![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/adf329-09c5-4bb8-af6c-d95ab99fb0c5/1/82-cuv9lO2ATS0aqcOeRFwmKfGQ.mft
File: 82-cuv9lO2ATS0aqcOeRFwmKfGQ.mft (raw, json)
Hash identifier: zPiphX+Sk0NLGl9VBssB/3ZOKqQUb8AAZ0wkTHapbOw=
Subject key identifier: 95:72:A8:22:D6:91:B0:79:F8:31:05:B1:CE:7C:9E:68:36:A2:09:6E
Authority key identifier: F3:6F:9C:BA:FF:65:3B:60:13:4B:46:AA:70:E7:91:17:09:8A:7C:64
Certificate issuer: /CN=f36f9cbaff653b60134b46aa70e79117098a7c64
Certificate serial: 019511353B8E00FB1BEE1202D892B001A4E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/82-cuv9lO2ATS0aqcOeRFwmKfGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/adf329-09c5-4bb8-af6c-d95ab99fb0c5/1/82-cuv9lO2ATS0aqcOeRFwmKfGQ.mft
Manifest number: 0F5C
Signing time: Mon 17 Feb 2025 00:00:56 +0000
Manifest this update: Mon 17 Feb 2025 00:00:56 +0000
Manifest next update: Tue 18 Feb 2025 00:00:56 +0000
Files and hashes: 1: 4Ocvr5gePs8rQXUxhPB4UFZ5TcY.roa (hash: FS134QCSv+f7Sa1190NHb4XIoYMRMPf9uXBwxQKSXX0=)
2: 82-cuv9lO2ATS0aqcOeRFwmKfGQ.crl (hash: 0ck44qNq5NNhVLonfbIEXcCDa1GyOM8p0643+Faf26A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/adf329-09c5-4bb8-af6c-d95ab99fb0c5/1/82-cuv9lO2ATS0aqcOeRFwmKfGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/adf329-09c5-4bb8-af6c-d95ab99fb0c5/1/82-cuv9lO2ATS0aqcOeRFwmKfGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/82-cuv9lO2ATS0aqcOeRFwmKfGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:35:3b:8e:00:fb:1b:ee:12:02:d8:92:b0:01:a4:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f36f9cbaff653b60134b46aa70e79117098a7c64
Validity
Not Before: Feb 17 00:00:56 2025 GMT
Not After : Feb 18 00:00:56 2025 GMT
Subject: CN=9572a822d691b079f83105b1ce7c9e6836a2096e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:db:ff:a8:65:29:72:2a:ce:c3:26:2b:22:87:
5e:0b:cb:31:30:10:1b:5f:c7:8b:89:38:4e:e7:12:
d3:28:fc:b5:0d:05:d1:06:01:a2:e0:c8:7e:17:8c:
42:d3:4e:9b:f0:2b:0f:2f:d1:70:52:ea:70:73:e9:
34:54:43:3e:ca:c4:96:4a:b3:5f:31:a5:c9:04:91:
7b:1f:8a:da:8b:bf:0a:50:ad:cd:4e:64:71:40:2e:
b9:fe:17:d8:e4:44:92:d8:d1:e8:8b:6a:9e:cd:a5:
79:58:4e:98:52:92:aa:2f:b0:c3:37:be:62:5a:3b:
0e:37:79:44:3f:bc:2d:b1:10:94:3f:9a:ba:79:5e:
05:94:cd:bb:c0:a7:b2:23:54:36:02:df:c2:08:c9:
ea:88:5e:9e:21:39:c4:f2:fb:6d:eb:2a:6b:4a:57:
10:88:32:40:5d:24:e2:6b:13:7a:6e:bf:2a:80:4a:
b9:c3:13:7f:a8:58:d4:ff:80:02:f0:3e:23:1b:bf:
7b:60:ac:2f:53:97:fb:71:de:d9:03:30:b9:12:73:
37:9a:49:59:c0:bf:fd:a2:b3:55:66:0a:95:b9:4a:
78:d0:95:36:65:18:59:07:cb:ae:6d:3f:65:fd:55:
6d:6f:19:bc:92:4e:a6:84:0e:4d:52:77:bc:db:cd:
fc:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:72:A8:22:D6:91:B0:79:F8:31:05:B1:CE:7C:9E:68:36:A2:09:6E
X509v3 Authority Key Identifier:
keyid:F3:6F:9C:BA:FF:65:3B:60:13:4B:46:AA:70:E7:91:17:09:8A:7C:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/82-cuv9lO2ATS0aqcOeRFwmKfGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/adf329-09c5-4bb8-af6c-d95ab99fb0c5/1/82-cuv9lO2ATS0aqcOeRFwmKfGQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/adf329-09c5-4bb8-af6c-d95ab99fb0c5/1/82-cuv9lO2ATS0aqcOeRFwmKfGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:e8:2f:4c:d3:04:b8:27:0b:cc:ef:b6:1f:80:3c:3d:cf:19:
ac:4e:ef:6f:dc:8f:cd:c2:6c:15:61:65:16:eb:69:67:a3:28:
a1:ed:bc:b4:52:ee:71:fc:3d:fe:5d:a3:d7:ee:f8:37:94:a1:
d5:54:14:72:17:5c:a6:4a:51:3b:0f:1f:d9:42:42:f5:f7:72:
4f:83:69:3a:47:cc:d5:09:1f:92:40:74:a9:32:75:28:00:6b:
a3:3f:60:da:d2:8d:69:a1:21:70:cd:97:84:70:67:5e:69:97:
18:78:e9:88:d0:a9:de:4c:36:b4:e1:dc:b5:d6:79:5b:6e:dc:
da:da:7c:e0:8b:ae:3e:fe:3f:74:fc:9b:70:8c:40:1a:de:9d:
a3:80:80:dc:54:7f:63:11:83:df:fa:84:ea:4c:40:a9:1b:b1:
60:08:50:9b:a2:0a:c9:3b:cf:5d:88:83:8a:35:26:90:39:57:
1c:aa:62:41:6a:52:35:cf:e6:12:64:90:28:3c:b2:0b:1c:a3:
4b:10:fa:21:ae:00:87:be:50:91:43:dc:03:ca:fa:91:5b:47:
8a:1f:f7:d2:05:95:20:eb:3f:68:f9:83:e0:89:e0:22:b3:1c:
2e:9e:de:07:58:0a:f6:c9:15:b9:b5:51:d8:c2:f3:b4:14:92:
23:4e:b4:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:35:57 2025 by rpki-client