![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.mft
File: BySLUtI-vSN7iotuY-3QLf7vmEw.mft (raw, json)
Hash identifier: a4C5GyWy+bsYerPPD0hXy+NH6o+YG8ieN1olrmOhBi0=
Subject key identifier: 4E:DA:CF:E6:8C:DB:3D:E3:91:BA:F5:5F:52:CE:47:B0:71:09:FA:DE
Authority key identifier: 07:24:8B:52:D2:3E:BD:23:7B:8A:8B:6E:63:ED:D0:2D:FE:EF:98:4C
Certificate issuer: /CN=07248b52d23ebd237b8a8b6e63edd02dfeef984c
Certificate serial: 01951134EE58331003752E22C4719F0559CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BySLUtI-vSN7iotuY-3QLf7vmEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.mft
Manifest number: 013E
Signing time: Mon 17 Feb 2025 00:00:36 +0000
Manifest this update: Mon 17 Feb 2025 00:00:36 +0000
Manifest next update: Tue 18 Feb 2025 00:00:36 +0000
Files and hashes: 1: BySLUtI-vSN7iotuY-3QLf7vmEw.crl (hash: gs1Ah6smVrhF9NISJ3C7BPfnJGzZ9IUkbPd1g6yPEm8=)
2: XlhaEzLsA7jWqPOILfz8Yhd9kdk.roa (hash: fE0R2m8vpEkHRD5syUluKcIvECTiC6hfTnpdsOL+n0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BySLUtI-vSN7iotuY-3QLf7vmEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:ee:58:33:10:03:75:2e:22:c4:71:9f:05:59:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07248b52d23ebd237b8a8b6e63edd02dfeef984c
Validity
Not Before: Feb 17 00:00:36 2025 GMT
Not After : Feb 18 00:00:36 2025 GMT
Subject: CN=4edacfe68cdb3de391baf55f52ce47b07109fade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3a:d9:f6:54:e4:f0:49:7b:5f:68:cc:31:25:
72:41:bc:6e:a7:3f:99:f8:30:c9:f2:8d:06:02:f5:
43:a7:85:01:18:80:2c:56:9c:fa:99:5f:57:a8:10:
13:d4:43:78:4a:e1:e9:4b:42:72:0f:ea:7c:14:bb:
24:f5:ae:43:48:d1:be:7a:48:77:bf:86:75:e7:2c:
f6:71:f7:ad:1c:9d:36:46:41:17:9a:60:61:6a:00:
e6:c8:65:e2:4b:a9:54:8d:27:b4:07:72:cb:d9:dd:
eb:d6:25:9c:da:22:01:26:22:38:d2:65:db:4c:86:
df:ef:c4:f8:d6:3a:61:d8:16:20:c4:b0:c3:9c:63:
bb:c6:07:77:1a:26:95:4d:a8:2a:89:14:b3:e0:f8:
c0:1d:3c:5e:e6:6a:a3:a1:7a:3b:9a:ea:2e:6c:29:
51:86:0b:2d:4e:46:7b:0c:b5:c3:d0:35:3f:e4:f5:
d8:e5:32:e5:1c:5e:87:4e:eb:62:83:7c:45:91:87:
52:46:ab:44:c1:ff:82:2e:74:f8:16:02:46:9d:65:
9e:e9:b2:9e:24:7e:25:aa:87:87:59:b6:9a:91:87:
7b:72:49:52:64:ca:8c:a5:c0:88:0c:c5:09:10:74:
57:14:b9:d0:32:b7:f1:b1:46:21:2d:6a:55:8f:7d:
75:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:DA:CF:E6:8C:DB:3D:E3:91:BA:F5:5F:52:CE:47:B0:71:09:FA:DE
X509v3 Authority Key Identifier:
keyid:07:24:8B:52:D2:3E:BD:23:7B:8A:8B:6E:63:ED:D0:2D:FE:EF:98:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BySLUtI-vSN7iotuY-3QLf7vmEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:58:c0:df:9c:99:66:88:20:cb:39:ce:e5:a4:09:0f:43:cb:
b9:85:ad:cf:9a:84:b2:e7:f5:e5:08:e6:7e:7d:e0:97:f0:f4:
fc:d9:a0:d9:fc:c3:6d:e4:18:ce:18:79:8c:a1:3d:58:4a:11:
d6:30:c2:95:26:13:f8:89:ba:c5:63:36:c8:10:22:2b:5f:fb:
76:d8:07:62:3a:cf:60:02:8b:4a:7e:e4:ed:ee:85:8a:5a:c5:
0d:19:53:e8:fa:be:d4:07:2e:16:8d:11:fb:53:77:72:70:4e:
e6:66:2a:06:1e:11:40:94:e4:20:00:85:63:3c:82:ad:79:a3:
c4:91:28:21:45:16:73:2d:9f:5b:8c:b7:00:3b:ff:79:9c:1c:
8f:9c:03:7a:c9:0d:2d:5c:91:22:07:0f:05:ff:78:e1:2d:a2:
2b:6b:fc:6b:16:38:63:82:9c:a8:3a:63:81:73:2f:d6:47:aa:
57:96:ae:74:8d:45:79:52:d5:62:90:51:33:49:35:00:58:21:
1a:fa:66:7b:56:a5:2e:ac:cc:79:3c:fc:09:3f:2e:20:a3:4d:
67:cf:5a:9b:b2:6e:15:92:8d:40:2e:a4:e8:3d:53:f5:34:ca:
17:b2:a6:7f:a2:b2:1e:4b:d1:2f:8c:9c:78:16:23:60:82:5e:
bc:e7:63:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:17:47 2025 by rpki-client