![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/2cf926-810e-411e-bd5b-161e513ebdc2/1/PyF3o-hsg5z9GT27Ru2oCH2CFBo.mft
File: PyF3o-hsg5z9GT27Ru2oCH2CFBo.mft (raw, json)
Hash identifier: ZNosJ/Fpw3yxJNtx9hC7Eg+0Tp0BU4uskaApc0SCGa4=
Subject key identifier: 0B:FE:AE:CA:CB:C2:4C:24:0F:0E:AF:80:02:AE:1E:B4:3F:C0:FD:07
Authority key identifier: 3F:21:77:A3:E8:6C:83:9C:FD:19:3D:BB:46:ED:A8:08:7D:82:14:1A
Certificate issuer: /CN=3f2177a3e86c839cfd193dbb46eda8087d82141a
Certificate serial: 019510C69CFF8766B2AEB06E79DDB4D2BCA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PyF3o-hsg5z9GT27Ru2oCH2CFBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/2cf926-810e-411e-bd5b-161e513ebdc2/1/PyF3o-hsg5z9GT27Ru2oCH2CFBo.mft
Manifest number: 1144
Signing time: Sun 16 Feb 2025 22:00:06 +0000
Manifest this update: Sun 16 Feb 2025 22:00:06 +0000
Manifest next update: Mon 17 Feb 2025 22:00:06 +0000
Files and hashes: 1: PyF3o-hsg5z9GT27Ru2oCH2CFBo.crl (hash: FYPJAIdnzbmU1UUnK6RnMae3JvSNxGcuWiJrPQ6TlE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/2cf926-810e-411e-bd5b-161e513ebdc2/1/PyF3o-hsg5z9GT27Ru2oCH2CFBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/2cf926-810e-411e-bd5b-161e513ebdc2/1/PyF3o-hsg5z9GT27Ru2oCH2CFBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PyF3o-hsg5z9GT27Ru2oCH2CFBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c6:9c:ff:87:66:b2:ae:b0:6e:79:dd:b4:d2:bc:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f2177a3e86c839cfd193dbb46eda8087d82141a
Validity
Not Before: Feb 16 22:00:06 2025 GMT
Not After : Feb 17 22:00:06 2025 GMT
Subject: CN=0bfeaecacbc24c240f0eaf8002ae1eb43fc0fd07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e8:b1:46:12:f9:03:8a:c0:b5:7b:73:80:da:
72:13:fe:9a:a5:ba:7b:fb:e0:14:06:ab:cc:93:86:
82:d1:1f:48:4d:04:ec:65:81:10:bd:6d:58:e9:28:
28:be:c6:ab:f7:89:bf:53:06:1b:a7:7d:9a:23:48:
e9:08:98:67:15:f2:04:00:15:ea:a5:91:61:6b:00:
de:7d:01:a7:c7:c0:9d:7b:bb:c1:3b:2c:78:e8:23:
a3:bc:6b:e8:b5:2e:67:f9:87:fc:c8:c8:a3:aa:1f:
7c:45:6b:81:58:1f:2a:82:5f:54:c6:1a:7b:ca:c6:
60:b0:40:ef:ff:c0:8d:a2:d5:78:9d:4b:60:55:d3:
a5:cf:fd:42:c3:52:45:85:6f:86:17:46:70:f9:af:
b0:60:36:9f:f9:4d:2e:40:18:c9:e5:bc:48:f7:ef:
d8:29:65:2e:45:c8:75:25:dc:07:14:f7:09:71:79:
92:37:77:c3:59:48:b0:31:97:2f:3c:2a:ba:c7:3b:
52:9f:00:ee:e9:d4:76:e1:9f:3a:e6:30:73:53:ec:
b3:38:98:47:1a:82:f1:0a:55:e0:01:04:e9:59:d1:
ec:79:28:c3:d6:46:4a:a8:06:4e:e2:a1:3f:5a:98:
1f:5d:61:2c:f4:60:45:d3:59:b6:2a:5a:11:d4:7f:
44:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:FE:AE:CA:CB:C2:4C:24:0F:0E:AF:80:02:AE:1E:B4:3F:C0:FD:07
X509v3 Authority Key Identifier:
keyid:3F:21:77:A3:E8:6C:83:9C:FD:19:3D:BB:46:ED:A8:08:7D:82:14:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PyF3o-hsg5z9GT27Ru2oCH2CFBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2cf926-810e-411e-bd5b-161e513ebdc2/1/PyF3o-hsg5z9GT27Ru2oCH2CFBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2cf926-810e-411e-bd5b-161e513ebdc2/1/PyF3o-hsg5z9GT27Ru2oCH2CFBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:b7:58:6a:89:54:5f:da:c6:03:07:55:7a:f7:66:3d:71:23:
0d:4e:d0:12:60:35:90:9c:05:fe:20:84:2a:7e:59:a8:67:63:
16:d2:10:6c:a3:7b:3a:3f:36:44:23:d0:67:4e:e5:76:9c:9f:
b1:4a:c4:11:ac:d6:0f:97:86:ce:18:b3:3f:9e:9a:a6:94:fa:
34:8a:2e:d7:2a:bc:3d:20:6c:3e:26:bf:29:00:b0:90:4b:69:
75:b0:9b:a9:20:04:19:5f:fe:ae:8a:d8:30:85:71:51:c8:60:
1e:cc:86:b8:29:c9:df:0c:5f:7a:c6:5b:c6:39:0e:a7:4f:c9:
d0:2a:fa:09:4f:f8:48:26:f2:71:68:e8:6f:ed:2e:7b:de:0c:
80:2b:82:07:6a:1d:d9:8b:34:ee:67:96:04:df:31:74:f9:a9:
1d:7a:f0:38:bc:27:5e:6f:3f:c0:c0:4e:8d:c9:b2:88:8e:e5:
d3:98:31:f3:2a:62:6b:92:70:46:21:f8:d1:f9:f6:ad:cd:39:
ae:b0:91:ad:fc:63:fe:58:e8:98:ee:8e:c5:3d:b0:3b:29:1a:
9b:7b:d1:54:03:51:97:8d:c8:ab:a6:99:11:fe:1b:e8:88:49:
6f:aa:2c:d8:9a:70:a0:e0:f6:87:12:11:10:23:c0:c4:c3:96:
7a:78:b5:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUQxpz/h2ayrrBued200rymMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmMjE3N2EzZTg2YzgzOWNmZDE5M2RiYjQ2ZWRhODA4N2Q4
MjE0MWEwHhcNMjUwMjE2MjIwMDA2WhcNMjUwMjE3MjIwMDA2WjAzMTEwLwYDVQQD
EygwYmZlYWVjYWNiYzI0YzI0MGYwZWFmODAwMmFlMWViNDNmYzBmZDA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOixRhL5A4rAtXtzgNpyE/6apbp7
++AUBqvMk4aC0R9ITQTsZYEQvW1Y6Sgovsar94m/UwYbp32aI0jpCJhnFfIEABXq
pZFhawDefQGnx8Cde7vBOyx46COjvGvotS5n+Yf8yMijqh98RWuBWB8qgl9Uxhp7
ysZgsEDv/8CNotV4nUtgVdOlz/1Cw1JFhW+GF0Zw+a+wYDaf+U0uQBjJ5bxI9+/Y
KWUuRch1JdwHFPcJcXmSN3fDWUiwMZcvPCq6xztSnwDu6dR24Z865jBzU+yzOJhH
GoLxClXgAQTpWdHseSjD1kZKqAZO4qE/WpgfXWEs9GBF01m2KloR1H9E1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAv+rsrLwkwkDw6vgAKuHrQ/wP0HMB8GA1UdIwQY
MBaAFD8hd6PobIOc/Rk9u0btqAh9ghQaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHlGM28taHNnNXo5R1QyN1J1Mm9DSDJDRkJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8yY2Y5MjYtODEwZS00MTFlLWJkNWIt
MTYxZTUxM2ViZGMyLzEvUHlGM28taHNnNXo5R1QyN1J1Mm9DSDJDRkJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi8yY2Y5MjYtODEwZS00MTFlLWJkNWItMTYxZTUxM2ViZGMy
LzEvUHlGM28taHNnNXo5R1QyN1J1Mm9DSDJDRkJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIbdYaolU
X9rGAwdVevdmPXEjDU7QEmA1kJwF/iCEKn5ZqGdjFtIQbKN7Oj82RCPQZ07ldpyf
sUrEEazWD5eGzhizP56appT6NIou1yq8PSBsPia/KQCwkEtpdbCbqSAEGV/+rorY
MIVxUchgHsyGuCnJ3wxfesZbxjkOp0/J0Cr6CU/4SCbycWjob+0ue94MgCuCB2od
2Ys07meWBN8xdPmpHXrwOLwnXm8/wMBOjcmyiI7l05gx8ypia5JwRiH40fn2rc05
rrCRrfxj/ljomO6OxT2wOykam3vRVANRl43Iq6aZEf4b6IhJb6os2JpwoOD2hxIR
ECPAxMOWeni1Fw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:39:55 2025 by rpki-client