![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/fc4ed7-4e12-46ff-bf30-069dac119166/1/Qp_kZjPk0ydiUbOyYa9yfTXU3_s.mft
File: Qp_kZjPk0ydiUbOyYa9yfTXU3_s.mft (raw, json)
Hash identifier: iq+E7iEQq3g0vmn5VqX/GF0jpHu77V7tU41wcG6bAJE=
Subject key identifier: 55:A0:14:4A:44:79:73:99:14:34:AD:FB:40:AC:D8:9E:AD:71:97:7B
Authority key identifier: 42:9F:E4:66:33:E4:D3:27:62:51:B3:B2:61:AF:72:7D:35:D4:DF:FB
Certificate issuer: /CN=429fe46633e4d3276251b3b261af727d35d4dffb
Certificate serial: 019510C72A40DAB287A8007B47E83E75211E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qp_kZjPk0ydiUbOyYa9yfTXU3_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/fc4ed7-4e12-46ff-bf30-069dac119166/1/Qp_kZjPk0ydiUbOyYa9yfTXU3_s.mft
Manifest number: 03D2
Signing time: Sun 16 Feb 2025 22:00:42 +0000
Manifest this update: Sun 16 Feb 2025 22:00:42 +0000
Manifest next update: Mon 17 Feb 2025 22:00:42 +0000
Files and hashes: 1: Qp_kZjPk0ydiUbOyYa9yfTXU3_s.crl (hash: mZH9GAJrjFEXeCr0m0v3SHxJl06xlRoGteuoV6G7gX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/fc4ed7-4e12-46ff-bf30-069dac119166/1/Qp_kZjPk0ydiUbOyYa9yfTXU3_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/fc4ed7-4e12-46ff-bf30-069dac119166/1/Qp_kZjPk0ydiUbOyYa9yfTXU3_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qp_kZjPk0ydiUbOyYa9yfTXU3_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:2a:40:da:b2:87:a8:00:7b:47:e8:3e:75:21:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=429fe46633e4d3276251b3b261af727d35d4dffb
Validity
Not Before: Feb 16 22:00:42 2025 GMT
Not After : Feb 17 22:00:42 2025 GMT
Subject: CN=55a0144a447973991434adfb40acd89ead71977b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:5f:e0:00:35:05:c9:27:d0:7f:8e:bb:59:0a:
7c:ce:88:e6:03:df:3d:27:e7:56:17:cd:64:1f:20:
be:52:5b:c7:4f:1d:42:8c:9b:9d:df:77:67:a8:28:
c3:2d:ef:de:7a:36:75:c5:c6:f3:5e:0b:6a:eb:c9:
4c:6f:af:b8:c1:03:fc:21:58:7c:04:13:89:a7:8b:
b8:73:3d:d0:b2:53:01:8b:3a:c9:fb:15:c7:d0:27:
66:f1:a4:c2:33:2c:ad:1f:90:7e:90:9a:88:58:e9:
98:5e:ec:7a:0a:cf:b4:8e:99:ac:7c:4e:d7:61:85:
97:7f:2c:a5:40:63:d8:15:39:fd:7a:05:3b:da:42:
e6:d0:8b:fd:00:78:4f:65:27:39:2f:bf:ed:3d:5d:
f9:b2:8d:a6:7e:a1:e4:ec:19:de:f2:11:25:c6:01:
c8:b0:8e:ef:ec:19:c2:64:a5:94:b7:ed:0a:d1:87:
65:c6:30:f8:93:f3:39:66:05:9d:16:a0:7b:3a:4e:
a4:cd:34:ba:36:e4:9b:f9:8a:12:77:8e:de:f9:4d:
51:4b:bb:95:b7:57:12:ed:59:53:ad:98:83:d4:85:
e5:8f:df:cd:8e:90:90:3f:97:ad:29:50:33:b7:8d:
37:8e:da:ae:ef:a6:87:30:6f:74:2f:de:bb:0a:d7:
d7:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:A0:14:4A:44:79:73:99:14:34:AD:FB:40:AC:D8:9E:AD:71:97:7B
X509v3 Authority Key Identifier:
keyid:42:9F:E4:66:33:E4:D3:27:62:51:B3:B2:61:AF:72:7D:35:D4:DF:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qp_kZjPk0ydiUbOyYa9yfTXU3_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/fc4ed7-4e12-46ff-bf30-069dac119166/1/Qp_kZjPk0ydiUbOyYa9yfTXU3_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/fc4ed7-4e12-46ff-bf30-069dac119166/1/Qp_kZjPk0ydiUbOyYa9yfTXU3_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:e2:24:4a:38:d4:2f:8e:1a:7c:19:a2:9a:7d:b9:8f:c1:25:
a6:06:0c:79:19:21:1e:38:52:04:67:f7:c0:ff:8a:32:97:de:
59:62:cf:25:ca:27:ba:b4:2d:4d:7f:62:ed:5c:98:10:dd:5a:
b8:78:f4:76:00:ef:3a:1a:87:df:e0:f6:d7:7f:68:b4:fc:a4:
45:eb:6a:9b:08:ea:09:d4:d4:02:32:80:e0:10:de:a2:c0:d1:
59:4e:72:a3:ff:a2:c4:81:cb:b3:21:86:64:67:8a:b3:25:3d:
89:6b:c8:3b:77:cb:2e:87:3b:60:d4:46:10:a6:4b:26:43:17:
ee:d0:6c:5f:98:96:8a:cc:77:a5:7b:e2:7a:b2:25:03:48:4d:
7e:4f:48:8a:f6:58:74:69:58:32:92:81:0b:b9:5f:d6:8d:11:
36:3c:bb:2f:1c:d7:ee:3a:fc:0c:d0:6c:d5:de:fe:39:fc:76:
c3:59:52:1a:45:db:01:f6:f2:7f:2f:69:38:49:7d:17:7f:5e:
81:f4:72:5d:dd:8c:47:a8:af:09:02:b9:6b:b1:c9:23:fe:e8:
63:cf:2b:02:de:b6:4c:a6:c7:a9:7b:6d:0b:b8:c3:74:10:7a:
05:0f:3b:f2:cb:b4:5b:3d:20:91:b7:78:c7:e4:c3:ba:d7:30:
84:60:9d:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUQxypA2rKHqAB7R+g+dSEeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyOWZlNDY2MzNlNGQzMjc2MjUxYjNiMjYxYWY3MjdkMzVk
NGRmZmIwHhcNMjUwMjE2MjIwMDQyWhcNMjUwMjE3MjIwMDQyWjAzMTEwLwYDVQQD
Eyg1NWEwMTQ0YTQ0Nzk3Mzk5MTQzNGFkZmI0MGFjZDg5ZWFkNzE5NzdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA71/gADUFySfQf467WQp8zojmA989
J+dWF81kHyC+UlvHTx1CjJud33dnqCjDLe/eejZ1xcbzXgtq68lMb6+4wQP8IVh8
BBOJp4u4cz3QslMBizrJ+xXH0Cdm8aTCMyytH5B+kJqIWOmYXux6Cs+0jpmsfE7X
YYWXfyylQGPYFTn9egU72kLm0Iv9AHhPZSc5L7/tPV35so2mfqHk7Bne8hElxgHI
sI7v7BnCZKWUt+0K0YdlxjD4k/M5ZgWdFqB7Ok6kzTS6NuSb+YoSd47e+U1RS7uV
t1cS7VlTrZiD1IXlj9/NjpCQP5etKVAzt403jtqu76aHMG90L967CtfXgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFWgFEpEeXOZFDSt+0Cs2J6tcZd7MB8GA1UdIwQY
MBaAFEKf5GYz5NMnYlGzsmGvcn011N/7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXBfa1pqUGsweWRpVWJPeVlhOXlmVFhVM19zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9mYzRlZDctNGUxMi00NmZmLWJmMzAt
MDY5ZGFjMTE5MTY2LzEvUXBfa1pqUGsweWRpVWJPeVlhOXlmVFhVM19zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi9mYzRlZDctNGUxMi00NmZmLWJmMzAtMDY5ZGFjMTE5MTY2
LzEvUXBfa1pqUGsweWRpVWJPeVlhOXlmVFhVM19zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFeIkSjjU
L44afBmimn25j8ElpgYMeRkhHjhSBGf3wP+KMpfeWWLPJconurQtTX9i7VyYEN1a
uHj0dgDvOhqH3+D2139otPykRetqmwjqCdTUAjKA4BDeosDRWU5yo/+ixIHLsyGG
ZGeKsyU9iWvIO3fLLoc7YNRGEKZLJkMX7tBsX5iWisx3pXvierIlA0hNfk9IivZY
dGlYMpKBC7lf1o0RNjy7LxzX7jr8DNBs1d7+Ofx2w1lSGkXbAfbyfy9pOEl9F39e
gfRyXd2MR6ivCQK5a7HJI/7oY88rAt62TKbHqXttC7jDdBB6BQ878su0Wz0gkbd4
x+TDutcwhGCdBw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:52:17 2025 by rpki-client