![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.mft
File: Mgskp0Dy5hYyBQrcFGwe5qPmhsU.mft (raw, json)
Hash identifier: UqterhJzmfQAT4f5bSpDrnbVYU6/lxCagOTE66/QnkQ=
Subject key identifier: D1:0B:32:0F:97:C4:AC:28:7D:65:79:A4:73:0D:35:C0:A9:1A:54:D4
Authority key identifier: 32:0B:24:A7:40:F2:E6:16:32:05:0A:DC:14:6C:1E:E6:A3:E6:86:C5
Certificate issuer: /CN=320b24a740f2e61632050adc146c1ee6a3e686c5
Certificate serial: 019510FDD26EEF3D4A969E7FDBF786E3D5ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.mft
Manifest number: 1458
Signing time: Sun 16 Feb 2025 23:00:24 +0000
Manifest this update: Sun 16 Feb 2025 23:00:24 +0000
Manifest next update: Mon 17 Feb 2025 23:00:24 +0000
Files and hashes: 1: L6UZeUjVK5OZ7-mZGSjtJGUXkeo.roa (hash: zQv0Jn9i8JzxV9AzBkluRvg9IIcuWJrvzIFoMGo/YiA=)
2: Mgskp0Dy5hYyBQrcFGwe5qPmhsU.crl (hash: YvZ8mVJqN4qURKE0CI5FVZqh1/uwXQ8qW7z1Vj0Y6HQ=)
3: cE9MAqwQ5qMGLkrFZGC06olWNS8.roa (hash: qikuqaUY8ZBatuemuXHDbHFmATqYtKgaMBnCotzhBRQ=)
4: eNulQrWkb7XXGYDw1_7yfQtfyjU.roa (hash: wqv9AveypucRXaFrqiWm0EqnYUR4U6N703H9MjT8w5I=)
5: ebOku8xEI298KvY-nyvK9tWb6FA.roa (hash: a5+jxAr4ask6hZY3MKueRH2rWcR2j9Q7nIukLKzVuw0=)
6: nOavIXppWmDFhXdDEZ0V1cMIqeg.roa (hash: uLvOIw0+fU0FW9oyjgIp/2zVisu3plAWDz1d4aRwn60=)
7: s9a3pEKBSyjyYAsrYAxiAEP4mCU.roa (hash: 0FpwdS9NLp08wzi3cGdRZXNNnpCGm190316Q+yHGVNo=)
8: v2JqIJBq3wJphTAbwK0-g33RShA.roa (hash: i1c3+hUzjW7SLy+JaUh7BqmO9B9VdI9iEDnKvNZU/ks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fd:d2:6e:ef:3d:4a:96:9e:7f:db:f7:86:e3:d5:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=320b24a740f2e61632050adc146c1ee6a3e686c5
Validity
Not Before: Feb 16 23:00:24 2025 GMT
Not After : Feb 17 23:00:24 2025 GMT
Subject: CN=d10b320f97c4ac287d6579a4730d35c0a91a54d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a8:cb:39:29:de:73:7b:2e:42:0d:28:9c:bb:
36:f7:d0:a1:91:32:42:66:fe:81:db:b9:79:11:45:
ce:18:2e:02:8d:38:3a:d9:59:42:b0:d3:d3:4b:e8:
b0:e9:0d:4a:d8:51:65:d5:01:13:c5:9e:e5:2e:df:
09:92:35:b3:06:33:a6:bb:a8:e2:cd:c1:53:c5:02:
e7:b0:82:3a:f4:d5:58:38:55:fe:7d:8a:4a:9d:43:
28:6f:10:26:45:9f:64:e0:9d:1f:30:4b:f3:c9:37:
b9:7b:98:ee:59:d7:53:d1:ac:0c:e5:e9:54:97:dd:
37:66:90:f6:e1:9b:56:7e:e0:03:1a:68:f1:5b:5f:
e5:ac:7b:66:64:0a:68:1c:6a:fd:b1:14:f1:12:53:
b4:b3:14:d1:c1:e3:da:19:51:3b:7b:88:f5:d3:65:
a1:46:59:39:9f:4c:76:e9:39:79:46:3c:c9:1b:e6:
e0:2d:bc:92:98:4c:f5:bb:8f:18:35:c0:f7:a8:b0:
19:9c:6b:a9:85:27:56:3d:e2:71:d4:91:99:bb:d0:
e1:57:71:fe:26:b4:72:16:cf:62:4d:ad:f8:15:5c:
4b:95:aa:4f:36:d4:0a:c0:a9:35:26:3b:14:c6:dc:
f3:35:87:37:75:ef:84:38:3f:93:e8:ab:a1:78:de:
5e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:0B:32:0F:97:C4:AC:28:7D:65:79:A4:73:0D:35:C0:A9:1A:54:D4
X509v3 Authority Key Identifier:
keyid:32:0B:24:A7:40:F2:E6:16:32:05:0A:DC:14:6C:1E:E6:A3:E6:86:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:00:55:13:68:15:1f:dd:a4:f6:0d:46:90:77:7c:53:bb:76:
46:79:4d:6d:21:af:69:74:29:18:ac:1c:9b:d6:b1:89:8a:d3:
63:68:1d:57:b5:4d:9a:c5:a7:81:ae:2a:4c:68:76:4d:f4:81:
93:e3:81:a1:e7:be:eb:5f:bf:4f:23:55:9c:d5:8b:a7:74:95:
25:05:5f:da:32:3a:cb:c4:88:4a:03:d8:13:ac:5b:e9:3d:c3:
17:5f:0a:f4:84:2f:d3:80:15:16:a0:a0:73:3e:5b:0e:9d:7e:
db:58:42:16:20:b7:db:0e:8d:d4:7b:1c:f0:be:90:8a:00:2f:
61:a3:32:3f:e0:18:8f:a4:a3:0c:33:7a:08:b7:85:a6:7f:fa:
2d:e8:96:a9:31:f5:55:9b:d7:45:a8:ca:16:d1:f8:1f:cd:85:
79:c9:0a:b9:c9:cd:9d:da:d2:db:e7:1d:9c:d3:22:a4:68:9c:
29:8f:c8:39:55:45:1f:43:06:53:3e:56:be:c2:81:bc:6e:1d:
19:12:a9:38:b3:42:57:39:f1:d6:84:8e:7c:e2:38:f5:db:0e:
1b:9e:fe:f3:50:1b:b8:6a:c2:32:5f:46:4f:c9:54:6a:2e:c7:
8f:a3:2f:c4:76:51:e4:f7:bd:42:2f:95:7a:3a:7b:87:f5:9d:
44:31:5a:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUQ/dJu7z1Klp5/2/eG49XtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyMGIyNGE3NDBmMmU2MTYzMjA1MGFkYzE0NmMxZWU2YTNl
Njg2YzUwHhcNMjUwMjE2MjMwMDI0WhcNMjUwMjE3MjMwMDI0WjAzMTEwLwYDVQQD
EyhkMTBiMzIwZjk3YzRhYzI4N2Q2NTc5YTQ3MzBkMzVjMGE5MWE1NGQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqjLOSnec3suQg0onLs299ChkTJC
Zv6B27l5EUXOGC4CjTg62VlCsNPTS+iw6Q1K2FFl1QETxZ7lLt8JkjWzBjOmu6ji
zcFTxQLnsII69NVYOFX+fYpKnUMobxAmRZ9k4J0fMEvzyTe5e5juWddT0awM5elU
l903ZpD24ZtWfuADGmjxW1/lrHtmZApoHGr9sRTxElO0sxTRwePaGVE7e4j102Wh
Rlk5n0x26Tl5RjzJG+bgLbySmEz1u48YNcD3qLAZnGuphSdWPeJx1JGZu9DhV3H+
JrRyFs9iTa34FVxLlapPNtQKwKk1JjsUxtzzNYc3de+EOD+T6KuheN5eeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNELMg+XxKwofWV5pHMNNcCpGlTUMB8GA1UdIwQY
MBaAFDILJKdA8uYWMgUK3BRsHuaj5obFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWdza3AwRHk1aFl5QlFyY0ZHd2U1cVBtaHNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy85YzI3ZTQtZDdiMS00M2MxLWEzOGYt
OTQ5MTRmNWRkYjNjLzEvTWdza3AwRHk1aFl5QlFyY0ZHd2U1cVBtaHNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy85YzI3ZTQtZDdiMS00M2MxLWEzOGYtOTQ5MTRmNWRkYjNj
LzEvTWdza3AwRHk1aFl5QlFyY0ZHd2U1cVBtaHNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbABVE2gV
H92k9g1GkHd8U7t2RnlNbSGvaXQpGKwcm9axiYrTY2gdV7VNmsWnga4qTGh2TfSB
k+OBoee+61+/TyNVnNWLp3SVJQVf2jI6y8SISgPYE6xb6T3DF18K9IQv04AVFqCg
cz5bDp1+21hCFiC32w6N1Hsc8L6QigAvYaMyP+AYj6SjDDN6CLeFpn/6LeiWqTH1
VZvXRajKFtH4H82FeckKucnNndrS2+cdnNMipGicKY/IOVVFH0MGUz5WvsKBvG4d
GRKpOLNCVznx1oSOfOI49dsOG57+81AbuGrCMl9GT8lUai7Hj6MvxHZR5Pe9Qi+V
ejp7h/WdRDFalg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:13:55 2025 by rpki-client