![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/aa4cc4-5537-4aeb-9fed-d29b7d478631/1/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.mft
File: Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.mft (raw, json)
Hash identifier: RrScloOsKX4h1zLabS7gBonzRAAL0HVd8pcI1rq3n7I=
Subject key identifier: 88:3F:B9:B3:40:85:42:91:01:64:96:F0:CC:83:0E:87:DC:CB:AD:D6
Authority key identifier: 42:DE:27:FA:88:79:05:E0:C9:C1:F5:3F:67:F2:3F:29:6D:04:5F:0E
Certificate issuer: /CN=42de27fa887905e0c9c1f53f67f23f296d045f0e
Certificate serial: 01951134F3ADD003A6BE2005571FFAE9C27D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/aa4cc4-5537-4aeb-9fed-d29b7d478631/1/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.mft
Manifest number: 0A1F
Signing time: Mon 17 Feb 2025 00:00:37 +0000
Manifest this update: Mon 17 Feb 2025 00:00:37 +0000
Manifest next update: Tue 18 Feb 2025 00:00:37 +0000
Files and hashes: 1: GjL9gwLKb-oKSYTlHtFQE_CZaJs.roa (hash: mCVCuaWcX9YvC2fV3yIwbRSQDcC/PmXYfMHTWio0d9k=)
2: Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.crl (hash: e7IaCH5SVFwTmVQf5+4+1eOD4CCY3UMSM7Y/yO4Wz6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/aa4cc4-5537-4aeb-9fed-d29b7d478631/1/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/aa4cc4-5537-4aeb-9fed-d29b7d478631/1/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:f3:ad:d0:03:a6:be:20:05:57:1f:fa:e9:c2:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42de27fa887905e0c9c1f53f67f23f296d045f0e
Validity
Not Before: Feb 17 00:00:37 2025 GMT
Not After : Feb 18 00:00:37 2025 GMT
Subject: CN=883fb9b340854291016496f0cc830e87dccbadd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a0:83:64:cb:8d:28:47:20:23:f1:18:7a:28:
0d:bd:ef:ab:41:71:10:c2:21:5e:92:6d:03:eb:bf:
42:e1:90:b5:b0:68:c4:4d:56:8a:6a:0f:9e:75:ba:
24:ff:1f:b6:a6:c8:8e:eb:7e:bc:b4:90:50:9f:64:
0f:35:18:31:43:7b:66:11:44:b3:6e:48:11:2a:bb:
fa:07:47:49:a2:84:1c:db:fd:ee:d4:96:68:d5:e6:
b2:80:5e:4f:b9:83:d9:9f:18:ca:45:c0:31:92:4a:
50:bc:e6:18:41:59:d4:bb:d2:d1:33:b2:a2:13:28:
8d:52:5a:9e:e5:dc:cc:90:6d:67:63:c6:6e:78:76:
98:40:4f:04:7a:01:07:b4:17:ef:b0:42:d1:5e:c8:
79:ae:2f:a3:d1:e9:49:13:97:76:3f:a2:99:01:1e:
a1:3b:e3:2a:ad:16:04:52:b7:57:2c:3b:58:67:eb:
23:16:c8:89:4d:e3:8b:5a:1b:c3:6e:c3:43:28:ca:
e5:09:ac:d1:ab:bc:ea:20:44:25:8c:3a:fe:d5:9d:
c6:49:a0:df:3a:77:83:ac:5e:54:49:06:25:5e:f3:
9d:3e:cc:8b:7c:d7:8f:83:f4:bb:6a:1a:01:9b:73:
c8:e8:73:02:92:a7:0f:b9:aa:68:71:d5:ec:2b:00:
e4:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:3F:B9:B3:40:85:42:91:01:64:96:F0:CC:83:0E:87:DC:CB:AD:D6
X509v3 Authority Key Identifier:
keyid:42:DE:27:FA:88:79:05:E0:C9:C1:F5:3F:67:F2:3F:29:6D:04:5F:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/aa4cc4-5537-4aeb-9fed-d29b7d478631/1/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/aa4cc4-5537-4aeb-9fed-d29b7d478631/1/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:7c:f6:1b:8c:e4:44:47:b8:87:34:32:89:dd:42:cc:70:4b:
85:7b:41:7b:e9:72:06:d9:2a:78:09:83:8a:c5:34:cc:74:8e:
fe:1f:52:ed:ff:19:7c:c6:3b:9c:d1:b1:82:f8:89:91:50:53:
72:54:d0:0e:70:8f:7e:f2:d6:72:74:41:c6:57:db:c4:9a:f2:
5b:c6:21:c2:4f:0c:09:fe:e9:8e:26:4a:8e:fe:90:ed:53:65:
00:c2:8d:1e:3a:7c:53:4b:ec:da:67:49:22:28:e6:be:5f:e5:
e3:cb:30:79:3c:2e:e0:88:c3:f1:3a:d6:aa:e2:ee:af:75:e9:
a9:ae:92:2b:c8:40:e1:f6:79:17:29:bd:dd:d9:ac:61:d6:0c:
ab:2b:80:54:62:5e:03:bf:23:5d:1d:51:aa:da:d5:33:6b:3d:
ee:61:33:7e:61:4e:f6:fe:2e:fc:4d:ec:bd:10:19:5e:28:bf:
15:7c:d8:d0:ef:d6:f9:ea:b5:90:5b:bd:3f:f2:ff:84:b7:54:
c1:db:ec:18:fb:7a:8f:f3:e7:dd:6f:dc:60:11:ef:48:92:0e:
fb:9c:a0:38:b7:bb:8d:37:46:ee:ca:84:2c:45:e9:08:7a:28:
f1:72:a3:2b:bb:86:d4:db:ea:b3:ec:19:50:03:89:b6:54:07:
aa:d1:d9:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURNPOt0AOmviAFVx/66cJ9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyZGUyN2ZhODg3OTA1ZTBjOWMxZjUzZjY3ZjIzZjI5NmQw
NDVmMGUwHhcNMjUwMjE3MDAwMDM3WhcNMjUwMjE4MDAwMDM3WjAzMTEwLwYDVQQD
Eyg4ODNmYjliMzQwODU0MjkxMDE2NDk2ZjBjYzgzMGU4N2RjY2JhZGQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6CDZMuNKEcgI/EYeigNve+rQXEQ
wiFekm0D679C4ZC1sGjETVaKag+edbok/x+2psiO6368tJBQn2QPNRgxQ3tmEUSz
bkgRKrv6B0dJooQc2/3u1JZo1eaygF5PuYPZnxjKRcAxkkpQvOYYQVnUu9LRM7Ki
EyiNUlqe5dzMkG1nY8ZueHaYQE8EegEHtBfvsELRXsh5ri+j0elJE5d2P6KZAR6h
O+MqrRYEUrdXLDtYZ+sjFsiJTeOLWhvDbsNDKMrlCazRq7zqIEQljDr+1Z3GSaDf
OneDrF5USQYlXvOdPsyLfNePg/S7ahoBm3PI6HMCkqcPuapocdXsKwDkDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIg/ubNAhUKRAWSW8MyDDofcy63WMB8GA1UdIwQY
MBaAFELeJ/qIeQXgycH1P2fyPyltBF8OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXQ0bi1vaDVCZURKd2ZVX1pfSV9LVzBFWHc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9hYTRjYzQtNTUzNy00YWViLTlmZWQt
ZDI5YjdkNDc4NjMxLzEvUXQ0bi1vaDVCZURKd2ZVX1pfSV9LVzBFWHc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS9hYTRjYzQtNTUzNy00YWViLTlmZWQtZDI5YjdkNDc4NjMx
LzEvUXQ0bi1vaDVCZURKd2ZVX1pfSV9LVzBFWHc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzXz2G4zk
REe4hzQyid1CzHBLhXtBe+lyBtkqeAmDisU0zHSO/h9S7f8ZfMY7nNGxgviJkVBT
clTQDnCPfvLWcnRBxlfbxJryW8Yhwk8MCf7pjiZKjv6Q7VNlAMKNHjp8U0vs2mdJ
Iijmvl/l48sweTwu4IjD8TrWquLur3Xpqa6SK8hA4fZ5Fym93dmsYdYMqyuAVGJe
A78jXR1RqtrVM2s97mEzfmFO9v4u/E3svRAZXii/FXzY0O/W+eq1kFu9P/L/hLdU
wdvsGPt6j/Pn3W/cYBHvSJIO+5ygOLe7jTdG7sqELEXpCHoo8XKjK7uG1Nvqs+wZ
UAOJtlQHqtHZCQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:48:48 2025 by rpki-client