![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/o2dNWISlCoTgfb32eY3cu5zCAy4.mft
File: o2dNWISlCoTgfb32eY3cu5zCAy4.mft (raw, json)
Hash identifier: GNOI0TnGm4y6wqC2TTYHeRBXENatLDjLhjhxqcmclgA=
Subject key identifier: 7F:48:29:9F:34:DF:D7:EB:A4:93:9F:97:73:33:83:6C:8B:B4:E9:86
Authority key identifier: A3:67:4D:58:84:A5:0A:84:E0:7D:BD:F6:79:8D:DC:BB:9C:C2:03:2E
Certificate issuer: /CN=a3674d5884a50a84e07dbdf6798ddcbb9cc2032e
Certificate serial: 0195116C29104CC74A111FAFCF518E294CF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2dNWISlCoTgfb32eY3cu5zCAy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/o2dNWISlCoTgfb32eY3cu5zCAy4.mft
Manifest number: 11A6
Signing time: Mon 17 Feb 2025 01:00:55 +0000
Manifest this update: Mon 17 Feb 2025 01:00:55 +0000
Manifest next update: Tue 18 Feb 2025 01:00:55 +0000
Files and hashes: 1: DsyqwESYp4bmMSs9uCFJzZRR7bA.roa (hash: E3RC3t5fdJdmxwazPUOCHAze3MC/dZe6+l07MFZq2yo=)
2: SFuqJn2DzpiEwmJBsRfw9_GaM2E.roa (hash: +vZ9yeoCyMalYsdF7K+e902XvcsekiSx1I5xtnBl3PU=)
3: URz6VBEBARWru2pwN9on0fqVD_8.roa (hash: 9b/lI/zwvoC+7Oni/t6kARR6u3owQnT+bWIMpu3veFA=)
4: lab5J5RcCtas1L2Y7YMr6FyHoxc.roa (hash: N6A8KQuXMFwbmov+/kvLYo4potH2uakqtbpTY9DXAJc=)
5: muNpJENCGJ0J_DTMRNj99Wufntw.roa (hash: rlTQFNlHRqLDCrFKsl2Oqf+npVqRQ0yuhfH2dviuMA0=)
6: o2dNWISlCoTgfb32eY3cu5zCAy4.crl (hash: IzIcuaPb4ztb/iT2NVtdhGvdGcJFDRVmvpuWovmusJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/o2dNWISlCoTgfb32eY3cu5zCAy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/o2dNWISlCoTgfb32eY3cu5zCAy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/o2dNWISlCoTgfb32eY3cu5zCAy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6c:29:10:4c:c7:4a:11:1f:af:cf:51:8e:29:4c:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3674d5884a50a84e07dbdf6798ddcbb9cc2032e
Validity
Not Before: Feb 17 01:00:55 2025 GMT
Not After : Feb 18 01:00:55 2025 GMT
Subject: CN=7f48299f34dfd7eba4939f977333836c8bb4e986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:4d:8e:05:f6:3f:ff:3f:43:73:b3:7f:51:46:
2a:98:95:3e:5d:52:44:1e:07:62:85:90:ad:89:93:
df:46:05:b4:61:0b:f4:37:2f:23:86:c2:50:f9:30:
f8:7a:be:2f:0d:b3:76:5a:f5:a5:bb:80:27:a3:ce:
98:41:85:32:f6:fe:b3:03:2d:c6:db:57:70:0b:52:
86:17:f8:b6:4e:36:27:99:ea:e9:2a:08:fb:30:cb:
e5:7d:6b:1c:cf:78:df:ea:47:e7:cf:5e:62:32:2e:
85:14:e8:b3:41:70:0c:f8:cf:5d:57:36:df:af:77:
6f:08:01:85:1a:80:a6:08:50:93:6c:c1:16:1a:56:
b0:3a:99:9b:73:d1:4a:fb:cc:df:01:95:6a:15:c9:
d3:5a:6e:b1:f9:da:36:6a:7f:c6:7e:df:bd:8c:a7:
f2:72:66:3d:c4:1e:cf:92:48:75:70:b5:55:5e:c8:
54:9c:c1:6e:52:98:0c:22:74:34:14:cb:d7:a4:9b:
6d:36:0d:4b:3d:ce:e3:e1:97:30:e9:f5:65:eb:c2:
1b:c7:ce:51:ba:c3:52:e0:34:c3:74:b8:c6:f1:24:
f8:4c:d9:28:91:06:df:e9:0b:de:00:4a:f9:9c:96:
38:43:24:e9:61:20:c3:50:81:26:51:49:14:79:7f:
41:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:48:29:9F:34:DF:D7:EB:A4:93:9F:97:73:33:83:6C:8B:B4:E9:86
X509v3 Authority Key Identifier:
keyid:A3:67:4D:58:84:A5:0A:84:E0:7D:BD:F6:79:8D:DC:BB:9C:C2:03:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2dNWISlCoTgfb32eY3cu5zCAy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/o2dNWISlCoTgfb32eY3cu5zCAy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/o2dNWISlCoTgfb32eY3cu5zCAy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:30:6e:49:bb:94:14:fc:4f:6c:b3:99:ce:b7:8d:ec:00:2d:
3d:6e:61:d7:e0:58:9f:60:4d:67:6b:97:35:ab:e9:05:a7:1e:
44:a5:95:46:f3:6c:b9:7c:99:17:79:f0:2d:f3:a6:64:0c:ce:
d3:56:ed:13:02:13:b2:cf:4f:29:79:a8:ae:7d:fc:df:08:a4:
0a:fe:ee:2b:42:5e:08:1d:7b:d9:a9:3f:c2:f6:ad:e4:f5:da:
3d:23:85:6c:50:48:86:24:3e:16:5d:6f:6a:8c:d8:5f:54:6a:
f1:34:83:a6:44:a3:e4:ed:04:8d:87:33:f1:c0:e3:00:b8:e2:
2d:43:40:42:da:ec:b0:13:58:fe:c2:9f:bb:3d:0a:13:bc:49:
62:02:4d:ed:f3:1c:72:da:c5:eb:b5:63:44:3a:56:f7:89:6d:
71:52:19:b2:bd:13:a7:ac:44:bd:2b:0d:fe:a5:12:f0:a3:83:
dc:da:41:1e:a5:56:a6:f4:b2:41:26:f5:c3:23:c4:54:e7:f6:
48:45:da:6e:c9:97:a3:30:d4:d1:cd:c2:77:8f:f4:c3:b8:71:
00:94:be:f4:82:bc:a7:73:17:cc:46:2c:21:dc:40:b6:36:0e:
d2:c0:c3:f4:db:59:7a:24:7a:a2:bc:fb:3f:8c:80:02:6a:fd:
3c:3a:28:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:55:49 2025 by rpki-client