![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.mft
File: kUPF9Ix3p5yYX15TYuCCrVTiMGM.mft (raw, json)
Hash identifier: CVuzkEQ8SLXhWA1g4Qz/SX9/axIIKrjtvOCzxzURqgc=
Subject key identifier: D1:EA:16:10:AE:FE:3C:9D:B4:3F:05:E1:7D:11:49:7E:64:15:27:1A
Authority key identifier: 91:43:C5:F4:8C:77:A7:9C:98:5F:5E:53:62:E0:82:AD:54:E2:30:63
Certificate issuer: /CN=9143c5f48c77a79c985f5e5362e082ad54e23063
Certificate serial: 019510C6B2DD8E34DB2CC65437D07A079CF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUPF9Ix3p5yYX15TYuCCrVTiMGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.mft
Manifest number: 0B3B
Signing time: Sun 16 Feb 2025 22:00:12 +0000
Manifest this update: Sun 16 Feb 2025 22:00:12 +0000
Manifest next update: Mon 17 Feb 2025 22:00:12 +0000
Files and hashes: 1: kUPF9Ix3p5yYX15TYuCCrVTiMGM.crl (hash: NpbNU4YmxIwVWlstroKX5NNBhXGG76nEFBuxqRzi/pw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUPF9Ix3p5yYX15TYuCCrVTiMGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c6:b2:dd:8e:34:db:2c:c6:54:37:d0:7a:07:9c:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9143c5f48c77a79c985f5e5362e082ad54e23063
Validity
Not Before: Feb 16 22:00:12 2025 GMT
Not After : Feb 17 22:00:12 2025 GMT
Subject: CN=d1ea1610aefe3c9db43f05e17d11497e6415271a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:fc:08:1b:9d:4a:b4:f1:13:00:02:ac:9c:3a:
00:1e:9a:38:38:38:94:3d:11:57:84:ed:34:16:1c:
07:76:fa:10:a9:82:7f:a5:75:2c:72:b5:a2:f8:c1:
35:af:90:4c:92:72:b2:a2:81:ce:54:0e:c8:45:bd:
4f:84:21:5e:74:a3:56:29:5a:b9:d0:02:9e:07:be:
e2:75:04:4d:b7:19:59:69:ef:47:a8:d1:9c:d0:03:
61:21:8d:f8:07:00:37:52:89:1d:59:8b:7d:c5:69:
e9:af:51:76:4b:c8:25:b2:48:1e:6e:eb:d3:98:a5:
ed:b6:09:c7:05:1f:b2:9d:eb:25:e7:16:b7:fb:e2:
a5:b4:93:a5:51:d3:09:8a:01:ee:c9:b1:9c:45:4b:
c7:11:87:66:4a:ef:11:53:0c:34:56:c6:45:f1:fe:
09:33:f8:9e:12:9a:84:49:0a:1f:ad:de:81:4e:52:
10:f4:2b:ca:68:2b:95:cf:b5:fd:4c:5b:6d:2e:2a:
df:27:77:ec:82:41:b9:58:df:95:7d:86:52:f6:e6:
90:30:7b:2b:b9:25:65:57:d9:58:fe:33:73:19:4d:
29:39:5c:f8:b8:60:10:67:2f:22:1c:60:3a:b8:2f:
5a:73:27:93:d7:a4:0a:11:07:57:11:71:13:21:ed:
0f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:EA:16:10:AE:FE:3C:9D:B4:3F:05:E1:7D:11:49:7E:64:15:27:1A
X509v3 Authority Key Identifier:
keyid:91:43:C5:F4:8C:77:A7:9C:98:5F:5E:53:62:E0:82:AD:54:E2:30:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUPF9Ix3p5yYX15TYuCCrVTiMGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:71:f2:1a:a5:7b:1a:24:6d:20:cf:78:16:24:7a:3d:0a:ea:
1a:5c:ed:8f:c4:e6:6b:12:74:30:56:22:d3:e2:dd:67:85:76:
9d:96:b5:66:e1:89:9a:0e:59:7c:46:a3:19:d8:c0:9f:de:3e:
38:a3:0c:c7:a3:a2:43:9f:e0:29:75:0f:df:4f:91:c1:cb:f2:
7b:62:dd:00:3a:82:79:8c:18:b8:9e:b4:d1:67:ed:70:5a:11:
8d:b1:a7:08:1b:e2:cb:a0:da:2c:5c:be:4c:1c:f3:22:7d:0a:
49:af:ba:d0:92:3b:3e:c2:f1:f6:aa:27:d2:ae:bd:4d:6e:cd:
de:15:f6:75:18:ee:b8:40:10:c3:bc:f1:21:db:63:e6:40:5f:
69:f2:ac:e5:fe:43:02:ee:d3:a2:9b:dc:02:c9:83:a3:f1:a5:
09:10:db:90:82:15:36:e5:8a:a7:da:04:e2:1b:01:f0:16:df:
f1:5a:2b:95:da:07:35:6a:98:65:1e:03:0d:0e:e5:bd:09:42:
58:79:46:eb:fc:5a:fa:27:a5:bc:88:75:d0:52:a0:2b:b1:af:
9b:ac:97:d4:7f:3a:57:86:07:98:91:3f:66:66:e5:cc:27:cf:
5f:08:6e:a6:6f:a0:e2:55:f4:c1:e3:87:18:3b:99:00:9e:b5:
84:ee:88:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUQxrLdjjTbLMZUN9B6B5zzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxNDNjNWY0OGM3N2E3OWM5ODVmNWU1MzYyZTA4MmFkNTRl
MjMwNjMwHhcNMjUwMjE2MjIwMDEyWhcNMjUwMjE3MjIwMDEyWjAzMTEwLwYDVQQD
EyhkMWVhMTYxMGFlZmUzYzlkYjQzZjA1ZTE3ZDExNDk3ZTY0MTUyNzFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5fwIG51KtPETAAKsnDoAHpo4ODiU
PRFXhO00FhwHdvoQqYJ/pXUscrWi+ME1r5BMknKyooHOVA7IRb1PhCFedKNWKVq5
0AKeB77idQRNtxlZae9HqNGc0ANhIY34BwA3UokdWYt9xWnpr1F2S8glskgebuvT
mKXttgnHBR+ynesl5xa3++KltJOlUdMJigHuybGcRUvHEYdmSu8RUww0VsZF8f4J
M/ieEpqESQofrd6BTlIQ9CvKaCuVz7X9TFttLirfJ3fsgkG5WN+VfYZS9uaQMHsr
uSVlV9lY/jNzGU0pOVz4uGAQZy8iHGA6uC9acyeT16QKEQdXEXETIe0P/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNHqFhCu/jydtD8F4X0RSX5kFScaMB8GA1UdIwQY
MBaAFJFDxfSMd6ecmF9eU2Lggq1U4jBjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1VQRjlJeDNwNXlZWDE1VFl1Q0NyVlRpTUdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9lYmM4MDQtZTNjNi00MGU2LWJmYmUt
YmRmMzY0YmE3N2NkLzEva1VQRjlJeDNwNXlZWDE1VFl1Q0NyVlRpTUdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi9lYmM4MDQtZTNjNi00MGU2LWJmYmUtYmRmMzY0YmE3N2Nk
LzEva1VQRjlJeDNwNXlZWDE1VFl1Q0NyVlRpTUdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbnHyGqV7
GiRtIM94FiR6PQrqGlztj8TmaxJ0MFYi0+LdZ4V2nZa1ZuGJmg5ZfEajGdjAn94+
OKMMx6OiQ5/gKXUP30+Rwcvye2LdADqCeYwYuJ600WftcFoRjbGnCBviy6DaLFy+
TBzzIn0KSa+60JI7PsLx9qon0q69TW7N3hX2dRjuuEAQw7zxIdtj5kBfafKs5f5D
Au7TopvcAsmDo/GlCRDbkIIVNuWKp9oE4hsB8Bbf8VorldoHNWqYZR4DDQ7lvQlC
WHlG6/xa+ielvIh10FKgK7Gvm6yX1H86V4YHmJE/ZmblzCfPXwhupm+g4lX0weOH
GDuZAJ61hO6INg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:01:16 2025 by rpki-client