![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft
File: e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft (raw, json)
Hash identifier: I9VxVqfOCzX80x6isFAWtuw5y59rvDfIs299IpHpQbw=
Subject key identifier: 92:BD:3D:52:36:1B:35:CD:14:86:C0:34:22:52:89:82:D9:1A:E3:16
Authority key identifier: 7B:C0:99:98:CE:39:CF:DC:A6:6E:CF:D8:DD:3A:C3:86:44:D3:C8:A6
Certificate issuer: /CN=7bc09998ce39cfdca66ecfd8dd3ac38644d3c8a6
Certificate serial: 0195121029C8C5B2022EF23ED84490AE438F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e8CZmM45z9ymbs_Y3TrDhkTTyKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft
Manifest number: 120A
Signing time: Mon 17 Feb 2025 04:00:03 +0000
Manifest this update: Mon 17 Feb 2025 04:00:03 +0000
Manifest next update: Tue 18 Feb 2025 04:00:03 +0000
Files and hashes: 1: 1coqSPvIzRCZ1S6Z5EWORCEy_NY.roa (hash: HDpNqOrJZAq1XJhPSThcDVAo56N193hVEjKsFT9RCtc=)
2: e8CZmM45z9ymbs_Y3TrDhkTTyKY.crl (hash: eZaTrKiVcezIynj6cy0u1qCCl6H1k+7HAMyaPsqfgCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/e8CZmM45z9ymbs_Y3TrDhkTTyKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:29:c8:c5:b2:02:2e:f2:3e:d8:44:90:ae:43:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bc09998ce39cfdca66ecfd8dd3ac38644d3c8a6
Validity
Not Before: Feb 17 04:00:03 2025 GMT
Not After : Feb 18 04:00:03 2025 GMT
Subject: CN=92bd3d52361b35cd1486c03422528982d91ae316
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:80:9e:99:66:92:af:dd:8f:18:98:2f:dc:ef:
d4:13:3d:d7:12:85:61:1f:70:0a:32:44:3f:b2:b5:
a1:35:e4:be:2d:da:44:9a:29:e2:d7:e3:c9:15:c7:
b7:41:7d:1e:84:33:a8:26:55:36:99:b0:e5:51:d7:
cb:f5:81:cb:81:f5:97:62:5d:31:66:13:7f:14:d1:
c0:55:4c:7d:0a:0a:ae:2b:42:53:a0:ca:13:3c:cf:
25:ee:8b:82:e8:e4:e8:8e:92:b8:36:fe:2f:76:42:
c9:a9:7d:9b:0f:6d:35:06:18:9e:07:c5:0d:9a:dd:
3f:c0:73:8b:d6:48:3e:fe:dc:a6:d4:78:e1:aa:50:
d5:9c:04:91:5d:d1:5e:9f:fe:66:53:26:59:8a:29:
2c:8c:05:2d:87:97:c3:23:f2:73:d9:3a:2a:cc:b3:
16:6b:27:8d:ad:74:7c:92:80:d0:06:a8:99:a9:e2:
bc:66:7e:97:cc:f4:93:9a:c7:fd:8b:18:8c:50:f8:
e9:08:1e:0c:3c:80:e1:10:88:03:4f:6b:8c:61:a2:
68:67:a3:0a:52:de:0c:0e:8e:90:4e:46:89:85:8f:
12:41:71:3d:2e:5d:0b:65:a9:c0:c6:f0:95:8a:08:
d9:b0:5e:d8:71:80:da:fd:4d:dd:23:76:4e:19:97:
e4:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:BD:3D:52:36:1B:35:CD:14:86:C0:34:22:52:89:82:D9:1A:E3:16
X509v3 Authority Key Identifier:
keyid:7B:C0:99:98:CE:39:CF:DC:A6:6E:CF:D8:DD:3A:C3:86:44:D3:C8:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8CZmM45z9ymbs_Y3TrDhkTTyKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:70:3e:be:46:f3:97:eb:b6:62:7f:63:60:31:de:e4:93:aa:
45:29:d7:88:82:f4:6c:d6:4f:45:0d:87:37:b3:3f:1f:29:cb:
e0:66:5b:f2:ed:43:dd:c6:34:08:64:16:d9:0a:5a:8c:7d:a0:
6f:30:be:19:13:41:93:d4:1d:59:26:aa:dd:da:45:b7:72:05:
63:2f:41:4f:00:d8:6c:f6:1c:1a:3a:de:bf:52:95:e2:5e:94:
8b:69:64:b2:b6:f1:56:5b:95:8a:bd:c7:f1:66:63:ff:c0:5e:
60:42:4c:8c:ca:9d:b5:e1:53:3a:1d:4f:7f:cd:8f:e3:58:6a:
cb:80:79:15:bc:1a:31:5d:eb:42:5d:e8:88:2c:39:44:48:2d:
5b:cd:b4:a7:25:ce:0c:04:b8:90:58:1f:49:3a:67:c3:53:94:
99:c6:da:03:7b:09:7e:f7:9a:41:81:44:72:a3:98:67:1f:2d:
ab:22:d4:97:78:79:03:0a:49:d8:ed:6e:13:a3:08:45:af:74:
b6:c6:c6:31:8d:86:6d:04:24:56:65:27:da:3b:cd:f9:36:82:
c7:95:20:80:6a:a1:45:66:8b:35:4a:f2:16:80:8c:8f:dc:de:
8a:c5:74:c1:b4:57:33:ef:52:9a:26:76:13:cf:7d:6e:11:77:
16:22:7c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:59:25 2025 by rpki-client