![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.mft
File: u__JqYMmZ6wNbR4kBlUFM8O1Vhg.mft (raw, json)
Hash identifier: LYjyECTui9hxfpMaL6kdi3qB4IqkvFfFpWg2BkU3Cpg=
Subject key identifier: 90:58:E5:8E:1C:8E:B1:15:EA:F0:0C:D3:02:C8:B5:19:81:F7:C9:E1
Authority key identifier: BB:FF:C9:A9:83:26:67:AC:0D:6D:1E:24:06:55:05:33:C3:B5:56:18
Certificate issuer: /CN=bbffc9a9832667ac0d6d1e2406550533c3b55618
Certificate serial: 019511D9B96693EF7C71D557B7493485AB37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.mft
Manifest number: 10DD
Signing time: Mon 17 Feb 2025 03:00:36 +0000
Manifest this update: Mon 17 Feb 2025 03:00:36 +0000
Manifest next update: Tue 18 Feb 2025 03:00:36 +0000
Files and hashes: 1: 2D_1ncLmLPuJXtpl_Q5ttTWBK4k.roa (hash: 0bQuiH2aHkDAf1rtJEQ6AsC0osUnBUOUl2vPm0WmrnY=)
2: IfAzv2xamXQmXpt0GBd13kn7nCM.roa (hash: jbzJm1UfZ+dpmS3iaSw271pkPBOa1r0axTofijj8Fjs=)
3: jPqjPZ927oU6pe2k5ljy1515_Bc.roa (hash: 1wwmQ4EiI2fcY7sas0ylQShSCsBsDc+FRheBv820+D4=)
4: u__JqYMmZ6wNbR4kBlUFM8O1Vhg.crl (hash: 9s0ilPb/QiLB09i9QkqQevw8fD79eeLs0tJImhpf/Wk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.mft
rsync://rpki.ripe.net/repository/DEFAULT/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:b9:66:93:ef:7c:71:d5:57:b7:49:34:85:ab:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbffc9a9832667ac0d6d1e2406550533c3b55618
Validity
Not Before: Feb 17 03:00:36 2025 GMT
Not After : Feb 18 03:00:36 2025 GMT
Subject: CN=9058e58e1c8eb115eaf00cd302c8b51981f7c9e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:23:80:40:e0:77:7e:0a:6a:2a:7f:48:3e:b7:
bf:72:86:aa:7d:71:32:99:95:cc:7c:fb:48:64:f9:
dc:32:f9:98:06:9a:f8:2f:d9:47:06:8c:4e:6b:05:
38:ed:1c:22:a5:05:0d:61:ca:26:75:f0:85:25:5d:
a8:c3:77:5c:19:46:9e:df:45:c2:e5:35:96:65:b4:
51:60:e1:05:31:10:b0:29:a1:74:f1:97:7e:53:b2:
32:d3:2b:d5:e6:29:3f:51:a3:4e:88:cc:38:8d:e1:
45:51:e6:1a:15:ec:8e:3c:9b:3c:9c:d5:14:fb:53:
26:10:02:82:5b:eb:c5:2b:65:33:25:c3:aa:a3:26:
e3:dc:a0:17:f1:b5:ca:d2:d1:94:ab:49:6a:58:48:
77:5b:ba:0e:c8:f6:92:bf:ac:c5:69:d0:9c:98:f0:
86:de:19:4a:b6:bf:ef:5f:e2:24:03:1f:e4:f2:b9:
15:cb:4a:17:87:77:a4:3a:07:80:04:30:94:e3:f7:
4e:81:7d:bb:f5:c9:ec:e5:fe:50:a8:d2:bd:44:ba:
65:3c:7b:79:36:fa:f7:bc:c2:dd:94:0c:72:3f:ca:
46:e3:5f:93:ed:f8:f7:ad:22:bd:66:53:84:2f:c2:
81:36:58:6c:cb:43:de:6b:62:16:f7:d0:c0:f5:24:
ae:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:58:E5:8E:1C:8E:B1:15:EA:F0:0C:D3:02:C8:B5:19:81:F7:C9:E1
X509v3 Authority Key Identifier:
keyid:BB:FF:C9:A9:83:26:67:AC:0D:6D:1E:24:06:55:05:33:C3:B5:56:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:c9:36:e7:ef:81:92:fd:f5:7e:b8:7f:f4:91:08:5f:3d:7a:
f0:18:81:d2:39:a9:69:ad:ac:5b:68:f1:4d:4a:df:36:42:47:
b4:fe:8c:d5:12:a5:ed:eb:5e:f6:30:69:78:c8:fb:f1:24:37:
55:a8:23:53:7a:dd:7f:ed:a2:d8:77:e7:33:f4:70:b8:9d:cf:
74:f2:43:43:96:81:d8:59:09:6c:22:b4:b5:95:7e:49:e6:24:
da:f3:24:b2:07:9d:93:7a:e3:d1:29:45:5e:52:0d:c6:83:88:
09:26:f7:34:76:dc:52:13:4a:f5:e8:05:4f:00:64:5c:c0:2a:
b1:a7:34:ca:0d:78:a4:d2:42:80:3c:fa:ba:c0:cf:1a:fa:58:
6d:e3:b9:cb:1e:2c:a1:6c:7f:d6:f3:79:a6:a4:10:59:85:41:
71:37:c6:67:8c:c5:ea:66:ee:f8:48:71:db:72:d4:06:96:6c:
e6:5e:3f:28:fc:97:a8:c5:d5:f8:15:34:50:05:b9:1a:6a:16:
80:4a:d0:04:50:84:03:95:04:81:0e:8a:17:84:b6:1e:3e:b7:
71:4e:78:c2:48:b7:1e:15:09:99:78:cc:8c:d7:e9:50:2f:52:
40:09:d2:1c:ed:af:90:f2:71:da:23:0e:a6:c8:20:37:39:89:
1c:91:78:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:24:51 2025 by rpki-client