![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/1b81e1-7188-4d9f-b4ef-83706378c576/1/fpCf6oHjmP7ZMEndegB-_WlzVWM.mft
File: fpCf6oHjmP7ZMEndegB-_WlzVWM.mft (raw, json)
Hash identifier: 15GjVwPdxQBifApbLBSzFu1CCAh0v4Aloxt3CaNZ9p0=
Subject key identifier: 25:CA:77:EB:76:36:66:D2:CE:60:74:85:03:FF:CE:FE:3C:F1:2F:2F
Authority key identifier: 7E:90:9F:EA:81:E3:98:FE:D9:30:49:DD:7A:00:7E:FD:69:73:55:63
Certificate issuer: /CN=7e909fea81e398fed93049dd7a007efd69735563
Certificate serial: 01951134A0B2401C8BFE08C7400F1944F486
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fpCf6oHjmP7ZMEndegB-_WlzVWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/1b81e1-7188-4d9f-b4ef-83706378c576/1/fpCf6oHjmP7ZMEndegB-_WlzVWM.mft
Manifest number: 0A49
Signing time: Mon 17 Feb 2025 00:00:16 +0000
Manifest this update: Mon 17 Feb 2025 00:00:16 +0000
Manifest next update: Tue 18 Feb 2025 00:00:16 +0000
Files and hashes: 1: WCe1OXd2fAiJz2bGRLY2dHMiVAs.roa (hash: XasTDlDBbIh1cL69G7L/yxnH5MsXPkwslxjCA22OVkQ=)
2: fpCf6oHjmP7ZMEndegB-_WlzVWM.crl (hash: g8TvkKASH1WLbUNeoL9s9E+cUn3nky0DMHKejlBM0qs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/1b81e1-7188-4d9f-b4ef-83706378c576/1/fpCf6oHjmP7ZMEndegB-_WlzVWM.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/1b81e1-7188-4d9f-b4ef-83706378c576/1/fpCf6oHjmP7ZMEndegB-_WlzVWM.mft
rsync://rpki.ripe.net/repository/DEFAULT/fpCf6oHjmP7ZMEndegB-_WlzVWM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:a0:b2:40:1c:8b:fe:08:c7:40:0f:19:44:f4:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e909fea81e398fed93049dd7a007efd69735563
Validity
Not Before: Feb 17 00:00:16 2025 GMT
Not After : Feb 18 00:00:16 2025 GMT
Subject: CN=25ca77eb763666d2ce60748503ffcefe3cf12f2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:cd:59:c3:d5:d8:88:52:9f:90:93:19:5f:20:
2c:5d:a1:d8:f2:02:d2:ec:37:73:45:82:78:9d:9b:
22:f9:78:62:96:c7:01:39:f9:c3:6c:71:00:6e:9f:
cc:ec:6e:6b:8e:c2:b4:3c:dd:e9:5c:cc:a7:55:80:
1e:6d:25:7d:99:bf:39:d4:cb:15:32:41:71:fc:e2:
3b:8b:92:bd:ad:29:25:2a:57:6f:1c:9c:b9:76:18:
59:c4:77:17:7f:92:25:4e:6a:f7:1e:d8:a7:b6:c8:
48:32:39:95:b1:9d:29:ba:fa:56:b5:05:e9:29:e8:
6e:cc:e3:4f:46:30:3f:45:d6:c2:8c:af:8e:e3:c6:
e0:04:df:34:ca:6b:60:79:5f:2d:9c:a9:b5:db:38:
0e:6e:3c:31:34:ac:6d:6e:10:49:42:98:95:28:83:
db:55:c1:d2:67:f9:eb:1a:90:c2:27:ee:fc:ea:48:
7b:ef:a5:53:2e:2a:49:a6:06:df:d8:87:d1:a2:07:
a7:5a:b0:2c:49:cd:36:ff:97:f5:e0:d7:fa:00:f4:
a7:84:c8:8b:8e:cd:3f:ac:6c:7b:ce:c3:f8:37:98:
11:16:16:cf:5d:0b:b2:b8:21:b2:37:dd:c1:c1:0e:
de:e0:90:10:b9:93:b2:fe:ba:7b:78:2c:07:19:f9:
62:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:CA:77:EB:76:36:66:D2:CE:60:74:85:03:FF:CE:FE:3C:F1:2F:2F
X509v3 Authority Key Identifier:
keyid:7E:90:9F:EA:81:E3:98:FE:D9:30:49:DD:7A:00:7E:FD:69:73:55:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fpCf6oHjmP7ZMEndegB-_WlzVWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/1b81e1-7188-4d9f-b4ef-83706378c576/1/fpCf6oHjmP7ZMEndegB-_WlzVWM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/1b81e1-7188-4d9f-b4ef-83706378c576/1/fpCf6oHjmP7ZMEndegB-_WlzVWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:5f:a0:dd:3b:d3:4e:1f:9f:f2:a4:d4:b3:8d:44:8f:d7:2b:
ed:c5:a1:56:57:7d:ad:8f:dd:85:49:01:1c:a3:05:0a:64:fb:
78:f7:c7:b9:12:09:40:b0:39:72:1e:f5:6b:cd:f3:70:0d:4b:
db:07:54:22:77:18:12:f6:c5:36:18:c0:3b:0a:40:1a:d9:1a:
6a:c2:76:4b:7b:ff:72:8f:9d:cf:e1:2c:84:21:bd:bf:45:b2:
59:25:b4:37:7a:4c:a1:00:4f:a4:59:de:35:d6:4c:48:d1:56:
81:6a:54:f0:78:c3:5a:c5:f3:62:10:69:1d:13:12:58:0e:24:
b4:3b:63:6e:54:96:e1:a1:1b:e3:8f:b5:44:57:32:35:2e:af:
69:24:33:ac:23:07:b4:ea:b9:7e:53:79:70:ff:d1:1a:09:26:
84:d2:0b:22:53:d1:1d:ba:01:ae:fb:ca:21:51:dc:0e:89:6a:
c4:59:d0:a9:f4:bf:98:f2:b3:8b:de:08:dd:57:ee:3b:3a:5e:
9d:c6:f9:31:bc:7e:fb:c4:c8:3e:fc:6f:95:ba:a2:58:98:1b:
07:cb:cb:56:e1:9d:06:18:3b:2d:13:e2:b4:29:08:73:79:53:
45:ba:e5:9a:01:d0:5e:41:a2:93:5b:b2:62:b3:37:00:f2:0f:
60:0c:7f:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURNKCyQByL/gjHQA8ZRPSGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlOTA5ZmVhODFlMzk4ZmVkOTMwNDlkZDdhMDA3ZWZkNjk3
MzU1NjMwHhcNMjUwMjE3MDAwMDE2WhcNMjUwMjE4MDAwMDE2WjAzMTEwLwYDVQQD
EygyNWNhNzdlYjc2MzY2NmQyY2U2MDc0ODUwM2ZmY2VmZTNjZjEyZjJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArc1Zw9XYiFKfkJMZXyAsXaHY8gLS
7DdzRYJ4nZsi+XhilscBOfnDbHEAbp/M7G5rjsK0PN3pXMynVYAebSV9mb851MsV
MkFx/OI7i5K9rSklKldvHJy5dhhZxHcXf5IlTmr3HtintshIMjmVsZ0puvpWtQXp
KehuzONPRjA/RdbCjK+O48bgBN80ymtgeV8tnKm12zgObjwxNKxtbhBJQpiVKIPb
VcHSZ/nrGpDCJ+786kh776VTLipJpgbf2IfRogenWrAsSc02/5f14Nf6APSnhMiL
js0/rGx7zsP4N5gRFhbPXQuyuCGyN93BwQ7e4JAQuZOy/rp7eCwHGfliQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCXKd+t2NmbSzmB0hQP/zv488S8vMB8GA1UdIwQY
MBaAFH6Qn+qB45j+2TBJ3XoAfv1pc1VjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnBDZjZvSGptUDdaTUVuZGVnQi1fV2x6VldNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS8xYjgxZTEtNzE4OC00ZDlmLWI0ZWYt
ODM3MDYzNzhjNTc2LzEvZnBDZjZvSGptUDdaTUVuZGVnQi1fV2x6VldNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS8xYjgxZTEtNzE4OC00ZDlmLWI0ZWYtODM3MDYzNzhjNTc2
LzEvZnBDZjZvSGptUDdaTUVuZGVnQi1fV2x6VldNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIV+g3TvT
Th+f8qTUs41Ej9cr7cWhVld9rY/dhUkBHKMFCmT7ePfHuRIJQLA5ch71a83zcA1L
2wdUIncYEvbFNhjAOwpAGtkaasJ2S3v/co+dz+EshCG9v0WyWSW0N3pMoQBPpFne
NdZMSNFWgWpU8HjDWsXzYhBpHRMSWA4ktDtjblSW4aEb44+1RFcyNS6vaSQzrCMH
tOq5flN5cP/RGgkmhNILIlPRHboBrvvKIVHcDolqxFnQqfS/mPKzi94I3VfuOzpe
ncb5Mbx++8TIPvxvlbqiWJgbB8vLVuGdBhg7LRPitCkIc3lTRbrlmgHQXkGik1uy
YrM3APIPYAx/Qg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:16:44 2025 by rpki-client