![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.mft
File: iBD8MZigq5lkeHfb5XJeBc7gE_A.mft (raw, json)
Hash identifier: JTiJVwhon8QePtWmfVqazqVzrJr9OwbxFebib4E0yjQ=
Subject key identifier: 13:9D:3C:F7:21:B1:EB:A5:4F:40:00:88:E8:C0:8D:43:DC:B1:E9:48
Authority key identifier: 88:10:FC:31:98:A0:AB:99:64:78:77:DB:E5:72:5E:05:CE:E0:13:F0
Certificate issuer: /CN=8810fc3198a0ab99647877dbe5725e05cee013f0
Certificate serial: 019511A2C25903002223F5FE677A4E426B9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBD8MZigq5lkeHfb5XJeBc7gE_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.mft
Manifest number: 0CC9
Signing time: Mon 17 Feb 2025 02:00:34 +0000
Manifest this update: Mon 17 Feb 2025 02:00:34 +0000
Manifest next update: Tue 18 Feb 2025 02:00:34 +0000
Files and hashes: 1: hGQAPrEg70xi3dTAsr6AkflPwzQ.roa (hash: fq94rKVVa6d3kPByOte4hBdKvb2vGf30OOEdIeQW7uc=)
2: iBD8MZigq5lkeHfb5XJeBc7gE_A.crl (hash: Xw2xdQVn9GkeqKZulmYpIDI/ddzbiqleUl7sOHrPFQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/iBD8MZigq5lkeHfb5XJeBc7gE_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:c2:59:03:00:22:23:f5:fe:67:7a:4e:42:6b:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8810fc3198a0ab99647877dbe5725e05cee013f0
Validity
Not Before: Feb 17 02:00:34 2025 GMT
Not After : Feb 18 02:00:34 2025 GMT
Subject: CN=139d3cf721b1eba54f400088e8c08d43dcb1e948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fe:b5:f7:88:43:bc:33:da:18:98:c1:be:70:
6d:e3:46:6f:82:a3:6f:ac:fb:df:67:11:82:4c:aa:
78:b6:08:75:cb:f8:4c:a9:7a:b5:31:7d:05:00:32:
69:e1:65:22:fe:60:d0:a1:ff:3e:88:71:33:60:69:
20:11:d7:d0:32:0c:89:75:bf:f2:cd:26:5f:4a:4e:
83:ac:78:d3:4f:84:35:20:b0:16:14:36:fd:b7:4b:
4d:f3:45:d1:90:dd:c1:7e:fd:54:3f:dc:9b:00:c9:
76:8c:31:7a:2b:e5:9f:50:55:88:7b:47:78:f3:da:
92:43:2c:69:f9:54:67:2c:53:d8:54:3e:ed:52:a1:
5e:50:46:a5:a4:ab:8f:21:2e:9b:48:6e:6d:dc:50:
31:9a:e0:f2:6a:97:fc:51:71:86:50:5e:fd:57:f6:
36:b8:fd:78:2a:94:84:4e:d9:9f:81:12:9e:f6:12:
a9:cd:d5:1c:fb:dc:54:98:3f:86:c1:50:9a:36:58:
8f:cb:e1:c9:d0:dc:28:6e:1e:34:7a:67:49:1d:4f:
e3:51:88:01:59:1e:91:20:d8:69:46:b3:c7:db:47:
7b:8c:98:cd:5a:4e:a7:0c:79:ab:f0:da:6e:a2:e5:
ae:6d:dd:58:1c:f0:50:cd:cd:a0:43:93:77:b5:71:
7e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:9D:3C:F7:21:B1:EB:A5:4F:40:00:88:E8:C0:8D:43:DC:B1:E9:48
X509v3 Authority Key Identifier:
keyid:88:10:FC:31:98:A0:AB:99:64:78:77:DB:E5:72:5E:05:CE:E0:13:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBD8MZigq5lkeHfb5XJeBc7gE_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:72:28:26:19:91:9d:7d:73:5b:cd:79:2f:cb:0d:89:ed:eb:
fe:7c:e7:a6:cc:ce:27:87:b4:f6:1e:28:e1:e9:89:71:58:d4:
f2:3f:32:86:8b:02:3e:79:42:8e:d8:76:35:cf:c3:22:58:44:
30:09:9e:1b:ac:c1:c9:d6:b6:a1:ec:76:ec:f3:5a:03:6f:d9:
4b:1e:3a:1d:43:f8:bd:6c:39:98:dc:0a:d4:d7:4c:a4:51:26:
9c:83:cc:60:a2:47:da:d7:3f:77:b9:31:d7:27:ad:d3:4b:22:
69:73:8a:69:1d:19:4e:d1:09:6a:34:bc:2b:83:c9:71:bd:95:
98:6f:e4:39:d4:27:f8:2b:ae:4b:b1:a5:98:85:13:59:19:cd:
3d:1f:20:14:4a:47:72:d5:3e:50:bf:f5:fa:9c:ea:7f:c9:32:
85:29:cd:6b:8b:19:a6:d2:dc:9a:8e:03:7e:1b:ba:b7:35:6c:
d1:ff:c5:d3:bc:0d:e3:c7:aa:58:7f:13:49:41:7d:c5:c3:c4:
3b:2e:2c:90:ba:0a:29:83:94:33:0e:c1:e4:7a:22:13:56:16:
40:2f:02:48:eb:d4:d5:c3:9a:75:d6:3b:c1:c8:11:a9:9c:dc:
03:c6:00:14:0d:4e:14:ed:52:39:bc:c3:ed:a4:5d:d9:a0:65:
ca:19:1d:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURosJZAwAiI/X+Z3pOQmubMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4MTBmYzMxOThhMGFiOTk2NDc4NzdkYmU1NzI1ZTA1Y2Vl
MDEzZjAwHhcNMjUwMjE3MDIwMDM0WhcNMjUwMjE4MDIwMDM0WjAzMTEwLwYDVQQD
EygxMzlkM2NmNzIxYjFlYmE1NGY0MDAwODhlOGMwOGQ0M2RjYjFlOTQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/6194hDvDPaGJjBvnBt40ZvgqNv
rPvfZxGCTKp4tgh1y/hMqXq1MX0FADJp4WUi/mDQof8+iHEzYGkgEdfQMgyJdb/y
zSZfSk6DrHjTT4Q1ILAWFDb9t0tN80XRkN3Bfv1UP9ybAMl2jDF6K+WfUFWIe0d4
89qSQyxp+VRnLFPYVD7tUqFeUEalpKuPIS6bSG5t3FAxmuDyapf8UXGGUF79V/Y2
uP14KpSETtmfgRKe9hKpzdUc+9xUmD+GwVCaNliPy+HJ0Nwobh40emdJHU/jUYgB
WR6RINhpRrPH20d7jJjNWk6nDHmr8NpuouWubd1YHPBQzc2gQ5N3tXF+hQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBOdPPchseulT0AAiOjAjUPcselIMB8GA1UdIwQY
MBaAFIgQ/DGYoKuZZHh32+VyXgXO4BPwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUJEOE1aaWdxNWxrZUhmYjVYSmVCYzdnRV9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9jZjFmZmQtMTM0ZC00MzgyLThlNTkt
NGEwOGQ1YTFjNzFmLzEvaUJEOE1aaWdxNWxrZUhmYjVYSmVCYzdnRV9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny9jZjFmZmQtMTM0ZC00MzgyLThlNTktNGEwOGQ1YTFjNzFm
LzEvaUJEOE1aaWdxNWxrZUhmYjVYSmVCYzdnRV9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHXIoJhmR
nX1zW815L8sNie3r/nznpszOJ4e09h4o4emJcVjU8j8yhosCPnlCjth2Nc/DIlhE
MAmeG6zByda2oex27PNaA2/ZSx46HUP4vWw5mNwK1NdMpFEmnIPMYKJH2tc/d7kx
1yet00siaXOKaR0ZTtEJajS8K4PJcb2VmG/kOdQn+CuuS7GlmIUTWRnNPR8gFEpH
ctU+UL/1+pzqf8kyhSnNa4sZptLcmo4Dfhu6tzVs0f/F07wN48eqWH8TSUF9xcPE
Oy4skLoKKYOUMw7B5HoiE1YWQC8CSOvU1cOaddY7wcgRqZzcA8YAFA1OFO1SObzD
7aRd2aBlyhkd9A==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:57:03 2025 by rpki-client