![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/e4622d-357b-4f86-8589-cda049b19143/1/rVYQTCidcf2Duoh774CRkU82biE.mft
File: rVYQTCidcf2Duoh774CRkU82biE.mft (raw, json)
Hash identifier: z3HJMqx3sJVSZmjfz1/f67YOGeQSvbucu/aE+IXBQBA=
Subject key identifier: B1:F1:51:FF:F8:D6:D6:65:E4:22:EE:33:9D:2E:6B:A9:9D:91:B3:7E
Authority key identifier: AD:56:10:4C:28:9D:71:FD:83:BA:88:7B:EF:80:91:91:4F:36:6E:21
Certificate issuer: /CN=ad56104c289d71fd83ba887bef8091914f366e21
Certificate serial: 019510C7A03C518179519368F0D55826655A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rVYQTCidcf2Duoh774CRkU82biE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/e4622d-357b-4f86-8589-cda049b19143/1/rVYQTCidcf2Duoh774CRkU82biE.mft
Manifest number: 0C5F
Signing time: Sun 16 Feb 2025 22:01:12 +0000
Manifest this update: Sun 16 Feb 2025 22:01:12 +0000
Manifest next update: Mon 17 Feb 2025 22:01:12 +0000
Files and hashes: 1: rVYQTCidcf2Duoh774CRkU82biE.crl (hash: QJ4mSLTTjRZmIdsW2BX/abcD69noVjnKFxm88eq8CRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/e4622d-357b-4f86-8589-cda049b19143/1/rVYQTCidcf2Duoh774CRkU82biE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/e4622d-357b-4f86-8589-cda049b19143/1/rVYQTCidcf2Duoh774CRkU82biE.mft
rsync://rpki.ripe.net/repository/DEFAULT/rVYQTCidcf2Duoh774CRkU82biE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:a0:3c:51:81:79:51:93:68:f0:d5:58:26:65:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad56104c289d71fd83ba887bef8091914f366e21
Validity
Not Before: Feb 16 22:01:12 2025 GMT
Not After : Feb 17 22:01:12 2025 GMT
Subject: CN=b1f151fff8d6d665e422ee339d2e6ba99d91b37e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:48:d3:b1:22:ba:8e:3f:b4:9d:a1:ca:de:da:
be:52:cc:d2:82:b1:09:8e:71:28:f2:6f:52:b5:e2:
96:d0:40:8c:83:a8:35:4b:4e:c5:0a:7d:bf:c6:48:
95:d2:7e:c8:35:b3:83:15:68:a1:9f:09:dd:62:0c:
4c:72:06:fc:b0:8c:7c:09:4e:b5:c4:e3:2c:77:f3:
58:a4:b3:3e:47:c2:30:b4:e2:ac:3e:ee:64:03:23:
b8:32:ee:1c:2e:08:fc:fa:8b:86:e3:92:5d:3d:fe:
b3:46:45:4e:ef:df:62:0b:7e:42:25:81:db:e9:7e:
e0:19:fe:2b:37:2a:d7:d2:05:91:91:75:04:59:cc:
88:db:2b:cc:0e:9b:84:84:92:ae:0b:9d:1f:4c:79:
1f:90:36:19:67:80:ef:56:f9:9e:d0:06:fa:42:29:
40:6e:c6:29:81:ca:00:bb:6d:a1:45:fb:57:78:6a:
96:e1:e8:14:76:5e:c6:71:3c:70:ff:41:64:c4:2f:
0c:d2:e0:1f:22:be:ee:94:39:95:6e:16:9a:46:6b:
52:d5:b3:5e:db:7e:aa:39:e0:08:af:7e:2a:cc:53:
77:c2:07:ad:f2:b3:35:cb:76:a1:db:56:c7:17:fa:
49:92:cf:33:a1:1a:b6:d2:89:46:25:e8:c8:38:a4:
da:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:F1:51:FF:F8:D6:D6:65:E4:22:EE:33:9D:2E:6B:A9:9D:91:B3:7E
X509v3 Authority Key Identifier:
keyid:AD:56:10:4C:28:9D:71:FD:83:BA:88:7B:EF:80:91:91:4F:36:6E:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rVYQTCidcf2Duoh774CRkU82biE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/e4622d-357b-4f86-8589-cda049b19143/1/rVYQTCidcf2Duoh774CRkU82biE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/e4622d-357b-4f86-8589-cda049b19143/1/rVYQTCidcf2Duoh774CRkU82biE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:56:07:18:36:98:88:38:2f:b7:28:d2:45:51:47:cc:73:54:
4f:4c:16:ca:e6:3f:b2:83:47:1c:76:c4:49:4e:f4:6d:b2:0c:
d8:01:63:34:12:7b:09:e0:7d:aa:4a:07:71:2f:fa:10:e5:d8:
a7:a1:f1:79:17:06:b6:d6:2b:6d:ca:b3:34:5a:ea:39:a8:d7:
27:38:64:2b:3a:8c:2a:b3:ec:c0:2f:3c:5f:c9:7c:64:c1:b7:
10:51:1b:b6:35:08:97:bd:cf:fb:74:98:cb:ca:86:82:22:9a:
18:05:b7:ba:ad:9d:8b:8c:b7:ab:e9:7c:be:78:34:ed:0e:e6:
24:d5:ab:86:17:77:19:1d:9f:22:91:c0:7f:82:73:f2:50:1f:
5a:0e:20:0a:eb:1e:da:6d:3e:92:1d:1a:d6:cc:49:10:1f:56:
84:d4:9a:ba:20:01:24:34:a0:70:29:3a:5b:9a:ad:67:b4:f1:
4b:b7:28:83:20:1f:8f:32:91:ab:14:1d:4f:01:4c:75:b9:61:
82:44:05:dc:22:20:a6:52:ad:fc:fd:af:4f:34:a8:02:de:78:
bc:bf:bc:b3:0c:40:63:7e:0c:6b:23:84:03:30:c7:65:3d:2e:
e1:90:c8:ea:85:f2:da:27:43:a0:cc:7d:cc:f5:07:14:08:5f:
f7:fd:b8:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:38:44 2025 by rpki-client