![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/d31a90-dd8c-4800-b92d-94353fc9b2af/1/axJMeKp4A8OiPc1y0Nwa6uXe18w.mft
File: axJMeKp4A8OiPc1y0Nwa6uXe18w.mft (raw, json)
Hash identifier: X3kBpV/AV1soh2BmFjMDYVsFa9kTSmnLNVN3pKGb4h0=
Subject key identifier: 28:1B:51:0E:17:18:31:1B:23:9A:9F:9C:E8:9F:67:B4:94:A1:1C:CA
Authority key identifier: 6B:12:4C:78:AA:78:03:C3:A2:3D:CD:72:D0:DC:1A:EA:E5:DE:D7:CC
Certificate issuer: /CN=6b124c78aa7803c3a23dcd72d0dc1aeae5ded7cc
Certificate serial: 019511348E4C87A5C511320E97398A2380BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axJMeKp4A8OiPc1y0Nwa6uXe18w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/d31a90-dd8c-4800-b92d-94353fc9b2af/1/axJMeKp4A8OiPc1y0Nwa6uXe18w.mft
Manifest number: 1454
Signing time: Mon 17 Feb 2025 00:00:11 +0000
Manifest this update: Mon 17 Feb 2025 00:00:11 +0000
Manifest next update: Tue 18 Feb 2025 00:00:11 +0000
Files and hashes: 1: axJMeKp4A8OiPc1y0Nwa6uXe18w.crl (hash: vTuXGRE+6PZ5JmbE1of8XZd+3sWOdqv7mbXkW0CXvCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/d31a90-dd8c-4800-b92d-94353fc9b2af/1/axJMeKp4A8OiPc1y0Nwa6uXe18w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/d31a90-dd8c-4800-b92d-94353fc9b2af/1/axJMeKp4A8OiPc1y0Nwa6uXe18w.mft
rsync://rpki.ripe.net/repository/DEFAULT/axJMeKp4A8OiPc1y0Nwa6uXe18w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:8e:4c:87:a5:c5:11:32:0e:97:39:8a:23:80:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b124c78aa7803c3a23dcd72d0dc1aeae5ded7cc
Validity
Not Before: Feb 17 00:00:11 2025 GMT
Not After : Feb 18 00:00:11 2025 GMT
Subject: CN=281b510e1718311b239a9f9ce89f67b494a11cca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:75:46:f4:95:f8:eb:69:8b:1f:c2:e8:93:ee:
89:74:48:24:93:72:84:fa:dc:04:e3:92:85:c0:b4:
df:03:72:0d:cd:29:0d:4b:ba:5c:e6:67:a8:0a:24:
92:ce:f8:f0:9a:d9:7a:0c:31:6d:3c:75:7a:7b:f3:
06:cd:37:32:87:38:83:c5:ca:f2:80:54:4a:42:97:
81:62:28:94:55:6d:41:6e:82:37:64:23:1b:4c:5d:
81:c9:4e:a5:0d:99:c0:9d:82:0f:2d:c4:d7:53:9e:
f9:f0:25:5c:00:b6:b2:0a:73:7b:d5:b4:46:cd:48:
99:81:6f:81:9a:37:ad:70:7b:cc:90:84:48:34:ab:
c0:d4:db:fa:43:26:19:a0:c9:e9:35:c6:27:15:14:
00:74:13:48:2e:9d:5f:63:7a:1f:0d:14:5c:0b:79:
45:87:8d:b6:c0:89:f4:8a:16:71:99:52:d4:56:de:
e8:83:4f:ec:7f:41:70:2d:54:d3:d6:67:ad:44:39:
25:34:fe:3c:75:b7:f5:27:d2:b8:84:d8:45:c2:56:
f3:2f:af:fd:ab:82:11:b9:6b:87:c4:bd:28:8b:38:
8e:cd:c5:bf:47:d6:58:19:fd:3d:5a:3d:28:95:1c:
05:e6:3a:d2:da:af:31:34:59:61:d0:f5:1a:bd:2f:
e9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:1B:51:0E:17:18:31:1B:23:9A:9F:9C:E8:9F:67:B4:94:A1:1C:CA
X509v3 Authority Key Identifier:
keyid:6B:12:4C:78:AA:78:03:C3:A2:3D:CD:72:D0:DC:1A:EA:E5:DE:D7:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axJMeKp4A8OiPc1y0Nwa6uXe18w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d31a90-dd8c-4800-b92d-94353fc9b2af/1/axJMeKp4A8OiPc1y0Nwa6uXe18w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d31a90-dd8c-4800-b92d-94353fc9b2af/1/axJMeKp4A8OiPc1y0Nwa6uXe18w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:51:0f:5a:db:99:1d:47:97:e4:60:d6:fc:d9:4c:61:a5:9a:
d3:42:99:2d:2d:71:e9:0f:8c:17:7c:f7:59:e5:43:d6:8e:c8:
64:44:cb:ab:69:d9:89:9f:99:bd:f8:d0:1d:7c:46:9d:35:ff:
81:3f:cb:53:ba:19:fe:60:2e:c6:fd:37:2f:f5:ca:72:69:fc:
39:55:8d:9b:b8:16:2f:68:50:0b:62:2b:e7:76:f2:b2:25:6d:
9c:8c:e5:46:f7:a6:3d:19:ea:90:e1:36:d4:28:32:00:f9:b5:
ba:7c:07:47:4f:d1:79:6f:01:e6:4c:08:c2:03:56:d6:30:62:
7a:3a:04:5a:c2:f6:69:ed:5a:cd:78:92:b4:a7:47:e8:09:6c:
86:ad:a4:17:ed:84:6a:b9:11:90:19:a6:f1:f1:9b:9f:ee:81:
ac:d7:d7:17:25:ec:2b:14:31:a3:1f:1a:d1:c8:dc:3a:f7:b7:
b6:39:6d:4c:08:32:95:f6:f9:fc:79:45:c4:39:95:ea:62:82:
a7:0c:20:d5:96:24:86:1f:54:e4:09:a6:e0:df:07:4d:2c:a0:
bd:2f:4a:6a:cf:5b:b4:cd:f2:ff:17:a3:07:c7:aa:75:bf:81:
25:c2:f7:a7:ab:47:1c:c0:70:32:da:71:c8:6f:e0:6a:34:5b:
ad:3c:43:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURNI5Mh6XFETIOlzmKI4C9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiMTI0Yzc4YWE3ODAzYzNhMjNkY2Q3MmQwZGMxYWVhZTVk
ZWQ3Y2MwHhcNMjUwMjE3MDAwMDExWhcNMjUwMjE4MDAwMDExWjAzMTEwLwYDVQQD
EygyODFiNTEwZTE3MTgzMTFiMjM5YTlmOWNlODlmNjdiNDk0YTExY2NhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnVG9JX462mLH8Lok+6JdEgkk3KE
+twE45KFwLTfA3INzSkNS7pc5meoCiSSzvjwmtl6DDFtPHV6e/MGzTcyhziDxcry
gFRKQpeBYiiUVW1BboI3ZCMbTF2ByU6lDZnAnYIPLcTXU5758CVcALayCnN71bRG
zUiZgW+BmjetcHvMkIRINKvA1Nv6QyYZoMnpNcYnFRQAdBNILp1fY3ofDRRcC3lF
h422wIn0ihZxmVLUVt7og0/sf0FwLVTT1metRDklNP48dbf1J9K4hNhFwlbzL6/9
q4IRuWuHxL0oiziOzcW/R9ZYGf09Wj0olRwF5jrS2q8xNFlh0PUavS/pzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCgbUQ4XGDEbI5qfnOifZ7SUoRzKMB8GA1UdIwQY
MBaAFGsSTHiqeAPDoj3NctDcGurl3tfMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXhKTWVLcDRBOE9pUGMxeTBOd2E2dVhlMTh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9kMzFhOTAtZGQ4Yy00ODAwLWI5MmQt
OTQzNTNmYzliMmFmLzEvYXhKTWVLcDRBOE9pUGMxeTBOd2E2dVhlMTh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi9kMzFhOTAtZGQ4Yy00ODAwLWI5MmQtOTQzNTNmYzliMmFm
LzEvYXhKTWVLcDRBOE9pUGMxeTBOd2E2dVhlMTh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfVEPWtuZ
HUeX5GDW/NlMYaWa00KZLS1x6Q+MF3z3WeVD1o7IZETLq2nZiZ+ZvfjQHXxGnTX/
gT/LU7oZ/mAuxv03L/XKcmn8OVWNm7gWL2hQC2Ir53bysiVtnIzlRvemPRnqkOE2
1CgyAPm1unwHR0/ReW8B5kwIwgNW1jBiejoEWsL2ae1azXiStKdH6Alshq2kF+2E
arkRkBmm8fGbn+6BrNfXFyXsKxQxox8a0cjcOve3tjltTAgylfb5/HlFxDmV6mKC
pwwg1ZYkhh9U5Amm4N8HTSygvS9Kas9btM3y/xejB8eqdb+BJcL3p6tHHMBwMtpx
yG/gajRbrTxDxw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:01:07 2025 by rpki-client