![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/45c4fd-4294-4516-a74d-d6cd57287f9c/1/_IJp9C5GRBqx7ZlMifdHuqVU4yA.mft
File: _IJp9C5GRBqx7ZlMifdHuqVU4yA.mft (raw, json)
Hash identifier: n7U9VzjekuebjdHrQT7DvdXkx4UwkLSNdqgRuZ5UzBs=
Subject key identifier: 1A:79:34:E1:20:E9:32:6C:BB:14:60:DB:3F:28:DB:B4:B3:38:3C:59
Authority key identifier: FC:82:69:F4:2E:46:44:1A:B1:ED:99:4C:89:F7:47:BA:A5:54:E3:20
Certificate issuer: /CN=fc8269f42e46441ab1ed994c89f747baa554e320
Certificate serial: 0195127E772C82703631CC58C1C91E9C970F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_IJp9C5GRBqx7ZlMifdHuqVU4yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/45c4fd-4294-4516-a74d-d6cd57287f9c/1/_IJp9C5GRBqx7ZlMifdHuqVU4yA.mft
Manifest number: 1456
Signing time: Mon 17 Feb 2025 06:00:32 +0000
Manifest this update: Mon 17 Feb 2025 06:00:32 +0000
Manifest next update: Tue 18 Feb 2025 06:00:32 +0000
Files and hashes: 1: _IJp9C5GRBqx7ZlMifdHuqVU4yA.crl (hash: o4Qg61r0DqdbAjwvB9LEUGkyy0/Kfto2NdB6mDHXs04=)
2: eJpm7vOqN0K6_-N5ZvgNj0bJa14.roa (hash: ZjNNKQofgKq/YUnavRCCV2cjVOzm2yU0UKdAMKHM4p8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/45c4fd-4294-4516-a74d-d6cd57287f9c/1/_IJp9C5GRBqx7ZlMifdHuqVU4yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/45c4fd-4294-4516-a74d-d6cd57287f9c/1/_IJp9C5GRBqx7ZlMifdHuqVU4yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_IJp9C5GRBqx7ZlMifdHuqVU4yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:7e:77:2c:82:70:36:31:cc:58:c1:c9:1e:9c:97:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc8269f42e46441ab1ed994c89f747baa554e320
Validity
Not Before: Feb 17 06:00:32 2025 GMT
Not After : Feb 18 06:00:32 2025 GMT
Subject: CN=1a7934e120e9326cbb1460db3f28dbb4b3383c59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b9:7b:9a:20:5a:d7:7d:61:0f:bd:65:41:b8:
f7:9f:34:0a:60:e5:85:3c:1c:c5:ee:d9:9c:86:1b:
ca:44:f9:10:2c:fa:97:ff:98:fc:53:1c:75:68:9f:
bf:cc:a7:b9:07:20:67:31:ef:e4:07:55:d9:0a:07:
e1:cb:1c:5d:4b:3a:59:bf:d8:33:55:db:24:1d:3c:
de:f8:92:45:02:31:4d:2f:6d:2e:64:1e:22:c6:54:
c5:14:d2:01:ee:44:e0:c6:7e:f2:ea:ce:3d:cf:fc:
38:9b:7d:be:6d:71:8b:93:f2:06:b7:f5:17:48:3f:
c3:29:76:6f:f3:bc:90:ae:9c:e7:09:8f:9c:62:37:
04:96:d9:8a:85:e7:a5:61:35:1d:ab:c9:40:69:f7:
3c:af:0a:5f:1c:c2:95:2b:35:3b:83:4e:97:90:75:
10:f6:0c:e1:47:16:4f:a4:31:77:97:b7:ed:1e:69:
4f:77:02:ea:3e:3d:ab:df:e4:75:89:57:31:f5:e6:
64:04:1e:30:73:a3:16:60:00:68:76:18:ef:c5:3c:
fe:84:6b:a3:56:84:6c:53:ed:04:60:7d:38:b8:40:
3e:34:e1:11:71:b5:a8:47:3b:44:0e:08:52:7d:86:
d8:83:b2:f7:69:7d:76:09:f0:7f:7d:3c:cb:07:7a:
5c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:79:34:E1:20:E9:32:6C:BB:14:60:DB:3F:28:DB:B4:B3:38:3C:59
X509v3 Authority Key Identifier:
keyid:FC:82:69:F4:2E:46:44:1A:B1:ED:99:4C:89:F7:47:BA:A5:54:E3:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_IJp9C5GRBqx7ZlMifdHuqVU4yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/45c4fd-4294-4516-a74d-d6cd57287f9c/1/_IJp9C5GRBqx7ZlMifdHuqVU4yA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/45c4fd-4294-4516-a74d-d6cd57287f9c/1/_IJp9C5GRBqx7ZlMifdHuqVU4yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:36:90:bb:df:aa:ac:d9:2b:db:a4:0d:fb:af:d4:9c:d6:3b:
0c:ae:04:1b:3e:04:33:81:aa:55:ca:61:09:ab:8f:cf:90:f6:
b9:11:2a:06:6c:51:16:45:d2:5a:75:5b:20:df:87:86:4c:f8:
06:58:59:11:39:ae:9f:97:e9:18:b3:15:66:62:c4:46:74:87:
d8:a6:56:7f:28:a4:ae:fa:b2:ac:d4:7d:f8:2b:65:81:10:93:
8d:94:bb:27:bb:90:2b:00:9d:fc:2d:44:49:db:3f:2a:b0:fe:
53:c2:c8:8f:11:16:8f:6c:33:f5:32:a1:34:11:2a:b8:76:e1:
8d:96:0e:05:77:45:b6:eb:c5:81:18:95:45:93:e5:1e:21:bc:
b3:19:cd:2d:2c:44:db:0c:e1:46:f7:d9:2c:a0:39:d6:34:79:
92:bf:70:32:06:09:0b:b7:dc:d9:65:8a:2a:f1:b1:47:c9:bb:
7e:4d:0c:34:fa:06:d3:3d:1d:4e:30:b1:9d:82:3b:8c:30:69:
a1:0d:82:65:78:c3:e1:0d:92:66:dc:69:d9:38:48:89:ef:15:
5b:c9:1a:cc:b2:97:86:7b:49:28:da:48:a9:18:e9:b1:75:ad:
90:af:25:3a:5b:a3:f5:86:bb:87:6b:e9:ed:78:08:08:63:06:
19:f2:3c:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUSfncsgnA2McxYwckenJcPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjODI2OWY0MmU0NjQ0MWFiMWVkOTk0Yzg5Zjc0N2JhYTU1
NGUzMjAwHhcNMjUwMjE3MDYwMDMyWhcNMjUwMjE4MDYwMDMyWjAzMTEwLwYDVQQD
EygxYTc5MzRlMTIwZTkzMjZjYmIxNDYwZGIzZjI4ZGJiNGIzMzgzYzU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7l7miBa131hD71lQbj3nzQKYOWF
PBzF7tmchhvKRPkQLPqX/5j8Uxx1aJ+/zKe5ByBnMe/kB1XZCgfhyxxdSzpZv9gz
VdskHTze+JJFAjFNL20uZB4ixlTFFNIB7kTgxn7y6s49z/w4m32+bXGLk/IGt/UX
SD/DKXZv87yQrpznCY+cYjcEltmKheelYTUdq8lAafc8rwpfHMKVKzU7g06XkHUQ
9gzhRxZPpDF3l7ftHmlPdwLqPj2r3+R1iVcx9eZkBB4wc6MWYABodhjvxTz+hGuj
VoRsU+0EYH04uEA+NOERcbWoRztEDghSfYbYg7L3aX12CfB/fTzLB3pcsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBp5NOEg6TJsuxRg2z8o27SzODxZMB8GA1UdIwQY
MBaAFPyCafQuRkQase2ZTIn3R7qlVOMgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0lKcDlDNUdSQnF4N1psTWlmZEh1cVZVNHlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80NWM0ZmQtNDI5NC00NTE2LWE3NGQt
ZDZjZDU3Mjg3ZjljLzEvX0lKcDlDNUdSQnF4N1psTWlmZEh1cVZVNHlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC80NWM0ZmQtNDI5NC00NTE2LWE3NGQtZDZjZDU3Mjg3Zjlj
LzEvX0lKcDlDNUdSQnF4N1psTWlmZEh1cVZVNHlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxTaQu9+q
rNkr26QN+6/UnNY7DK4EGz4EM4GqVcphCauPz5D2uREqBmxRFkXSWnVbIN+Hhkz4
BlhZETmun5fpGLMVZmLERnSH2KZWfyikrvqyrNR9+CtlgRCTjZS7J7uQKwCd/C1E
Sds/KrD+U8LIjxEWj2wz9TKhNBEquHbhjZYOBXdFtuvFgRiVRZPlHiG8sxnNLSxE
2wzhRvfZLKA51jR5kr9wMgYJC7fc2WWKKvGxR8m7fk0MNPoG0z0dTjCxnYI7jDBp
oQ2CZXjD4Q2SZtxp2ThIie8VW8kazLKXhntJKNpIqRjpsXWtkK8lOluj9Ya7h2vp
7XgICGMGGfI8iA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:12:53 2025 by rpki-client