![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.mft
File: 7yqYsiGr5N2VmZ7vKS_wvqQSGKw.mft (raw, json)
Hash identifier: kmCaKqKuTHjzqdw1iXLAfYhFfZd9yhlVKVgfT7BcLq0=
Subject key identifier: D3:1E:23:D7:56:DA:14:64:55:17:39:05:98:6E:B2:28:6E:B7:34:85
Authority key identifier: EF:2A:98:B2:21:AB:E4:DD:95:99:9E:EF:29:2F:F0:BE:A4:12:18:AC
Certificate issuer: /CN=ef2a98b221abe4dd95999eef292ff0bea41218ac
Certificate serial: 019510FE211F8CA45FD94E55A169609F3B42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.mft
Manifest number: 12C0
Signing time: Sun 16 Feb 2025 23:00:44 +0000
Manifest this update: Sun 16 Feb 2025 23:00:44 +0000
Manifest next update: Mon 17 Feb 2025 23:00:44 +0000
Files and hashes: 1: 7yqYsiGr5N2VmZ7vKS_wvqQSGKw.crl (hash: yK4/Hr5QcpNVuHU4Ja3wc0OgfpDZzOm3fpCzYjMM188=)
2: UXcHNRDTyy3PiUqS2xFpW1tKLYo.roa (hash: BltR1oVh4LzI1B9mL1LTvil5PzPzPEDEKGPAhFkqH3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fe:21:1f:8c:a4:5f:d9:4e:55:a1:69:60:9f:3b:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef2a98b221abe4dd95999eef292ff0bea41218ac
Validity
Not Before: Feb 16 23:00:44 2025 GMT
Not After : Feb 17 23:00:44 2025 GMT
Subject: CN=d31e23d756da146455173905986eb2286eb73485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c4:31:38:c8:d5:1d:33:75:cb:2c:8e:21:5c:
16:bc:4f:f1:72:ea:4c:71:1f:65:b9:d8:cd:34:02:
9a:b6:1a:4a:15:b9:46:29:19:6d:31:75:34:1e:7d:
2f:44:10:66:0f:b4:29:9e:5a:70:bd:57:c7:34:58:
46:d7:30:64:52:a4:59:24:f6:f6:4d:13:f3:96:84:
93:79:4b:9c:6c:c6:ea:14:65:2c:89:d6:06:7c:b0:
21:19:a4:1e:a2:7a:7e:b1:01:9d:f3:0e:65:a1:f1:
ea:c8:f0:62:4c:33:3a:49:55:14:de:3a:37:6c:5b:
09:2b:0c:cf:b1:a1:e4:e4:4c:2b:82:97:8f:3b:10:
70:94:3b:f8:4c:ae:4c:77:f5:8e:51:d3:6a:1e:61:
7c:b1:9e:76:b2:24:14:bf:4c:e3:29:4c:1d:7b:4d:
3f:cb:24:7d:bb:3f:c4:19:82:de:26:ff:28:b7:20:
44:62:a9:b7:8b:9f:dd:64:ca:ab:f1:8c:79:39:d1:
26:92:56:bb:54:fc:8f:36:2e:10:37:da:eb:66:06:
9d:f8:62:16:30:60:cb:7b:a5:ca:a9:82:14:2f:64:
55:f3:5c:19:8c:37:52:4e:cb:19:52:5c:5c:62:30:
30:ca:fd:c7:29:15:cb:23:a7:83:96:05:08:15:b5:
d3:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:1E:23:D7:56:DA:14:64:55:17:39:05:98:6E:B2:28:6E:B7:34:85
X509v3 Authority Key Identifier:
keyid:EF:2A:98:B2:21:AB:E4:DD:95:99:9E:EF:29:2F:F0:BE:A4:12:18:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:de:c1:7b:a1:ed:eb:66:11:78:9a:f4:f9:cb:f3:6d:c0:c1:
ea:bc:42:18:9c:ce:ba:da:6b:87:cd:52:b0:a3:16:c0:22:e4:
2a:9f:c9:59:f9:78:40:fb:e3:ab:03:15:cb:af:25:cf:63:da:
df:cd:6e:cb:a6:6f:cb:ac:3b:13:18:6a:09:38:b7:48:2a:4f:
78:2b:38:45:f1:d6:11:00:7f:bf:e9:8e:60:33:05:74:f5:e4:
6c:25:3f:46:c7:db:e6:b6:8a:2b:22:e1:2f:12:c1:72:ba:35:
43:33:21:7a:9e:3f:07:f8:6e:13:ff:28:c7:17:bf:11:cb:89:
28:1e:b8:3e:4e:e8:d9:34:27:6e:52:74:82:eb:50:42:b8:70:
50:89:85:42:0e:2c:0a:ce:1a:ea:a5:bf:cd:8b:1c:a1:99:97:
a2:2f:6e:8a:ec:90:c9:f5:3b:da:79:77:82:7a:35:9d:1c:20:
a2:58:5e:93:b1:0e:0a:72:90:01:8b:69:6e:b5:9f:97:f6:e1:
e6:6f:0d:3c:ca:a2:fc:11:ef:51:e0:03:54:dc:37:2e:89:7d:
05:4e:31:12:b5:27:6e:de:8c:07:6f:df:ea:8c:5e:5f:50:5f:
b6:c3:9d:6d:c2:72:cc:82:ed:7f:9e:f5:24:e3:0c:0f:f9:af:
50:5d:32:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:16:03 2025 by rpki-client