![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/b0cd2e-4864-4a34-82a5-e7c444346760/1/UGVstHd9FLXrJkxrAyyLo3VvKuU.mft
File: UGVstHd9FLXrJkxrAyyLo3VvKuU.mft (raw, json)
Hash identifier: p0xO6ESkIaHxHGNv56oLut1io8RMFIz+9WXIWkq0Yvw=
Subject key identifier: A2:77:55:50:BC:BB:8D:65:FF:41:03:C3:94:0C:59:D2:33:C6:6C:CA
Authority key identifier: 50:65:6C:B4:77:7D:14:B5:EB:26:4C:6B:03:2C:8B:A3:75:6F:2A:E5
Certificate issuer: /CN=50656cb4777d14b5eb264c6b032c8ba3756f2ae5
Certificate serial: 019511A2921F925E8C7DCF79839976D58714
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UGVstHd9FLXrJkxrAyyLo3VvKuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/b0cd2e-4864-4a34-82a5-e7c444346760/1/UGVstHd9FLXrJkxrAyyLo3VvKuU.mft
Manifest number: 0C73
Signing time: Mon 17 Feb 2025 02:00:21 +0000
Manifest this update: Mon 17 Feb 2025 02:00:21 +0000
Manifest next update: Tue 18 Feb 2025 02:00:21 +0000
Files and hashes: 1: UGVstHd9FLXrJkxrAyyLo3VvKuU.crl (hash: +LGgN+mAazoYd5WLdOFGOKAj/k4oF1Cz3t6gWE0C548=)
2: W9IaaIZmyaPXUAJrA0BcuxANo_U.roa (hash: pp8Xxh3yiPgDrFR6WEvs6TFsPiIHgqanQOCFWl/68Ug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/b0cd2e-4864-4a34-82a5-e7c444346760/1/UGVstHd9FLXrJkxrAyyLo3VvKuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/b0cd2e-4864-4a34-82a5-e7c444346760/1/UGVstHd9FLXrJkxrAyyLo3VvKuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/UGVstHd9FLXrJkxrAyyLo3VvKuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:92:1f:92:5e:8c:7d:cf:79:83:99:76:d5:87:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50656cb4777d14b5eb264c6b032c8ba3756f2ae5
Validity
Not Before: Feb 17 02:00:21 2025 GMT
Not After : Feb 18 02:00:21 2025 GMT
Subject: CN=a2775550bcbb8d65ff4103c3940c59d233c66cca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:02:90:b0:dc:fa:90:34:0f:f6:13:e6:a9:2c:
d2:58:3d:bb:75:25:65:c5:77:3b:18:0d:93:bb:1a:
43:0c:1d:ee:f7:dd:15:85:30:82:9c:d2:5c:d9:db:
1a:1a:38:dc:8c:55:81:6c:bd:b6:d1:a7:2f:5d:67:
3c:59:91:f0:f9:56:c7:d0:d9:6a:ea:25:0f:01:7e:
74:87:48:3b:a7:8c:7a:22:48:a4:82:a5:75:16:20:
9c:bb:04:b9:33:ba:be:87:83:3f:6e:29:c1:1f:3c:
57:bf:62:06:9d:b2:90:44:ce:0a:74:7c:67:a5:df:
4b:6c:25:7a:ec:82:4b:d6:c9:2c:85:c3:1f:d7:d6:
73:0f:a0:f6:fb:83:78:ae:18:ed:bf:0f:e0:64:95:
21:07:41:91:9d:eb:95:c3:53:19:d0:6f:92:b9:cb:
4b:64:49:ba:d6:57:1a:68:7b:29:19:19:e6:62:e5:
b9:88:77:6c:8f:41:f3:6f:22:17:e2:8c:f4:a2:e8:
58:c9:c7:82:2e:37:de:d6:8d:a3:55:39:ab:f1:03:
2f:84:9a:2e:c6:61:37:a0:b5:14:d1:88:40:44:93:
73:03:c5:66:cf:82:67:a4:01:bf:3b:2d:a3:40:bd:
6f:ab:3d:50:5c:c2:2f:2c:62:4f:4a:76:52:4f:b8:
55:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:77:55:50:BC:BB:8D:65:FF:41:03:C3:94:0C:59:D2:33:C6:6C:CA
X509v3 Authority Key Identifier:
keyid:50:65:6C:B4:77:7D:14:B5:EB:26:4C:6B:03:2C:8B:A3:75:6F:2A:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UGVstHd9FLXrJkxrAyyLo3VvKuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/b0cd2e-4864-4a34-82a5-e7c444346760/1/UGVstHd9FLXrJkxrAyyLo3VvKuU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/b0cd2e-4864-4a34-82a5-e7c444346760/1/UGVstHd9FLXrJkxrAyyLo3VvKuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:3e:d0:0e:c9:4b:ad:6e:a0:91:07:dc:0e:d8:df:32:2c:57:
47:fc:b9:5f:5a:d7:28:45:07:61:d6:94:0e:cd:44:84:ec:4b:
c8:39:5a:94:7c:c7:09:37:d6:7f:a5:e5:54:48:22:d5:46:69:
a9:d4:1f:b4:02:7f:29:26:0a:cf:f3:58:4b:9e:03:36:7f:2c:
4f:24:00:e1:2e:e7:13:b3:5b:c1:59:4c:d9:e6:aa:7f:cb:cc:
dc:3b:1a:26:b5:de:87:50:fe:24:90:27:c3:fc:e9:39:be:3d:
19:bc:a5:70:02:b3:6e:28:57:5e:a4:6d:f1:89:17:8a:bc:5f:
76:dd:f8:8a:fa:79:59:d9:67:e5:d7:9e:3a:e8:f6:b6:d0:ad:
6c:a5:66:4d:59:3d:d0:3c:63:b3:8b:ef:a3:de:7f:29:a4:f1:
5a:b1:27:88:03:e8:10:61:90:48:11:51:d4:fd:83:e9:2b:0f:
0e:6d:1c:3e:3c:3d:6d:54:47:e2:57:ea:a6:5b:54:40:bd:34:
8b:4d:b4:ee:09:b8:6c:84:fc:50:36:0a:5d:63:7a:61:44:01:
bb:5f:52:4e:1c:46:b2:fa:33:87:c5:78:f1:82:3f:13:de:32:
a8:53:72:b6:4b:6e:2a:5e:8c:72:d7:28:74:42:1b:72:fc:48:
e0:c7:18:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURopIfkl6Mfc95g5l21YcUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwNjU2Y2I0Nzc3ZDE0YjVlYjI2NGM2YjAzMmM4YmEzNzU2
ZjJhZTUwHhcNMjUwMjE3MDIwMDIxWhcNMjUwMjE4MDIwMDIxWjAzMTEwLwYDVQQD
EyhhMjc3NTU1MGJjYmI4ZDY1ZmY0MTAzYzM5NDBjNTlkMjMzYzY2Y2NhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgKQsNz6kDQP9hPmqSzSWD27dSVl
xXc7GA2TuxpDDB3u990VhTCCnNJc2dsaGjjcjFWBbL220acvXWc8WZHw+VbH0Nlq
6iUPAX50h0g7p4x6IkikgqV1FiCcuwS5M7q+h4M/binBHzxXv2IGnbKQRM4KdHxn
pd9LbCV67IJL1skshcMf19ZzD6D2+4N4rhjtvw/gZJUhB0GRneuVw1MZ0G+SuctL
ZEm61lcaaHspGRnmYuW5iHdsj0HzbyIX4oz0ouhYyceCLjfe1o2jVTmr8QMvhJou
xmE3oLUU0YhARJNzA8Vmz4JnpAG/Oy2jQL1vqz1QXMIvLGJPSnZST7hVTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKJ3VVC8u41l/0EDw5QMWdIzxmzKMB8GA1UdIwQY
MBaAFFBlbLR3fRS16yZMawMsi6N1byrlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUdWc3RIZDlGTFhySmt4ckF5eUxvM1Z2S3VVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9iMGNkMmUtNDg2NC00YTM0LTgyYTUt
ZTdjNDQ0MzQ2NzYwLzEvVUdWc3RIZDlGTFhySmt4ckF5eUxvM1Z2S3VVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS9iMGNkMmUtNDg2NC00YTM0LTgyYTUtZTdjNDQ0MzQ2NzYw
LzEvVUdWc3RIZDlGTFhySmt4ckF5eUxvM1Z2S3VVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJT7QDslL
rW6gkQfcDtjfMixXR/y5X1rXKEUHYdaUDs1EhOxLyDlalHzHCTfWf6XlVEgi1UZp
qdQftAJ/KSYKz/NYS54DNn8sTyQA4S7nE7NbwVlM2eaqf8vM3DsaJrXeh1D+JJAn
w/zpOb49GbylcAKzbihXXqRt8YkXirxfdt34ivp5Wdln5deeOuj2ttCtbKVmTVk9
0Dxjs4vvo95/KaTxWrEniAPoEGGQSBFR1P2D6SsPDm0cPjw9bVRH4lfqpltUQL00
i0207gm4bIT8UDYKXWN6YUQBu19SThxGsvozh8V48YI/E94yqFNytktuKl6Mctco
dEIbcvxI4McYKA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:09:15 2025 by rpki-client