![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.mft
File: WgUy6P2ksnpWFa67jX_Q_K-p9hA.mft (raw, json)
Hash identifier: cI5tZVBD7l2SWpi3Zz5Dcddm4ntp3pkQP66wf9D8vX8=
Subject key identifier: E4:60:6F:F1:DE:5C:2C:FE:EB:69:5E:FF:4C:E4:8B:73:A4:BA:45:75
Authority key identifier: 5A:05:32:E8:FD:A4:B2:7A:56:15:AE:BB:8D:7F:D0:FC:AF:A9:F6:10
Certificate issuer: /CN=5a0532e8fda4b27a5615aebb8d7fd0fcafa9f610
Certificate serial: 019510C6FDB7C9EF58C2CEBC70B4FFBFDE44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WgUy6P2ksnpWFa67jX_Q_K-p9hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.mft
Manifest number: 1455
Signing time: Sun 16 Feb 2025 22:00:31 +0000
Manifest this update: Sun 16 Feb 2025 22:00:31 +0000
Manifest next update: Mon 17 Feb 2025 22:00:31 +0000
Files and hashes: 1: N5lzNY_ASHzrKxE2-cr-dO0MhXU.roa (hash: Kidqbnzk9/6YevJVEsmBoo0YD5crOzBmyny1x/qR6+w=)
2: WgUy6P2ksnpWFa67jX_Q_K-p9hA.crl (hash: iKT+05m1vEqIdbghzb+OPs9Ny56Pvgo+P2E0vVPURK0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/WgUy6P2ksnpWFa67jX_Q_K-p9hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c6:fd:b7:c9:ef:58:c2:ce:bc:70:b4:ff:bf:de:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a0532e8fda4b27a5615aebb8d7fd0fcafa9f610
Validity
Not Before: Feb 16 22:00:31 2025 GMT
Not After : Feb 17 22:00:31 2025 GMT
Subject: CN=e4606ff1de5c2cfeeb695eff4ce48b73a4ba4575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e5:5c:e8:bb:d2:31:83:bd:40:1c:e3:b4:2e:
4d:9b:ff:5d:25:ef:40:fb:db:93:78:4d:6e:63:62:
af:c0:2c:a6:44:e5:5b:29:cc:fa:a5:2b:24:3e:69:
20:95:27:a3:2f:b0:8c:3d:77:4b:48:f1:43:09:70:
ce:8d:6f:9b:bb:78:6e:3b:ef:34:e2:a5:15:ef:dd:
1c:e7:bc:de:45:a7:fb:89:9a:6a:17:c5:a2:86:a0:
6e:03:d2:f4:06:5b:b6:ed:7a:b7:c3:ea:d4:f9:06:
94:32:fe:fe:a3:9a:0d:58:5a:ce:9d:29:39:ae:72:
b0:e6:95:c5:83:be:a2:b7:95:53:14:a2:c8:91:24:
71:c1:7e:3b:33:0d:24:62:fd:eb:f2:82:35:c7:6b:
de:14:70:6b:7d:50:75:05:31:a2:6f:d7:ff:71:5c:
3b:d7:3e:2c:0a:09:e8:e3:0a:10:f9:37:28:af:17:
0b:8c:ee:f6:fb:dc:47:1a:b9:39:22:20:4c:f9:ff:
de:cc:61:77:b2:62:87:13:35:ef:42:65:cc:8f:72:
8d:e6:20:63:3c:ca:e2:d8:0f:5b:cd:9f:52:d8:83:
0a:0e:a6:27:c6:84:a6:9a:8b:f2:6b:77:24:e5:b1:
82:db:c6:a5:b0:87:9f:25:73:e8:6d:96:03:d4:65:
25:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:60:6F:F1:DE:5C:2C:FE:EB:69:5E:FF:4C:E4:8B:73:A4:BA:45:75
X509v3 Authority Key Identifier:
keyid:5A:05:32:E8:FD:A4:B2:7A:56:15:AE:BB:8D:7F:D0:FC:AF:A9:F6:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WgUy6P2ksnpWFa67jX_Q_K-p9hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:24:48:74:7a:12:8f:42:3b:0c:99:a4:56:95:bc:c4:3f:7f:
9c:21:7d:2e:77:2a:e9:78:0b:d7:16:56:f0:aa:a5:c4:33:fb:
dd:cd:8b:a5:fd:97:37:20:b3:f6:7e:0c:ec:0e:de:d4:c0:ac:
b8:1c:c3:6a:88:2c:66:00:aa:d9:98:b6:0e:37:ef:63:63:ac:
19:4b:53:ee:ef:07:87:2e:5d:25:25:a0:98:9a:a6:b4:5d:f9:
a8:a0:2c:91:c9:d7:a4:70:df:b7:71:51:5e:88:66:31:e0:31:
ca:fc:61:f6:02:ca:f6:72:0d:64:73:69:a9:ea:16:28:40:e8:
77:e0:4b:91:0c:da:df:06:1f:6c:da:7d:05:c7:7c:b8:5e:60:
1c:86:24:ff:82:ef:f6:58:5d:30:da:5d:ab:2e:5c:5f:a0:f5:
4f:e5:63:c9:45:ee:64:02:c9:82:e8:79:ae:f7:2c:62:66:6f:
0a:8a:5b:50:db:cd:11:9a:b7:d0:82:73:9f:14:df:cf:52:98:
c3:6d:bb:c5:9e:9b:16:ce:99:bf:e1:ea:95:b5:ad:76:99:5f:
4d:0d:f2:e7:9d:24:79:a8:39:06:dd:4e:6d:51:78:07:2a:2b:
8a:18:fc:e6:de:ea:b3:ff:f6:6e:37:1d:d2:86:b2:30:9c:1b:
ca:02:36:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:55:53 2025 by rpki-client