![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/jb7S38YJhwkqB6Dty0arFMv3QxI.mft
File: jb7S38YJhwkqB6Dty0arFMv3QxI.mft (raw, json)
Hash identifier: 1vyKddOwS+0AyIw3g8Aps9nbfEMH1ggka9BSfZvJXZg=
Subject key identifier: CB:27:09:10:2E:00:A1:21:E7:31:2C:4B:57:DA:52:D0:52:42:3A:A0
Authority key identifier: 8D:BE:D2:DF:C6:09:87:09:2A:07:A0:ED:CB:46:AB:14:CB:F7:43:12
Certificate issuer: /CN=8dbed2dfc60987092a07a0edcb46ab14cbf74312
Certificate serial: 019511A29B4DAE2A2FC4BF837D268A228A4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jb7S38YJhwkqB6Dty0arFMv3QxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/jb7S38YJhwkqB6Dty0arFMv3QxI.mft
Manifest number: 0FB0
Signing time: Mon 17 Feb 2025 02:00:23 +0000
Manifest this update: Mon 17 Feb 2025 02:00:23 +0000
Manifest next update: Tue 18 Feb 2025 02:00:23 +0000
Files and hashes: 1: MEDzHD9q2eGweUQdapdjXMBMfTQ.roa (hash: zXMAfE64URHINF27A6nJI8RqMOkKP0TBeGh/Il74bmY=)
2: TJNsPm3cbta4SQWCq5-FtGHmun4.roa (hash: /493UDv5vGkPWe3z6b3+uF0MkKOjrmJEUEa2xUPVozs=)
3: jb7S38YJhwkqB6Dty0arFMv3QxI.crl (hash: 59VftcNchLetWRcdoFL0E6AZvHkZlKQs0XUv0DssfMM=)
4: sL9Kz85GaDEa7LnBULtmZSLy-lo.roa (hash: XUJoqmnJJ5H1J5j7ZDude3PAUu4a4U54u3Ws3xOI5pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/jb7S38YJhwkqB6Dty0arFMv3QxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/jb7S38YJhwkqB6Dty0arFMv3QxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jb7S38YJhwkqB6Dty0arFMv3QxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:9b:4d:ae:2a:2f:c4:bf:83:7d:26:8a:22:8a:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dbed2dfc60987092a07a0edcb46ab14cbf74312
Validity
Not Before: Feb 17 02:00:23 2025 GMT
Not After : Feb 18 02:00:23 2025 GMT
Subject: CN=cb2709102e00a121e7312c4b57da52d052423aa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:32:93:15:72:43:27:ae:76:f1:80:0e:0a:01:
7b:9b:b1:40:bf:79:90:c5:c3:4f:a9:e4:45:91:5d:
f0:20:a9:24:5f:e3:f8:20:62:68:b1:e3:ef:43:e0:
85:28:7d:1e:2b:36:12:53:ce:ff:b1:6a:fd:42:48:
95:a2:fe:72:ac:65:bc:54:e6:e9:52:c2:1e:5f:04:
dd:17:ac:27:dd:55:6b:42:c8:b9:28:d7:13:d0:c0:
5b:d5:d9:85:57:d5:3b:52:9f:de:6b:55:95:fb:2f:
a1:03:6d:b3:95:33:1a:05:97:36:ea:69:ba:c3:b7:
21:25:c5:4a:3a:da:a2:e1:8a:77:73:97:fd:d8:97:
91:eb:db:aa:89:1f:51:af:9f:02:48:9b:2b:25:42:
b3:74:02:54:3b:4a:52:cf:be:41:5d:a2:85:6b:b6:
28:d7:0e:fe:9f:9f:34:1e:18:d7:19:e6:a3:b2:3b:
76:68:b2:af:d4:ac:ae:c1:68:9e:6d:4a:2c:a2:48:
47:2d:c0:bf:b1:d2:3b:09:96:01:2a:f1:70:16:74:
22:ea:96:01:96:19:d1:fd:28:ba:1c:4d:74:31:1e:
56:1b:d8:56:07:2a:bb:40:dd:a4:eb:93:06:78:ab:
37:17:63:13:5a:38:fe:43:bb:12:8d:e9:42:4d:a5:
8e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:27:09:10:2E:00:A1:21:E7:31:2C:4B:57:DA:52:D0:52:42:3A:A0
X509v3 Authority Key Identifier:
keyid:8D:BE:D2:DF:C6:09:87:09:2A:07:A0:ED:CB:46:AB:14:CB:F7:43:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jb7S38YJhwkqB6Dty0arFMv3QxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/jb7S38YJhwkqB6Dty0arFMv3QxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/jb7S38YJhwkqB6Dty0arFMv3QxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:0f:13:bc:b7:c3:e6:c3:ae:1c:30:4c:cb:19:c5:b0:38:98:
18:15:0b:b9:c6:ae:a3:c3:4d:6e:1e:d3:44:4b:99:ef:ae:04:
af:74:bc:71:66:a6:9e:9d:df:70:50:c5:88:09:7f:62:3d:16:
1e:cf:c0:60:2f:41:4d:fb:8b:80:42:10:62:03:7e:f1:45:29:
4b:e2:7a:9d:85:f5:02:46:0c:4e:df:d3:98:a8:a1:b4:9b:12:
c6:d5:b3:b4:ce:b9:82:62:e0:9e:ae:16:e3:f1:fd:fa:5b:a7:
1c:66:6c:7a:67:78:cd:c9:fc:88:31:1b:bf:2f:14:96:98:09:
5f:27:00:74:cd:9d:ba:c9:4d:33:0d:08:c8:8d:69:89:a9:61:
0f:6b:40:95:fb:0f:05:18:b4:18:2d:a5:8c:04:51:0e:96:94:
c3:9e:ee:6d:e2:5c:21:a1:b9:48:0c:e5:3b:5d:d0:48:65:39:
58:47:f2:c9:40:9d:64:72:59:6b:3c:ca:9a:3f:c1:fa:a8:e7:
f4:3a:be:f1:0b:ba:aa:aa:98:98:8c:e4:4a:8e:48:ba:a5:b7:
64:d5:5f:7c:18:e7:ca:7f:5d:9f:3c:c6:1b:b1:35:98:d3:c5:
6b:3a:fd:64:51:c2:0a:bc:5f:bb:2c:ec:45:88:fa:6f:4f:4b:
63:3b:1d:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURoptNriovxL+DfSaKIopLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkYmVkMmRmYzYwOTg3MDkyYTA3YTBlZGNiNDZhYjE0Y2Jm
NzQzMTIwHhcNMjUwMjE3MDIwMDIzWhcNMjUwMjE4MDIwMDIzWjAzMTEwLwYDVQQD
EyhjYjI3MDkxMDJlMDBhMTIxZTczMTJjNGI1N2RhNTJkMDUyNDIzYWEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjKTFXJDJ6528YAOCgF7m7FAv3mQ
xcNPqeRFkV3wIKkkX+P4IGJosePvQ+CFKH0eKzYSU87/sWr9QkiVov5yrGW8VObp
UsIeXwTdF6wn3VVrQsi5KNcT0MBb1dmFV9U7Up/ea1WV+y+hA22zlTMaBZc26mm6
w7chJcVKOtqi4Yp3c5f92JeR69uqiR9Rr58CSJsrJUKzdAJUO0pSz75BXaKFa7Yo
1w7+n580HhjXGeajsjt2aLKv1KyuwWiebUosokhHLcC/sdI7CZYBKvFwFnQi6pYB
lhnR/Si6HE10MR5WG9hWByq7QN2k65MGeKs3F2MTWjj+Q7sSjelCTaWOgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMsnCRAuAKEh5zEsS1faUtBSQjqgMB8GA1UdIwQY
MBaAFI2+0t/GCYcJKgeg7ctGqxTL90MSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamI3UzM4WUpod2txQjZEdHkwYXJGTXYzUXhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My8wY2M3MTItYTY2NS00OGQ3LWIzZDQt
ZjBmOGIwNzc1NTIzLzEvamI3UzM4WUpod2txQjZEdHkwYXJGTXYzUXhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My8wY2M3MTItYTY2NS00OGQ3LWIzZDQtZjBmOGIwNzc1NTIz
LzEvamI3UzM4WUpod2txQjZEdHkwYXJGTXYzUXhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOA8TvLfD
5sOuHDBMyxnFsDiYGBULucauo8NNbh7TREuZ764Er3S8cWamnp3fcFDFiAl/Yj0W
Hs/AYC9BTfuLgEIQYgN+8UUpS+J6nYX1AkYMTt/TmKihtJsSxtWztM65gmLgnq4W
4/H9+lunHGZsemd4zcn8iDEbvy8UlpgJXycAdM2duslNMw0IyI1pialhD2tAlfsP
BRi0GC2ljARRDpaUw57ubeJcIaG5SAzlO13QSGU5WEfyyUCdZHJZazzKmj/B+qjn
9Dq+8Qu6qqqYmIzkSo5IuqW3ZNVffBjnyn9dnzzGG7E1mNPFazr9ZFHCCrxfuyzs
RYj6b09LYzsd4g==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:29:46 2025 by rpki-client