![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/485fb4-3027-46cc-bd67-809a4b7ab4b5/1/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.mft
File: BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.mft (raw, json)
Hash identifier: MXvoaB24SM+sPt5kSqLx9Dj37hug7MAbPkzZyPf9iag=
Subject key identifier: 9E:A2:97:E5:C8:59:D7:0C:55:8C:3D:9E:BF:0D:19:5B:1B:74:FA:31
Authority key identifier: 05:F2:74:8C:B4:38:62:A1:04:B5:6F:8C:62:04:B6:20:97:06:55:8C
Certificate issuer: /CN=05f2748cb43862a104b56f8c6204b6209706558c
Certificate serial: 0195116BB58C8A0957CE3C468ECD67811056
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/485fb4-3027-46cc-bd67-809a4b7ab4b5/1/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.mft
Manifest number: 0B3D
Signing time: Mon 17 Feb 2025 01:00:26 +0000
Manifest this update: Mon 17 Feb 2025 01:00:26 +0000
Manifest next update: Tue 18 Feb 2025 01:00:26 +0000
Files and hashes: 1: BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.crl (hash: AO6KAMCJNLYhuOHBTbu9lz3dvbDJ5J/e0cU+qR8T3cs=)
2: EhPdkmEcd5kZgSYia-f_ZpjHYY0.roa (hash: 3TfVzsPjB0vFUIoLoSrG9hGoNnzjzko9raGZf0VmPMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/485fb4-3027-46cc-bd67-809a4b7ab4b5/1/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/485fb4-3027-46cc-bd67-809a4b7ab4b5/1/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6b:b5:8c:8a:09:57:ce:3c:46:8e:cd:67:81:10:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f2748cb43862a104b56f8c6204b6209706558c
Validity
Not Before: Feb 17 01:00:26 2025 GMT
Not After : Feb 18 01:00:26 2025 GMT
Subject: CN=9ea297e5c859d70c558c3d9ebf0d195b1b74fa31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9d:d8:95:bf:b3:9c:0c:a0:89:5a:a7:8e:41:
9f:6d:38:c2:cc:bb:16:1d:87:be:1d:9c:ed:ca:64:
72:0a:01:d8:13:f6:c3:4c:e2:84:fa:4d:77:0e:57:
67:ec:47:f4:a9:50:7d:44:98:4f:eb:37:f1:a1:18:
76:af:9c:b5:6a:62:43:a2:0a:28:1a:f7:1a:c7:9f:
e4:7a:dd:31:2f:80:86:c0:cc:50:f1:79:8b:f1:08:
0b:71:a0:01:7b:40:4e:5d:71:b8:43:ed:61:45:11:
a3:3c:e4:cf:f7:16:22:1b:70:4b:59:3f:2f:a0:57:
9e:ae:c0:07:e5:ae:00:6b:29:9f:29:1e:f1:84:80:
bd:7b:b0:c9:62:da:b3:fa:09:b0:21:df:e7:00:63:
c5:10:ef:a9:c4:ab:98:f7:e7:09:f7:30:73:81:59:
57:7b:91:e5:6a:ac:f6:24:b6:3a:75:02:4c:13:09:
ce:ad:4f:2a:40:1f:b4:7d:f6:8b:e5:c6:6d:ad:70:
9a:7d:26:03:d7:9e:6c:c6:7c:fd:a3:21:86:69:c1:
06:7e:58:2c:33:af:69:22:9f:43:e8:59:dd:53:8f:
2b:98:1a:fa:49:e8:74:34:52:4c:7b:e6:60:df:d6:
88:47:b1:31:ca:7e:ce:75:d1:37:2a:a7:d9:10:d1:
73:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:A2:97:E5:C8:59:D7:0C:55:8C:3D:9E:BF:0D:19:5B:1B:74:FA:31
X509v3 Authority Key Identifier:
keyid:05:F2:74:8C:B4:38:62:A1:04:B5:6F:8C:62:04:B6:20:97:06:55:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/485fb4-3027-46cc-bd67-809a4b7ab4b5/1/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/485fb4-3027-46cc-bd67-809a4b7ab4b5/1/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:d5:11:43:d3:70:de:32:f5:9d:00:cc:8b:40:9d:97:e6:6e:
13:c3:58:23:68:1c:09:89:05:c4:f5:e8:60:aa:62:09:bd:7f:
87:38:2d:5d:0d:61:47:42:57:2d:67:1e:eb:82:d1:eb:c0:ef:
db:e3:e1:e9:25:dd:47:41:37:d3:8e:27:13:d5:a8:36:91:75:
86:16:f8:07:7e:e1:39:19:7a:98:0a:7b:30:b9:c7:ee:7e:c2:
a9:e7:08:43:b8:00:67:c3:40:a8:c2:4c:2e:ae:57:b7:33:2f:
64:2d:3e:ce:38:5e:13:36:7a:30:bf:74:d3:25:38:1e:91:7c:
36:ae:a4:c0:ca:0f:30:50:cf:10:20:fd:8f:a3:3d:6b:8a:b7:
68:b7:d5:17:9d:87:98:85:b7:43:3b:4f:35:52:8a:4a:59:1a:
a8:2b:63:8d:aa:5b:d2:3a:f6:a1:bd:d3:df:05:9a:2a:8f:9c:
eb:b3:fd:7f:58:42:e5:39:42:7a:30:d7:23:15:6b:a6:81:7b:
3c:c6:86:8f:48:04:35:ed:7c:2f:33:c1:72:4e:da:93:aa:a1:
6b:9b:e5:22:9f:34:ae:f7:53:da:03:f4:f1:86:34:3a:dd:27:
80:c5:a1:28:bc:16:06:4f:83:fd:13:d2:0e:38:54:cb:2d:75:
12:f8:6f:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURa7WMiglXzjxGjs1ngRBWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1ZjI3NDhjYjQzODYyYTEwNGI1NmY4YzYyMDRiNjIwOTcw
NjU1OGMwHhcNMjUwMjE3MDEwMDI2WhcNMjUwMjE4MDEwMDI2WjAzMTEwLwYDVQQD
Eyg5ZWEyOTdlNWM4NTlkNzBjNTU4YzNkOWViZjBkMTk1YjFiNzRmYTMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvp3Ylb+znAygiVqnjkGfbTjCzLsW
HYe+HZztymRyCgHYE/bDTOKE+k13Dldn7Ef0qVB9RJhP6zfxoRh2r5y1amJDogoo
Gvcax5/ket0xL4CGwMxQ8XmL8QgLcaABe0BOXXG4Q+1hRRGjPOTP9xYiG3BLWT8v
oFeersAH5a4AaymfKR7xhIC9e7DJYtqz+gmwId/nAGPFEO+pxKuY9+cJ9zBzgVlX
e5Hlaqz2JLY6dQJMEwnOrU8qQB+0ffaL5cZtrXCafSYD155sxnz9oyGGacEGflgs
M69pIp9D6FndU48rmBr6Seh0NFJMe+Zg39aIR7Exyn7OddE3KqfZENFzVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ6il+XIWdcMVYw9nr8NGVsbdPoxMB8GA1UdIwQY
MBaAFAXydIy0OGKhBLVvjGIEtiCXBlWMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmZKMGpMUTRZcUVFdFctTVlnUzJJSmNHVll3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC80ODVmYjQtMzAyNy00NmNjLWJkNjct
ODA5YTRiN2FiNGI1LzEvQmZKMGpMUTRZcUVFdFctTVlnUzJJSmNHVll3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC80ODVmYjQtMzAyNy00NmNjLWJkNjctODA5YTRiN2FiNGI1
LzEvQmZKMGpMUTRZcUVFdFctTVlnUzJJSmNHVll3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIdURQ9Nw
3jL1nQDMi0Cdl+ZuE8NYI2gcCYkFxPXoYKpiCb1/hzgtXQ1hR0JXLWce64LR68Dv
2+Ph6SXdR0E3044nE9WoNpF1hhb4B37hORl6mAp7MLnH7n7CqecIQ7gAZ8NAqMJM
Lq5XtzMvZC0+zjheEzZ6ML900yU4HpF8Nq6kwMoPMFDPECD9j6M9a4q3aLfVF52H
mIW3QztPNVKKSlkaqCtjjapb0jr2ob3T3wWaKo+c67P9f1hC5TlCejDXIxVrpoF7
PMaGj0gENe18LzPBck7ak6qha5vlIp80rvdT2gP08YY0Ot0ngMWhKLwWBk+D/RPS
DjhUyy11Evhv5Q==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:27:02 2025 by rpki-client