![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/02f354-98cd-4325-9fbe-762432fdd4dd/1/zVfsTEAlrauIuSB0rUYFbp-TCZ8.mft
File: zVfsTEAlrauIuSB0rUYFbp-TCZ8.mft (raw, json)
Hash identifier: Jjg0qk5PHCkrrudy1mY+T+JOFD6RGCLblwX7EOWYXds=
Subject key identifier: 2E:CD:50:6C:30:C3:6C:E2:DB:BA:39:85:0D:97:E9:AA:6C:6E:5B:A1
Authority key identifier: CD:57:EC:4C:40:25:AD:AB:88:B9:20:74:AD:46:05:6E:9F:93:09:9F
Certificate issuer: /CN=cd57ec4c4025adab88b92074ad46056e9f93099f
Certificate serial: 019512107F42437FE3DCAE5CE94AE6A0A9C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zVfsTEAlrauIuSB0rUYFbp-TCZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/02f354-98cd-4325-9fbe-762432fdd4dd/1/zVfsTEAlrauIuSB0rUYFbp-TCZ8.mft
Manifest number: 1457
Signing time: Mon 17 Feb 2025 04:00:25 +0000
Manifest this update: Mon 17 Feb 2025 04:00:25 +0000
Manifest next update: Tue 18 Feb 2025 04:00:25 +0000
Files and hashes: 1: SEgDWEU92zAnfdKKSLnIVh9oR0w.roa (hash: GA6e5Om3W8hxoIZHlBedjOBv7v6eWZGQfFv5Miq1TxA=)
2: zVfsTEAlrauIuSB0rUYFbp-TCZ8.crl (hash: joIXGJFoik663AM3uK5zjyLWalN+EjGHFMGL3oTb7cY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/02f354-98cd-4325-9fbe-762432fdd4dd/1/zVfsTEAlrauIuSB0rUYFbp-TCZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/02f354-98cd-4325-9fbe-762432fdd4dd/1/zVfsTEAlrauIuSB0rUYFbp-TCZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zVfsTEAlrauIuSB0rUYFbp-TCZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:7f:42:43:7f:e3:dc:ae:5c:e9:4a:e6:a0:a9:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd57ec4c4025adab88b92074ad46056e9f93099f
Validity
Not Before: Feb 17 04:00:25 2025 GMT
Not After : Feb 18 04:00:25 2025 GMT
Subject: CN=2ecd506c30c36ce2dbba39850d97e9aa6c6e5ba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ce:07:f1:bb:5a:d2:e9:1e:d9:3b:48:23:4a:
69:f2:06:0a:c4:32:a3:8f:ee:b6:03:84:73:74:de:
a9:b6:9e:77:d1:f6:3f:82:cf:1b:4d:84:95:fd:ac:
9d:19:5f:ee:d6:47:8f:85:23:95:22:2a:2e:53:36:
d1:d3:74:a8:3e:8d:23:68:23:e9:e2:22:c1:d5:5f:
4a:1a:35:9c:28:93:89:68:a2:ca:9b:7a:5c:6b:be:
7c:56:8d:7d:87:20:39:3e:0e:b7:40:bb:90:24:5b:
63:d5:d5:0e:4a:0e:5c:b6:aa:f8:67:7d:86:23:3d:
6a:48:2e:91:bb:06:e3:da:cb:28:4b:36:ca:75:69:
32:0f:4d:92:df:d0:d0:30:6d:98:2e:f9:69:be:ee:
fc:23:79:02:c2:b5:33:0a:27:37:2c:6c:9b:f5:ea:
e8:7e:f6:28:a3:13:bc:04:a4:98:e8:45:2d:a4:23:
89:60:98:ff:2d:7e:f3:7b:41:bd:34:e7:a7:b6:9b:
7c:d2:69:ac:44:67:6e:69:fa:c6:20:7c:38:5e:62:
68:a2:da:23:5a:f1:98:b5:e2:b5:4f:b4:16:04:91:
89:d2:73:9e:a6:1a:9e:16:f6:c5:05:c5:03:2e:74:
ab:3f:5e:a8:7b:fd:1b:35:53:32:58:80:69:1f:c8:
b3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:CD:50:6C:30:C3:6C:E2:DB:BA:39:85:0D:97:E9:AA:6C:6E:5B:A1
X509v3 Authority Key Identifier:
keyid:CD:57:EC:4C:40:25:AD:AB:88:B9:20:74:AD:46:05:6E:9F:93:09:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zVfsTEAlrauIuSB0rUYFbp-TCZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/02f354-98cd-4325-9fbe-762432fdd4dd/1/zVfsTEAlrauIuSB0rUYFbp-TCZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/02f354-98cd-4325-9fbe-762432fdd4dd/1/zVfsTEAlrauIuSB0rUYFbp-TCZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:76:8e:0e:f3:3e:63:b4:5a:36:0d:14:1c:5d:4f:c8:18:00:
be:e3:1e:89:a1:a9:de:40:cf:83:57:e7:82:87:41:77:2f:ab:
c3:58:da:55:8d:5c:06:17:0e:c8:a7:1f:8d:c3:2e:4e:b8:9d:
86:92:93:65:4a:11:cf:38:e4:49:6b:4b:25:ce:5c:33:8f:93:
a7:91:7a:1f:c1:6b:77:f6:69:bf:07:9d:d3:bc:c7:b4:70:c0:
ad:7e:49:3d:73:db:e6:ba:e1:8f:b3:df:14:b4:de:ef:56:1f:
5d:29:b8:46:1d:99:6e:aa:21:f1:0d:bf:4c:b3:81:68:e3:09:
b7:ab:07:2c:0f:03:fb:b2:ac:f5:4f:06:bc:69:e9:67:a9:88:
22:0c:8d:11:0f:28:a4:14:5e:4a:bb:a2:47:66:77:5e:2b:96:
82:17:bd:19:b3:62:82:97:86:c6:2f:44:b1:28:1c:5d:8e:7a:
f3:10:32:11:a5:12:a2:3d:29:9a:00:dc:97:fb:67:c7:f3:7b:
ae:71:2d:16:77:e7:b1:f8:bb:7e:9e:5d:5a:86:9b:20:54:f2:
58:50:9e:23:46:e4:0e:fc:5a:63:21:fe:55:6e:29:57:5b:09:
a5:f0:d5:d1:11:aa:27:4d:bb:df:8b:d3:d9:1f:e4:d9:be:17:
6b:26:cb:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUSEH9CQ3/j3K5c6UrmoKnIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkNTdlYzRjNDAyNWFkYWI4OGI5MjA3NGFkNDYwNTZlOWY5
MzA5OWYwHhcNMjUwMjE3MDQwMDI1WhcNMjUwMjE4MDQwMDI1WjAzMTEwLwYDVQQD
EygyZWNkNTA2YzMwYzM2Y2UyZGJiYTM5ODUwZDk3ZTlhYTZjNmU1YmExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0s4H8bta0uke2TtII0pp8gYKxDKj
j+62A4RzdN6ptp530fY/gs8bTYSV/aydGV/u1kePhSOVIiouUzbR03SoPo0jaCPp
4iLB1V9KGjWcKJOJaKLKm3pca758Vo19hyA5Pg63QLuQJFtj1dUOSg5ctqr4Z32G
Iz1qSC6Ruwbj2ssoSzbKdWkyD02S39DQMG2YLvlpvu78I3kCwrUzCic3LGyb9ero
fvYooxO8BKSY6EUtpCOJYJj/LX7ze0G9NOentpt80mmsRGduafrGIHw4XmJootoj
WvGYteK1T7QWBJGJ0nOephqeFvbFBcUDLnSrP16oe/0bNVMyWIBpH8izFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC7NUGwww2zi27o5hQ2X6apsbluhMB8GA1UdIwQY
MBaAFM1X7ExAJa2riLkgdK1GBW6fkwmfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelZmc1RFQWxyYXVJdVNCMHJVWUZicC1UQ1o4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8wMmYzNTQtOThjZC00MzI1LTlmYmUt
NzYyNDMyZmRkNGRkLzEvelZmc1RFQWxyYXVJdVNCMHJVWUZicC1UQ1o4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8wMmYzNTQtOThjZC00MzI1LTlmYmUtNzYyNDMyZmRkNGRk
LzEvelZmc1RFQWxyYXVJdVNCMHJVWUZicC1UQ1o4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQHaODvM+
Y7RaNg0UHF1PyBgAvuMeiaGp3kDPg1fngodBdy+rw1jaVY1cBhcOyKcfjcMuTrid
hpKTZUoRzzjkSWtLJc5cM4+Tp5F6H8Frd/Zpvwed07zHtHDArX5JPXPb5rrhj7Pf
FLTe71YfXSm4Rh2Zbqoh8Q2/TLOBaOMJt6sHLA8D+7Ks9U8GvGnpZ6mIIgyNEQ8o
pBReSruiR2Z3XiuWghe9GbNigpeGxi9EsSgcXY568xAyEaUSoj0pmgDcl/tnx/N7
rnEtFnfnsfi7fp5dWoabIFTyWFCeI0bkDvxaYyH+VW4pV1sJpfDV0RGqJ02734vT
2R/k2b4XaybLPw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:10:36 2025 by rpki-client