![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/oK_h_tHyt9skoMLR9hAQaE6Ty9U.mft
File: oK_h_tHyt9skoMLR9hAQaE6Ty9U.mft (raw, json)
Hash identifier: YDqNFZ9PZCoaTPgRrSPMM8E1eWMF0mMPjzAbu5KRF2k=
Subject key identifier: 83:5B:31:E4:C4:74:E5:14:A4:17:3F:85:5D:89:BB:A1:13:60:E6:1F
Authority key identifier: A0:AF:E1:FE:D1:F2:B7:DB:24:A0:C2:D1:F6:10:10:68:4E:93:CB:D5
Certificate issuer: /CN=a0afe1fed1f2b7db24a0c2d1f61010684e93cbd5
Certificate serial: 019511A325F76FB1197828ECEE1494481B05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oK_h_tHyt9skoMLR9hAQaE6Ty9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/oK_h_tHyt9skoMLR9hAQaE6Ty9U.mft
Manifest number: 1456
Signing time: Mon 17 Feb 2025 02:00:59 +0000
Manifest this update: Mon 17 Feb 2025 02:00:59 +0000
Manifest next update: Tue 18 Feb 2025 02:00:59 +0000
Files and hashes: 1: QkZZT0OmyPm1U7sUIDpJIndlAn4.roa (hash: 2DQZexpqRbr1zDWnxxG0byMVlPhiUoCIJC9UgWimgPI=)
2: T8KLOt6NPvQjdduRK2LFDHFk-Ow.roa (hash: dmD7G0wa7KStRC2oIGcFu5FuaJHoaquq+ceiOTM5mGE=)
3: oK_h_tHyt9skoMLR9hAQaE6Ty9U.crl (hash: ILbfYL8Xw89kgp45C/KA2QZB6e3WxMAu7Br0WEx+DPo=)
4: uE6sCBGadbkdNjamuV9CVt7KEu0.roa (hash: 1QH+0Q+M4LSSW1D1mW+DBLCOYwkL6R7teXBJDnbRr5c=)
5: yQrnhCAAVRdNwjOPjF1ErzWjUdw.roa (hash: wlIPSP/dxpPek11XcClQXG8X5S1Ifs5kIcm9YTpY8Rk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/oK_h_tHyt9skoMLR9hAQaE6Ty9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/oK_h_tHyt9skoMLR9hAQaE6Ty9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/oK_h_tHyt9skoMLR9hAQaE6Ty9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a3:25:f7:6f:b1:19:78:28:ec:ee:14:94:48:1b:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0afe1fed1f2b7db24a0c2d1f61010684e93cbd5
Validity
Not Before: Feb 17 02:00:59 2025 GMT
Not After : Feb 18 02:00:59 2025 GMT
Subject: CN=835b31e4c474e514a4173f855d89bba11360e61f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c5:62:14:a9:f6:ed:48:30:1b:6a:f0:c0:97:
20:3b:5a:4e:e5:20:82:35:0f:19:05:d3:29:35:3f:
a9:af:7e:ed:4a:fa:54:08:4c:11:51:d3:c9:ba:d4:
bf:11:cd:42:ee:b9:c0:24:f9:e1:99:72:82:20:45:
6c:13:94:16:77:89:99:9b:df:1b:14:9a:70:77:d9:
5e:62:5c:df:43:6d:66:05:5d:28:d7:05:24:6e:58:
72:22:67:f8:15:c8:66:85:8a:90:29:2a:27:fd:61:
75:18:da:60:a5:44:4a:e7:f6:19:eb:7f:62:cb:26:
62:14:c5:7b:d1:3e:af:04:9f:40:97:88:99:e3:bb:
fd:07:ac:71:8f:11:4e:85:4f:9f:a4:5d:1f:2c:07:
9a:d6:ce:19:54:d5:92:d6:c0:30:1e:df:62:cd:10:
d3:3a:15:34:7d:fc:a7:69:0e:d1:e6:40:d8:d3:08:
3a:e4:16:75:68:64:ed:2d:44:84:c7:cc:11:54:cc:
1b:95:7b:c9:93:98:7e:22:61:f7:b2:26:ef:02:f9:
99:e4:52:5d:8a:e4:ba:cc:cd:43:f9:45:f4:75:04:
f8:fb:77:24:22:67:ab:ca:3b:49:d7:c2:17:19:4f:
ff:ce:99:2b:07:f9:d6:cd:ee:fe:e4:f3:00:cc:a3:
06:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:5B:31:E4:C4:74:E5:14:A4:17:3F:85:5D:89:BB:A1:13:60:E6:1F
X509v3 Authority Key Identifier:
keyid:A0:AF:E1:FE:D1:F2:B7:DB:24:A0:C2:D1:F6:10:10:68:4E:93:CB:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oK_h_tHyt9skoMLR9hAQaE6Ty9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/oK_h_tHyt9skoMLR9hAQaE6Ty9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/oK_h_tHyt9skoMLR9hAQaE6Ty9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:86:95:60:be:3c:98:e9:1a:2c:8e:69:85:68:f0:2f:cf:30:
16:f7:0a:19:cb:d5:63:7c:3f:ed:fb:85:ad:35:66:bb:0d:74:
af:2a:28:4e:1f:15:1e:92:8b:c3:cc:e5:34:23:27:44:83:d4:
a3:6f:02:0d:67:35:8b:d0:79:59:ae:fb:7a:c6:fd:e1:bc:7f:
99:26:15:13:72:01:f8:72:9e:71:4e:9c:d0:6a:67:84:01:82:
1d:2a:85:54:4f:da:bd:fe:9d:80:59:b3:0e:1e:c1:5e:b0:95:
70:1c:ac:d1:63:aa:14:c3:61:41:97:5d:47:70:a8:06:61:9b:
29:75:de:06:45:92:f7:fa:15:2e:dd:63:c8:d9:27:70:73:f4:
e3:ad:f8:4f:df:d0:c6:52:8a:cf:f2:a3:b0:cb:80:ea:18:95:
63:25:c3:e2:05:9e:75:6e:71:3e:c0:39:0c:db:d0:2c:6d:a5:
71:88:e7:75:30:ab:bc:d4:1f:b7:1b:88:50:b5:36:83:f4:59:
e9:14:be:82:ab:b4:e5:db:36:57:fa:77:4f:63:08:56:44:02:
67:f6:72:e1:61:be:fc:15:97:8c:6a:fc:3d:62:79:2c:60:5b:
67:cb:e2:72:cc:dd:d8:cf:8c:43:c4:37:2d:8e:69:5d:e2:fe:
ca:36:e8:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURoyX3b7EZeCjs7hSUSBsFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwYWZlMWZlZDFmMmI3ZGIyNGEwYzJkMWY2MTAxMDY4NGU5
M2NiZDUwHhcNMjUwMjE3MDIwMDU5WhcNMjUwMjE4MDIwMDU5WjAzMTEwLwYDVQQD
Eyg4MzViMzFlNGM0NzRlNTE0YTQxNzNmODU1ZDg5YmJhMTEzNjBlNjFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcViFKn27UgwG2rwwJcgO1pO5SCC
NQ8ZBdMpNT+pr37tSvpUCEwRUdPJutS/Ec1C7rnAJPnhmXKCIEVsE5QWd4mZm98b
FJpwd9leYlzfQ21mBV0o1wUkblhyImf4FchmhYqQKSon/WF1GNpgpURK5/YZ639i
yyZiFMV70T6vBJ9Al4iZ47v9B6xxjxFOhU+fpF0fLAea1s4ZVNWS1sAwHt9izRDT
OhU0ffynaQ7R5kDY0wg65BZ1aGTtLUSEx8wRVMwblXvJk5h+ImH3sibvAvmZ5FJd
iuS6zM1D+UX0dQT4+3ckImeryjtJ18IXGU//zpkrB/nWze7+5PMAzKMGRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFINbMeTEdOUUpBc/hV2Ju6ETYOYfMB8GA1UdIwQY
MBaAFKCv4f7R8rfbJKDC0fYQEGhOk8vVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0tfaF90SHl0OXNrb01MUjloQVFhRTZUeTlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8zMjAyYWQtN2I0Ni00MjJkLWE0ZDIt
ZWNhNTNhN2Y3NzYyLzEvb0tfaF90SHl0OXNrb01MUjloQVFhRTZUeTlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC8zMjAyYWQtN2I0Ni00MjJkLWE0ZDItZWNhNTNhN2Y3NzYy
LzEvb0tfaF90SHl0OXNrb01MUjloQVFhRTZUeTlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdYaVYL48
mOkaLI5phWjwL88wFvcKGcvVY3w/7fuFrTVmuw10ryooTh8VHpKLw8zlNCMnRIPU
o28CDWc1i9B5Wa77esb94bx/mSYVE3IB+HKecU6c0GpnhAGCHSqFVE/avf6dgFmz
Dh7BXrCVcBys0WOqFMNhQZddR3CoBmGbKXXeBkWS9/oVLt1jyNkncHP04634T9/Q
xlKKz/KjsMuA6hiVYyXD4gWedW5xPsA5DNvQLG2lcYjndTCrvNQftxuIULU2g/RZ
6RS+gqu05ds2V/p3T2MIVkQCZ/Zy4WG+/BWXjGr8PWJ5LGBbZ8vicszd2M+MQ8Q3
LY5pXeL+yjbouQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:11:54 2025 by rpki-client