![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/d81f14-1ff4-42b1-9b9f-34cd0575e1cb/1/zFX3bP6dr7LZQZAUK8iqsNMoBu4.mft
File: zFX3bP6dr7LZQZAUK8iqsNMoBu4.mft (raw, json)
Hash identifier: WkH+pCj+XBsDAJWayNsHfqo7LxNdej41aqy8l+jYbk8=
Subject key identifier: A0:A0:D9:87:71:5F:EC:9A:B1:87:D0:12:4C:37:8D:BB:A7:09:FC:FA
Authority key identifier: CC:55:F7:6C:FE:9D:AF:B2:D9:41:90:14:2B:C8:AA:B0:D3:28:06:EE
Certificate issuer: /CN=cc55f76cfe9dafb2d94190142bc8aab0d32806ee
Certificate serial: 019510C769DA44F182E62E2550E692CB378A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zFX3bP6dr7LZQZAUK8iqsNMoBu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/d81f14-1ff4-42b1-9b9f-34cd0575e1cb/1/zFX3bP6dr7LZQZAUK8iqsNMoBu4.mft
Manifest number: 0A4C
Signing time: Sun 16 Feb 2025 22:00:58 +0000
Manifest this update: Sun 16 Feb 2025 22:00:58 +0000
Manifest next update: Mon 17 Feb 2025 22:00:58 +0000
Files and hashes: 1: qrZKSOFpAICcNRLOx5AIirWqvBo.roa (hash: h3wCdr8A46DdDE5I42tcnvu/LE64VypZvT4djSXNycs=)
2: zFX3bP6dr7LZQZAUK8iqsNMoBu4.crl (hash: zk3R4sQSKUOY7++AhScjndITIFGzj/F8YhDinppiysA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/d81f14-1ff4-42b1-9b9f-34cd0575e1cb/1/zFX3bP6dr7LZQZAUK8iqsNMoBu4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/d81f14-1ff4-42b1-9b9f-34cd0575e1cb/1/zFX3bP6dr7LZQZAUK8iqsNMoBu4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zFX3bP6dr7LZQZAUK8iqsNMoBu4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:69:da:44:f1:82:e6:2e:25:50:e6:92:cb:37:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc55f76cfe9dafb2d94190142bc8aab0d32806ee
Validity
Not Before: Feb 16 22:00:58 2025 GMT
Not After : Feb 17 22:00:58 2025 GMT
Subject: CN=a0a0d987715fec9ab187d0124c378dbba709fcfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:00:48:0b:b8:64:18:65:8e:0f:e3:9f:3e:e3:
57:0b:a2:a9:38:9e:3c:8d:b0:f4:4f:e5:e5:ff:6c:
ef:6a:18:5a:61:27:7e:4a:9d:9a:25:2d:d2:79:97:
48:f0:70:c3:55:17:78:29:b7:ab:96:11:43:63:07:
ba:75:27:62:63:5d:af:9f:a4:04:53:c9:86:93:b8:
f8:bc:0a:06:53:3e:b1:36:21:fa:f6:4e:30:f0:f9:
89:d9:5b:79:0e:d4:46:fe:94:ab:fd:5f:be:35:f3:
f3:3c:01:e1:94:f2:49:33:76:b8:7b:42:b3:9f:c0:
d6:ae:d7:a4:0c:94:ae:ef:5e:b3:69:93:be:69:fd:
f2:cc:e4:22:c9:12:53:3e:2f:27:61:4a:7c:99:ab:
66:59:50:68:fe:d8:b1:9f:fc:69:e6:91:75:4e:b3:
a2:a9:c6:1b:c7:2f:bb:54:99:93:03:62:ea:e3:56:
3b:95:9a:ce:f3:a3:56:33:e8:2f:2a:a6:fa:46:34:
43:ca:ca:cc:a8:11:f1:df:7e:4f:15:02:28:7a:72:
e0:51:06:f3:72:06:6f:ac:6a:87:ae:a9:1e:45:16:
53:2a:9f:ba:b7:0b:99:d1:8b:5e:f0:c1:f6:dc:3c:
60:d5:5a:b7:32:21:06:69:86:bc:03:68:78:f2:91:
d9:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:A0:D9:87:71:5F:EC:9A:B1:87:D0:12:4C:37:8D:BB:A7:09:FC:FA
X509v3 Authority Key Identifier:
keyid:CC:55:F7:6C:FE:9D:AF:B2:D9:41:90:14:2B:C8:AA:B0:D3:28:06:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zFX3bP6dr7LZQZAUK8iqsNMoBu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d81f14-1ff4-42b1-9b9f-34cd0575e1cb/1/zFX3bP6dr7LZQZAUK8iqsNMoBu4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d81f14-1ff4-42b1-9b9f-34cd0575e1cb/1/zFX3bP6dr7LZQZAUK8iqsNMoBu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:91:14:76:a3:7a:1c:8f:7d:57:12:36:ce:83:12:53:4f:8f:
46:42:d0:13:cf:bc:a8:95:aa:cc:b0:db:9d:ed:ae:d7:b8:12:
7b:d7:cb:63:f6:1f:70:5e:f9:32:f1:e6:f3:dd:ec:1d:81:6a:
af:3b:01:8d:54:cc:55:84:73:57:48:6f:44:5f:8b:bf:5b:09:
26:bd:cb:6b:b7:a6:15:b1:d7:09:97:e2:e7:e3:59:38:2b:92:
3e:53:e7:b8:27:f9:4a:6d:5c:31:e9:73:94:e5:b9:1b:fc:26:
da:97:df:33:92:8e:f3:0a:d6:e0:b3:40:30:28:7c:6c:53:02:
bc:ed:b9:03:ff:d4:34:f7:68:00:82:43:19:41:f0:51:4e:11:
54:f6:6c:55:e7:10:24:ef:c5:d3:fe:bc:1e:48:e8:bf:d5:00:
8d:93:fc:0e:a9:6f:33:f7:05:70:6d:e5:70:aa:39:49:a4:49:
16:df:55:45:b9:1b:4c:14:cf:1d:e7:ce:db:61:11:0e:8d:f6:
3b:69:ba:b6:94:c2:29:2f:ba:b4:0f:b3:aa:0c:8d:dd:2a:82:
91:2b:a6:bc:d8:a0:be:f9:78:3d:cb:21:31:ce:3f:2e:e6:7a:
85:4e:51:05:40:d1:43:be:65:68:54:ff:5c:07:d1:73:15:f0:
50:8f:9c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:13:03 2025 by rpki-client