![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/864fe2-0478-4381-8320-bedafb0922dd/1/ilX0iZwkbRdUoWiC0OdoB-uOK14.mft
File: ilX0iZwkbRdUoWiC0OdoB-uOK14.mft (raw, json)
Hash identifier: s+eAD4RQnn0iXgtVVBCu4wQvVXeQF9opl0WZiKtAdVA=
Subject key identifier: FC:AE:25:F6:44:92:7F:72:8D:79:3B:88:68:A9:DD:D0:D8:B1:78:10
Authority key identifier: 8A:55:F4:89:9C:24:6D:17:54:A1:68:82:D0:E7:68:07:EB:8E:2B:5E
Certificate issuer: /CN=8a55f4899c246d1754a16882d0e76807eb8e2b5e
Certificate serial: 019510C6F1A146775FFBE8D6A654858BDAE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilX0iZwkbRdUoWiC0OdoB-uOK14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/864fe2-0478-4381-8320-bedafb0922dd/1/ilX0iZwkbRdUoWiC0OdoB-uOK14.mft
Manifest number: 0E50
Signing time: Sun 16 Feb 2025 22:00:28 +0000
Manifest this update: Sun 16 Feb 2025 22:00:28 +0000
Manifest next update: Mon 17 Feb 2025 22:00:28 +0000
Files and hashes: 1: ilX0iZwkbRdUoWiC0OdoB-uOK14.crl (hash: 9bsxePLxRhe7bUknpMuZYc/VaGOC0cuNsj5UMIVeBe4=)
2: yZL-h7CMMZ_jCkqOUWXzTNR83Ls.roa (hash: 6I7n0xCvQ3FC2MV2Pqk6KjdQE1M7SQrxGUU9YrmgwbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/864fe2-0478-4381-8320-bedafb0922dd/1/ilX0iZwkbRdUoWiC0OdoB-uOK14.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/864fe2-0478-4381-8320-bedafb0922dd/1/ilX0iZwkbRdUoWiC0OdoB-uOK14.mft
rsync://rpki.ripe.net/repository/DEFAULT/ilX0iZwkbRdUoWiC0OdoB-uOK14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c6:f1:a1:46:77:5f:fb:e8:d6:a6:54:85:8b:da:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a55f4899c246d1754a16882d0e76807eb8e2b5e
Validity
Not Before: Feb 16 22:00:28 2025 GMT
Not After : Feb 17 22:00:28 2025 GMT
Subject: CN=fcae25f644927f728d793b8868a9ddd0d8b17810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5b:e2:e9:77:a3:75:6f:5a:f9:c2:9c:98:f5:
55:bc:f8:dc:0d:3c:c7:2b:25:c9:99:33:dd:f9:e4:
1b:58:1a:8e:f2:23:26:15:e6:eb:f3:ed:5f:6a:ee:
10:e2:3e:09:1c:a4:6a:00:9b:e6:3d:4a:09:1d:87:
4b:63:90:0f:61:21:09:86:98:66:af:4a:35:0f:a2:
1b:b7:43:65:9a:74:35:58:46:a5:ad:c0:ea:bd:14:
53:bd:c9:d6:f5:0f:37:76:a3:fd:2f:24:00:2c:bc:
4e:13:38:00:27:ca:9b:4e:42:e6:97:3e:c9:c1:ba:
be:cf:78:f2:ea:02:bb:60:d2:d5:e9:a6:d8:7b:df:
04:64:4e:97:2a:98:0b:09:b9:31:76:5e:2d:96:c3:
74:c1:0d:b9:ea:c8:fb:f5:2c:cb:07:5c:59:08:6b:
72:cf:18:7b:6d:65:20:fb:d9:e6:5d:1d:ba:7d:2f:
ba:69:18:18:fb:0c:b5:be:44:67:2d:71:b0:36:14:
0d:b4:41:1c:96:56:b9:e4:21:4a:de:a2:5f:b5:ab:
af:87:80:64:41:56:3c:5f:5e:6f:8d:2b:5d:bc:8a:
5f:43:bc:db:21:7e:90:72:2d:95:10:8a:70:05:3d:
52:bd:8f:20:4a:cc:18:ca:00:91:fd:db:08:10:a1:
8f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:AE:25:F6:44:92:7F:72:8D:79:3B:88:68:A9:DD:D0:D8:B1:78:10
X509v3 Authority Key Identifier:
keyid:8A:55:F4:89:9C:24:6D:17:54:A1:68:82:D0:E7:68:07:EB:8E:2B:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilX0iZwkbRdUoWiC0OdoB-uOK14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/864fe2-0478-4381-8320-bedafb0922dd/1/ilX0iZwkbRdUoWiC0OdoB-uOK14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/864fe2-0478-4381-8320-bedafb0922dd/1/ilX0iZwkbRdUoWiC0OdoB-uOK14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:97:d4:da:9d:f8:62:08:50:b0:c9:ae:86:fa:03:97:90:7b:
fc:b0:b3:c9:69:01:10:89:e1:cf:a2:93:ac:04:a4:7a:21:9f:
e0:7b:fc:4f:d2:18:06:5b:89:9f:f0:66:04:00:04:b8:38:dc:
d8:2a:00:15:09:ad:ea:e2:36:2b:7a:ac:d7:66:67:c4:de:48:
6d:96:43:47:6f:cb:f1:a2:1f:24:3c:94:72:18:79:67:5b:0b:
8c:84:bc:ff:70:3d:cb:1b:6a:19:b7:22:47:db:f0:9b:72:ab:
61:7d:17:e8:24:35:b0:6d:47:65:f1:6d:ce:8d:95:53:64:63:
4a:0d:2e:88:ff:a6:2c:a9:38:83:bb:6e:ea:e5:4b:39:02:94:
00:8d:68:47:6a:89:4d:84:0a:b6:c7:37:4f:cd:68:74:33:c7:
2c:29:82:29:f8:cf:c2:2f:9e:8a:c5:a8:28:fd:6d:b9:cd:d7:
57:37:3c:1b:7b:7d:b5:bd:e4:5e:c7:eb:c2:71:48:c3:d6:ac:
2d:df:7a:df:24:d4:c2:cc:9f:4f:62:74:cd:a2:24:94:41:3b:
19:ad:3f:ea:61:5b:fd:83:e5:af:b2:69:f9:6f:34:55:cc:cf:
18:88:08:87:0e:81:6d:ec:0e:ff:a5:ae:94:c2:46:f7:d2:88:
8e:dc:48:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUQxvGhRndf++jWplSFi9rmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhNTVmNDg5OWMyNDZkMTc1NGExNjg4MmQwZTc2ODA3ZWI4
ZTJiNWUwHhcNMjUwMjE2MjIwMDI4WhcNMjUwMjE3MjIwMDI4WjAzMTEwLwYDVQQD
EyhmY2FlMjVmNjQ0OTI3ZjcyOGQ3OTNiODg2OGE5ZGRkMGQ4YjE3ODEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVvi6XejdW9a+cKcmPVVvPjcDTzH
KyXJmTPd+eQbWBqO8iMmFebr8+1fau4Q4j4JHKRqAJvmPUoJHYdLY5APYSEJhphm
r0o1D6Ibt0NlmnQ1WEalrcDqvRRTvcnW9Q83dqP9LyQALLxOEzgAJ8qbTkLmlz7J
wbq+z3jy6gK7YNLV6abYe98EZE6XKpgLCbkxdl4tlsN0wQ256sj79SzLB1xZCGty
zxh7bWUg+9nmXR26fS+6aRgY+wy1vkRnLXGwNhQNtEEclla55CFK3qJftauvh4Bk
QVY8X15vjStdvIpfQ7zbIX6Qci2VEIpwBT1SvY8gSswYygCR/dsIEKGPtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPyuJfZEkn9yjXk7iGip3dDYsXgQMB8GA1UdIwQY
MBaAFIpV9ImcJG0XVKFogtDnaAfrjiteMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWxYMGlad2tiUmRVb1dpQzBPZG9CLXVPSzE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi84NjRmZTItMDQ3OC00MzgxLTgzMjAt
YmVkYWZiMDkyMmRkLzEvaWxYMGlad2tiUmRVb1dpQzBPZG9CLXVPSzE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi84NjRmZTItMDQ3OC00MzgxLTgzMjAtYmVkYWZiMDkyMmRk
LzEvaWxYMGlad2tiUmRVb1dpQzBPZG9CLXVPSzE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ5fU2p34
YghQsMmuhvoDl5B7/LCzyWkBEInhz6KTrASkeiGf4Hv8T9IYBluJn/BmBAAEuDjc
2CoAFQmt6uI2K3qs12ZnxN5IbZZDR2/L8aIfJDyUchh5Z1sLjIS8/3A9yxtqGbci
R9vwm3KrYX0X6CQ1sG1HZfFtzo2VU2RjSg0uiP+mLKk4g7tu6uVLOQKUAI1oR2qJ
TYQKtsc3T81odDPHLCmCKfjPwi+eisWoKP1tuc3XVzc8G3t9tb3kXsfrwnFIw9as
Ld963yTUwsyfT2J0zaIklEE7Ga0/6mFb/YPlr7Jp+W80VczPGIgIhw6BbewO/6Wu
lMJG99KIjtxIpA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:14:20 2025 by rpki-client