![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/992bac-27c8-44fc-a43f-7e384aa10621/1/R0APQz0S1oqeufakK688jFKVyFI.mft
File: R0APQz0S1oqeufakK688jFKVyFI.mft (raw, json)
Hash identifier: zOH9zVUbgTsgco3FtOTDOsOKaqjvASjMzOhok3zVu9w=
Subject key identifier: 77:C0:B8:94:ED:5D:07:27:E8:19:81:DD:06:56:50:3B:A5:48:75:B0
Authority key identifier: 47:40:0F:43:3D:12:D6:8A:9E:B9:F6:A4:2B:AF:3C:8C:52:95:C8:52
Certificate issuer: /CN=47400f433d12d68a9eb9f6a42baf3c8c5295c852
Certificate serial: 0195116BF0A3C6E906E44644030C43B3739B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R0APQz0S1oqeufakK688jFKVyFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/992bac-27c8-44fc-a43f-7e384aa10621/1/R0APQz0S1oqeufakK688jFKVyFI.mft
Manifest number: 114D
Signing time: Mon 17 Feb 2025 01:00:41 +0000
Manifest this update: Mon 17 Feb 2025 01:00:41 +0000
Manifest next update: Tue 18 Feb 2025 01:00:41 +0000
Files and hashes: 1: R0APQz0S1oqeufakK688jFKVyFI.crl (hash: 1pKauKeSRrq3FzMWdy2rOX0/VNI3p+Q6ks2j6h387q0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/992bac-27c8-44fc-a43f-7e384aa10621/1/R0APQz0S1oqeufakK688jFKVyFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/992bac-27c8-44fc-a43f-7e384aa10621/1/R0APQz0S1oqeufakK688jFKVyFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/R0APQz0S1oqeufakK688jFKVyFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6b:f0:a3:c6:e9:06:e4:46:44:03:0c:43:b3:73:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47400f433d12d68a9eb9f6a42baf3c8c5295c852
Validity
Not Before: Feb 17 01:00:41 2025 GMT
Not After : Feb 18 01:00:41 2025 GMT
Subject: CN=77c0b894ed5d0727e81981dd0656503ba54875b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0f:21:ea:e2:66:fd:eb:4b:ea:c4:ca:91:02:
df:3e:53:ee:b5:8b:81:a6:cd:18:e0:f6:e2:04:f5:
13:2f:8b:16:4e:db:39:a9:cf:38:3c:34:40:20:27:
9c:42:df:fc:69:0a:6c:75:fe:db:3d:e0:5b:19:ce:
ec:4e:af:73:7e:b8:cb:6a:8f:8a:e9:95:de:6e:58:
87:9c:a0:5c:13:82:ba:c3:35:fd:31:8c:3b:b4:fb:
e5:bb:aa:23:0d:01:fd:08:2a:c1:62:ee:ac:84:44:
b3:de:5a:36:fb:21:49:75:ea:58:51:27:15:b3:0b:
fb:f1:ad:98:86:75:6e:34:08:a1:8a:88:d0:58:8e:
9f:73:d0:0e:98:68:8a:f6:15:43:db:86:17:16:89:
24:a9:ca:fc:ac:07:45:f8:4b:4c:8b:ff:5f:ce:a1:
0c:69:04:31:97:11:bc:5c:43:0e:52:53:38:59:11:
0d:d0:12:5a:3d:8f:7e:b1:0b:c2:3a:06:34:f3:1f:
2d:b3:34:5c:e5:c2:af:5a:2e:9f:b9:0e:59:f5:68:
d0:bb:a0:7a:1d:fb:e4:7c:43:0a:bd:90:8c:ce:1d:
f0:5b:1a:c5:38:7e:7b:9b:c4:9b:32:74:5f:a6:b4:
f1:7e:ca:54:b2:eb:4d:42:3f:17:3f:a1:b9:4a:14:
58:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:C0:B8:94:ED:5D:07:27:E8:19:81:DD:06:56:50:3B:A5:48:75:B0
X509v3 Authority Key Identifier:
keyid:47:40:0F:43:3D:12:D6:8A:9E:B9:F6:A4:2B:AF:3C:8C:52:95:C8:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R0APQz0S1oqeufakK688jFKVyFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/992bac-27c8-44fc-a43f-7e384aa10621/1/R0APQz0S1oqeufakK688jFKVyFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/992bac-27c8-44fc-a43f-7e384aa10621/1/R0APQz0S1oqeufakK688jFKVyFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:66:e4:cf:fd:4e:f7:14:54:74:0e:9f:5e:12:98:ce:48:bc:
65:33:c5:47:a4:0d:a4:c7:c8:20:8f:75:6f:a1:0e:8b:ed:c8:
70:6f:e3:9d:61:f0:10:70:90:3b:d5:d0:b6:7d:cc:23:79:1a:
bf:56:d6:93:f7:43:67:51:21:b6:2b:96:a1:46:b5:cc:bd:e3:
8e:78:f1:92:8b:2d:e4:ad:c3:c0:39:19:c0:c4:93:f4:84:04:
ed:1d:50:f3:c5:4e:c3:18:7b:9d:e8:f9:e7:0c:03:49:14:83:
9c:1a:c6:ec:40:92:c8:c1:1a:68:2c:49:4b:8f:52:bd:84:0a:
32:62:4f:47:28:24:86:7d:86:57:2a:79:4e:41:4a:70:11:be:
f1:3b:36:a3:e0:f8:3e:75:98:e1:0a:f0:6e:ae:72:23:ec:86:
28:3c:c5:15:ee:fa:3d:19:52:ea:e3:2e:b4:f8:13:d6:45:f6:
03:e6:68:eb:58:94:ee:14:a8:5f:98:b1:a3:c6:aa:fc:c3:01:
9c:96:4e:55:76:9e:c9:aa:7a:8f:89:db:96:cb:ba:91:27:40:
b2:4e:0d:92:52:a0:04:ab:ee:14:0d:e3:8f:45:d8:c4:3f:36:
6d:b3:e9:17:0c:a8:5d:30:21:20:23:64:c6:71:58:01:4a:d2:
ad:50:d2:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURa/CjxukG5EZEAwxDs3ObMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3NDAwZjQzM2QxMmQ2OGE5ZWI5ZjZhNDJiYWYzYzhjNTI5
NWM4NTIwHhcNMjUwMjE3MDEwMDQxWhcNMjUwMjE4MDEwMDQxWjAzMTEwLwYDVQQD
Eyg3N2MwYjg5NGVkNWQwNzI3ZTgxOTgxZGQwNjU2NTAzYmE1NDg3NWIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAng8h6uJm/etL6sTKkQLfPlPutYuB
ps0Y4PbiBPUTL4sWTts5qc84PDRAICecQt/8aQpsdf7bPeBbGc7sTq9zfrjLao+K
6ZXebliHnKBcE4K6wzX9MYw7tPvlu6ojDQH9CCrBYu6shESz3lo2+yFJdepYUScV
swv78a2YhnVuNAihiojQWI6fc9AOmGiK9hVD24YXFokkqcr8rAdF+EtMi/9fzqEM
aQQxlxG8XEMOUlM4WREN0BJaPY9+sQvCOgY08x8tszRc5cKvWi6fuQ5Z9WjQu6B6
HfvkfEMKvZCMzh3wWxrFOH57m8SbMnRfprTxfspUsutNQj8XP6G5ShRYmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHfAuJTtXQcn6BmB3QZWUDulSHWwMB8GA1UdIwQY
MBaAFEdAD0M9EtaKnrn2pCuvPIxSlchSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjBBUFF6MFMxb3FldWZha0s2ODhqRktWeUZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni85OTJiYWMtMjdjOC00NGZjLWE0M2Yt
N2UzODRhYTEwNjIxLzEvUjBBUFF6MFMxb3FldWZha0s2ODhqRktWeUZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni85OTJiYWMtMjdjOC00NGZjLWE0M2YtN2UzODRhYTEwNjIx
LzEvUjBBUFF6MFMxb3FldWZha0s2ODhqRktWeUZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvWbkz/1O
9xRUdA6fXhKYzki8ZTPFR6QNpMfIII91b6EOi+3IcG/jnWHwEHCQO9XQtn3MI3ka
v1bWk/dDZ1EhtiuWoUa1zL3jjnjxkost5K3DwDkZwMST9IQE7R1Q88VOwxh7nej5
5wwDSRSDnBrG7ECSyMEaaCxJS49SvYQKMmJPRygkhn2GVyp5TkFKcBG+8Ts2o+D4
PnWY4Qrwbq5yI+yGKDzFFe76PRlS6uMutPgT1kX2A+Zo61iU7hSoX5ixo8aq/MMB
nJZOVXaeyap6j4nblsu6kSdAsk4NklKgBKvuFA3jj0XYxD82bbPpFwyoXTAhICNk
xnFYAUrSrVDS+Q==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:10:33 2025 by rpki-client