![](/console.gif)
Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/A715A7C4243DFD5608AC7C5962055125B94D1763.mft
File: A715A7C4243DFD5608AC7C5962055125B94D1763.mft (raw, json)
Hash identifier: JWa7Rb8XS0mdkoLYMdsP1HgHbrzdsU1nL9krSETZ+Ns=
Subject key identifier: 97:7D:68:FF:B2:27:12:17:29:73:DE:F2:61:8E:22:75:61:8F:FF:6F
Authority key identifier: A7:15:A7:C4:24:3D:FD:56:08:AC:7C:59:62:05:51:25:B9:4D:17:63
Certificate issuer: /CN=a715a7c4243dfd5608ac7c5962055125b94d1763
Certificate serial: 5B53AF9D57F23BC399BCE74808D74C5E05B85371
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxWnxCQ9_VYIrHxZYgVRJblNF2M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/A715A7C4243DFD5608AC7C5962055125B94D1763.mft
Manifest number: 0476
Signing time: Sun 16 Feb 2025 19:01:29 +0000
Manifest this update: Sun 16 Feb 2025 18:56:29 +0000
Manifest next update: Mon 17 Feb 2025 22:27:29 +0000
Files and hashes: 1: A715A7C4243DFD5608AC7C5962055125B94D1763.crl (hash: At4s0V1t3NwtGv6WanGXcV9V0EEBiApgwSQEdqA/Fug=)
2: 698CBB9E641A60FE66E1B58C92ACD281637ED767.cer (hash: tNwFc0wxK30edc2dJgBKjPLV9///2mnITAEpNIZ0d8k=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/A715A7C4243DFD5608AC7C5962055125B94D1763.crl
rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/A715A7C4243DFD5608AC7C5962055125B94D1763.mft
rsync://rpki.ripe.net/repository/DEFAULT/pxWnxCQ9_VYIrHxZYgVRJblNF2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:53:af:9d:57:f2:3b:c3:99:bc:e7:48:08:d7:4c:5e:05:b8:53:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a715a7c4243dfd5608ac7c5962055125b94d1763
Validity
Not Before: Feb 16 18:56:29 2025 GMT
Not After : Feb 17 22:27:29 2025 GMT
Subject: CN=977D68FFB22712172973DEF2618E2275618FFF6F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:66:9d:10:d7:1b:66:0f:06:70:6f:b0:f6:a0:
23:51:7c:7c:de:3f:4b:57:46:94:7e:45:36:32:91:
42:68:69:0b:7b:09:57:12:d6:c8:dc:3c:ce:d4:aa:
09:07:00:ea:c3:d6:3d:eb:cd:b7:91:4f:31:7c:52:
c0:86:34:ab:f3:be:47:ef:91:f0:12:1a:e2:d5:cb:
38:c7:7f:ba:2a:a6:32:0a:47:84:c2:b7:82:7b:3e:
3a:ee:fd:e5:f2:19:bc:db:37:43:70:06:15:ea:4a:
f5:a7:58:8d:49:70:a5:c2:7e:f2:8f:97:2e:2a:48:
65:40:0f:aa:f2:d3:de:4b:d1:52:d5:ce:4a:f1:5d:
31:f3:f6:b0:d2:99:7c:c1:02:08:f6:0b:f9:94:da:
56:20:ce:af:78:74:cf:d5:a6:72:73:93:48:cf:15:
ce:e9:32:38:52:6e:08:82:27:4c:10:6d:42:45:e2:
93:20:38:7e:df:f0:84:12:7b:8c:87:68:c6:02:6c:
2f:96:22:0e:4c:d9:13:22:8d:d2:af:ce:d7:d6:64:
66:22:0f:14:84:c4:3a:8b:b2:a8:40:24:b2:e8:fe:
3b:2f:76:cd:65:cf:1c:77:d0:29:d5:86:a6:10:42:
cc:63:e4:df:21:37:25:b0:f6:c0:0f:4a:e3:7c:39:
a1:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:7D:68:FF:B2:27:12:17:29:73:DE:F2:61:8E:22:75:61:8F:FF:6F
X509v3 Authority Key Identifier:
keyid:A7:15:A7:C4:24:3D:FD:56:08:AC:7C:59:62:05:51:25:B9:4D:17:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/A715A7C4243DFD5608AC7C5962055125B94D1763.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxWnxCQ9_VYIrHxZYgVRJblNF2M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/A715A7C4243DFD5608AC7C5962055125B94D1763.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:92:c9:2e:f0:10:5f:b0:df:b9:02:65:78:4f:36:1b:a2:8d:
14:c2:36:56:b9:16:bb:f2:bd:99:68:21:59:a0:99:09:a0:47:
17:a8:dd:04:2f:56:0d:bd:40:bc:0c:7e:52:6c:3a:2c:c1:d1:
f5:0a:b0:08:a8:e3:49:cc:c6:ad:c5:85:4a:47:8f:21:25:61:
f0:6e:fe:34:bc:18:2b:88:b0:05:87:75:72:9a:ca:93:b9:02:
9a:ad:a7:33:e3:fa:ff:1a:d3:04:2e:79:2b:0b:a1:18:00:88:
c3:41:28:97:d0:25:2f:08:c7:7b:16:0f:28:c7:8a:65:14:5b:
15:5e:7e:58:6d:12:9d:6a:95:b1:c7:c1:04:fb:9a:b5:73:e3:
9e:43:df:8f:6c:52:b4:a4:d0:eb:d1:d6:1e:a7:43:e2:fb:8c:
2c:7f:3a:1e:2b:56:80:eb:cc:95:37:d7:c5:3e:c0:27:b8:4c:
51:84:e2:32:50:ea:81:e8:2b:e4:60:51:7c:bf:9d:c3:9e:5c:
3d:88:62:ba:b4:91:91:35:c0:ac:51:53:51:d5:46:d0:c7:a6:
b5:e7:c3:b1:e7:30:bb:4e:4d:76:2d:93:f1:c2:2e:b5:ca:91:
ea:13:4d:ff:1b:d6:a5:62:5e:e0:a3:d2:97:7d:d0:8b:8e:ef:
86:81:43:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:40:01 2025 by rpki-client