![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/9864ff-6341-4004-ab6d-0f3b9c05de45/1/6zZ3mxOux4Cw1Df4REqw9EOgXdA.mft
File: 6zZ3mxOux4Cw1Df4REqw9EOgXdA.mft (raw, json)
Hash identifier: xDEBF8qFoKZEmqT/oZILoZsxRWWZxi4ko+PoFFq7bow=
Subject key identifier: 5C:1A:D9:92:60:6B:44:9D:B8:12:B2:39:41:F0:F9:42:54:70:50:1A
Authority key identifier: EB:36:77:9B:13:AE:C7:80:B0:D4:37:F8:44:4A:B0:F4:43:A0:5D:D0
Certificate issuer: /CN=eb36779b13aec780b0d437f8444ab0f443a05dd0
Certificate serial: 019511A2B4DC496245814AFD10968C6DA445
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zZ3mxOux4Cw1Df4REqw9EOgXdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/9864ff-6341-4004-ab6d-0f3b9c05de45/1/6zZ3mxOux4Cw1Df4REqw9EOgXdA.mft
Manifest number: 0D57
Signing time: Mon 17 Feb 2025 02:00:30 +0000
Manifest this update: Mon 17 Feb 2025 02:00:30 +0000
Manifest next update: Tue 18 Feb 2025 02:00:30 +0000
Files and hashes: 1: 6zZ3mxOux4Cw1Df4REqw9EOgXdA.crl (hash: H7KaUbO/8BTI1Z6zOah1gyhuqgZNODnn6hJEh/wmDOw=)
2: bbiCAC8k2CawpBPgM6fTMAmYAY0.roa (hash: FIWbsZ3JZZD2fluaVWFHhluHhUwUg7ek5YY8fTNR7Ow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/9864ff-6341-4004-ab6d-0f3b9c05de45/1/6zZ3mxOux4Cw1Df4REqw9EOgXdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/9864ff-6341-4004-ab6d-0f3b9c05de45/1/6zZ3mxOux4Cw1Df4REqw9EOgXdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/6zZ3mxOux4Cw1Df4REqw9EOgXdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:b4:dc:49:62:45:81:4a:fd:10:96:8c:6d:a4:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb36779b13aec780b0d437f8444ab0f443a05dd0
Validity
Not Before: Feb 17 02:00:30 2025 GMT
Not After : Feb 18 02:00:30 2025 GMT
Subject: CN=5c1ad992606b449db812b23941f0f9425470501a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:b3:5f:99:ac:0b:86:76:2f:ef:24:49:93:3c:
36:d7:53:a1:83:78:11:4c:06:c9:d6:4f:83:94:8b:
bd:cc:f9:dd:d0:22:0a:e0:b4:c3:91:88:5b:1c:98:
06:df:a7:2d:99:21:6f:bb:b3:bb:80:0e:20:eb:85:
af:7a:a9:48:50:9c:e9:02:20:ca:dc:06:95:03:a4:
d1:7e:39:9e:65:5e:61:ca:d4:f3:a4:ab:93:1b:22:
07:35:4b:e1:19:d9:e8:0c:27:2b:e7:ac:a0:d5:b3:
bb:b3:5d:5e:6b:52:a3:ce:d5:28:8e:4d:70:29:ae:
10:0a:2d:2d:38:c0:4f:d3:d1:65:77:f5:ed:60:cd:
a3:9d:a5:04:3f:e0:22:9d:7a:6b:72:13:f1:3d:25:
01:f6:62:69:53:11:d4:03:6e:6f:e2:0c:be:7d:92:
49:f0:ea:0c:38:d0:72:9a:69:36:5a:ab:5d:4a:de:
c1:c9:f8:3e:b0:a3:82:5d:b3:0e:b1:11:3e:56:12:
5d:6c:69:f1:b7:21:7b:2c:7d:ca:f4:1f:6a:d3:40:
71:64:93:1f:b9:82:cc:fa:ef:eb:e8:fb:66:ca:13:
7a:b6:7d:6f:91:41:c2:d0:d6:de:b9:99:f7:46:6e:
38:53:22:ec:6b:3c:23:4e:64:93:1a:04:c6:2d:93:
c3:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:1A:D9:92:60:6B:44:9D:B8:12:B2:39:41:F0:F9:42:54:70:50:1A
X509v3 Authority Key Identifier:
keyid:EB:36:77:9B:13:AE:C7:80:B0:D4:37:F8:44:4A:B0:F4:43:A0:5D:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zZ3mxOux4Cw1Df4REqw9EOgXdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9864ff-6341-4004-ab6d-0f3b9c05de45/1/6zZ3mxOux4Cw1Df4REqw9EOgXdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9864ff-6341-4004-ab6d-0f3b9c05de45/1/6zZ3mxOux4Cw1Df4REqw9EOgXdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:91:22:15:7f:bd:02:b6:0a:cf:f1:68:1c:34:2c:ca:7b:ed:
9c:50:20:42:f8:3c:6a:40:be:58:52:81:dc:6b:5c:f4:7b:dd:
2c:03:0f:c3:5d:16:da:a7:c8:d8:30:91:73:31:56:cf:09:2c:
d5:7c:1c:87:61:23:a5:e1:14:43:ee:9c:72:6f:89:5f:6a:35:
29:db:27:19:36:dc:b0:ae:e3:4c:6e:e7:d3:44:d2:8c:df:a9:
aa:91:90:ac:3c:fb:2f:1f:ed:50:24:52:c5:6d:d8:12:d1:0e:
08:d3:e1:4b:dd:25:f3:0d:33:ec:f0:91:b7:bb:52:7c:ee:8c:
c8:dc:27:be:2b:7f:f4:5f:19:93:87:71:94:55:01:4f:cb:8c:
af:40:b8:93:54:b9:86:84:ba:0f:e8:0a:c9:f9:d8:e2:ea:13:
55:8d:f1:2e:5a:7f:60:55:c0:48:89:81:19:81:ee:63:e3:93:
81:46:a5:25:91:d6:83:bd:1f:a9:fd:3d:1c:9c:38:a4:8f:56:
62:82:64:c2:81:c7:46:16:75:e5:fe:ef:8f:65:0d:65:4d:07:
6c:36:ed:0d:47:49:2c:75:69:4a:7f:a3:7c:8f:ca:1a:2b:7a:
2e:48:07:55:f4:6f:f9:53:fc:75:79:27:6f:20:16:33:4f:7d:
22:bf:20:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURorTcSWJFgUr9EJaMbaRFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViMzY3NzliMTNhZWM3ODBiMGQ0MzdmODQ0NGFiMGY0NDNh
MDVkZDAwHhcNMjUwMjE3MDIwMDMwWhcNMjUwMjE4MDIwMDMwWjAzMTEwLwYDVQQD
Eyg1YzFhZDk5MjYwNmI0NDlkYjgxMmIyMzk0MWYwZjk0MjU0NzA1MDFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6bNfmawLhnYv7yRJkzw211Ohg3gR
TAbJ1k+DlIu9zPnd0CIK4LTDkYhbHJgG36ctmSFvu7O7gA4g64WveqlIUJzpAiDK
3AaVA6TRfjmeZV5hytTzpKuTGyIHNUvhGdnoDCcr56yg1bO7s11ea1KjztUojk1w
Ka4QCi0tOMBP09Fld/XtYM2jnaUEP+AinXprchPxPSUB9mJpUxHUA25v4gy+fZJJ
8OoMONBymmk2WqtdSt7Byfg+sKOCXbMOsRE+VhJdbGnxtyF7LH3K9B9q00BxZJMf
uYLM+u/r6PtmyhN6tn1vkUHC0NbeuZn3Rm44UyLsazwjTmSTGgTGLZPDUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFwa2ZJga0SduBKyOUHw+UJUcFAaMB8GA1UdIwQY
MBaAFOs2d5sTrseAsNQ3+ERKsPRDoF3QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnpaM214T3V4NEN3MURmNFJFcXc5RU9nWGRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC85ODY0ZmYtNjM0MS00MDA0LWFiNmQt
MGYzYjljMDVkZTQ1LzEvNnpaM214T3V4NEN3MURmNFJFcXc5RU9nWGRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC85ODY0ZmYtNjM0MS00MDA0LWFiNmQtMGYzYjljMDVkZTQ1
LzEvNnpaM214T3V4NEN3MURmNFJFcXc5RU9nWGRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeJEiFX+9
ArYKz/FoHDQsynvtnFAgQvg8akC+WFKB3Gtc9HvdLAMPw10W2qfI2DCRczFWzwks
1Xwch2EjpeEUQ+6ccm+JX2o1KdsnGTbcsK7jTG7n00TSjN+pqpGQrDz7Lx/tUCRS
xW3YEtEOCNPhS90l8w0z7PCRt7tSfO6MyNwnvit/9F8Zk4dxlFUBT8uMr0C4k1S5
hoS6D+gKyfnY4uoTVY3xLlp/YFXASImBGYHuY+OTgUalJZHWg70fqf09HJw4pI9W
YoJkwoHHRhZ15f7vj2UNZU0HbDbtDUdJLHVpSn+jfI/KGit6LkgHVfRv+VP8dXkn
byAWM099Ir8gaw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:13:16 2025 by rpki-client