![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft
File: tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft (raw, json)
Hash identifier: AymQLyQwtrX71h374AN7Hw1/Qv2oGEPYHL/49ojisWA=
Subject key identifier: 7B:4E:71:F1:4D:2F:D7:66:03:EE:20:59:7D:C7:7A:E3:18:9C:22:AF
Authority key identifier: B4:48:D6:26:A9:20:E4:2D:AC:D0:E9:48:E9:66:A5:E4:BC:C3:C1:1C
Certificate issuer: /CN=b448d626a920e42dacd0e948e966a5e4bcc3c11c
Certificate serial: 01951134BCED702091B58BF624FDA2B384E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tEjWJqkg5C2s0OlI6Wal5LzDwRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft
Manifest number: 0EB5
Signing time: Mon 17 Feb 2025 00:00:23 +0000
Manifest this update: Mon 17 Feb 2025 00:00:23 +0000
Manifest next update: Tue 18 Feb 2025 00:00:23 +0000
Files and hashes: 1: Tm8yT_3vBgLrxw1Lr4A3GN1Cjk4.roa (hash: cpwfuPoZQp9+xwJvstUEZKWWh0LDOj40EbCeSJBVSfw=)
2: tEjWJqkg5C2s0OlI6Wal5LzDwRw.crl (hash: uR08erV6t35T+r1+UNLlFPdRi4sh/nH3+1/cqzYetBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tEjWJqkg5C2s0OlI6Wal5LzDwRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:bc:ed:70:20:91:b5:8b:f6:24:fd:a2:b3:84:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b448d626a920e42dacd0e948e966a5e4bcc3c11c
Validity
Not Before: Feb 17 00:00:23 2025 GMT
Not After : Feb 18 00:00:23 2025 GMT
Subject: CN=7b4e71f14d2fd76603ee20597dc77ae3189c22af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ce:bb:4c:3d:65:1a:f1:bc:51:22:80:db:bc:
c9:97:2a:0a:50:68:e4:d7:aa:d8:bc:32:29:1f:ca:
94:ef:65:3c:e9:c8:40:41:75:29:2d:92:70:75:b2:
67:e9:b2:79:1b:75:b7:c2:75:59:01:79:22:6f:5b:
11:b7:62:ff:49:ab:d1:6a:d0:74:20:de:2f:41:01:
d3:21:df:0b:03:92:e7:42:55:ab:3d:01:98:1d:c1:
f7:01:f9:ce:db:3b:f3:dd:a4:9b:d1:39:9b:50:25:
15:35:c3:b4:ab:39:c1:03:ea:2a:49:3e:ca:98:61:
50:1c:f8:9b:b6:f3:e2:f6:80:22:9a:b2:2a:e8:c0:
47:e1:91:39:9c:71:f1:b0:bf:29:e7:06:17:b6:81:
c0:c9:57:cc:cd:d7:da:d7:8b:d4:f0:11:3a:05:88:
7b:ce:9c:a9:8a:a3:3f:1d:65:d1:5a:af:85:7d:f6:
6a:4f:4b:42:12:e3:7d:59:d0:55:31:01:ff:fe:df:
4c:c7:d3:a4:ea:8b:0e:a7:26:ce:e1:7f:aa:bf:88:
ca:25:23:95:6b:83:de:21:74:df:1b:f6:5d:dd:3d:
69:f3:a6:9e:70:f3:6e:97:79:e4:a6:50:17:ec:60:
88:c7:dc:c8:69:4e:c0:33:8d:1e:57:3f:40:c4:cb:
74:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:4E:71:F1:4D:2F:D7:66:03:EE:20:59:7D:C7:7A:E3:18:9C:22:AF
X509v3 Authority Key Identifier:
keyid:B4:48:D6:26:A9:20:E4:2D:AC:D0:E9:48:E9:66:A5:E4:BC:C3:C1:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEjWJqkg5C2s0OlI6Wal5LzDwRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:70:7a:50:9b:a6:16:99:9f:93:c0:b7:ba:7d:71:11:f8:98:
fb:3f:a5:34:54:62:ee:50:fe:68:28:e3:eb:52:e5:76:08:22:
87:bd:4d:f7:59:30:3e:de:1f:84:d8:c3:e4:60:9f:59:28:86:
e8:88:a0:a2:fc:78:18:b8:12:49:54:7a:d4:fb:2b:35:49:d9:
51:bf:e4:c2:ba:71:63:88:3d:c1:58:07:22:60:47:df:34:95:
d4:60:59:6c:a8:82:cb:d7:01:0c:4e:66:97:92:af:b5:96:f1:
1d:a6:48:5b:94:e3:fd:2c:30:47:7b:26:e4:b5:65:c9:ae:94:
70:48:8f:07:8a:c5:90:f4:73:cd:53:95:37:22:97:d7:bb:f1:
57:27:70:62:b1:d1:a8:1e:3b:3d:d9:8a:1b:4d:26:71:fa:09:
e6:6d:69:bc:f3:0a:5f:96:fc:92:9a:cd:21:59:f2:08:c4:33:
9c:4f:a7:c7:0f:3e:0c:c8:c3:9a:b4:a3:e1:ea:f1:b3:97:4f:
cd:e4:36:4c:1a:30:1b:d7:7a:26:bc:b0:a3:5e:a2:1b:3b:1d:
ac:90:73:f4:b9:8e:e6:8c:4c:a5:c6:ce:79:33:fe:55:13:73:
c0:cb:82:92:b8:b8:01:73:bf:14:11:0d:96:eb:75:ea:6f:c8:
4e:99:9c:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURNLztcCCRtYv2JP2is4ToMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0NDhkNjI2YTkyMGU0MmRhY2QwZTk0OGU5NjZhNWU0YmNj
M2MxMWMwHhcNMjUwMjE3MDAwMDIzWhcNMjUwMjE4MDAwMDIzWjAzMTEwLwYDVQQD
Eyg3YjRlNzFmMTRkMmZkNzY2MDNlZTIwNTk3ZGM3N2FlMzE4OWMyMmFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoc67TD1lGvG8USKA27zJlyoKUGjk
16rYvDIpH8qU72U86chAQXUpLZJwdbJn6bJ5G3W3wnVZAXkib1sRt2L/SavRatB0
IN4vQQHTId8LA5LnQlWrPQGYHcH3AfnO2zvz3aSb0TmbUCUVNcO0qznBA+oqST7K
mGFQHPibtvPi9oAimrIq6MBH4ZE5nHHxsL8p5wYXtoHAyVfMzdfa14vU8BE6BYh7
zpypiqM/HWXRWq+FffZqT0tCEuN9WdBVMQH//t9Mx9Ok6osOpybO4X+qv4jKJSOV
a4PeIXTfG/Zd3T1p86aecPNul3nkplAX7GCIx9zIaU7AM40eVz9AxMt0DwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHtOcfFNL9dmA+4gWX3HeuMYnCKvMB8GA1UdIwQY
MBaAFLRI1iapIOQtrNDpSOlmpeS8w8EcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEVqV0pxa2c1QzJzME9sSTZXYWw1THpEd1J3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy81NWQ1ODQtMTlhMS00N2MwLTk1YTYt
YmM4ZTBiNjlhYzEyLzEvdEVqV0pxa2c1QzJzME9sSTZXYWw1THpEd1J3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy81NWQ1ODQtMTlhMS00N2MwLTk1YTYtYmM4ZTBiNjlhYzEy
LzEvdEVqV0pxa2c1QzJzME9sSTZXYWw1THpEd1J3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANHB6UJum
Fpmfk8C3un1xEfiY+z+lNFRi7lD+aCjj61Lldggih71N91kwPt4fhNjD5GCfWSiG
6Iigovx4GLgSSVR61PsrNUnZUb/kwrpxY4g9wVgHImBH3zSV1GBZbKiCy9cBDE5m
l5KvtZbxHaZIW5Tj/SwwR3sm5LVlya6UcEiPB4rFkPRzzVOVNyKX17vxVydwYrHR
qB47PdmKG00mcfoJ5m1pvPMKX5b8kprNIVnyCMQznE+nxw8+DMjDmrSj4erxs5dP
zeQ2TBowG9d6Jrywo16iGzsdrJBz9LmO5oxMpcbOeTP+VRNzwMuCkri4AXO/FBEN
lut16m/ITpmcng==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:34:20 2025 by rpki-client