![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft
File: AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft (raw, json)
Hash identifier: VBqoMbgmSrnY3nwnKGTtOayklKlmoFogVPb9PJvJ6qo=
Subject key identifier: AA:40:AD:D5:24:8A:06:10:38:03:16:16:38:F1:A3:D3:7E:F5:CA:36
Authority key identifier: 01:F3:EF:3E:0E:A9:5A:97:55:37:D5:C2:5D:93:CB:76:AF:68:72:34
Certificate issuer: /CN=01f3ef3e0ea95a975537d5c25d93cb76af687234
Certificate serial: 0195116C0656DEC367C58BEE1BFF5790CF26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft
Manifest number: 1475
Signing time: Mon 17 Feb 2025 01:00:46 +0000
Manifest this update: Mon 17 Feb 2025 01:00:46 +0000
Manifest next update: Tue 18 Feb 2025 01:00:46 +0000
Files and hashes: 1: 42hpqWqY72USafsvfiD_518D4aY.roa (hash: XyqSHkNb93lXjMdBQV3tT6d41VyHCZFCyukyVX/G7/A=)
2: AfPvPg6pWpdVN9XCXZPLdq9ocjQ.crl (hash: XggN+oj34BSrhICO26OSqGoJthdYRtVMH4EEwyZEONM=)
3: B_3pca4XmmEyoD7_YWQ5xsaTGlA.roa (hash: n5M6+Js+wLuWN3HaqVwvyZeizy4tawLMu5EBkNvd9Nw=)
4: GNcGFP48VRO_QOUxz3CvJSh90oA.roa (hash: 9T1HgBLEzXKt2GaC2y8FBctN+punw/ln3V52HLktRUQ=)
5: IC2VX1jV_Dwi9TgKflm59IYMQeg.roa (hash: 4Tq4DinpdRGqkwFnGKnQe2ovlPCcyDT8nlsjtJqn5tw=)
6: g9Hs1uIFeelsIxcu9-JFATbg5r0.roa (hash: i1uLdd6dy3tsCAr6HgKPaDpJNpr4x+g5kpnEdrNnrzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6c:06:56:de:c3:67:c5:8b:ee:1b:ff:57:90:cf:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01f3ef3e0ea95a975537d5c25d93cb76af687234
Validity
Not Before: Feb 17 01:00:46 2025 GMT
Not After : Feb 18 01:00:46 2025 GMT
Subject: CN=aa40add5248a06103803161638f1a3d37ef5ca36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:39:81:8d:db:b1:fa:76:3e:ae:b5:d1:3c:94:
56:b5:62:b2:7b:8f:c1:f6:97:ab:14:aa:0f:1f:c6:
73:f3:a9:8e:ff:d7:20:32:56:58:17:61:9e:b0:bd:
21:91:7c:34:08:8c:8a:50:77:7a:7a:16:9a:39:1b:
03:a6:29:f1:8e:cc:c0:a6:1e:48:7b:e3:12:7c:36:
86:11:00:df:da:28:16:6f:43:a7:b0:87:cd:4c:0e:
4c:72:24:7f:5f:a7:f7:e9:d0:97:e4:8e:14:c6:c2:
d4:96:ee:e9:80:70:09:02:67:77:1b:a2:0f:73:04:
1b:8a:cc:27:0b:6a:49:b7:21:1d:8b:ae:09:82:ac:
60:d6:52:5f:ae:d6:66:ee:52:e3:e9:ec:92:55:30:
09:73:94:39:99:c2:b1:d7:3c:4b:a4:64:01:c7:75:
03:d9:7d:ee:1a:52:58:be:71:d0:3c:13:b3:31:d5:
5c:15:6e:7e:61:d2:ef:8e:95:cf:fd:4e:f3:a2:3e:
69:81:eb:a0:11:12:5a:c5:77:f7:38:df:22:b2:18:
d9:73:1d:f1:d3:ce:9d:37:8b:9d:79:16:d6:2a:ef:
1f:df:a6:cc:ec:44:ef:b5:36:b4:ea:c3:56:75:b8:
36:af:72:f3:b1:ef:1d:35:8a:9d:4e:0a:12:86:f7:
de:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:40:AD:D5:24:8A:06:10:38:03:16:16:38:F1:A3:D3:7E:F5:CA:36
X509v3 Authority Key Identifier:
keyid:01:F3:EF:3E:0E:A9:5A:97:55:37:D5:C2:5D:93:CB:76:AF:68:72:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:18:a4:09:dc:72:58:27:c8:29:a7:ad:c2:98:83:2c:f0:09:
43:0a:80:a1:f8:01:d2:a4:9d:6b:91:b7:f3:11:68:05:30:f9:
1c:4f:20:89:70:0f:e2:dc:43:a5:ac:4b:0d:dd:80:d9:f5:f7:
78:c3:c9:7e:d7:0b:af:71:70:cc:41:51:22:e2:bf:fe:99:f5:
5f:76:e3:43:75:04:97:e0:9d:0f:24:ca:70:b2:cb:b2:40:de:
e7:32:7b:c7:eb:64:4c:95:da:a3:68:28:9a:29:30:94:22:6e:
8b:67:e8:bc:99:6c:3d:d1:76:3e:ce:2c:4c:5f:19:9e:78:f8:
99:f1:8c:b5:e2:29:db:79:dc:d5:52:7e:26:04:7b:92:dd:f3:
af:ce:ca:e9:44:1c:b1:6a:d6:c0:9c:c9:09:cf:64:f1:98:68:
32:89:af:ce:c9:ae:ea:ef:82:83:99:e7:88:5d:96:45:8c:ab:
02:eb:3b:da:3f:94:10:ec:9c:96:03:ae:4e:ac:73:d8:90:7e:
ba:7b:3a:c7:e7:a8:b1:ac:0c:75:46:d6:17:17:ef:f4:fa:b0:
89:ba:4d:0a:43:6e:89:eb:88:c2:9d:b6:cb:20:9d:aa:6b:06:
34:86:52:c5:7f:8c:53:cb:c9:6d:3d:23:70:47:3d:82:1f:63:
38:07:e0:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURbAZW3sNnxYvuG/9XkM8mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxZjNlZjNlMGVhOTVhOTc1NTM3ZDVjMjVkOTNjYjc2YWY2
ODcyMzQwHhcNMjUwMjE3MDEwMDQ2WhcNMjUwMjE4MDEwMDQ2WjAzMTEwLwYDVQQD
EyhhYTQwYWRkNTI0OGEwNjEwMzgwMzE2MTYzOGYxYTNkMzdlZjVjYTM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzmBjdux+nY+rrXRPJRWtWKye4/B
9perFKoPH8Zz86mO/9cgMlZYF2GesL0hkXw0CIyKUHd6ehaaORsDpinxjszAph5I
e+MSfDaGEQDf2igWb0OnsIfNTA5MciR/X6f36dCX5I4UxsLUlu7pgHAJAmd3G6IP
cwQbiswnC2pJtyEdi64Jgqxg1lJfrtZm7lLj6eySVTAJc5Q5mcKx1zxLpGQBx3UD
2X3uGlJYvnHQPBOzMdVcFW5+YdLvjpXP/U7zoj5pgeugERJaxXf3ON8ishjZcx3x
086dN4udeRbWKu8f36bM7ETvtTa06sNWdbg2r3Lzse8dNYqdTgoShvfe+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKpArdUkigYQOAMWFjjxo9N+9co2MB8GA1UdIwQY
MBaAFAHz7z4OqVqXVTfVwl2Ty3avaHI0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWZQdlBnNnBXcGRWTjlYQ1haUExkcTlvY2pRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84NDE3YTAtMDc3Ny00NDZlLTk3ZTEt
MzUzYjNhNjMzYWRhLzEvQWZQdlBnNnBXcGRWTjlYQ1haUExkcTlvY2pRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84NDE3YTAtMDc3Ny00NDZlLTk3ZTEtMzUzYjNhNjMzYWRh
LzEvQWZQdlBnNnBXcGRWTjlYQ1haUExkcTlvY2pRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKBikCdxy
WCfIKaetwpiDLPAJQwqAofgB0qSda5G38xFoBTD5HE8giXAP4txDpaxLDd2A2fX3
eMPJftcLr3FwzEFRIuK//pn1X3bjQ3UEl+CdDyTKcLLLskDe5zJ7x+tkTJXao2go
mikwlCJui2fovJlsPdF2Ps4sTF8Znnj4mfGMteIp23nc1VJ+JgR7kt3zr87K6UQc
sWrWwJzJCc9k8ZhoMomvzsmu6u+Cg5nniF2WRYyrAus72j+UEOyclgOuTqxz2JB+
uns6x+eosawMdUbWFxfv9PqwibpNCkNuieuIwp22yyCdqmsGNIZSxX+MU8vJbT0j
cEc9gh9jOAfgoQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:55:07 2025 by rpki-client