![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.mft
File: VzDFDI_UStGWvxBX7ipvpAQcfk4.mft (raw, json)
Hash identifier: QXkZacuoMp7Hx+bApyipiXO7TmR3LQ6QsBpzMOwnyCI=
Subject key identifier: D1:61:91:11:AC:2A:73:1A:12:AC:A9:80:CD:1A:65:B8:8C:30:C0:D8
Authority key identifier: 57:30:C5:0C:8F:D4:4A:D1:96:BF:10:57:EE:2A:6F:A4:04:1C:7E:4E
Certificate issuer: /CN=5730c50c8fd44ad196bf1057ee2a6fa4041c7e4e
Certificate serial: 019510C7768D961B10868E5DBA350F2CC8A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VzDFDI_UStGWvxBX7ipvpAQcfk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.mft
Manifest number: 08B6
Signing time: Sun 16 Feb 2025 22:01:02 +0000
Manifest this update: Sun 16 Feb 2025 22:01:02 +0000
Manifest next update: Mon 17 Feb 2025 22:01:02 +0000
Files and hashes: 1: VzDFDI_UStGWvxBX7ipvpAQcfk4.crl (hash: ETdF9N0iHJJSZXMpCgbul3L0w1KOEIkwnj/pCoTTXlQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/VzDFDI_UStGWvxBX7ipvpAQcfk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:76:8d:96:1b:10:86:8e:5d:ba:35:0f:2c:c8:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5730c50c8fd44ad196bf1057ee2a6fa4041c7e4e
Validity
Not Before: Feb 16 22:01:02 2025 GMT
Not After : Feb 17 22:01:02 2025 GMT
Subject: CN=d1619111ac2a731a12aca980cd1a65b88c30c0d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:01:35:9e:63:97:cc:b0:bf:ca:59:1f:ae:8c:
36:a8:e9:d3:51:8f:c3:46:da:bd:96:de:ee:ea:c9:
63:89:33:4e:e5:f0:01:65:b9:5d:fc:1c:d7:51:9c:
b0:cb:dc:83:03:ff:b1:05:b5:bd:94:cc:c8:f5:6f:
1e:c0:c8:ae:1e:aa:eb:13:0f:24:c2:b3:a2:2d:c4:
bb:d5:17:63:6b:15:b9:4e:6c:ca:38:0f:b8:39:90:
6b:57:58:3b:aa:36:01:58:61:13:bc:a3:1b:14:74:
91:28:7e:b7:92:84:3b:01:95:47:1a:9b:cc:99:3c:
2c:15:35:12:13:db:98:ff:73:61:cd:63:17:ce:27:
34:ea:d7:4d:91:9e:c5:c9:45:6d:6e:ee:d7:4c:95:
9d:fa:95:f2:e8:06:cb:a0:5e:0d:83:d6:e8:26:ee:
7a:31:81:ce:03:63:0a:aa:00:b2:29:c1:17:20:5f:
98:42:a2:b0:a5:e1:65:1e:27:7b:be:28:11:de:d1:
61:e2:1d:0c:5d:53:8d:01:95:e5:3d:c3:95:ed:9e:
8f:bc:51:d4:cc:18:15:dd:81:16:3b:44:b3:4c:23:
bb:eb:7b:cf:13:16:75:f9:b5:3d:a1:8e:2d:8e:ea:
19:4a:32:34:ea:ad:86:5a:2b:a9:18:2f:96:0d:e3:
b8:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:61:91:11:AC:2A:73:1A:12:AC:A9:80:CD:1A:65:B8:8C:30:C0:D8
X509v3 Authority Key Identifier:
keyid:57:30:C5:0C:8F:D4:4A:D1:96:BF:10:57:EE:2A:6F:A4:04:1C:7E:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VzDFDI_UStGWvxBX7ipvpAQcfk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:da:9f:79:1a:6f:49:e1:7f:5c:bc:c4:71:b8:97:65:e8:ee:
5b:b0:1c:ba:33:06:e4:c0:32:64:3f:2d:19:35:d4:7b:b8:5f:
d1:c2:15:51:af:38:bf:0f:ea:40:ca:c0:ea:d7:05:ee:80:b4:
83:e1:24:00:0d:26:d4:0b:75:d6:98:a6:72:57:21:ea:e8:8a:
e6:7d:89:78:49:65:d6:2b:9e:c1:6a:26:f8:b2:fe:67:c3:bf:
62:54:6c:bb:06:2f:fd:c8:e8:6d:93:f2:99:da:82:1c:e0:09:
6f:6e:90:b9:48:74:ed:e2:e9:1b:0e:59:f6:07:2b:a9:65:e2:
be:f8:8e:a7:15:8d:a9:6b:44:20:11:ee:eb:c7:8b:98:f9:94:
8a:6c:11:0f:a3:fc:b0:2d:d2:34:00:f5:3e:af:56:eb:72:d4:
59:ef:99:4c:6b:37:a0:b9:6e:5e:3d:a7:d4:bf:3d:3e:92:14:
b2:59:fb:b5:38:2c:1f:05:00:2b:01:24:c5:66:71:00:23:c8:
0c:4b:96:6c:3b:b1:65:9b:eb:c7:46:ff:f7:74:a6:1d:28:00:
64:05:ed:31:c1:ce:73:20:0f:81:0b:23:a1:86:81:f9:65:ae:
1a:c7:38:52:c8:85:0a:7a:46:af:94:96:51:89:71:58:d1:0c:
55:9e:4f:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUQx3aNlhsQho5dujUPLMilMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3MzBjNTBjOGZkNDRhZDE5NmJmMTA1N2VlMmE2ZmE0MDQx
YzdlNGUwHhcNMjUwMjE2MjIwMTAyWhcNMjUwMjE3MjIwMTAyWjAzMTEwLwYDVQQD
EyhkMTYxOTExMWFjMmE3MzFhMTJhY2E5ODBjZDFhNjViODhjMzBjMGQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAE1nmOXzLC/ylkfrow2qOnTUY/D
Rtq9lt7u6sljiTNO5fABZbld/BzXUZywy9yDA/+xBbW9lMzI9W8ewMiuHqrrEw8k
wrOiLcS71RdjaxW5TmzKOA+4OZBrV1g7qjYBWGETvKMbFHSRKH63koQ7AZVHGpvM
mTwsFTUSE9uY/3NhzWMXzic06tdNkZ7FyUVtbu7XTJWd+pXy6AbLoF4Ng9boJu56
MYHOA2MKqgCyKcEXIF+YQqKwpeFlHid7vigR3tFh4h0MXVONAZXlPcOV7Z6PvFHU
zBgV3YEWO0SzTCO763vPExZ1+bU9oY4tjuoZSjI06q2GWiupGC+WDeO45QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNFhkRGsKnMaEqypgM0aZbiMMMDYMB8GA1UdIwQY
MBaAFFcwxQyP1ErRlr8QV+4qb6QEHH5OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnpERkRJX1VTdEdXdnhCWDdpcHZwQVFjZms0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9mNTZjMGMtNGFlNy00ZWVjLTljZWQt
Zjc1YzExNjNmYjFlLzEvVnpERkRJX1VTdEdXdnhCWDdpcHZwQVFjZms0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC9mNTZjMGMtNGFlNy00ZWVjLTljZWQtZjc1YzExNjNmYjFl
LzEvVnpERkRJX1VTdEdXdnhCWDdpcHZwQVFjZms0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABtqfeRpv
SeF/XLzEcbiXZejuW7AcujMG5MAyZD8tGTXUe7hf0cIVUa84vw/qQMrA6tcF7oC0
g+EkAA0m1At11pimclch6uiK5n2JeEll1iuewWom+LL+Z8O/YlRsuwYv/cjobZPy
mdqCHOAJb26QuUh07eLpGw5Z9gcrqWXivviOpxWNqWtEIBHu68eLmPmUimwRD6P8
sC3SNAD1Pq9W63LUWe+ZTGs3oLluXj2n1L89PpIUsln7tTgsHwUAKwEkxWZxACPI
DEuWbDuxZZvrx0b/93SmHSgAZAXtMcHOcyAPgQsjoYaB+WWuGsc4UsiFCnpGr5SW
UYlxWNEMVZ5PpA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:05:30 2025 by rpki-client