![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/21f016-8fc3-443a-b3eb-228d2fe6ca7f/1/RBme-tyIgD3BoGVhD2R8_c4w9UE.mft
File: RBme-tyIgD3BoGVhD2R8_c4w9UE.mft (raw, json)
Hash identifier: GtTRIfyHsJdqIsXYIijl62OTmLk3vPMHjtCifPHNeiM=
Subject key identifier: 7B:36:8B:47:84:41:3F:29:3A:4E:A3:70:E3:27:FF:75:B0:4A:C2:88
Authority key identifier: 44:19:9E:FA:DC:88:80:3D:C1:A0:65:61:0F:64:7C:FD:CE:30:F5:41
Certificate issuer: /CN=44199efadc88803dc1a065610f647cfdce30f541
Certificate serial: 01951134DF07E4B0E30EDC3BE388AEF17429
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RBme-tyIgD3BoGVhD2R8_c4w9UE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/21f016-8fc3-443a-b3eb-228d2fe6ca7f/1/RBme-tyIgD3BoGVhD2R8_c4w9UE.mft
Manifest number: 1453
Signing time: Mon 17 Feb 2025 00:00:32 +0000
Manifest this update: Mon 17 Feb 2025 00:00:32 +0000
Manifest next update: Tue 18 Feb 2025 00:00:32 +0000
Files and hashes: 1: RBme-tyIgD3BoGVhD2R8_c4w9UE.crl (hash: Iywr8LZY3M99JOcESf6ofGd9M9f3HYdqUVR1j2n/o78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/21f016-8fc3-443a-b3eb-228d2fe6ca7f/1/RBme-tyIgD3BoGVhD2R8_c4w9UE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/21f016-8fc3-443a-b3eb-228d2fe6ca7f/1/RBme-tyIgD3BoGVhD2R8_c4w9UE.mft
rsync://rpki.ripe.net/repository/DEFAULT/RBme-tyIgD3BoGVhD2R8_c4w9UE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:df:07:e4:b0:e3:0e:dc:3b:e3:88:ae:f1:74:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44199efadc88803dc1a065610f647cfdce30f541
Validity
Not Before: Feb 17 00:00:32 2025 GMT
Not After : Feb 18 00:00:32 2025 GMT
Subject: CN=7b368b4784413f293a4ea370e327ff75b04ac288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:e7:a2:5a:18:b7:74:f9:5f:7d:6e:ca:c1:01:
48:13:00:e9:b1:01:c7:35:0a:58:6e:e9:15:c1:18:
4f:da:0b:79:f8:bd:31:1f:81:ca:3e:ee:0e:22:20:
87:b0:98:97:3b:14:28:d7:1e:96:31:59:01:ee:f6:
53:e5:3d:78:78:f0:21:bf:b5:c9:9f:04:ad:94:c5:
ed:71:ff:06:bf:b7:a9:1f:6b:75:ed:a1:77:c5:a5:
62:5a:60:df:4e:be:5a:b0:96:f7:99:9f:7b:49:31:
ce:bf:e2:5d:9b:9f:62:ab:58:74:c5:76:4c:d6:61:
66:7f:78:f4:4e:cf:f3:69:bf:3d:ac:4b:f5:29:bd:
0c:0f:00:e1:29:4a:a4:08:a2:9c:4f:e3:ca:c2:bd:
38:83:34:f3:af:5a:76:10:2e:3b:81:8b:d1:14:0f:
50:41:49:f4:08:eb:ca:03:72:fb:51:d5:cc:ea:31:
1e:f1:a3:cd:31:dc:b3:f7:9b:f2:da:53:7a:22:f7:
ab:fd:3f:e4:69:d6:82:3e:26:0a:a1:c2:34:2b:e3:
3b:73:c2:41:5b:8e:b3:ed:ac:db:5e:d3:0b:23:55:
18:4e:45:fc:34:bb:24:e2:0e:37:d5:79:fe:00:4d:
33:03:f9:94:da:13:04:72:7f:bc:25:27:ec:f9:df:
c8:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:36:8B:47:84:41:3F:29:3A:4E:A3:70:E3:27:FF:75:B0:4A:C2:88
X509v3 Authority Key Identifier:
keyid:44:19:9E:FA:DC:88:80:3D:C1:A0:65:61:0F:64:7C:FD:CE:30:F5:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RBme-tyIgD3BoGVhD2R8_c4w9UE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/21f016-8fc3-443a-b3eb-228d2fe6ca7f/1/RBme-tyIgD3BoGVhD2R8_c4w9UE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/21f016-8fc3-443a-b3eb-228d2fe6ca7f/1/RBme-tyIgD3BoGVhD2R8_c4w9UE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:e5:81:42:d4:59:eb:db:b6:1b:d0:0b:ba:75:be:0a:c6:b1:
18:e9:57:c7:49:b4:a7:e1:da:c6:86:b9:77:fb:48:2a:bb:e8:
8c:b0:98:ec:d4:a0:f4:c9:15:a4:7d:3d:30:35:36:4a:c8:8f:
2d:d6:b7:3b:79:9b:c7:8e:35:19:da:e7:d5:98:9f:95:d5:5c:
9a:f8:07:6a:2b:a0:b2:01:ff:91:9a:d9:8f:84:a0:1c:a7:14:
65:fd:84:77:d4:c2:f9:b7:40:a9:28:ce:07:1d:2a:43:21:86:
02:fd:4d:d6:fb:c2:f1:a7:8f:d2:fd:69:b6:91:2f:f2:56:77:
b3:8e:13:45:da:0b:f0:97:3f:1b:c2:cb:5e:b1:83:48:ab:7e:
77:b0:17:fd:fb:e1:ae:46:d2:d4:02:95:3d:48:c9:a8:d9:b7:
f5:31:49:7f:85:bf:54:cd:4d:0d:1c:6e:d3:10:c9:4f:28:28:
db:49:84:4f:02:7e:92:18:b5:15:e5:f4:f7:af:ae:49:72:f6:
ec:83:55:54:a3:33:81:49:6f:5b:0f:1b:e2:16:49:61:66:e0:
53:60:ad:4a:71:c6:28:d9:dd:96:82:6e:b9:26:e9:ef:d2:2f:
b8:9c:b5:25:58:f0:70:53:1c:93:ea:f8:6e:ae:74:b8:e7:2b:
e8:03:c3:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURNN8H5LDjDtw744iu8XQpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0MTk5ZWZhZGM4ODgwM2RjMWEwNjU2MTBmNjQ3Y2ZkY2Uz
MGY1NDEwHhcNMjUwMjE3MDAwMDMyWhcNMjUwMjE4MDAwMDMyWjAzMTEwLwYDVQQD
Eyg3YjM2OGI0Nzg0NDEzZjI5M2E0ZWEzNzBlMzI3ZmY3NWIwNGFjMjg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiOeiWhi3dPlffW7KwQFIEwDpsQHH
NQpYbukVwRhP2gt5+L0xH4HKPu4OIiCHsJiXOxQo1x6WMVkB7vZT5T14ePAhv7XJ
nwStlMXtcf8Gv7epH2t17aF3xaViWmDfTr5asJb3mZ97STHOv+Jdm59iq1h0xXZM
1mFmf3j0Ts/zab89rEv1Kb0MDwDhKUqkCKKcT+PKwr04gzTzr1p2EC47gYvRFA9Q
QUn0COvKA3L7UdXM6jEe8aPNMdyz95vy2lN6Iver/T/kadaCPiYKocI0K+M7c8JB
W46z7azbXtMLI1UYTkX8NLsk4g431Xn+AE0zA/mU2hMEcn+8JSfs+d/InQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHs2i0eEQT8pOk6jcOMn/3WwSsKIMB8GA1UdIwQY
MBaAFEQZnvrciIA9waBlYQ9kfP3OMPVBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkJtZS10eUlnRDNCb0dWaEQyUjhfYzR3OVVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi8yMWYwMTYtOGZjMy00NDNhLWIzZWIt
MjI4ZDJmZTZjYTdmLzEvUkJtZS10eUlnRDNCb0dWaEQyUjhfYzR3OVVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi8yMWYwMTYtOGZjMy00NDNhLWIzZWItMjI4ZDJmZTZjYTdm
LzEvUkJtZS10eUlnRDNCb0dWaEQyUjhfYzR3OVVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjeWBQtRZ
69u2G9ALunW+CsaxGOlXx0m0p+Haxoa5d/tIKrvojLCY7NSg9MkVpH09MDU2SsiP
Lda3O3mbx441Gdrn1ZifldVcmvgHaiugsgH/kZrZj4SgHKcUZf2Ed9TC+bdAqSjO
Bx0qQyGGAv1N1vvC8aeP0v1ptpEv8lZ3s44TRdoL8Jc/G8LLXrGDSKt+d7AX/fvh
rkbS1AKVPUjJqNm39TFJf4W/VM1NDRxu0xDJTygo20mETwJ+khi1FeX096+uSXL2
7INVVKMzgUlvWw8b4hZJYWbgU2CtSnHGKNndloJuuSbp79IvuJy1JVjwcFMck+r4
bq50uOcr6APDhQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:13:46 2025 by rpki-client