![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/b64964-b675-4e53-8ef8-0bbde884e812/1/9bdVrRo8ekUCu8PqNMdba85hyUw.mft
File: 9bdVrRo8ekUCu8PqNMdba85hyUw.mft (raw, json)
Hash identifier: VvHMuGBRNWMCfttm6C8ATy3TMBACWGEpAy6Y9J1EuGE=
Subject key identifier: B9:39:37:B0:FA:70:E7:D7:A6:2F:4C:0B:A7:B4:10:CE:C2:C7:C9:72
Authority key identifier: F5:B7:55:AD:1A:3C:7A:45:02:BB:C3:EA:34:C7:5B:6B:CE:61:C9:4C
Certificate issuer: /CN=f5b755ad1a3c7a4502bbc3ea34c75b6bce61c94c
Certificate serial: 019511A28A2CE74D59EC786923A336B487A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9bdVrRo8ekUCu8PqNMdba85hyUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/b64964-b675-4e53-8ef8-0bbde884e812/1/9bdVrRo8ekUCu8PqNMdba85hyUw.mft
Manifest number: 1453
Signing time: Mon 17 Feb 2025 02:00:19 +0000
Manifest this update: Mon 17 Feb 2025 02:00:19 +0000
Manifest next update: Tue 18 Feb 2025 02:00:19 +0000
Files and hashes: 1: 9bdVrRo8ekUCu8PqNMdba85hyUw.crl (hash: NfpZTae53EZl3B7439EiO02ih9rdiDHI2HyWKaOaUBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/b64964-b675-4e53-8ef8-0bbde884e812/1/9bdVrRo8ekUCu8PqNMdba85hyUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/b64964-b675-4e53-8ef8-0bbde884e812/1/9bdVrRo8ekUCu8PqNMdba85hyUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/9bdVrRo8ekUCu8PqNMdba85hyUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:8a:2c:e7:4d:59:ec:78:69:23:a3:36:b4:87:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5b755ad1a3c7a4502bbc3ea34c75b6bce61c94c
Validity
Not Before: Feb 17 02:00:19 2025 GMT
Not After : Feb 18 02:00:19 2025 GMT
Subject: CN=b93937b0fa70e7d7a62f4c0ba7b410cec2c7c972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:16:c7:c4:83:fb:e7:82:6f:5e:bf:82:26:e4:
53:13:f8:e2:34:65:66:f9:fe:d6:d8:f1:14:da:63:
7c:e5:9c:63:8b:76:c3:bf:4c:2a:39:1c:56:c8:6c:
69:b2:ed:d7:80:c5:dd:33:f4:d3:82:e5:a2:0d:79:
d6:f4:14:77:c4:cf:80:be:86:4f:a2:7b:5d:d7:e1:
04:f0:44:fc:3e:bf:61:c4:90:68:03:c6:99:11:94:
c4:4b:35:57:26:2d:2b:b9:5c:68:85:47:de:2c:66:
98:c0:c3:08:66:a8:02:5f:ff:6c:21:99:90:8c:dc:
a0:34:d3:a4:38:12:94:5f:b8:e1:43:be:03:aa:ce:
b4:1a:2b:2d:16:79:57:52:3b:df:31:a8:4b:bd:0c:
19:31:db:1a:69:7b:48:e1:14:36:d7:07:6e:23:e4:
a0:3a:07:78:4c:89:66:a2:4f:88:2f:61:73:f8:19:
31:04:8c:c7:be:c9:83:2e:c7:04:60:5b:91:57:71:
8a:a0:b2:7a:eb:c2:a4:c4:7b:8d:ba:fb:64:af:84:
71:0d:4c:32:98:e9:15:e7:d8:cc:3c:dd:c7:a9:cd:
f1:f3:30:69:49:83:b6:c4:77:3a:2e:1d:f0:6c:0e:
c7:36:85:0c:10:32:6a:c0:d9:c5:a5:85:e5:e9:0a:
e8:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:39:37:B0:FA:70:E7:D7:A6:2F:4C:0B:A7:B4:10:CE:C2:C7:C9:72
X509v3 Authority Key Identifier:
keyid:F5:B7:55:AD:1A:3C:7A:45:02:BB:C3:EA:34:C7:5B:6B:CE:61:C9:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9bdVrRo8ekUCu8PqNMdba85hyUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b64964-b675-4e53-8ef8-0bbde884e812/1/9bdVrRo8ekUCu8PqNMdba85hyUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b64964-b675-4e53-8ef8-0bbde884e812/1/9bdVrRo8ekUCu8PqNMdba85hyUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:7b:b1:33:ac:38:45:14:8f:81:8f:35:d2:2a:88:20:fa:ec:
f7:51:fb:f0:e8:78:e5:05:1b:56:1b:f7:3b:1d:21:2d:39:8b:
4e:2a:09:77:e7:61:b0:1b:14:5a:56:23:b7:d8:b7:7a:c6:22:
bd:96:1d:4f:ab:42:78:ea:df:5a:cd:37:95:ce:d2:cb:38:ab:
5f:0a:76:ac:ba:4a:3f:17:70:86:e0:35:50:92:b1:1e:c1:aa:
e9:5f:d0:3e:4e:fd:a5:3b:a1:b6:d3:a2:40:29:91:53:76:2c:
1e:8e:43:59:38:d8:5c:23:52:47:52:e5:62:fa:f9:57:8a:c0:
a5:ab:0f:1d:ef:58:9d:02:e5:bf:23:5c:95:4c:b4:19:45:84:
78:59:65:db:3e:4a:52:c1:a3:24:35:f6:5d:fa:f0:b9:be:81:
b7:e5:ef:79:c7:84:05:d2:f8:fd:d3:c8:01:49:be:6f:fb:8b:
84:50:48:77:c0:f0:6a:b5:32:84:98:4c:70:bd:f2:d1:ee:96:
95:77:25:b9:77:09:57:e1:ca:34:54:9b:d2:64:29:8e:be:c5:
89:9e:61:a3:e5:5b:75:0a:7f:13:ba:90:c3:9e:07:64:20:a7:
ad:70:d5:a9:52:a1:d3:b9:8c:73:70:a7:66:0b:b2:33:5a:49:
53:d5:3c:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURooos501Z7HhpI6M2tIepMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1Yjc1NWFkMWEzYzdhNDUwMmJiYzNlYTM0Yzc1YjZiY2U2
MWM5NGMwHhcNMjUwMjE3MDIwMDE5WhcNMjUwMjE4MDIwMDE5WjAzMTEwLwYDVQQD
EyhiOTM5MzdiMGZhNzBlN2Q3YTYyZjRjMGJhN2I0MTBjZWMyYzdjOTcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBbHxIP754JvXr+CJuRTE/jiNGVm
+f7W2PEU2mN85Zxji3bDv0wqORxWyGxpsu3XgMXdM/TTguWiDXnW9BR3xM+AvoZP
ontd1+EE8ET8Pr9hxJBoA8aZEZTESzVXJi0ruVxohUfeLGaYwMMIZqgCX/9sIZmQ
jNygNNOkOBKUX7jhQ74Dqs60GistFnlXUjvfMahLvQwZMdsaaXtI4RQ21wduI+Sg
Ogd4TIlmok+IL2Fz+BkxBIzHvsmDLscEYFuRV3GKoLJ668KkxHuNuvtkr4RxDUwy
mOkV59jMPN3Hqc3x8zBpSYO2xHc6Lh3wbA7HNoUMEDJqwNnFpYXl6Qro+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLk5N7D6cOfXpi9MC6e0EM7Cx8lyMB8GA1UdIwQY
MBaAFPW3Va0aPHpFArvD6jTHW2vOYclMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWJkVnJSbzhla1VDdThQcU5NZGJhODVoeVV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9iNjQ5NjQtYjY3NS00ZTUzLThlZjgt
MGJiZGU4ODRlODEyLzEvOWJkVnJSbzhla1VDdThQcU5NZGJhODVoeVV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9iNjQ5NjQtYjY3NS00ZTUzLThlZjgtMGJiZGU4ODRlODEy
LzEvOWJkVnJSbzhla1VDdThQcU5NZGJhODVoeVV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvHuxM6w4
RRSPgY810iqIIPrs91H78Oh45QUbVhv3Ox0hLTmLTioJd+dhsBsUWlYjt9i3esYi
vZYdT6tCeOrfWs03lc7SyzirXwp2rLpKPxdwhuA1UJKxHsGq6V/QPk79pTuhttOi
QCmRU3YsHo5DWTjYXCNSR1LlYvr5V4rApasPHe9YnQLlvyNclUy0GUWEeFll2z5K
UsGjJDX2Xfrwub6Bt+XveceEBdL4/dPIAUm+b/uLhFBId8DwarUyhJhMcL3y0e6W
lXcluXcJV+HKNFSb0mQpjr7FiZ5ho+VbdQp/E7qQw54HZCCnrXDVqVKh07mMc3Cn
ZguyM1pJU9U8DQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:05:48 2025 by rpki-client