![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/26641a-b4f9-4fba-867d-f7f36457874e/1/WUt5mQ9haoNEyGAUj8kikQ4VTa0.mft
File: WUt5mQ9haoNEyGAUj8kikQ4VTa0.mft (raw, json)
Hash identifier: rv3BClBM9nz6kasMYdpQIfziSU/apV/B3VHLu5rEmRI=
Subject key identifier: 95:CC:CC:81:AA:19:31:F9:B8:56:92:E1:43:64:41:1C:B8:DA:CC:B1
Authority key identifier: 59:4B:79:99:0F:61:6A:83:44:C8:60:14:8F:C9:22:91:0E:15:4D:AD
Certificate issuer: /CN=594b79990f616a8344c860148fc922910e154dad
Certificate serial: 0195127E62045365B32FBBE52FF360832265
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WUt5mQ9haoNEyGAUj8kikQ4VTa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/26641a-b4f9-4fba-867d-f7f36457874e/1/WUt5mQ9haoNEyGAUj8kikQ4VTa0.mft
Manifest number: 0C9D
Signing time: Mon 17 Feb 2025 06:00:27 +0000
Manifest this update: Mon 17 Feb 2025 06:00:27 +0000
Manifest next update: Tue 18 Feb 2025 06:00:27 +0000
Files and hashes: 1: WUt5mQ9haoNEyGAUj8kikQ4VTa0.crl (hash: aO8Vd6it0D7eTXMjeJsFgBh+VPtBAmrurJhajxXVdY4=)
2: g2GyYtJFOKWBkyrCF3Zn6C9X_qA.roa (hash: KOU5LPuCuD+DZVOgS7dpp5JLgW4GWVq1/6dngwGDNNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/26641a-b4f9-4fba-867d-f7f36457874e/1/WUt5mQ9haoNEyGAUj8kikQ4VTa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/26641a-b4f9-4fba-867d-f7f36457874e/1/WUt5mQ9haoNEyGAUj8kikQ4VTa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/WUt5mQ9haoNEyGAUj8kikQ4VTa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:7e:62:04:53:65:b3:2f:bb:e5:2f:f3:60:83:22:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=594b79990f616a8344c860148fc922910e154dad
Validity
Not Before: Feb 17 06:00:27 2025 GMT
Not After : Feb 18 06:00:27 2025 GMT
Subject: CN=95cccc81aa1931f9b85692e14364411cb8daccb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:69:71:47:6d:64:68:c0:51:45:c7:53:db:1a:
83:44:03:4a:3e:01:18:8a:88:b0:b2:20:ff:b4:3d:
61:12:da:c3:9f:d2:56:f8:99:60:55:89:69:7f:2c:
60:74:3d:40:4f:13:80:31:1d:19:77:23:d4:b0:dc:
b8:d1:ad:24:10:45:c1:b2:81:00:fd:54:a6:67:a8:
45:d6:16:d7:4d:33:98:fa:78:ba:25:54:88:53:ee:
f3:d9:7b:0c:8d:37:23:d4:30:2a:c5:9b:48:f9:19:
ce:31:07:73:d5:a0:d6:7c:a0:c6:da:2e:a1:1c:fb:
14:26:f3:c1:db:76:3d:5a:f7:34:40:06:56:a8:11:
93:7c:3a:6c:4c:13:a9:08:6b:6a:a2:04:1e:40:40:
71:c5:2c:85:46:80:50:d7:3c:91:51:ef:69:f2:41:
c7:19:29:36:65:a0:b6:40:03:ae:8f:bc:32:67:2a:
5e:bb:45:f8:5d:b5:75:00:22:94:b6:f2:ae:82:0a:
b3:61:2b:69:9f:30:f7:c7:d4:64:47:b4:8c:32:cd:
84:fe:20:01:7d:5e:c7:84:b1:13:e7:a3:78:54:e2:
33:c3:ea:61:a0:3e:7c:f1:42:90:05:be:35:c8:63:
85:32:41:fd:b8:71:f1:b6:58:70:c6:ae:8d:5a:d3:
6d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:CC:CC:81:AA:19:31:F9:B8:56:92:E1:43:64:41:1C:B8:DA:CC:B1
X509v3 Authority Key Identifier:
keyid:59:4B:79:99:0F:61:6A:83:44:C8:60:14:8F:C9:22:91:0E:15:4D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WUt5mQ9haoNEyGAUj8kikQ4VTa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/26641a-b4f9-4fba-867d-f7f36457874e/1/WUt5mQ9haoNEyGAUj8kikQ4VTa0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/26641a-b4f9-4fba-867d-f7f36457874e/1/WUt5mQ9haoNEyGAUj8kikQ4VTa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:a2:39:cd:f1:bd:ac:00:6f:1a:29:92:bf:59:e0:c1:26:4a:
5b:5d:1b:c2:48:dd:a8:ed:f0:50:b2:06:75:56:28:f6:ee:28:
93:f9:85:d0:c5:2f:5c:e1:dc:2b:3d:d9:85:8d:51:f2:48:f8:
0e:9a:bd:df:c0:80:e8:59:b2:35:39:d2:67:48:d4:c2:83:59:
7e:c3:61:8b:fb:93:29:36:b4:57:da:88:57:e0:34:a3:35:fa:
bb:92:b6:b8:37:a4:ed:98:03:09:67:c8:99:7c:03:1a:fa:b5:
ce:8d:e2:85:0b:bb:08:c3:b5:7e:8e:3c:94:1f:0a:68:85:23:
dd:6c:f2:cd:2c:c4:50:04:64:23:e3:94:a8:fa:54:34:15:65:
5f:63:d4:6c:53:c8:6d:15:00:2b:25:3b:06:5c:57:6d:ba:07:
23:82:43:dc:87:cc:3c:0e:8d:bd:d7:29:2f:f7:53:e8:2f:bc:
39:b0:56:df:6b:d9:5d:c5:83:ad:5c:99:84:93:b6:4f:d0:b9:
82:b4:91:f1:a2:c6:e7:a8:ca:21:06:68:f8:84:99:19:9f:ab:
0d:7f:93:65:90:95:70:43:ec:af:3b:63:f4:5b:7e:a3:21:14:
f2:d0:72:b0:9f:ad:0c:82:96:1c:85:f0:cb:e1:e5:d1:37:5b:
0b:76:f1:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:52:33 2025 by rpki-client