![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/gnnq2DWo_Prg2e4oOc0WiBuhHdc.mft
File: gnnq2DWo_Prg2e4oOc0WiBuhHdc.mft (raw, json)
Hash identifier: x3Xi9L9r9lh71CA6Fb9NpC4ELMbh/CnBMb0tSxjxaDU=
Subject key identifier: 37:5D:AD:29:26:92:B8:08:AE:F5:39:35:40:34:F6:16:EE:F7:F5:E4
Authority key identifier: 82:79:EA:D8:35:A8:FC:FA:E0:D9:EE:28:39:CD:16:88:1B:A1:1D:D7
Certificate issuer: /CN=8279ead835a8fcfae0d9ee2839cd16881ba11dd7
Certificate serial: 019511A2ED7E6C0041FCDD3C88418FCE7BD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnnq2DWo_Prg2e4oOc0WiBuhHdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/gnnq2DWo_Prg2e4oOc0WiBuhHdc.mft
Manifest number: 1456
Signing time: Mon 17 Feb 2025 02:00:45 +0000
Manifest this update: Mon 17 Feb 2025 02:00:45 +0000
Manifest next update: Tue 18 Feb 2025 02:00:45 +0000
Files and hashes: 1: 1GcdqVYrNeFzAfzIvWc1uwT98aA.roa (hash: 4uQf4DSwbX7BKGTdoGDfjY+9K4u0Qbg5gbpIHJoyB/8=)
2: gnnq2DWo_Prg2e4oOc0WiBuhHdc.crl (hash: vY9eoYDqvvXsZsaeQuQcpYV2973TlKxx9lMWTgiCHbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/gnnq2DWo_Prg2e4oOc0WiBuhHdc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/gnnq2DWo_Prg2e4oOc0WiBuhHdc.mft
rsync://rpki.ripe.net/repository/DEFAULT/gnnq2DWo_Prg2e4oOc0WiBuhHdc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:ed:7e:6c:00:41:fc:dd:3c:88:41:8f:ce:7b:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8279ead835a8fcfae0d9ee2839cd16881ba11dd7
Validity
Not Before: Feb 17 02:00:45 2025 GMT
Not After : Feb 18 02:00:45 2025 GMT
Subject: CN=375dad292692b808aef539354034f616eef7f5e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6f:fb:53:5e:57:85:8f:29:f7:06:a9:92:43:
f9:e3:f3:d2:dc:ac:f4:1b:a0:96:ce:bd:86:f2:74:
b2:3f:20:38:c2:0b:8f:fa:8c:0a:11:ba:7e:55:b7:
9f:cc:f9:70:6e:87:ed:d5:d2:57:3a:ac:bb:f0:69:
f0:b0:6c:9d:ca:75:58:d2:cf:6b:ee:1f:98:98:1c:
ed:7f:f4:88:85:3b:b4:16:8b:79:84:a1:cd:97:3c:
e1:00:c8:c0:75:23:ad:5e:3b:76:0e:15:5e:74:11:
2d:84:5c:89:ef:3a:5d:f0:03:60:16:6d:f8:fb:51:
1e:99:df:ac:a0:92:9e:0b:11:63:b4:81:c0:63:36:
b5:8d:a6:c1:16:49:2c:14:fd:ae:c3:f7:99:0f:28:
4b:57:cb:d3:ad:ee:22:ac:9d:0c:21:52:2e:7b:dd:
a7:fb:21:e3:fa:ff:b6:8d:a5:e9:a8:31:97:95:c2:
7c:9f:fa:5c:6d:18:48:46:40:1f:b9:06:56:5e:2c:
04:40:96:c8:2d:c5:e6:7e:9e:94:61:bb:a8:42:21:
8d:b5:ec:be:ec:2c:2d:e9:93:7a:d6:a6:cc:1d:50:
b4:09:7c:bc:b6:02:59:2f:86:f7:28:d5:47:88:f3:
b1:91:02:fb:6e:1b:80:f1:ce:bb:a4:0f:e2:27:8f:
0b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:5D:AD:29:26:92:B8:08:AE:F5:39:35:40:34:F6:16:EE:F7:F5:E4
X509v3 Authority Key Identifier:
keyid:82:79:EA:D8:35:A8:FC:FA:E0:D9:EE:28:39:CD:16:88:1B:A1:1D:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnnq2DWo_Prg2e4oOc0WiBuhHdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/gnnq2DWo_Prg2e4oOc0WiBuhHdc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/gnnq2DWo_Prg2e4oOc0WiBuhHdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:65:2c:3d:72:51:5b:3c:ff:4a:8b:3f:dc:fb:ab:f2:e9:dc:
9d:35:cf:30:eb:ec:a3:4c:65:6f:28:3e:50:ae:93:92:b3:ea:
58:6a:f9:58:08:b9:2c:98:50:7b:fc:37:09:cf:16:9d:b2:81:
c2:29:e3:ec:49:99:4f:4a:e2:47:bd:fc:6d:65:0d:01:29:16:
79:1a:32:75:42:f9:cc:8d:e2:d8:6c:33:c3:25:fc:39:34:16:
56:85:eb:5a:70:33:b9:3d:0e:df:c6:57:00:81:63:a4:1f:64:
3d:2e:e4:78:4d:be:ba:bd:ca:2f:90:52:6a:05:c4:2d:70:6e:
c7:af:95:48:cd:38:f5:94:1f:7a:17:cd:05:56:1d:16:0d:36:
61:98:28:04:94:4e:e4:17:95:d0:26:12:e3:26:51:75:9b:b0:
f9:fa:23:01:70:8a:d4:c0:cf:40:ec:f7:11:46:16:2a:5e:eb:
ae:fa:14:2d:69:f4:32:27:de:c5:49:2b:70:03:35:22:09:f4:
ee:bd:65:b0:31:37:82:1d:aa:21:b0:71:5f:19:e6:2a:8f:57:
3b:47:6e:f9:2b:3f:ed:b4:d2:e5:ec:24:31:89:f7:20:d5:da:
1f:6b:a2:30:e6:db:59:4c:2c:a0:6e:32:d4:16:86:5e:80:b3:
45:83:b7:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURou1+bABB/N08iEGPznvQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyNzllYWQ4MzVhOGZjZmFlMGQ5ZWUyODM5Y2QxNjg4MWJh
MTFkZDcwHhcNMjUwMjE3MDIwMDQ1WhcNMjUwMjE4MDIwMDQ1WjAzMTEwLwYDVQQD
EygzNzVkYWQyOTI2OTJiODA4YWVmNTM5MzU0MDM0ZjYxNmVlZjdmNWU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2/7U15XhY8p9wapkkP54/PS3Kz0
G6CWzr2G8nSyPyA4wguP+owKEbp+VbefzPlwboft1dJXOqy78GnwsGydynVY0s9r
7h+YmBztf/SIhTu0Fot5hKHNlzzhAMjAdSOtXjt2DhVedBEthFyJ7zpd8ANgFm34
+1Eemd+soJKeCxFjtIHAYza1jabBFkksFP2uw/eZDyhLV8vTre4irJ0MIVIue92n
+yHj+v+2jaXpqDGXlcJ8n/pcbRhIRkAfuQZWXiwEQJbILcXmfp6UYbuoQiGNtey+
7Cwt6ZN61qbMHVC0CXy8tgJZL4b3KNVHiPOxkQL7bhuA8c67pA/iJ48LTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDddrSkmkrgIrvU5NUA09hbu9/XkMB8GA1UdIwQY
MBaAFIJ56tg1qPz64NnuKDnNFogboR3XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ25ucTJEV29fUHJnMmU0b09jMFdpQnVoSGRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9kYWFhZTQtZWQyNC00NDczLTllYzUt
ZWUyOWM5MTM2ZThiLzEvZ25ucTJEV29fUHJnMmU0b09jMFdpQnVoSGRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9kYWFhZTQtZWQyNC00NDczLTllYzUtZWUyOWM5MTM2ZThi
LzEvZ25ucTJEV29fUHJnMmU0b09jMFdpQnVoSGRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkmUsPXJR
Wzz/Sos/3Pur8uncnTXPMOvso0xlbyg+UK6TkrPqWGr5WAi5LJhQe/w3Cc8WnbKB
winj7EmZT0riR738bWUNASkWeRoydUL5zI3i2GwzwyX8OTQWVoXrWnAzuT0O38ZX
AIFjpB9kPS7keE2+ur3KL5BSagXELXBux6+VSM049ZQfehfNBVYdFg02YZgoBJRO
5BeV0CYS4yZRdZuw+fojAXCK1MDPQOz3EUYWKl7rrvoULWn0MifexUkrcAM1Ign0
7r1lsDE3gh2qIbBxXxnmKo9XO0du+Ss/7bTS5ewkMYn3INXaH2uiMObbWUwsoG4y
1BaGXoCzRYO3cg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:05:11 2025 by rpki-client