![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.mft
File: DHFh5iL2PA24Vo2MtMTXwNmAg0Y.mft (raw, json)
Hash identifier: ucyYsRwmd4OkTXs1EeykHHBhKDI8Wvy5PvMSpbzVZts=
Subject key identifier: 78:8C:8E:A7:F3:07:F5:89:2F:B6:D7:D7:ED:C6:F5:2A:8E:80:6A:1C
Authority key identifier: 0C:71:61:E6:22:F6:3C:0D:B8:56:8D:8C:B4:C4:D7:C0:D9:80:83:46
Certificate issuer: /CN=0c7161e622f63c0db8568d8cb4c4d7c0d9808346
Certificate serial: 019510C7D24E17F1EC78812E921D097AA95A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.mft
Manifest number: 117D
Signing time: Sun 16 Feb 2025 22:01:25 +0000
Manifest this update: Sun 16 Feb 2025 22:01:25 +0000
Manifest next update: Mon 17 Feb 2025 22:01:25 +0000
Files and hashes: 1: CLChwLW02ELwkahXwyfiLI_9qug.roa (hash: ZY2Z4KqkvJ5GmWXUsGBRyVc2LlG/nyUr0SW4E8BAqyI=)
2: DHFh5iL2PA24Vo2MtMTXwNmAg0Y.crl (hash: 3jNVCT9x2oCREJ4ETTuLQttlTyZP+AZKK/EzK0ce2OA=)
3: QsN_S_wgLVUeKoFdH1UAJoSMjns.roa (hash: Vc/DvrUf2/Yc4I+n11f3kpmfdmIWYVq+oYgVY/8/vB4=)
4: R3lT-gTuGnDZeA96aEZQGFFOq_o.roa (hash: jGjkqK3So3KAtBAOEFdSRvrFV4KRi6t938Te18eLgog=)
5: XwDIJJPJ760h-XL6w1NNvKGdN7s.roa (hash: C/7NZrx1rODi4OfoG6IBJqHANimfyAXK9IDyt9/pFYE=)
6: v5vd3x3XjeefXJEwufhUGGb4X2s.roa (hash: Q56G00WWpMRZXSZJI+Ae5yRJxVdvk5MUrhK76sZeFtc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:d2:4e:17:f1:ec:78:81:2e:92:1d:09:7a:a9:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c7161e622f63c0db8568d8cb4c4d7c0d9808346
Validity
Not Before: Feb 16 22:01:25 2025 GMT
Not After : Feb 17 22:01:25 2025 GMT
Subject: CN=788c8ea7f307f5892fb6d7d7edc6f52a8e806a1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a6:04:97:cd:60:2f:4b:f4:c4:6d:22:f4:ed:
b4:ca:4b:ff:7f:52:33:4e:42:f0:9c:d2:f8:e8:77:
ff:89:11:22:23:5a:8a:1f:a4:de:cc:67:b0:69:82:
08:a2:9b:64:9f:d4:07:62:bd:a6:dd:c1:ad:ed:93:
2a:77:be:cb:b7:0b:85:fc:f8:6f:b9:e1:37:f0:ff:
9b:b7:c8:e5:d0:e3:78:44:8b:79:e9:63:32:2d:32:
de:7d:b1:54:ba:c5:40:cf:a2:aa:fa:8a:5f:26:66:
81:e1:e5:b6:15:69:85:b9:a2:a0:17:d3:a1:93:be:
c4:69:a9:9e:fa:22:c6:a4:db:33:ce:b3:05:5b:35:
99:43:bc:1f:35:65:11:86:4a:f9:d2:18:37:18:d0:
57:b2:5e:68:84:9d:39:b6:4d:39:78:e0:01:1b:26:
59:3e:74:fa:96:06:2f:86:96:b0:6b:b6:6d:61:69:
a8:68:4f:d4:c9:c3:84:00:59:c9:4d:c2:46:73:15:
fc:cf:45:4c:3f:6f:4d:0d:9f:6a:71:5f:85:d9:4d:
db:31:2f:f0:07:94:68:16:49:b7:b2:6f:46:1e:14:
b5:86:ed:68:c8:57:d7:1b:88:fb:c5:e7:17:1b:c8:
f9:3f:5f:f4:ca:fe:08:6d:32:d4:6d:5a:26:b2:56:
1c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:8C:8E:A7:F3:07:F5:89:2F:B6:D7:D7:ED:C6:F5:2A:8E:80:6A:1C
X509v3 Authority Key Identifier:
keyid:0C:71:61:E6:22:F6:3C:0D:B8:56:8D:8C:B4:C4:D7:C0:D9:80:83:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:b5:0f:c8:12:be:25:64:9d:af:3c:da:63:c6:f2:20:0d:4c:
27:de:9f:f5:ad:da:ac:80:85:36:0e:9e:6a:a1:70:d7:54:b2:
af:55:af:da:da:23:4d:dc:8b:ef:38:a8:e2:dc:64:23:07:55:
ae:7b:03:13:66:3d:f6:15:10:0e:04:4e:40:be:10:33:f1:fd:
a4:3f:96:49:f0:e9:97:f1:0c:e6:ce:2a:14:30:3d:ab:66:2e:
8f:9f:b3:86:10:54:2c:90:82:ee:43:b7:5c:b4:cf:84:30:13:
cd:01:83:d0:67:a4:c6:92:69:fb:5d:77:53:bf:0e:8b:53:7c:
4c:ca:60:e4:21:88:58:64:f7:fd:fd:06:38:8b:31:77:54:ae:
2a:61:7b:d1:52:06:f3:62:64:7c:7c:66:59:8e:ab:ab:a5:e5:
c5:6d:2e:b0:90:58:75:c2:cd:2b:87:39:f7:1f:18:da:91:12:
1a:9f:b5:17:4c:09:c2:9b:fa:08:db:8e:67:2b:cd:f5:34:4f:
c4:a4:36:93:61:53:a0:b5:2a:92:01:69:6d:93:83:8a:ef:08:
c5:eb:76:e0:55:b5:9b:85:42:fa:de:1f:ca:a6:cd:94:89:34:
d7:95:d3:9f:c5:52:7c:6a:1b:79:c9:4b:87:35:e1:1a:dd:99:
ce:02:f5:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:47:43 2025 by rpki-client