![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/11081b-4ef9-4e2f-8153-287937940d7b/1/59eZrg792Ybd53-zWtChCCPLly8.mft
File: 59eZrg792Ybd53-zWtChCCPLly8.mft (raw, json)
Hash identifier: pXVqBpHYDWsaP3bq6umr0o1VxXIGqILk64JL3r8DNp4=
Subject key identifier: E8:B9:52:DE:D1:37:DF:AB:0F:EE:B4:98:19:6E:BF:8B:F9:8B:D0:DA
Authority key identifier: E7:D7:99:AE:0E:FD:D9:86:DD:E7:7F:B3:5A:D0:A1:08:23:CB:97:2F
Certificate issuer: /CN=e7d799ae0efdd986dde77fb35ad0a10823cb972f
Certificate serial: 019510FDB02CB8A09DD8991CF8B6E86439DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/59eZrg792Ybd53-zWtChCCPLly8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/11081b-4ef9-4e2f-8153-287937940d7b/1/59eZrg792Ybd53-zWtChCCPLly8.mft
Manifest number: 145E
Signing time: Sun 16 Feb 2025 23:00:15 +0000
Manifest this update: Sun 16 Feb 2025 23:00:15 +0000
Manifest next update: Mon 17 Feb 2025 23:00:15 +0000
Files and hashes: 1: 59eZrg792Ybd53-zWtChCCPLly8.crl (hash: iEpXYdgMQdZkPZrVVyuasdU0yRYr+6bTW7/6dCOA/cw=)
2: Kvx8CFJShgrk9zFYI0lUsh--CwU.roa (hash: PVmg//o7LkW03D9ltn/laGXzfCJ6cNBsJDyBEL8Jj7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/11081b-4ef9-4e2f-8153-287937940d7b/1/59eZrg792Ybd53-zWtChCCPLly8.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/11081b-4ef9-4e2f-8153-287937940d7b/1/59eZrg792Ybd53-zWtChCCPLly8.mft
rsync://rpki.ripe.net/repository/DEFAULT/59eZrg792Ybd53-zWtChCCPLly8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fd:b0:2c:b8:a0:9d:d8:99:1c:f8:b6:e8:64:39:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7d799ae0efdd986dde77fb35ad0a10823cb972f
Validity
Not Before: Feb 16 23:00:15 2025 GMT
Not After : Feb 17 23:00:15 2025 GMT
Subject: CN=e8b952ded137dfab0feeb498196ebf8bf98bd0da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:71:c2:8a:84:a0:0f:5d:73:21:65:73:40:48:
6a:3a:93:4e:68:3a:5a:98:49:6c:77:8e:b7:19:fe:
6f:93:bd:a8:c6:2c:cf:0e:77:e0:f4:94:b5:d2:ba:
fa:82:9a:01:c8:16:c3:92:01:34:c7:f5:1d:1b:e8:
e2:70:08:e5:23:db:1d:fc:44:38:e5:23:4c:9b:be:
f0:97:56:b7:cf:6d:e2:08:6b:27:f0:9f:f7:b9:6b:
4a:d6:30:2b:57:86:cd:00:74:aa:4e:4b:de:c7:e1:
0a:b5:57:f0:73:f2:54:24:33:23:2a:1c:90:fa:d5:
fd:61:31:bf:ff:f8:3a:67:34:78:ef:56:c6:9f:30:
c2:ab:fb:10:f3:97:cc:fe:10:0c:68:12:43:e9:ad:
a1:32:9c:6f:15:8f:df:72:94:04:d9:31:0d:64:75:
39:5d:37:5b:79:be:75:45:cf:31:07:2c:39:a8:aa:
6f:2a:5b:0e:66:96:a3:33:72:6b:ee:f5:b7:7e:d5:
30:99:ae:8e:b4:b1:95:5c:18:94:bd:3b:e3:78:69:
b0:66:d4:49:df:13:e4:7c:e9:01:49:73:80:3b:e6:
eb:d8:dc:4a:17:10:e1:10:12:de:b8:45:00:c6:12:
a4:de:31:bc:0e:93:01:07:c3:16:6e:78:c8:22:0d:
b8:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:B9:52:DE:D1:37:DF:AB:0F:EE:B4:98:19:6E:BF:8B:F9:8B:D0:DA
X509v3 Authority Key Identifier:
keyid:E7:D7:99:AE:0E:FD:D9:86:DD:E7:7F:B3:5A:D0:A1:08:23:CB:97:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/59eZrg792Ybd53-zWtChCCPLly8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/11081b-4ef9-4e2f-8153-287937940d7b/1/59eZrg792Ybd53-zWtChCCPLly8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/11081b-4ef9-4e2f-8153-287937940d7b/1/59eZrg792Ybd53-zWtChCCPLly8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:35:df:3f:7c:ac:ae:2b:02:25:81:35:7b:b5:58:7d:61:94:
15:54:dd:18:1b:74:29:b9:da:df:42:6e:c1:79:ef:a3:df:fd:
f2:ce:f8:4d:9b:38:cd:20:8f:aa:d3:33:db:56:a9:96:8f:8b:
4f:09:11:38:2d:0e:71:b4:fb:a8:ee:07:7e:06:00:eb:af:f0:
b6:ce:9d:fb:fc:e5:45:4f:d4:ad:8f:f1:6e:ea:c7:0e:e7:6e:
ff:e7:83:af:30:34:2e:83:20:9e:25:94:ee:c6:c6:09:ff:d4:
17:86:e6:a8:d7:39:89:ce:81:e8:6c:03:dd:42:a2:80:45:f1:
1a:f9:f9:d7:c5:7c:54:16:ba:4e:c1:5c:cd:0e:58:f3:00:9e:
1e:0c:5e:62:dd:bf:c2:60:de:7b:b3:e3:a8:78:8c:98:96:cd:
5c:6a:5c:2c:b6:35:f2:70:e8:ff:c7:27:a8:6f:9b:d8:b2:22:
bd:0c:e1:67:98:e0:89:cc:c2:17:37:07:da:25:c4:23:d1:76:
06:1b:04:36:4c:11:4d:a7:06:20:99:b4:00:7d:68:33:bb:b8:
6f:1d:fe:8b:99:ae:1e:4d:48:d6:0d:f8:64:5b:fe:e4:e6:8d:
fe:ff:2d:4b:ab:02:21:41:cc:63:12:0a:aa:33:c0:a0:b5:42:
e4:fd:c0:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUQ/bAsuKCd2Jkc+LboZDncMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3ZDc5OWFlMGVmZGQ5ODZkZGU3N2ZiMzVhZDBhMTA4MjNj
Yjk3MmYwHhcNMjUwMjE2MjMwMDE1WhcNMjUwMjE3MjMwMDE1WjAzMTEwLwYDVQQD
EyhlOGI5NTJkZWQxMzdkZmFiMGZlZWI0OTgxOTZlYmY4YmY5OGJkMGRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHHCioSgD11zIWVzQEhqOpNOaDpa
mElsd463Gf5vk72oxizPDnfg9JS10rr6gpoByBbDkgE0x/UdG+jicAjlI9sd/EQ4
5SNMm77wl1a3z23iCGsn8J/3uWtK1jArV4bNAHSqTkvex+EKtVfwc/JUJDMjKhyQ
+tX9YTG///g6ZzR471bGnzDCq/sQ85fM/hAMaBJD6a2hMpxvFY/fcpQE2TENZHU5
XTdbeb51Rc8xByw5qKpvKlsOZpajM3Jr7vW3ftUwma6OtLGVXBiUvTvjeGmwZtRJ
3xPkfOkBSXOAO+br2NxKFxDhEBLeuEUAxhKk3jG8DpMBB8MWbnjIIg24IQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOi5Ut7RN9+rD+60mBluv4v5i9DaMB8GA1UdIwQY
MBaAFOfXma4O/dmG3ed/s1rQoQgjy5cvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTllWnJnNzkyWWJkNTMteld0Q2hDQ1BMbHk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8xMTA4MWItNGVmOS00ZTJmLTgxNTMt
Mjg3OTM3OTQwZDdiLzEvNTllWnJnNzkyWWJkNTMteld0Q2hDQ1BMbHk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS8xMTA4MWItNGVmOS00ZTJmLTgxNTMtMjg3OTM3OTQwZDdi
LzEvNTllWnJnNzkyWWJkNTMteld0Q2hDQ1BMbHk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATTXfP3ys
risCJYE1e7VYfWGUFVTdGBt0Kbna30JuwXnvo9/98s74TZs4zSCPqtMz21aplo+L
TwkROC0OcbT7qO4HfgYA66/wts6d+/zlRU/UrY/xburHDudu/+eDrzA0LoMgniWU
7sbGCf/UF4bmqNc5ic6B6GwD3UKigEXxGvn518V8VBa6TsFczQ5Y8wCeHgxeYt2/
wmDee7PjqHiMmJbNXGpcLLY18nDo/8cnqG+b2LIivQzhZ5jgiczCFzcH2iXEI9F2
BhsENkwRTacGIJm0AH1oM7u4bx3+i5muHk1I1g34ZFv+5OaN/v8tS6sCIUHMYxIK
qjPAoLVC5P3AAQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:31:59 2025 by rpki-client