![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.mft
File: YjhBAzjiHo6rlBGdgOQaOVhJHeY.mft (raw, json)
Hash identifier: GBG3nnvhOVRCc/pUKQWRrXoLuD/1UOFVU0GZYXmutRs=
Subject key identifier: C4:97:DE:EF:20:74:49:B4:2C:5F:6F:C8:EA:11:C2:FB:9B:A6:5A:F6
Authority key identifier: 62:38:41:03:38:E2:1E:8E:AB:94:11:9D:80:E4:1A:39:58:49:1D:E6
Certificate issuer: /CN=6238410338e21e8eab94119d80e41a3958491de6
Certificate serial: 019510901A3DE0CBF9B6118B267229B55547
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YjhBAzjiHo6rlBGdgOQaOVhJHeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.mft
Manifest number: 0A53
Signing time: Sun 16 Feb 2025 21:00:33 +0000
Manifest this update: Sun 16 Feb 2025 21:00:33 +0000
Manifest next update: Mon 17 Feb 2025 21:00:33 +0000
Files and hashes: 1: YjhBAzjiHo6rlBGdgOQaOVhJHeY.crl (hash: ebvD50DV0QkSSjcmU/dSaKsDPfxqGn8j/D0cI2Sp8vk=)
2: u6XKWkJxCFpT3xG3nAznfYy70cs.roa (hash: RjT1DRB5vp2FEimDEIdIqCiEf85N8q2cRNXUGa1kwyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YjhBAzjiHo6rlBGdgOQaOVhJHeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 21:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:90:1a:3d:e0:cb:f9:b6:11:8b:26:72:29:b5:55:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6238410338e21e8eab94119d80e41a3958491de6
Validity
Not Before: Feb 16 21:00:33 2025 GMT
Not After : Feb 17 21:00:33 2025 GMT
Subject: CN=c497deef207449b42c5f6fc8ea11c2fb9ba65af6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:19:22:c1:bc:9f:b4:47:88:ab:8b:d5:d5:53:
50:23:56:66:25:1a:86:5a:2b:a3:c3:9c:65:fd:6b:
19:80:41:b3:59:c3:7c:13:25:ce:83:05:83:0a:bb:
04:13:e6:ef:34:ac:7b:43:42:0d:94:89:7c:2f:34:
3e:9d:5e:99:0e:f6:c0:ae:5c:5d:26:a3:a7:c2:b8:
77:f9:73:90:68:79:fb:e4:91:5b:f3:c7:16:1c:ec:
44:07:ac:df:d6:d7:cf:0e:fe:61:d7:9b:e9:d5:f1:
2e:8c:a4:50:8e:da:41:34:c4:36:8a:62:67:0f:32:
72:e3:cf:d4:56:25:35:18:78:14:45:a5:29:63:f8:
8d:e8:a6:cc:bc:48:71:14:97:9b:60:0d:0e:74:e8:
e4:d4:40:0e:51:df:af:49:99:43:13:e1:fa:c5:c7:
5b:fb:41:4d:43:f3:bf:18:1e:84:3b:f1:60:82:0f:
c3:75:79:51:b6:a4:18:0e:f0:3a:6d:ed:f0:d3:13:
e3:25:ca:ec:20:20:ca:11:a3:14:dd:27:1a:a0:c7:
6c:c4:e6:af:2e:d5:e4:7c:f9:ac:bf:02:2a:67:03:
bb:5d:e9:3b:b0:5a:0a:42:8b:30:03:8a:ae:22:53:
2b:9c:b8:b4:c3:47:2a:91:43:28:d4:b3:e8:24:40:
fe:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:97:DE:EF:20:74:49:B4:2C:5F:6F:C8:EA:11:C2:FB:9B:A6:5A:F6
X509v3 Authority Key Identifier:
keyid:62:38:41:03:38:E2:1E:8E:AB:94:11:9D:80:E4:1A:39:58:49:1D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YjhBAzjiHo6rlBGdgOQaOVhJHeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:98:7c:a4:b7:7b:4b:3f:4b:b4:69:70:fc:b3:13:41:ca:d8:
2e:7c:e0:de:20:62:72:74:76:bb:db:fa:dd:27:49:0f:7c:09:
4c:a4:b1:dd:65:a4:74:28:d6:cd:22:1b:ba:01:51:45:61:e5:
51:ec:04:45:4d:73:12:34:65:f3:e2:64:7e:29:0b:56:e7:30:
af:00:0e:cb:3e:5d:5e:25:7a:fa:44:a5:d4:d2:43:17:bf:e0:
97:9b:52:71:ef:6a:79:08:ab:bb:a5:99:2d:5d:a2:cf:cb:12:
fa:94:06:a6:a2:67:2f:d1:b3:8c:44:94:c7:d7:39:3f:2c:9e:
d7:bb:3f:02:32:ca:8e:e2:f1:df:97:d2:f8:bd:f1:1d:0a:cb:
16:77:cd:16:79:be:0a:81:58:3e:57:4e:ed:e6:c2:6d:f5:1a:
a2:79:45:de:e9:2f:8f:84:ae:4b:5f:68:36:ee:68:a8:41:3e:
42:05:a8:d7:80:4f:8a:ab:36:c9:c2:4c:0b:cd:df:34:7d:25:
e9:c5:71:01:28:20:42:0d:61:5c:c7:b5:bf:7d:0c:93:5a:d4:
9c:48:ec:07:77:6a:82:07:06:1d:9d:e4:11:40:a6:41:c0:a0:
3d:3d:ff:aa:d3:c6:23:46:f9:0b:bf:4b:ed:82:e3:43:9a:1f:
1c:e0:a7:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUQkBo94Mv5thGLJnIptVVHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMzg0MTAzMzhlMjFlOGVhYjk0MTE5ZDgwZTQxYTM5NTg0
OTFkZTYwHhcNMjUwMjE2MjEwMDMzWhcNMjUwMjE3MjEwMDMzWjAzMTEwLwYDVQQD
EyhjNDk3ZGVlZjIwNzQ0OWI0MmM1ZjZmYzhlYTExYzJmYjliYTY1YWY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7RkiwbyftEeIq4vV1VNQI1ZmJRqG
Wiujw5xl/WsZgEGzWcN8EyXOgwWDCrsEE+bvNKx7Q0INlIl8LzQ+nV6ZDvbArlxd
JqOnwrh3+XOQaHn75JFb88cWHOxEB6zf1tfPDv5h15vp1fEujKRQjtpBNMQ2imJn
DzJy48/UViU1GHgURaUpY/iN6KbMvEhxFJebYA0OdOjk1EAOUd+vSZlDE+H6xcdb
+0FNQ/O/GB6EO/Fggg/DdXlRtqQYDvA6be3w0xPjJcrsICDKEaMU3ScaoMdsxOav
LtXkfPmsvwIqZwO7Xek7sFoKQoswA4quIlMrnLi0w0cqkUMo1LPoJED+QQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMSX3u8gdEm0LF9vyOoRwvubplr2MB8GA1UdIwQY
MBaAFGI4QQM44h6Oq5QRnYDkGjlYSR3mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWpoQkF6amlIbzZybEJHZGdPUWFPVmhKSGVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS81YTQ1MjYtODlmYy00NjQwLTkwMWQt
MTNhNThlYjlkOGY1LzEvWWpoQkF6amlIbzZybEJHZGdPUWFPVmhKSGVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS81YTQ1MjYtODlmYy00NjQwLTkwMWQtMTNhNThlYjlkOGY1
LzEvWWpoQkF6amlIbzZybEJHZGdPUWFPVmhKSGVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMZh8pLd7
Sz9LtGlw/LMTQcrYLnzg3iBicnR2u9v63SdJD3wJTKSx3WWkdCjWzSIbugFRRWHl
UewERU1zEjRl8+JkfikLVucwrwAOyz5dXiV6+kSl1NJDF7/gl5tSce9qeQiru6WZ
LV2iz8sS+pQGpqJnL9GzjESUx9c5Pyye17s/AjLKjuLx35fS+L3xHQrLFnfNFnm+
CoFYPldO7ebCbfUaonlF3ukvj4SuS19oNu5oqEE+QgWo14BPiqs2ycJMC83fNH0l
6cVxASggQg1hXMe1v30Mk1rUnEjsB3dqggcGHZ3kEUCmQcCgPT3/qtPGI0b5C79L
7YLjQ5ofHOCnFw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:16:00 2025 by rpki-client