10:7f:fb:0f:a6:e3:
7c:2d:1f:72:37:aa:0d:13:60:f3:6d:0a:10:d1:28:55:7b:1f:
5e:3d:22:9a:27:3f:88:96:54:5d:3b:c9:58:f9:9f:f6:ac:42:
bc:3c:c3:64:76:ee:19:f5:6d:c9:71:65:f7:f2:1f:87:2c:06:
ff:25:c9:2e:7a:e3:39:cd:76:ef:7a:d3:20:57:bf:d3:66:f9:
81:97:b6:d1:1f:d5:4a:e0:eb:14:c5:ee:03:a6:37:9a:ba:14:
2a:c9:e2:3b:eb:c6:0b:62:bc:e8:79:41:b9:a1:45:69:6e:7d:
e1:e3:fa:f0:ec:6c:93:37:07:29:77:84:cd:39:ce:e5:d2:9b:
33:b2:b0:a4:7e:bf:5f:c2:f8:03:f0:88:97:bf:b0:35:ed:5f:
56:1e:e6:20:30:c7:37:d7:c2:98:38:48:74:72:ae:35:6a:01:
e6:2c:e6:f1:e1:64:67:64:4f:4c:13:18:fc:59:36:86:bd:5c:
a0:b1:ac:02:da:f7:f4:7f:99:c1:fd:d3:1a:c0:48:56:54:86:
c1:9e:81:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:07:07 2025 by rpki-client