![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/493a6d-bd94-4af6-b562-e174aeb1dfad/1/7DY9SPPeihkcuHZyYDLyWF-gZw8.mft
File: 7DY9SPPeihkcuHZyYDLyWF-gZw8.mft (raw, json)
Hash identifier: a8egx6A/o0NgMX2tZ2+Qdmc0HjrJWvWF1Lu0hFGlZfQ=
Subject key identifier: F0:B6:CE:88:FA:DE:A2:F5:07:5A:94:FB:59:28:8F:F0:3C:13:4C:8A
Authority key identifier: EC:36:3D:48:F3:DE:8A:19:1C:B8:76:72:60:32:F2:58:5F:A0:67:0F
Certificate issuer: /CN=ec363d48f3de8a191cb876726032f2585fa0670f
Certificate serial: 019510C76E4AAEA45540689C135DB317C2A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7DY9SPPeihkcuHZyYDLyWF-gZw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/493a6d-bd94-4af6-b562-e174aeb1dfad/1/7DY9SPPeihkcuHZyYDLyWF-gZw8.mft
Manifest number: 0A12
Signing time: Sun 16 Feb 2025 22:00:59 +0000
Manifest this update: Sun 16 Feb 2025 22:00:59 +0000
Manifest next update: Mon 17 Feb 2025 22:00:59 +0000
Files and hashes: 1: 7DY9SPPeihkcuHZyYDLyWF-gZw8.crl (hash: Q2UaZucqcoGIRIgWFhVTdPsnRQfpnD12Iy4/RFV2WG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/493a6d-bd94-4af6-b562-e174aeb1dfad/1/7DY9SPPeihkcuHZyYDLyWF-gZw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/493a6d-bd94-4af6-b562-e174aeb1dfad/1/7DY9SPPeihkcuHZyYDLyWF-gZw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/7DY9SPPeihkcuHZyYDLyWF-gZw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:6e:4a:ae:a4:55:40:68:9c:13:5d:b3:17:c2:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec363d48f3de8a191cb876726032f2585fa0670f
Validity
Not Before: Feb 16 22:00:59 2025 GMT
Not After : Feb 17 22:00:59 2025 GMT
Subject: CN=f0b6ce88fadea2f5075a94fb59288ff03c134c8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:54:b4:da:4f:6e:f2:0d:fc:b0:74:be:5c:01:
d4:3e:39:0b:f6:7e:5c:53:36:2f:c3:45:e0:49:9e:
3a:e5:8c:1e:45:78:e2:51:9a:04:c5:62:3e:2d:09:
ae:74:c1:a0:6b:20:8f:c6:a6:4a:b5:a2:c6:ea:a2:
3b:68:f6:56:33:40:c4:07:df:23:b8:fb:4f:2b:18:
17:40:6f:3b:4b:4b:b9:82:0b:08:10:f8:c5:00:6d:
a2:21:84:67:e9:79:61:e5:cf:2b:15:ea:ee:50:ad:
25:e0:7a:9c:1d:d2:13:f6:1a:41:fe:6f:bc:77:93:
03:b2:60:a5:86:1c:e0:3c:dc:21:d6:23:aa:16:80:
fa:71:25:a6:5c:f6:a0:08:33:12:3f:2f:79:41:68:
9b:fc:f5:0f:ba:55:aa:c3:0f:9d:0b:01:02:e2:8c:
76:48:c3:af:75:23:0f:3a:af:4a:2f:5a:d2:76:a6:
cb:6a:ea:81:cb:c3:66:11:f4:b0:0e:70:1b:77:26:
d7:b2:fe:55:15:ec:f0:f4:81:f7:fa:e9:4b:e4:62:
ff:02:10:1f:bb:45:19:62:df:ff:68:e7:a2:78:11:
4f:df:d0:87:e1:3c:ef:66:21:4c:1d:bc:b1:ed:ef:
94:2f:75:a7:cf:8c:5e:d5:94:27:40:ed:09:4d:4b:
c9:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:B6:CE:88:FA:DE:A2:F5:07:5A:94:FB:59:28:8F:F0:3C:13:4C:8A
X509v3 Authority Key Identifier:
keyid:EC:36:3D:48:F3:DE:8A:19:1C:B8:76:72:60:32:F2:58:5F:A0:67:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7DY9SPPeihkcuHZyYDLyWF-gZw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/493a6d-bd94-4af6-b562-e174aeb1dfad/1/7DY9SPPeihkcuHZyYDLyWF-gZw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/493a6d-bd94-4af6-b562-e174aeb1dfad/1/7DY9SPPeihkcuHZyYDLyWF-gZw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:6d:91:29:3e:05:94:74:49:f6:c9:04:58:92:e0:62:86:5b:
8e:eb:4c:ba:dc:d8:8c:74:a7:ce:ea:1a:93:69:5e:15:ea:d1:
60:0d:0b:75:49:6e:30:4b:2d:ff:b6:26:f0:80:61:e7:d7:43:
ac:c3:d4:39:5d:8c:66:ae:a9:c2:7d:26:e7:ba:b6:72:86:95:
cb:9b:48:38:3c:0e:00:90:16:bd:e6:5a:2c:2b:f8:36:f5:9a:
30:ad:f4:48:ba:9d:8e:78:0b:c4:bf:24:a6:87:ff:7a:4c:f8:
82:79:2e:33:8b:08:9e:d5:dd:ca:ee:e8:a0:0b:de:18:d4:79:
5c:50:40:d9:9c:fa:34:1a:0e:a1:27:d4:8f:67:30:69:64:9e:
6e:88:f5:59:24:9f:1e:a5:db:07:d5:36:63:9b:e0:ad:4f:fd:
8e:d4:e9:8a:16:f8:85:ee:4e:a1:c1:c8:5e:35:c2:ab:13:56:
b5:e4:b1:db:12:6e:30:ce:05:94:02:57:d6:c9:f9:4c:a6:3d:
da:08:28:32:f6:f1:fd:d0:df:e5:2a:08:72:85:43:ed:e7:ba:
f5:4b:93:15:80:a6:41:97:b8:a8:2c:c6:03:e6:18:f5:05:da:
11:db:32:b4:90:1a:3e:21:52:b8:cc:db:cc:f0:b6:e3:ef:88:
38:5c:01:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUQx25KrqRVQGicE12zF8KkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjMzYzZDQ4ZjNkZThhMTkxY2I4NzY3MjYwMzJmMjU4NWZh
MDY3MGYwHhcNMjUwMjE2MjIwMDU5WhcNMjUwMjE3MjIwMDU5WjAzMTEwLwYDVQQD
EyhmMGI2Y2U4OGZhZGVhMmY1MDc1YTk0ZmI1OTI4OGZmMDNjMTM0YzhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2FS02k9u8g38sHS+XAHUPjkL9n5c
UzYvw0XgSZ465YweRXjiUZoExWI+LQmudMGgayCPxqZKtaLG6qI7aPZWM0DEB98j
uPtPKxgXQG87S0u5ggsIEPjFAG2iIYRn6Xlh5c8rFeruUK0l4HqcHdIT9hpB/m+8
d5MDsmClhhzgPNwh1iOqFoD6cSWmXPagCDMSPy95QWib/PUPulWqww+dCwEC4ox2
SMOvdSMPOq9KL1rSdqbLauqBy8NmEfSwDnAbdybXsv5VFezw9IH3+ulL5GL/AhAf
u0UZYt//aOeieBFP39CH4TzvZiFMHbyx7e+UL3Wnz4xe1ZQnQO0JTUvJ/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPC2zoj63qL1B1qU+1koj/A8E0yKMB8GA1UdIwQY
MBaAFOw2PUjz3ooZHLh2cmAy8lhfoGcPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0RZOVNQUGVpaGtjdUhaeVlETHlXRi1nWnc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi80OTNhNmQtYmQ5NC00YWY2LWI1NjIt
ZTE3NGFlYjFkZmFkLzEvN0RZOVNQUGVpaGtjdUhaeVlETHlXRi1nWnc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi80OTNhNmQtYmQ5NC00YWY2LWI1NjItZTE3NGFlYjFkZmFk
LzEvN0RZOVNQUGVpaGtjdUhaeVlETHlXRi1nWnc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhG2RKT4F
lHRJ9skEWJLgYoZbjutMutzYjHSnzuoak2leFerRYA0LdUluMEst/7Ym8IBh59dD
rMPUOV2MZq6pwn0m57q2coaVy5tIODwOAJAWveZaLCv4NvWaMK30SLqdjngLxL8k
pof/ekz4gnkuM4sIntXdyu7ooAveGNR5XFBA2Zz6NBoOoSfUj2cwaWSeboj1WSSf
HqXbB9U2Y5vgrU/9jtTpihb4he5OocHIXjXCqxNWteSx2xJuMM4FlAJX1sn5TKY9
2ggoMvbx/dDf5SoIcoVD7ee69UuTFYCmQZe4qCzGA+YY9QXaEdsytJAaPiFSuMzb
zPC24++IOFwBMA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:07:59 2025 by rpki-client