![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/2ee71b-8ffe-4eb6-9434-cf3c1a79e634/1/ELQ2E1Nf-qc9msxQPHGij6F7ODk.mft
File: ELQ2E1Nf-qc9msxQPHGij6F7ODk.mft (raw, json)
Hash identifier: T9wXSm+p+6CUGD/MkR3db8UDszo5ZnRtFlmN0yaCAsA=
Subject key identifier: 35:3A:77:C0:5B:01:31:DD:85:F0:AC:61:B8:22:A7:E9:C3:0A:4C:2E
Authority key identifier: 10:B4:36:13:53:5F:FA:A7:3D:9A:CC:50:3C:71:A2:8F:A1:7B:38:39
Certificate issuer: /CN=10b43613535ffaa73d9acc503c71a28fa17b3839
Certificate serial: 0195108FE8191670E7D93A412EF19227F2A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ELQ2E1Nf-qc9msxQPHGij6F7ODk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/2ee71b-8ffe-4eb6-9434-cf3c1a79e634/1/ELQ2E1Nf-qc9msxQPHGij6F7ODk.mft
Manifest number: 0AF7
Signing time: Sun 16 Feb 2025 21:00:21 +0000
Manifest this update: Sun 16 Feb 2025 21:00:21 +0000
Manifest next update: Mon 17 Feb 2025 21:00:21 +0000
Files and hashes: 1: ELQ2E1Nf-qc9msxQPHGij6F7ODk.crl (hash: bD8y1WXQiQaooDIDv9T6s/IOEeC1ge8JSkwlLrvx988=)
2: _HSn7eAJ1-GN-PARSBNdWZcI_CM.roa (hash: PSxIhhf7j8l1h9bP9LYjz403TkZ/7uIEMgwPHzFFKaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/2ee71b-8ffe-4eb6-9434-cf3c1a79e634/1/ELQ2E1Nf-qc9msxQPHGij6F7ODk.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/2ee71b-8ffe-4eb6-9434-cf3c1a79e634/1/ELQ2E1Nf-qc9msxQPHGij6F7ODk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ELQ2E1Nf-qc9msxQPHGij6F7ODk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 21:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:8f:e8:19:16:70:e7:d9:3a:41:2e:f1:92:27:f2:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10b43613535ffaa73d9acc503c71a28fa17b3839
Validity
Not Before: Feb 16 21:00:21 2025 GMT
Not After : Feb 17 21:00:21 2025 GMT
Subject: CN=353a77c05b0131dd85f0ac61b822a7e9c30a4c2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:95:f5:41:3c:cc:01:b7:68:74:48:e1:21:34:
18:fd:0c:74:e8:01:a6:a3:26:fd:3f:06:17:98:46:
10:e6:bc:56:99:af:f5:25:9e:6f:fe:04:17:3e:85:
1c:61:82:9c:34:5d:e4:d2:11:20:89:ed:3a:81:27:
70:b8:0f:af:73:f0:b7:61:e4:32:07:47:9d:b1:f7:
91:cc:20:f9:aa:ce:2a:2d:f4:12:e3:f7:ca:84:6b:
69:3f:ba:d0:4c:8c:c4:15:ee:4c:83:e3:7d:01:09:
15:de:d7:a9:42:c8:55:23:61:15:25:36:17:86:0e:
a3:f7:c0:43:89:c2:b2:c1:f5:ae:0c:1b:dd:34:db:
56:37:ef:09:f2:0e:f9:24:5a:75:70:07:12:17:ad:
05:d4:0e:4e:35:fd:d0:5d:9f:7b:b2:ea:37:33:f4:
eb:0d:f4:59:0a:59:01:75:7f:8f:48:58:82:e6:e9:
44:f1:25:d9:7f:9b:99:fe:61:d6:6d:c4:f3:62:9c:
56:ad:dc:f2:97:21:26:f5:5f:c9:34:48:8f:67:c0:
fb:c5:f8:0a:d0:13:4a:62:40:5d:6b:c2:e7:62:27:
84:0f:a3:5c:6a:d7:29:e9:40:a4:02:98:b9:c1:19:
c7:02:36:32:66:2e:67:02:5b:97:4b:94:bb:53:64:
82:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:3A:77:C0:5B:01:31:DD:85:F0:AC:61:B8:22:A7:E9:C3:0A:4C:2E
X509v3 Authority Key Identifier:
keyid:10:B4:36:13:53:5F:FA:A7:3D:9A:CC:50:3C:71:A2:8F:A1:7B:38:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ELQ2E1Nf-qc9msxQPHGij6F7ODk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2ee71b-8ffe-4eb6-9434-cf3c1a79e634/1/ELQ2E1Nf-qc9msxQPHGij6F7ODk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2ee71b-8ffe-4eb6-9434-cf3c1a79e634/1/ELQ2E1Nf-qc9msxQPHGij6F7ODk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:a3:5b:4f:60:63:b7:f8:e2:8d:7f:94:a2:c7:b6:70:db:fd:
23:f1:cc:98:18:e5:e9:fd:5f:8b:66:cd:02:20:07:cf:52:37:
4d:b5:ff:69:d9:78:28:c2:fe:e6:92:90:a1:9a:7f:c9:23:1a:
66:13:83:23:f2:42:52:83:99:65:30:ee:94:be:8e:58:df:2e:
6c:84:37:f8:fc:e0:34:51:0c:f7:3c:5b:6a:a8:d5:29:d8:13:
e5:66:44:f3:80:4a:ad:57:91:de:86:4c:48:4a:72:54:66:64:
3c:54:b0:99:20:b8:d3:e8:ee:9e:47:65:4e:6a:99:b3:e2:45:
79:89:69:3f:2b:a2:28:d4:ad:80:ea:94:b3:48:b9:d8:3b:a2:
5e:8e:c2:ed:bb:80:88:5b:18:bb:22:c1:80:d5:d7:34:b6:8e:
3d:0f:3f:9c:2b:d8:28:fa:94:b0:97:ec:7a:7b:50:cb:d1:8f:
ec:e6:1f:cb:94:21:5c:ef:d0:aa:ee:d5:69:9d:7e:5a:68:58:
a3:cf:67:3f:4e:cb:56:06:61:c0:cf:62:15:ef:17:64:9c:ed:
28:25:df:5d:90:29:39:c5:07:c9:64:c6:bf:3b:75:a5:73:77:
54:53:11:4e:9d:2c:54:96:f0:f7:3c:e9:8a:0b:02:77:0e:0e:
7c:be:25:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUQj+gZFnDn2TpBLvGSJ/KmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwYjQzNjEzNTM1ZmZhYTczZDlhY2M1MDNjNzFhMjhmYTE3
YjM4MzkwHhcNMjUwMjE2MjEwMDIxWhcNMjUwMjE3MjEwMDIxWjAzMTEwLwYDVQQD
EygzNTNhNzdjMDViMDEzMWRkODVmMGFjNjFiODIyYTdlOWMzMGE0YzJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5X1QTzMAbdodEjhITQY/Qx06AGm
oyb9PwYXmEYQ5rxWma/1JZ5v/gQXPoUcYYKcNF3k0hEgie06gSdwuA+vc/C3YeQy
B0edsfeRzCD5qs4qLfQS4/fKhGtpP7rQTIzEFe5Mg+N9AQkV3tepQshVI2EVJTYX
hg6j98BDicKywfWuDBvdNNtWN+8J8g75JFp1cAcSF60F1A5ONf3QXZ97suo3M/Tr
DfRZClkBdX+PSFiC5ulE8SXZf5uZ/mHWbcTzYpxWrdzylyEm9V/JNEiPZ8D7xfgK
0BNKYkBda8LnYieED6Ncatcp6UCkApi5wRnHAjYyZi5nAluXS5S7U2SCNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDU6d8BbATHdhfCsYbgip+nDCkwuMB8GA1UdIwQY
MBaAFBC0NhNTX/qnPZrMUDxxoo+hezg5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUxRMkUxTmYtcWM5bXN4UVBIR2lqNkY3T0RrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC8yZWU3MWItOGZmZS00ZWI2LTk0MzQt
Y2YzYzFhNzllNjM0LzEvRUxRMkUxTmYtcWM5bXN4UVBIR2lqNkY3T0RrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC8yZWU3MWItOGZmZS00ZWI2LTk0MzQtY2YzYzFhNzllNjM0
LzEvRUxRMkUxTmYtcWM5bXN4UVBIR2lqNkY3T0RrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIKNbT2Bj
t/jijX+Uose2cNv9I/HMmBjl6f1fi2bNAiAHz1I3TbX/adl4KML+5pKQoZp/ySMa
ZhODI/JCUoOZZTDulL6OWN8ubIQ3+PzgNFEM9zxbaqjVKdgT5WZE84BKrVeR3oZM
SEpyVGZkPFSwmSC40+junkdlTmqZs+JFeYlpPyuiKNStgOqUs0i52DuiXo7C7buA
iFsYuyLBgNXXNLaOPQ8/nCvYKPqUsJfsentQy9GP7OYfy5QhXO/Qqu7VaZ1+WmhY
o89nP07LVgZhwM9iFe8XZJztKCXfXZApOcUHyWTGvzt1pXN3VFMRTp0sVJbw9zzp
igsCdw4OfL4lKA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:33:03 2025 by rpki-client