![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/e4ce7c-ad7b-4006-8e6a-80352d1413d9/1/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.mft
File: ZpJ7Kya1IUuWZdjchfQUcJcUmWw.mft (raw, json)
Hash identifier: kDr9W77mNN2MNoiYzGjq9Fx9QktW49rHajsPHO+6MkI=
Subject key identifier: 54:95:4F:40:89:05:FA:0C:F3:7B:07:75:4E:C9:D7:06:EB:34:31:4B
Authority key identifier: 66:92:7B:2B:26:B5:21:4B:96:65:D8:DC:85:F4:14:70:97:14:99:6C
Certificate issuer: /CN=66927b2b26b5214b9665d8dc85f414709714996c
Certificate serial: 0195121078FFC18C467A19B3CC2C30BFA7C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/e4ce7c-ad7b-4006-8e6a-80352d1413d9/1/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.mft
Manifest number: 1089
Signing time: Mon 17 Feb 2025 04:00:24 +0000
Manifest this update: Mon 17 Feb 2025 04:00:24 +0000
Manifest next update: Tue 18 Feb 2025 04:00:24 +0000
Files and hashes: 1: ZpJ7Kya1IUuWZdjchfQUcJcUmWw.crl (hash: D0JkiGOt1QxEQc+SQoESCcwrlN4W2LPE88F2PwFDal0=)
2: z14kTSlHc0FGtPp_p4eZCWL53uI.roa (hash: o0QCjev3qiHHVGYnELxUtNoSu9oIG3V8qNROrWFFFEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/e4ce7c-ad7b-4006-8e6a-80352d1413d9/1/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/e4ce7c-ad7b-4006-8e6a-80352d1413d9/1/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:78:ff:c1:8c:46:7a:19:b3:cc:2c:30:bf:a7:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66927b2b26b5214b9665d8dc85f414709714996c
Validity
Not Before: Feb 17 04:00:24 2025 GMT
Not After : Feb 18 04:00:24 2025 GMT
Subject: CN=54954f408905fa0cf37b07754ec9d706eb34314b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e0:da:b9:c1:df:64:dc:18:e7:68:8b:d3:77:
2b:8b:f6:79:a6:7e:61:d9:a4:4c:b6:2e:28:09:c5:
16:17:91:71:12:7b:9c:d3:1b:82:35:6e:a4:43:3f:
0e:94:3c:b5:10:3a:93:8a:07:55:28:a3:6a:53:80:
3f:c2:2d:74:0f:16:6f:ba:85:23:13:39:04:c3:82:
9d:fa:62:12:0c:be:ca:f9:76:13:5a:3a:bb:e0:26:
2b:78:4f:d8:c7:c2:de:40:0b:05:62:0c:1a:22:1a:
1c:d2:b1:74:92:93:8d:f6:9a:f8:89:f6:28:49:00:
97:3d:03:f1:78:d8:43:15:96:62:af:27:29:71:c5:
cf:e6:93:51:af:95:a4:af:7f:13:9b:9d:27:45:75:
69:c7:ff:19:dd:a2:4a:31:ca:9e:da:04:e2:31:cb:
b2:8f:38:05:7a:0d:7f:2a:30:15:be:4b:65:56:95:
c4:97:04:e4:c9:8f:bf:79:00:e2:79:cb:cb:55:e3:
86:c9:93:52:c7:91:08:36:89:3c:aa:86:72:44:8b:
cd:f7:2e:0b:92:73:f6:04:28:59:ed:fc:f5:b5:28:
95:b1:a4:32:a8:7b:86:7f:86:96:43:fb:a0:89:a8:
59:18:00:a3:80:be:e9:91:26:ca:80:90:47:4f:1b:
78:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:95:4F:40:89:05:FA:0C:F3:7B:07:75:4E:C9:D7:06:EB:34:31:4B
X509v3 Authority Key Identifier:
keyid:66:92:7B:2B:26:B5:21:4B:96:65:D8:DC:85:F4:14:70:97:14:99:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/e4ce7c-ad7b-4006-8e6a-80352d1413d9/1/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/e4ce7c-ad7b-4006-8e6a-80352d1413d9/1/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:2e:43:e5:1a:e6:67:6f:34:37:54:c8:e7:ca:23:0e:0d:3a:
ac:59:c5:08:7e:11:3b:e3:00:36:f6:6e:2a:2c:96:5c:17:00:
1a:a5:73:bb:52:82:a5:43:a5:f1:6e:c9:7e:50:c2:6f:25:0d:
80:dd:62:23:c0:80:83:99:8a:71:39:be:ce:b8:b0:91:a5:93:
36:72:8e:8c:71:0b:61:d1:85:e8:92:99:01:78:32:5f:dc:ee:
24:d0:53:3a:ee:60:c5:4a:47:fd:b2:54:fa:77:04:d9:26:33:
59:ff:63:c3:c7:22:e6:a6:b5:15:ce:0b:b8:c1:8c:db:15:43:
1b:71:02:c5:cf:23:e6:7d:ed:fa:95:dd:c4:fa:c5:19:56:7b:
57:bf:3e:9a:ed:31:e4:2b:41:42:2c:22:4f:8b:09:61:93:a4:
e5:ed:03:47:c3:ce:3c:f1:92:2e:d0:29:ad:94:45:46:53:7f:
2c:4d:0d:d3:9a:96:39:4d:83:5a:89:e9:26:f4:ca:26:97:ef:
a7:24:12:db:7a:d0:fc:b3:55:b4:5b:6a:02:cc:84:45:84:b2:
0a:69:97:25:4a:60:df:e9:50:53:8d:9d:40:63:35:0c:04:32:
9c:95:89:a1:64:9f:0c:de:60:3c:b0:6f:ba:28:3e:0a:8b:c1:
e9:77:c7:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUSEHj/wYxGehmzzCwwv6fBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2OTI3YjJiMjZiNTIxNGI5NjY1ZDhkYzg1ZjQxNDcwOTcx
NDk5NmMwHhcNMjUwMjE3MDQwMDI0WhcNMjUwMjE4MDQwMDI0WjAzMTEwLwYDVQQD
Eyg1NDk1NGY0MDg5MDVmYTBjZjM3YjA3NzU0ZWM5ZDcwNmViMzQzMTRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+DaucHfZNwY52iL03cri/Z5pn5h
2aRMti4oCcUWF5FxEnuc0xuCNW6kQz8OlDy1EDqTigdVKKNqU4A/wi10DxZvuoUj
EzkEw4Kd+mISDL7K+XYTWjq74CYreE/Yx8LeQAsFYgwaIhoc0rF0kpON9pr4ifYo
SQCXPQPxeNhDFZZirycpccXP5pNRr5Wkr38Tm50nRXVpx/8Z3aJKMcqe2gTiMcuy
jzgFeg1/KjAVvktlVpXElwTkyY+/eQDiecvLVeOGyZNSx5EINok8qoZyRIvN9y4L
knP2BChZ7fz1tSiVsaQyqHuGf4aWQ/ugiahZGACjgL7pkSbKgJBHTxt4dwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFSVT0CJBfoM83sHdU7J1wbrNDFLMB8GA1UdIwQY
MBaAFGaSeysmtSFLlmXY3IX0FHCXFJlsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnBKN0t5YTFJVXVXWmRqY2hmUVVjSmNVbVd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9lNGNlN2MtYWQ3Yi00MDA2LThlNmEt
ODAzNTJkMTQxM2Q5LzEvWnBKN0t5YTFJVXVXWmRqY2hmUVVjSmNVbVd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9lNGNlN2MtYWQ3Yi00MDA2LThlNmEtODAzNTJkMTQxM2Q5
LzEvWnBKN0t5YTFJVXVXWmRqY2hmUVVjSmNVbVd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAni5D5Rrm
Z280N1TI58ojDg06rFnFCH4RO+MANvZuKiyWXBcAGqVzu1KCpUOl8W7JflDCbyUN
gN1iI8CAg5mKcTm+zriwkaWTNnKOjHELYdGF6JKZAXgyX9zuJNBTOu5gxUpH/bJU
+ncE2SYzWf9jw8ci5qa1Fc4LuMGM2xVDG3ECxc8j5n3t+pXdxPrFGVZ7V78+mu0x
5CtBQiwiT4sJYZOk5e0DR8POPPGSLtAprZRFRlN/LE0N05qWOU2DWonpJvTKJpfv
pyQS23rQ/LNVtFtqAsyERYSyCmmXJUpg3+lQU42dQGM1DAQynJWJoWSfDN5gPLBv
uig+CovB6XfHow==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:20:06 2025 by rpki-client