![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/76706c-124c-4dbf-aef8-73dba1dddca7/1/pJR6ZT3sU9F51XJPJRTHJW22nfg.mft
File: pJR6ZT3sU9F51XJPJRTHJW22nfg.mft (raw, json)
Hash identifier: YjxC8uFLnxF1uZe7jSCU2ccpV/KgaDOrHjdWtWilBIc=
Subject key identifier: 54:BB:1A:9B:D4:07:BF:10:E1:3E:11:EA:FC:7A:8B:7A:69:30:BE:5E
Authority key identifier: A4:94:7A:65:3D:EC:53:D1:79:D5:72:4F:25:14:C7:25:6D:B6:9D:F8
Certificate issuer: /CN=a4947a653dec53d179d5724f2514c7256db69df8
Certificate serial: 019511D9C58E4EAE988E8B9B89E261B60A1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJR6ZT3sU9F51XJPJRTHJW22nfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/76706c-124c-4dbf-aef8-73dba1dddca7/1/pJR6ZT3sU9F51XJPJRTHJW22nfg.mft
Manifest number: 0D84
Signing time: Mon 17 Feb 2025 03:00:39 +0000
Manifest this update: Mon 17 Feb 2025 03:00:39 +0000
Manifest next update: Tue 18 Feb 2025 03:00:39 +0000
Files and hashes: 1: pJR6ZT3sU9F51XJPJRTHJW22nfg.crl (hash: edvXA0Litf3feVb3y9TiFJnSl8eVYkNv5ngMkNLaaek=)
2: qOhrpnYZCzUpUKZB3MFNa4-HHEI.roa (hash: 6oJMsP2H8bztySGaS8Vu2F0xQVmbFj5CBgjWIqAhkAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/76706c-124c-4dbf-aef8-73dba1dddca7/1/pJR6ZT3sU9F51XJPJRTHJW22nfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/76706c-124c-4dbf-aef8-73dba1dddca7/1/pJR6ZT3sU9F51XJPJRTHJW22nfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/pJR6ZT3sU9F51XJPJRTHJW22nfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:c5:8e:4e:ae:98:8e:8b:9b:89:e2:61:b6:0a:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4947a653dec53d179d5724f2514c7256db69df8
Validity
Not Before: Feb 17 03:00:39 2025 GMT
Not After : Feb 18 03:00:39 2025 GMT
Subject: CN=54bb1a9bd407bf10e13e11eafc7a8b7a6930be5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:99:b4:ee:e7:38:46:e5:10:8a:d9:4b:8e:ea:
09:2d:82:7b:ad:72:6e:3f:d3:d6:c6:18:11:c5:13:
6c:eb:05:48:1c:34:ea:d5:cd:e4:85:06:0c:55:d8:
e4:90:6a:6f:27:55:b4:5b:1c:7c:3f:41:16:a9:3a:
a6:45:34:93:22:ab:10:50:95:1b:bb:f0:f7:e6:db:
1e:89:dc:18:a6:b4:e5:51:5c:1c:69:3f:b5:c7:00:
09:82:ed:c5:9e:91:26:d8:d4:83:fb:21:56:04:90:
40:1d:7e:74:b0:a1:09:18:36:18:b0:bb:f2:e8:3f:
58:6c:38:c1:43:38:52:aa:e6:b8:af:d6:5a:c0:8f:
8a:59:28:d1:d7:e4:64:51:2b:32:5f:4d:a9:81:b1:
cf:4b:c9:cd:19:ac:c2:24:ce:5a:0d:ee:00:b6:93:
89:d0:c0:d5:e6:62:e6:21:83:54:d4:f6:cb:31:e5:
59:cf:39:aa:bd:65:f9:27:d2:0d:97:f2:78:96:c2:
96:7e:25:03:89:9d:8b:ed:d0:3e:01:94:99:79:6b:
78:ec:08:40:97:65:ef:7f:5c:81:b0:1e:28:fe:96:
0a:fe:2e:4d:ab:65:6d:19:b7:d6:83:55:23:ed:7b:
b0:01:25:5e:34:4f:6e:cd:ac:f8:7b:10:2c:30:39:
ee:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:BB:1A:9B:D4:07:BF:10:E1:3E:11:EA:FC:7A:8B:7A:69:30:BE:5E
X509v3 Authority Key Identifier:
keyid:A4:94:7A:65:3D:EC:53:D1:79:D5:72:4F:25:14:C7:25:6D:B6:9D:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJR6ZT3sU9F51XJPJRTHJW22nfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/76706c-124c-4dbf-aef8-73dba1dddca7/1/pJR6ZT3sU9F51XJPJRTHJW22nfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/76706c-124c-4dbf-aef8-73dba1dddca7/1/pJR6ZT3sU9F51XJPJRTHJW22nfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:3a:6b:90:9c:80:e2:12:88:9e:8a:eb:e6:25:75:12:9e:a3:
7e:88:c4:03:c2:a8:8c:6a:3b:ed:47:b0:ac:91:0c:25:02:9f:
28:66:24:74:83:f6:2d:a0:3a:0b:ab:24:f8:ea:02:88:e4:be:
a6:81:ea:30:06:d1:62:16:cb:d4:fc:6b:ff:c4:e8:0b:57:79:
ab:99:a4:96:f3:1b:29:38:15:44:ce:96:4f:29:74:3c:35:eb:
dc:f2:ed:56:0a:70:f5:01:fb:1f:f3:34:3c:5f:06:82:fc:80:
8e:ca:28:f9:b8:a0:24:b1:e9:c2:42:09:95:2a:bc:15:df:41:
ad:fd:1d:fc:d7:e9:9d:c2:bd:6e:63:74:7d:4f:9d:45:71:21:
da:92:27:aa:0d:66:d3:42:5d:d9:84:44:7a:36:15:40:e6:ae:
0d:bd:27:06:fd:10:75:86:7a:fd:c4:f8:ac:a8:52:fa:83:82:
df:0e:c6:b8:15:91:fa:d9:d6:ee:4e:fb:94:63:89:c7:07:33:
e1:96:60:b6:3f:13:5c:7c:5a:ec:5c:64:20:dc:5e:dd:f4:8d:
bf:54:12:19:cb:af:db:57:d5:2f:8b:c7:90:1f:88:d2:d7:b6:
93:a8:3b:35:45:d1:c9:49:ae:a9:50:6f:2c:97:07:fd:df:31:
59:b0:90:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUR2cWOTq6YjoubieJhtgodMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0OTQ3YTY1M2RlYzUzZDE3OWQ1NzI0ZjI1MTRjNzI1NmRi
NjlkZjgwHhcNMjUwMjE3MDMwMDM5WhcNMjUwMjE4MDMwMDM5WjAzMTEwLwYDVQQD
Eyg1NGJiMWE5YmQ0MDdiZjEwZTEzZTExZWFmYzdhOGI3YTY5MzBiZTVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJm07uc4RuUQitlLjuoJLYJ7rXJu
P9PWxhgRxRNs6wVIHDTq1c3khQYMVdjkkGpvJ1W0Wxx8P0EWqTqmRTSTIqsQUJUb
u/D35tseidwYprTlUVwcaT+1xwAJgu3FnpEm2NSD+yFWBJBAHX50sKEJGDYYsLvy
6D9YbDjBQzhSqua4r9ZawI+KWSjR1+RkUSsyX02pgbHPS8nNGazCJM5aDe4AtpOJ
0MDV5mLmIYNU1PbLMeVZzzmqvWX5J9INl/J4lsKWfiUDiZ2L7dA+AZSZeWt47AhA
l2Xvf1yBsB4o/pYK/i5Nq2VtGbfWg1Uj7XuwASVeNE9uzaz4exAsMDnuNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFS7GpvUB78Q4T4R6vx6i3ppML5eMB8GA1UdIwQY
MBaAFKSUemU97FPRedVyTyUUxyVttp34MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEpSNlpUM3NVOUY1MVhKUEpSVEhKVzIybmZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS83NjcwNmMtMTI0Yy00ZGJmLWFlZjgt
NzNkYmExZGRkY2E3LzEvcEpSNlpUM3NVOUY1MVhKUEpSVEhKVzIybmZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS83NjcwNmMtMTI0Yy00ZGJmLWFlZjgtNzNkYmExZGRkY2E3
LzEvcEpSNlpUM3NVOUY1MVhKUEpSVEhKVzIybmZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMTprkJyA
4hKInorr5iV1Ep6jfojEA8KojGo77UewrJEMJQKfKGYkdIP2LaA6C6sk+OoCiOS+
poHqMAbRYhbL1Pxr/8ToC1d5q5mklvMbKTgVRM6WTyl0PDXr3PLtVgpw9QH7H/M0
PF8GgvyAjsoo+bigJLHpwkIJlSq8Fd9Brf0d/NfpncK9bmN0fU+dRXEh2pInqg1m
00Jd2YREejYVQOauDb0nBv0QdYZ6/cT4rKhS+oOC3w7GuBWR+tnW7k77lGOJxwcz
4ZZgtj8TXHxa7FxkINxe3fSNv1QSGcuv21fVL4vHkB+I0te2k6g7NUXRyUmuqVBv
LJcH/d8xWbCQsg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:25:31 2025 by rpki-client