![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/cee6d0-2a5a-47a5-9a6a-853d2f183eb8/1/ouOnZzp5md1JaggNu6-hB3rZgPs.mft
File: ouOnZzp5md1JaggNu6-hB3rZgPs.mft (raw, json)
Hash identifier: QFTsiqhFBBkH3SYiE2tXzGzos6mJ4C7l8EWhXv1h1KM=
Subject key identifier: 64:75:AB:1C:9E:FA:D0:66:D0:22:E8:E9:3A:D8:29:87:79:E8:60:4C
Authority key identifier: A2:E3:A7:67:3A:79:99:DD:49:6A:08:0D:BB:AF:A1:07:7A:D9:80:FB
Certificate issuer: /CN=a2e3a7673a7999dd496a080dbbafa1077ad980fb
Certificate serial: 019511A2FB1347A30A15F05352104923A0CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ouOnZzp5md1JaggNu6-hB3rZgPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/cee6d0-2a5a-47a5-9a6a-853d2f183eb8/1/ouOnZzp5md1JaggNu6-hB3rZgPs.mft
Manifest number: 0760
Signing time: Mon 17 Feb 2025 02:00:48 +0000
Manifest this update: Mon 17 Feb 2025 02:00:48 +0000
Manifest next update: Tue 18 Feb 2025 02:00:48 +0000
Files and hashes: 1: ouOnZzp5md1JaggNu6-hB3rZgPs.crl (hash: J7qgevJfqmiMVg+5BAXcD4JQRKol1kXhHA5zT4fSqJ4=)
2: yh39pVm08WyKzque3ySW6KQ3mm4.roa (hash: aDD+CJaY1WYlwKiV6sPZZhcyKFKZy1s5Oj5KyeAwphE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/cee6d0-2a5a-47a5-9a6a-853d2f183eb8/1/ouOnZzp5md1JaggNu6-hB3rZgPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/cee6d0-2a5a-47a5-9a6a-853d2f183eb8/1/ouOnZzp5md1JaggNu6-hB3rZgPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ouOnZzp5md1JaggNu6-hB3rZgPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:fb:13:47:a3:0a:15:f0:53:52:10:49:23:a0:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2e3a7673a7999dd496a080dbbafa1077ad980fb
Validity
Not Before: Feb 17 02:00:48 2025 GMT
Not After : Feb 18 02:00:48 2025 GMT
Subject: CN=6475ab1c9efad066d022e8e93ad8298779e8604c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:de:40:fc:b1:b8:dc:d6:31:85:25:0d:1f:7e:
12:7a:26:db:2b:08:9e:35:95:cb:08:53:5c:77:34:
68:0d:2c:fd:67:35:75:a3:2d:42:13:17:ee:14:91:
37:19:4a:dd:2e:c2:f7:84:1c:24:13:18:d7:ae:d0:
4e:ab:6e:05:7b:5d:0f:55:87:81:52:cd:f6:61:e5:
16:a0:c8:2d:2f:6f:9c:33:81:e0:c8:58:86:1c:5a:
b8:2f:ed:fe:43:ae:75:4b:5b:f7:95:18:e2:fb:c4:
5a:43:b8:13:8a:e4:44:e7:02:11:26:f3:b5:8e:40:
f5:36:0a:a5:63:47:57:05:97:c3:93:6b:20:3b:dd:
b9:0f:11:5b:aa:f3:0b:17:6c:b7:0e:bc:7c:18:43:
1b:ff:c9:80:cc:86:47:33:74:00:e5:60:7d:1c:d4:
1d:3b:78:15:6c:c9:e4:15:d5:1b:d2:04:b9:11:54:
26:18:aa:ee:52:d9:ce:0d:46:ce:8f:41:a8:a3:71:
5a:60:19:59:01:99:fb:8c:58:2c:af:76:a8:60:42:
ee:8f:80:15:6a:b1:77:a6:55:b6:c1:e5:69:19:ff:
4d:6f:98:06:7b:1c:dc:ff:cf:ee:4a:0d:0a:13:b9:
99:15:39:d1:cd:f0:54:eb:a6:4d:f8:47:a0:61:03:
cd:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:75:AB:1C:9E:FA:D0:66:D0:22:E8:E9:3A:D8:29:87:79:E8:60:4C
X509v3 Authority Key Identifier:
keyid:A2:E3:A7:67:3A:79:99:DD:49:6A:08:0D:BB:AF:A1:07:7A:D9:80:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ouOnZzp5md1JaggNu6-hB3rZgPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/cee6d0-2a5a-47a5-9a6a-853d2f183eb8/1/ouOnZzp5md1JaggNu6-hB3rZgPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/cee6d0-2a5a-47a5-9a6a-853d2f183eb8/1/ouOnZzp5md1JaggNu6-hB3rZgPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:4b:5d:20:eb:71:94:da:fd:d7:8a:7f:a0:49:69:f9:52:ab:
fa:22:03:e4:d6:7b:62:a6:ec:e4:b9:23:9d:80:3d:65:3a:fd:
ce:07:fe:60:b5:c6:fc:03:30:44:65:df:cf:93:85:ab:c5:6b:
1e:42:cb:de:e4:e0:a2:e4:78:63:74:14:9c:08:70:a0:dd:ef:
91:cf:b8:f3:92:0d:0f:8d:56:c5:7f:80:24:3d:cf:0c:46:d4:
c1:a3:26:8e:73:d1:3a:c1:9d:bd:fe:28:a6:d4:0c:a9:63:af:
62:59:0c:d9:a9:00:9b:7f:57:55:b7:3d:71:00:c5:94:99:2d:
c9:ac:8c:8e:45:61:d4:8b:8f:68:62:b7:4d:8f:9b:a7:a6:0e:
c1:04:a4:72:a1:72:da:5b:bf:c6:bd:b2:89:b5:c2:be:37:ea:
56:7e:f8:9f:db:16:ad:0d:5c:44:80:1d:43:8a:55:b1:a9:4b:
c7:47:58:30:ad:26:21:63:76:aa:8f:ac:96:72:c3:fd:01:d3:
ad:0b:79:28:5d:bc:78:25:7a:03:1c:b7:03:6c:29:10:21:51:
b3:37:fa:6f:6b:f1:77:9f:a7:2a:25:20:91:7a:52:a1:94:3d:
7b:05:72:18:30:a8:d6:2e:8f:78:19:4f:5d:bc:48:d9:54:f0:
db:77:45:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:00:09 2025 by rpki-client