![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/cd111c-2d7f-44f3-9eb6-9af13f836879/1/uqs_CIW1VmubFTPSCW32jlSf7D4.mft
File: uqs_CIW1VmubFTPSCW32jlSf7D4.mft (raw, json)
Hash identifier: vtWKMnMZreGkAhck3Shz6Cw2QiKzImszXHVIxx4VwOM=
Subject key identifier: 47:8F:2D:F2:C4:AA:1C:57:26:17:0C:7C:48:82:0B:A4:96:50:3E:9A
Authority key identifier: BA:AB:3F:08:85:B5:56:6B:9B:15:33:D2:09:6D:F6:8E:54:9F:EC:3E
Certificate issuer: /CN=baab3f0885b5566b9b1533d2096df68e549fec3e
Certificate serial: 0195116BE46E3CCD67885923BBD8DDA29506
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqs_CIW1VmubFTPSCW32jlSf7D4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/cd111c-2d7f-44f3-9eb6-9af13f836879/1/uqs_CIW1VmubFTPSCW32jlSf7D4.mft
Manifest number: 1197
Signing time: Mon 17 Feb 2025 01:00:38 +0000
Manifest this update: Mon 17 Feb 2025 01:00:38 +0000
Manifest next update: Tue 18 Feb 2025 01:00:38 +0000
Files and hashes: 1: UyvA3eS1m0fQ9LmHqohOpGUgOH8.roa (hash: nd0xk/LBWR8Y1uHlUTNuhLFMAeJyMBYmIcQoIT0cSck=)
2: uqs_CIW1VmubFTPSCW32jlSf7D4.crl (hash: lBjcAbISB4BtLv36rqcv+NpU+E7V5Kp6Y+9YrXVoEnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/cd111c-2d7f-44f3-9eb6-9af13f836879/1/uqs_CIW1VmubFTPSCW32jlSf7D4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/cd111c-2d7f-44f3-9eb6-9af13f836879/1/uqs_CIW1VmubFTPSCW32jlSf7D4.mft
rsync://rpki.ripe.net/repository/DEFAULT/uqs_CIW1VmubFTPSCW32jlSf7D4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6b:e4:6e:3c:cd:67:88:59:23:bb:d8:dd:a2:95:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baab3f0885b5566b9b1533d2096df68e549fec3e
Validity
Not Before: Feb 17 01:00:38 2025 GMT
Not After : Feb 18 01:00:38 2025 GMT
Subject: CN=478f2df2c4aa1c5726170c7c48820ba496503e9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4d:1f:3e:14:b7:49:71:b6:9d:ad:44:1a:95:
cd:b8:02:30:d5:22:78:0c:b4:f3:a4:83:83:49:3f:
ad:dd:19:57:c1:8d:82:78:a2:5d:a7:ae:f9:2c:40:
42:d5:4b:3c:91:bb:89:48:db:4d:72:d3:8c:b2:b3:
39:ff:a6:87:ac:fe:b6:c7:de:80:08:8e:88:51:bc:
e9:0b:80:c4:32:30:de:bd:3a:44:2b:ac:94:22:17:
66:4f:39:ce:f9:01:cb:b2:9a:63:63:02:3b:cf:54:
54:23:ea:de:82:a1:96:57:0e:47:e7:11:8b:55:68:
85:6f:4a:b8:0b:50:23:e4:8d:30:3a:d9:3e:98:09:
d0:f0:48:d4:6f:f5:b9:55:61:7d:51:b4:ee:d2:45:
6c:8c:f5:50:b5:31:32:32:18:05:cc:5f:6c:46:43:
4c:47:07:3f:18:f0:2e:2c:7c:c4:c1:8a:f4:3a:f9:
a8:cd:c3:39:6c:be:55:b9:94:9a:07:79:37:7e:72:
0a:25:b6:0f:b8:95:5e:99:94:8c:d0:07:ae:ba:bf:
f0:47:00:88:77:9d:2f:6b:65:50:f7:0a:63:02:03:
de:7a:4c:0d:d7:b5:a2:30:d1:2a:f1:11:8b:95:fe:
c8:94:60:1f:f4:39:73:eb:f8:3d:6b:c5:90:d1:63:
e7:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:8F:2D:F2:C4:AA:1C:57:26:17:0C:7C:48:82:0B:A4:96:50:3E:9A
X509v3 Authority Key Identifier:
keyid:BA:AB:3F:08:85:B5:56:6B:9B:15:33:D2:09:6D:F6:8E:54:9F:EC:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqs_CIW1VmubFTPSCW32jlSf7D4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cd111c-2d7f-44f3-9eb6-9af13f836879/1/uqs_CIW1VmubFTPSCW32jlSf7D4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cd111c-2d7f-44f3-9eb6-9af13f836879/1/uqs_CIW1VmubFTPSCW32jlSf7D4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:2c:bc:f0:9f:3b:ea:9a:aa:95:e7:6e:b0:4b:d3:17:74:b1:
91:00:38:1c:99:05:7a:9e:55:9c:ba:78:3a:2f:9d:d4:1c:50:
bc:99:91:1f:e5:c2:64:32:12:8d:22:93:45:45:48:4b:21:ca:
8f:0a:e6:f5:b7:3d:d0:f1:ed:2b:d6:7c:c1:af:c4:af:05:af:
09:33:10:5d:36:66:02:35:52:f3:c0:98:eb:0d:89:bc:bf:a1:
7f:7b:08:ed:77:50:a4:e0:b7:90:36:1d:df:7d:b9:05:17:06:
20:b1:87:13:4c:f9:8a:98:08:01:89:2a:84:7b:4a:d2:15:c5:
45:7f:21:90:10:6e:90:7b:f4:34:e9:e2:41:e8:fe:f3:40:b4:
fa:76:f2:cd:6b:3b:25:3d:e4:88:e4:39:91:a8:90:8f:8b:23:
d0:fe:a5:e0:e3:15:36:e6:0e:ba:fc:4f:db:20:8d:46:26:bc:
cc:c2:e8:b6:4c:43:ad:a9:a7:e1:9f:47:d4:2e:dd:c3:37:2b:
7a:b0:0c:e8:e4:2b:7b:7f:27:45:c8:4c:cd:49:6f:d9:ec:d4:
e2:36:5f:e2:66:88:ff:8c:be:5a:25:18:70:5f:03:65:c3:47:
e2:77:80:5b:4b:43:a4:d7:44:32:a5:0a:15:2a:72:e7:8b:29:
2e:8f:ba:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURa+RuPM1niFkju9jdopUGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhYWIzZjA4ODViNTU2NmI5YjE1MzNkMjA5NmRmNjhlNTQ5
ZmVjM2UwHhcNMjUwMjE3MDEwMDM4WhcNMjUwMjE4MDEwMDM4WjAzMTEwLwYDVQQD
Eyg0NzhmMmRmMmM0YWExYzU3MjYxNzBjN2M0ODgyMGJhNDk2NTAzZTlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvU0fPhS3SXG2na1EGpXNuAIw1SJ4
DLTzpIODST+t3RlXwY2CeKJdp675LEBC1Us8kbuJSNtNctOMsrM5/6aHrP62x96A
CI6IUbzpC4DEMjDevTpEK6yUIhdmTznO+QHLsppjYwI7z1RUI+regqGWVw5H5xGL
VWiFb0q4C1Aj5I0wOtk+mAnQ8EjUb/W5VWF9UbTu0kVsjPVQtTEyMhgFzF9sRkNM
Rwc/GPAuLHzEwYr0OvmozcM5bL5VuZSaB3k3fnIKJbYPuJVemZSM0Aeuur/wRwCI
d50va2VQ9wpjAgPeekwN17WiMNEq8RGLlf7IlGAf9Dlz6/g9a8WQ0WPnKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEePLfLEqhxXJhcMfEiCC6SWUD6aMB8GA1UdIwQY
MBaAFLqrPwiFtVZrmxUz0glt9o5Un+w+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXFzX0NJVzFWbXViRlRQU0NXMzJqbFNmN0Q0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9jZDExMWMtMmQ3Zi00NGYzLTllYjYt
OWFmMTNmODM2ODc5LzEvdXFzX0NJVzFWbXViRlRQU0NXMzJqbFNmN0Q0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS9jZDExMWMtMmQ3Zi00NGYzLTllYjYtOWFmMTNmODM2ODc5
LzEvdXFzX0NJVzFWbXViRlRQU0NXMzJqbFNmN0Q0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVSy88J87
6pqqledusEvTF3SxkQA4HJkFep5VnLp4Oi+d1BxQvJmRH+XCZDISjSKTRUVISyHK
jwrm9bc90PHtK9Z8wa/ErwWvCTMQXTZmAjVS88CY6w2JvL+hf3sI7XdQpOC3kDYd
3325BRcGILGHE0z5ipgIAYkqhHtK0hXFRX8hkBBukHv0NOniQej+80C0+nbyzWs7
JT3kiOQ5kaiQj4sj0P6l4OMVNuYOuvxP2yCNRia8zMLotkxDramn4Z9H1C7dwzcr
erAM6OQre38nRchMzUlv2ezU4jZf4maI/4y+WiUYcF8DZcNH4neAW0tDpNdEMqUK
FSpy54spLo+6MQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:18:02 2025 by rpki-client