![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/af2b36-6e8b-4601-b074-d612a21ebeae/1/_VnTVh_4rdtfGww2o90laLdMpRU.mft
File: _VnTVh_4rdtfGww2o90laLdMpRU.mft (raw, json)
Hash identifier: 6HXe2TMAiQCL1/9qydk1zQqGcEkfSswBC/YtzLwyBuI=
Subject key identifier: 02:54:96:62:7B:B0:11:51:65:CD:73:2E:91:C4:1B:B8:96:0B:95:F5
Authority key identifier: FD:59:D3:56:1F:F8:AD:DB:5F:1B:0C:36:A3:DD:25:68:B7:4C:A5:15
Certificate issuer: /CN=fd59d3561ff8addb5f1b0c36a3dd2568b74ca515
Certificate serial: 0195116B9A56218F3F9D51A4D11A6DE07129
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_VnTVh_4rdtfGww2o90laLdMpRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/af2b36-6e8b-4601-b074-d612a21ebeae/1/_VnTVh_4rdtfGww2o90laLdMpRU.mft
Manifest number: 0939
Signing time: Mon 17 Feb 2025 01:00:19 +0000
Manifest this update: Mon 17 Feb 2025 01:00:19 +0000
Manifest next update: Tue 18 Feb 2025 01:00:19 +0000
Files and hashes: 1: _VnTVh_4rdtfGww2o90laLdMpRU.crl (hash: E1ET89I+cCQZhq/7SJHpMfgWPHjVrOnRlvjVmSYEefk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/af2b36-6e8b-4601-b074-d612a21ebeae/1/_VnTVh_4rdtfGww2o90laLdMpRU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/af2b36-6e8b-4601-b074-d612a21ebeae/1/_VnTVh_4rdtfGww2o90laLdMpRU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_VnTVh_4rdtfGww2o90laLdMpRU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6b:9a:56:21:8f:3f:9d:51:a4:d1:1a:6d:e0:71:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd59d3561ff8addb5f1b0c36a3dd2568b74ca515
Validity
Not Before: Feb 17 01:00:19 2025 GMT
Not After : Feb 18 01:00:19 2025 GMT
Subject: CN=025496627bb0115165cd732e91c41bb8960b95f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:da:ff:bc:2c:ae:7c:0e:6d:a8:a0:5a:cd:b2:
fd:c4:d7:fd:af:0c:1e:c2:ea:d9:76:b6:c9:bc:ac:
de:a3:40:fb:bc:2c:e5:57:26:93:e7:11:78:f7:f7:
3c:cf:af:ce:78:49:10:39:6b:30:72:cf:07:8e:ae:
6d:d6:72:19:17:46:36:65:bf:7f:8f:de:dd:f9:6b:
bb:a7:c6:ef:17:0d:3d:b1:fb:98:d1:42:4b:bf:d1:
a4:2c:69:44:a0:c4:23:d2:10:31:4d:a5:2e:82:1b:
ed:fb:3c:e8:90:b0:55:c1:52:d2:56:87:e5:1f:fa:
14:5b:9f:b7:eb:05:31:fd:19:34:90:a8:49:c3:c1:
49:30:fc:7a:66:f5:59:55:d5:da:3d:b8:77:11:75:
77:f2:1b:27:c7:ba:88:88:d4:4c:ee:1a:a4:74:a5:
61:dd:1c:81:9e:58:13:ba:ae:5e:ed:cb:ac:3c:45:
e7:e0:c3:26:c3:fc:c7:df:60:fd:c3:e7:70:ba:38:
c6:08:93:c8:94:35:34:b2:a0:7e:74:97:f5:77:a1:
d9:63:31:7c:33:b6:46:22:5d:82:17:15:cc:94:b9:
65:9a:58:f0:46:95:51:23:50:28:25:06:57:bd:13:
d4:e9:b1:1a:05:77:55:d5:f4:42:28:ea:bd:04:5b:
17:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:54:96:62:7B:B0:11:51:65:CD:73:2E:91:C4:1B:B8:96:0B:95:F5
X509v3 Authority Key Identifier:
keyid:FD:59:D3:56:1F:F8:AD:DB:5F:1B:0C:36:A3:DD:25:68:B7:4C:A5:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_VnTVh_4rdtfGww2o90laLdMpRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/af2b36-6e8b-4601-b074-d612a21ebeae/1/_VnTVh_4rdtfGww2o90laLdMpRU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/af2b36-6e8b-4601-b074-d612a21ebeae/1/_VnTVh_4rdtfGww2o90laLdMpRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:43:ec:57:2a:09:0a:c4:94:94:d5:1b:50:de:76:29:7f:b9:
d9:31:57:84:0e:22:86:64:1c:fc:8f:88:78:1c:4f:ef:1d:a7:
3c:06:fe:b9:29:ab:0d:54:d1:6e:09:cc:1b:92:b0:cf:a4:8f:
4e:79:4b:24:f5:fe:f3:21:11:c2:97:13:eb:c4:eb:04:c1:d0:
a2:0c:fb:71:63:3b:5c:b4:25:6a:54:2f:5d:1b:88:e0:4f:bb:
bf:d1:65:e4:57:c7:76:3e:31:31:f6:6a:c3:30:7b:dd:69:39:
f5:c9:09:a3:f3:2e:ff:b7:17:0b:87:bf:b0:72:aa:a4:b5:62:
3c:53:1d:74:37:db:8f:41:73:77:ca:6b:e0:e8:48:b3:f8:8b:
5b:6d:b8:1d:7e:7d:7a:e6:a6:c3:62:12:ee:ba:1c:a8:c0:c8:
4c:7d:21:33:da:bc:18:e0:62:86:36:06:95:64:96:6b:66:1a:
9e:94:55:11:e9:b2:52:3e:4f:29:34:7f:35:24:da:a4:7b:2c:
8d:be:4c:dc:1c:b2:50:a0:4c:45:62:83:08:ef:f2:e4:56:78:
ab:ac:6d:d9:dc:e1:76:04:86:94:60:89:51:f6:24:ef:68:41:
fd:c2:c6:de:05:5d:a1:f1:03:c8:e6:9e:dc:08:1c:47:32:0e:
01:58:d3:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURa5pWIY8/nVGk0Rpt4HEpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkNTlkMzU2MWZmOGFkZGI1ZjFiMGMzNmEzZGQyNTY4Yjc0
Y2E1MTUwHhcNMjUwMjE3MDEwMDE5WhcNMjUwMjE4MDEwMDE5WjAzMTEwLwYDVQQD
EygwMjU0OTY2MjdiYjAxMTUxNjVjZDczMmU5MWM0MWJiODk2MGI5NWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktr/vCyufA5tqKBazbL9xNf9rwwe
wurZdrbJvKzeo0D7vCzlVyaT5xF49/c8z6/OeEkQOWswcs8Hjq5t1nIZF0Y2Zb9/
j97d+Wu7p8bvFw09sfuY0UJLv9GkLGlEoMQj0hAxTaUughvt+zzokLBVwVLSVofl
H/oUW5+36wUx/Rk0kKhJw8FJMPx6ZvVZVdXaPbh3EXV38hsnx7qIiNRM7hqkdKVh
3RyBnlgTuq5e7cusPEXn4MMmw/zH32D9w+dwujjGCJPIlDU0sqB+dJf1d6HZYzF8
M7ZGIl2CFxXMlLllmljwRpVRI1AoJQZXvRPU6bEaBXdV1fRCKOq9BFsXFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAJUlmJ7sBFRZc1zLpHEG7iWC5X1MB8GA1UdIwQY
MBaAFP1Z01Yf+K3bXxsMNqPdJWi3TKUVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1ZuVFZoXzRyZHRmR3d3Mm85MGxhTGRNcFJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9hZjJiMzYtNmU4Yi00NjAxLWIwNzQt
ZDYxMmEyMWViZWFlLzEvX1ZuVFZoXzRyZHRmR3d3Mm85MGxhTGRNcFJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi9hZjJiMzYtNmU4Yi00NjAxLWIwNzQtZDYxMmEyMWViZWFl
LzEvX1ZuVFZoXzRyZHRmR3d3Mm85MGxhTGRNcFJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPEPsVyoJ
CsSUlNUbUN52KX+52TFXhA4ihmQc/I+IeBxP7x2nPAb+uSmrDVTRbgnMG5Kwz6SP
TnlLJPX+8yERwpcT68TrBMHQogz7cWM7XLQlalQvXRuI4E+7v9Fl5FfHdj4xMfZq
wzB73Wk59ckJo/Mu/7cXC4e/sHKqpLViPFMddDfbj0Fzd8pr4OhIs/iLW224HX59
euamw2IS7rocqMDITH0hM9q8GOBihjYGlWSWa2YanpRVEemyUj5PKTR/NSTapHss
jb5M3ByyUKBMRWKDCO/y5FZ4q6xt2dzhdgSGlGCJUfYk72hB/cLG3gVdofEDyOae
3AgcRzIOAVjTQA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:18:43 2025 by rpki-client