![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6fbb99-d1f3-473e-9530-fe7dacc1c409/1/HgNe0IrXUR-_4QfbH9qF4qEAtcY.mft
File: HgNe0IrXUR-_4QfbH9qF4qEAtcY.mft (raw, json)
Hash identifier: QupAYdB24HW9IWNkbYjdHD8R5oCZm8i2JnNmrENxjLg=
Subject key identifier: 86:EE:0F:A0:A1:86:FC:F0:27:B2:3B:A3:87:CC:0C:8A:84:0B:83:39
Authority key identifier: 1E:03:5E:D0:8A:D7:51:1F:BF:E1:07:DB:1F:DA:85:E2:A1:00:B5:C6
Certificate issuer: /CN=1e035ed08ad7511fbfe107db1fda85e2a100b5c6
Certificate serial: 0195116C1736EDEC852E2434C67D496B1945
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HgNe0IrXUR-_4QfbH9qF4qEAtcY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/6fbb99-d1f3-473e-9530-fe7dacc1c409/1/HgNe0IrXUR-_4QfbH9qF4qEAtcY.mft
Manifest number: 01F7
Signing time: Mon 17 Feb 2025 01:00:51 +0000
Manifest this update: Mon 17 Feb 2025 01:00:51 +0000
Manifest next update: Tue 18 Feb 2025 01:00:51 +0000
Files and hashes: 1: HgNe0IrXUR-_4QfbH9qF4qEAtcY.crl (hash: M2VrkagZkZCOvSiinElGOGjDDF0DuL3w1lXMtmLkfEo=)
2: XiutpK5IFGvWb0JW8fGUzsQHR84.roa (hash: LnLSfYNTkXNsPaxH5mVhc1aUjmJ/QEWl9VYA4pHoDLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/6fbb99-d1f3-473e-9530-fe7dacc1c409/1/HgNe0IrXUR-_4QfbH9qF4qEAtcY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/6fbb99-d1f3-473e-9530-fe7dacc1c409/1/HgNe0IrXUR-_4QfbH9qF4qEAtcY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HgNe0IrXUR-_4QfbH9qF4qEAtcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6c:17:36:ed:ec:85:2e:24:34:c6:7d:49:6b:19:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e035ed08ad7511fbfe107db1fda85e2a100b5c6
Validity
Not Before: Feb 17 01:00:51 2025 GMT
Not After : Feb 18 01:00:51 2025 GMT
Subject: CN=86ee0fa0a186fcf027b23ba387cc0c8a840b8339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:d7:09:cc:2f:67:26:e3:21:d8:d9:9b:1b:9e:
78:9d:8e:eb:11:32:57:a8:60:63:3c:5d:d3:76:4f:
b3:a5:02:33:cc:91:af:0c:fc:5d:fa:9c:a0:60:4f:
b5:ca:56:95:df:d5:d5:7b:86:67:f6:fd:48:c7:15:
d0:18:fc:bc:6e:f7:f5:6d:ee:b2:9b:31:b3:9c:f0:
0b:49:6c:14:cf:8f:88:a2:ac:7e:2d:62:14:29:85:
73:a2:5c:3d:7e:52:9d:bb:9b:47:12:25:46:dc:06:
97:6d:45:08:24:86:35:48:54:a9:a1:43:8c:65:99:
12:dc:dc:db:8d:a8:34:4f:8b:9b:99:b8:d2:67:bc:
f8:34:3f:d5:37:b8:e4:3f:41:8d:23:21:54:97:aa:
c7:1f:ed:3c:2f:2b:db:a6:bc:02:45:c1:54:88:b4:
4b:c6:18:b7:75:2d:fb:38:d9:cb:cd:cf:d7:df:2c:
e7:f1:fc:d5:6d:9b:fa:34:2d:fb:d8:12:59:57:a3:
98:62:71:1d:b0:68:35:cd:4b:a9:d2:63:a6:44:0d:
ef:05:a3:c4:96:f3:02:1e:f7:4e:82:27:ea:08:ed:
25:ac:51:93:9c:5c:17:ac:2b:36:ba:65:0e:ff:66:
ed:cd:8b:bd:73:47:a2:09:16:9f:91:df:8c:ce:5d:
b6:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:EE:0F:A0:A1:86:FC:F0:27:B2:3B:A3:87:CC:0C:8A:84:0B:83:39
X509v3 Authority Key Identifier:
keyid:1E:03:5E:D0:8A:D7:51:1F:BF:E1:07:DB:1F:DA:85:E2:A1:00:B5:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgNe0IrXUR-_4QfbH9qF4qEAtcY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6fbb99-d1f3-473e-9530-fe7dacc1c409/1/HgNe0IrXUR-_4QfbH9qF4qEAtcY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6fbb99-d1f3-473e-9530-fe7dacc1c409/1/HgNe0IrXUR-_4QfbH9qF4qEAtcY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:d5:78:9f:a7:09:48:a7:b3:33:86:ae:97:16:69:83:d3:7f:
18:65:fe:e2:63:a2:bd:95:1d:d9:ca:2b:e6:80:02:5f:b3:6b:
ce:8e:ab:95:77:a3:5a:90:08:52:1d:58:72:fd:78:0d:d7:32:
71:a0:d4:bb:e4:76:57:5c:77:78:3d:40:4c:be:69:54:1a:41:
78:e0:c0:a1:cc:cb:96:11:59:c7:4c:a1:a4:e7:d1:eb:24:a4:
38:63:30:e2:51:c7:23:0e:4e:0f:52:5f:46:55:9a:d6:b8:dc:
ca:6c:66:10:8d:01:f3:3e:4c:e1:16:55:af:a6:fb:62:d6:79:
23:5d:a8:a7:f5:09:ac:04:02:a6:91:87:8d:7a:03:51:ec:44:
42:85:97:c6:92:0c:aa:76:2a:ed:b3:ba:7b:89:b4:c4:c1:9d:
96:38:5a:e0:66:18:c6:8a:01:c7:31:f5:df:8b:c3:f4:ba:70:
b2:39:7b:e4:9b:c3:e2:a0:8e:3a:76:33:88:cb:fe:01:cf:0a:
90:a4:32:42:19:69:10:6b:ad:f6:30:c7:1a:7a:ab:c6:f7:4c:
3c:c2:6e:12:bc:23:7c:2f:b4:59:18:1c:e7:2d:da:df:3f:18:
9e:7a:95:b9:cd:49:85:a7:32:f0:88:35:45:11:45:b5:24:06:
da:85:72:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:37:01 2025 by rpki-client