![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.mft
File: quibwwl3aKzWfC3XR9O-Gtty6Zc.mft (raw, json)
Hash identifier: l8X/pfIdCr+pg0YJ3gm5D7i4BfoVUnX1sBqtq7OP4RM=
Subject key identifier: 51:DD:53:4A:98:51:5A:BD:B5:D4:B2:E3:0C:A5:5E:21:D8:68:3F:9F
Authority key identifier: AA:E8:9B:C3:09:77:68:AC:D6:7C:2D:D7:47:D3:BE:1A:DB:72:E9:97
Certificate issuer: /CN=aae89bc3097768acd67c2dd747d3be1adb72e997
Certificate serial: 019511A31913E040377B215DCDF9DC31FE25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/quibwwl3aKzWfC3XR9O-Gtty6Zc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.mft
Manifest number: 1459
Signing time: Mon 17 Feb 2025 02:00:56 +0000
Manifest this update: Mon 17 Feb 2025 02:00:56 +0000
Manifest next update: Tue 18 Feb 2025 02:00:56 +0000
Files and hashes: 1: Se8jY-LoM2MVsZ37wmyygWUdZqw.roa (hash: 460xRSiSARjue5TmuazrIkrxiYolcj28Woj0bWcIVJo=)
2: quibwwl3aKzWfC3XR9O-Gtty6Zc.crl (hash: thEvpWV/bDnXHINoAOWc9ADpihJdpduPKZM4G451RJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.mft
rsync://rpki.ripe.net/repository/DEFAULT/quibwwl3aKzWfC3XR9O-Gtty6Zc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a3:19:13:e0:40:37:7b:21:5d:cd:f9:dc:31:fe:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aae89bc3097768acd67c2dd747d3be1adb72e997
Validity
Not Before: Feb 17 02:00:56 2025 GMT
Not After : Feb 18 02:00:56 2025 GMT
Subject: CN=51dd534a98515abdb5d4b2e30ca55e21d8683f9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ff:6b:db:5e:85:7a:a7:d6:d1:09:50:36:39:
45:6f:25:86:45:5f:79:34:e1:c5:bc:13:35:3b:a8:
db:9e:ce:09:a1:20:03:1e:78:0f:74:d6:fc:c5:e7:
e5:c3:e7:fa:c5:6d:b7:b9:26:09:6b:94:bd:c6:b2:
b0:7a:0f:24:64:b5:7a:15:5f:8f:5c:6d:2b:21:58:
56:7b:4c:d3:b5:e5:1e:43:fb:45:bf:20:dc:c3:33:
3b:1b:8b:8c:a8:7c:00:95:d9:d6:f6:9d:3c:b9:ce:
a1:36:76:fb:4d:ee:fc:45:56:db:04:1c:84:a5:78:
e4:71:1a:5e:0b:1a:88:49:e5:bb:68:95:08:58:ef:
51:c8:6c:85:56:6e:77:62:52:b0:b7:df:e4:71:ac:
62:29:d6:c0:31:24:9f:85:89:3a:cd:83:1a:62:d5:
ce:d1:c0:a1:08:0d:59:ac:d2:17:29:6b:12:c0:d2:
76:55:2a:bc:ca:ec:b3:2d:2e:c6:4b:18:9a:0c:c3:
1f:63:ca:e7:86:a8:64:21:23:43:4f:0c:cd:de:73:
4f:ac:33:d5:76:0f:50:fa:4e:06:2b:4c:15:de:df:
fe:e7:52:73:31:e8:e3:ca:05:21:99:90:bd:5f:07:
8c:85:3a:b7:56:e2:0b:40:ab:cc:b3:c5:68:f3:d9:
6d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:DD:53:4A:98:51:5A:BD:B5:D4:B2:E3:0C:A5:5E:21:D8:68:3F:9F
X509v3 Authority Key Identifier:
keyid:AA:E8:9B:C3:09:77:68:AC:D6:7C:2D:D7:47:D3:BE:1A:DB:72:E9:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/quibwwl3aKzWfC3XR9O-Gtty6Zc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:c6:dc:ef:7e:a0:c3:a0:18:9b:70:b8:e9:e6:17:99:1d:d5:
5d:94:1f:7c:b9:93:29:25:6a:22:63:c0:c4:f6:ff:d8:a3:67:
2b:2b:77:d7:13:91:44:4e:69:56:4a:06:a0:5f:b8:e8:a3:dd:
4f:4b:84:9b:b1:e2:af:42:0e:d3:fc:98:62:35:92:59:13:bb:
d9:58:d4:9b:88:f0:5d:af:e2:51:41:fa:ac:f7:10:3d:ba:22:
f2:0b:61:49:db:4f:e4:13:fa:78:0e:1e:21:2f:08:14:86:1a:
78:f1:73:ba:fe:59:79:cb:e6:5b:7f:a4:4b:bc:f3:69:75:c8:
62:ad:25:cf:39:5b:55:5d:f3:df:7a:50:03:7f:45:df:c9:32:
04:14:06:bc:b0:7e:fb:48:65:1b:0e:8f:11:cb:36:88:5b:cb:
69:80:c7:1a:0d:e1:3b:f0:32:f5:a1:6c:fd:c7:16:91:96:cf:
1a:97:f6:9d:95:f9:aa:47:64:64:8e:f5:7c:cd:58:67:1c:21:
9b:05:e3:ee:60:cc:ad:0d:15:32:58:6e:68:fb:e7:83:9c:bb:
4f:ec:09:c5:b4:61:e2:92:4c:79:b3:9b:d1:9b:90:28:d0:c9:
ab:20:d9:42:b7:5a:71:99:36:a0:7e:55:eb:6e:49:e3:49:30:
84:b7:b2:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURoxkT4EA3eyFdzfncMf4lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhZTg5YmMzMDk3NzY4YWNkNjdjMmRkNzQ3ZDNiZTFhZGI3
MmU5OTcwHhcNMjUwMjE3MDIwMDU2WhcNMjUwMjE4MDIwMDU2WjAzMTEwLwYDVQQD
Eyg1MWRkNTM0YTk4NTE1YWJkYjVkNGIyZTMwY2E1NWUyMWQ4NjgzZjlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlv9r216FeqfW0QlQNjlFbyWGRV95
NOHFvBM1O6jbns4JoSADHngPdNb8xeflw+f6xW23uSYJa5S9xrKweg8kZLV6FV+P
XG0rIVhWe0zTteUeQ/tFvyDcwzM7G4uMqHwAldnW9p08uc6hNnb7Te78RVbbBByE
pXjkcRpeCxqISeW7aJUIWO9RyGyFVm53YlKwt9/kcaxiKdbAMSSfhYk6zYMaYtXO
0cChCA1ZrNIXKWsSwNJ2VSq8yuyzLS7GSxiaDMMfY8rnhqhkISNDTwzN3nNPrDPV
dg9Q+k4GK0wV3t/+51JzMejjygUhmZC9XweMhTq3VuILQKvMs8Vo89ltEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFHdU0qYUVq9tdSy4wylXiHYaD+fMB8GA1UdIwQY
MBaAFKrom8MJd2is1nwt10fTvhrbcumXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXVpYnd3bDNhS3pXZkMzWFI5Ty1HdHR5NlpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zMmU2NTAtMGNlYy00MjYyLWJjOTMt
ZTNkZDc3NjQ4OWExLzEvcXVpYnd3bDNhS3pXZkMzWFI5Ty1HdHR5NlpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS8zMmU2NTAtMGNlYy00MjYyLWJjOTMtZTNkZDc3NjQ4OWEx
LzEvcXVpYnd3bDNhS3pXZkMzWFI5Ty1HdHR5NlpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgcbc736g
w6AYm3C46eYXmR3VXZQffLmTKSVqImPAxPb/2KNnKyt31xORRE5pVkoGoF+46KPd
T0uEm7Hir0IO0/yYYjWSWRO72VjUm4jwXa/iUUH6rPcQPboi8gthSdtP5BP6eA4e
IS8IFIYaePFzuv5ZecvmW3+kS7zzaXXIYq0lzzlbVV3z33pQA39F38kyBBQGvLB+
+0hlGw6PEcs2iFvLaYDHGg3hO/Ay9aFs/ccWkZbPGpf2nZX5qkdkZI71fM1YZxwh
mwXj7mDMrQ0VMlhuaPvng5y7T+wJxbRh4pJMebOb0ZuQKNDJqyDZQrdacZk2oH5V
625J40kwhLeykQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:09:22 2025 by rpki-client