![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.mft
File: 0OLajokWkOcem4WVCX2nxgZNpgI.mft (raw, json)
Hash identifier: 7UcyntI2xGVCYOwnheOQiG4lqMlF4MN7Typ+iO4hfI8=
Subject key identifier: C5:4B:7D:90:74:4E:29:1C:13:AB:54:A7:94:55:F7:B2:FB:C9:DB:8A
Authority key identifier: D0:E2:DA:8E:89:16:90:E7:1E:9B:85:95:09:7D:A7:C6:06:4D:A6:02
Certificate issuer: /CN=d0e2da8e891690e71e9b8595097da7c6064da602
Certificate serial: 019510FDDB28D5C8B9BC0F2DC5BE32074532
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0OLajokWkOcem4WVCX2nxgZNpgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.mft
Manifest number: 02C6
Signing time: Sun 16 Feb 2025 23:00:26 +0000
Manifest this update: Sun 16 Feb 2025 23:00:26 +0000
Manifest next update: Mon 17 Feb 2025 23:00:26 +0000
Files and hashes: 1: 0OLajokWkOcem4WVCX2nxgZNpgI.crl (hash: KJcxCoJs2sMAzba3EqzdBxONUiq2USMWy5pdEhzA6UM=)
2: 1-G5CHegTogIfJOzVSZ12ruOsd1A.roa (hash: WZqBI8pDVZog2pYstlONiupHgRaN9/CPeYVUUMcxtjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0OLajokWkOcem4WVCX2nxgZNpgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fd:db:28:d5:c8:b9:bc:0f:2d:c5:be:32:07:45:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0e2da8e891690e71e9b8595097da7c6064da602
Validity
Not Before: Feb 16 23:00:26 2025 GMT
Not After : Feb 17 23:00:26 2025 GMT
Subject: CN=c54b7d90744e291c13ab54a79455f7b2fbc9db8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f7:e0:08:2c:9c:cf:60:0d:04:d9:7e:c1:b9:
44:58:5c:ff:b1:80:25:ce:6c:26:a7:1e:69:34:3b:
45:de:83:78:de:a7:02:2b:ab:a7:07:9f:96:a5:41:
83:c5:cc:03:c8:31:0b:b1:31:97:7d:ed:91:b4:cf:
33:2f:53:b2:ff:d0:a2:bb:bc:48:73:92:de:58:37:
50:a1:03:61:19:55:1a:7c:d0:4f:be:e5:40:87:e7:
5d:f2:1d:66:ed:21:9a:04:19:cc:b3:2b:86:fc:f9:
e7:a6:17:21:1a:eb:4b:75:9d:09:55:5d:75:7e:bd:
3b:cb:a9:b4:3f:c8:28:d6:03:33:1c:d8:50:c8:5a:
35:10:7f:5b:c7:a2:55:01:e0:c7:35:b8:80:71:9f:
93:79:af:dd:aa:8a:79:26:ce:09:b8:10:19:3a:3b:
44:0a:a9:ba:ff:03:c8:5d:00:57:c3:34:44:d4:9b:
7a:a5:1d:06:1b:94:e5:5f:3a:5a:66:13:fb:39:2d:
f7:68:e7:ea:87:17:27:be:78:a3:be:c0:8d:ee:90:
90:32:46:a5:30:c6:45:10:bb:ad:d7:51:5a:6c:c1:
d7:7c:76:31:7f:a2:f9:ea:01:50:5c:23:42:46:f4:
69:8e:7c:41:09:71:c9:18:16:ed:f1:dc:4b:b1:57:
56:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:4B:7D:90:74:4E:29:1C:13:AB:54:A7:94:55:F7:B2:FB:C9:DB:8A
X509v3 Authority Key Identifier:
keyid:D0:E2:DA:8E:89:16:90:E7:1E:9B:85:95:09:7D:A7:C6:06:4D:A6:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0OLajokWkOcem4WVCX2nxgZNpgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:08:1d:83:31:6d:3a:3d:76:46:16:c3:36:72:11:e8:cb:7c:
c1:03:6e:54:4b:00:89:e3:cc:e7:ca:e9:0f:34:cb:0c:71:e5:
c3:90:63:cc:2c:d1:6f:9b:c7:6d:e7:93:35:12:e2:c2:c7:9a:
35:79:d0:58:2d:42:6c:c3:cb:05:6f:56:16:cb:40:26:bd:17:
59:b0:09:ae:2d:58:b9:b7:bd:82:dc:0e:a5:23:a3:a0:61:e2:
64:09:df:57:ca:8c:52:02:7f:03:cb:db:3b:f0:d8:99:24:f2:
37:4b:47:f1:db:92:d6:a0:08:ba:ff:fb:52:f5:b5:b0:59:a0:
9e:71:52:a3:d0:94:af:43:70:94:e5:b3:84:a9:cb:72:60:47:
9c:36:32:b5:e5:72:48:fa:8c:e9:bb:fc:3f:09:4c:d1:e0:87:
b1:8d:b2:0e:26:4f:33:1d:99:c8:a0:0c:4a:ac:26:df:90:ce:
c4:0d:9b:7c:20:ea:c5:00:62:e8:0e:22:9d:3d:fe:c0:5f:60:
8f:e6:45:0c:70:c9:cf:55:59:bd:a7:33:95:cb:8f:f8:f1:8d:
de:19:25:d2:21:92:a3:51:cf:69:b7:2a:81:db:4e:50:a8:ae:
ed:c5:d9:ff:5f:5e:49:65:11:66:96:6e:d6:f3:5d:ec:18:1c:
44:47:22:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUQ/dso1ci5vA8txb4yB0UyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwZTJkYThlODkxNjkwZTcxZTliODU5NTA5N2RhN2M2MDY0
ZGE2MDIwHhcNMjUwMjE2MjMwMDI2WhcNMjUwMjE3MjMwMDI2WjAzMTEwLwYDVQQD
EyhjNTRiN2Q5MDc0NGUyOTFjMTNhYjU0YTc5NDU1ZjdiMmZiYzlkYjhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiffgCCycz2ANBNl+wblEWFz/sYAl
zmwmpx5pNDtF3oN43qcCK6unB5+WpUGDxcwDyDELsTGXfe2RtM8zL1Oy/9Ciu7xI
c5LeWDdQoQNhGVUafNBPvuVAh+dd8h1m7SGaBBnMsyuG/PnnphchGutLdZ0JVV11
fr07y6m0P8go1gMzHNhQyFo1EH9bx6JVAeDHNbiAcZ+Tea/dqop5Js4JuBAZOjtE
Cqm6/wPIXQBXwzRE1Jt6pR0GG5TlXzpaZhP7OS33aOfqhxcnvnijvsCN7pCQMkal
MMZFELut11FabMHXfHYxf6L56gFQXCNCRvRpjnxBCXHJGBbt8dxLsVdWCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMVLfZB0TikcE6tUp5RV97L7yduKMB8GA1UdIwQY
MBaAFNDi2o6JFpDnHpuFlQl9p8YGTaYCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvME9MYWpva1drT2NlbTRXVkNYMm54Z1pOcGdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9mMDZlMmMtOTdiNy00NjI4LThiNjkt
ZWMyZmJhZmU0ZDkxLzEvME9MYWpva1drT2NlbTRXVkNYMm54Z1pOcGdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC9mMDZlMmMtOTdiNy00NjI4LThiNjktZWMyZmJhZmU0ZDkx
LzEvME9MYWpva1drT2NlbTRXVkNYMm54Z1pOcGdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWggdgzFt
Oj12RhbDNnIR6Mt8wQNuVEsAiePM58rpDzTLDHHlw5BjzCzRb5vHbeeTNRLiwsea
NXnQWC1CbMPLBW9WFstAJr0XWbAJri1Yube9gtwOpSOjoGHiZAnfV8qMUgJ/A8vb
O/DYmSTyN0tH8duS1qAIuv/7UvW1sFmgnnFSo9CUr0NwlOWzhKnLcmBHnDYyteVy
SPqM6bv8PwlM0eCHsY2yDiZPMx2ZyKAMSqwm35DOxA2bfCDqxQBi6A4inT3+wF9g
j+ZFDHDJz1VZvaczlcuP+PGN3hkl0iGSo1HPabcqgdtOUKiu7cXZ/19eSWURZpZu
1vNd7BgcREciVQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:45:37 2025 by rpki-client