![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/30e7cf-b4b8-4272-87ab-4c2fbdd56279/1/kkMni6ptm9TkNnEE4aCxhMufstw.mft
File: kkMni6ptm9TkNnEE4aCxhMufstw.mft (raw, json)
Hash identifier: /mBmspza6kBsQNumqgGYKIaQdH7ry5kEHasBKr5443o=
Subject key identifier: FA:EC:9E:E7:2F:14:3C:7E:B3:DA:F9:E3:FE:F7:16:BB:9A:46:15:B7
Authority key identifier: 92:43:27:8B:AA:6D:9B:D4:E4:36:71:04:E1:A0:B1:84:CB:9F:B2:DC
Certificate issuer: /CN=9243278baa6d9bd4e4367104e1a0b184cb9fb2dc
Certificate serial: 0195108FEEF03D6B1ADFD53359FC6193922B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkMni6ptm9TkNnEE4aCxhMufstw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/30e7cf-b4b8-4272-87ab-4c2fbdd56279/1/kkMni6ptm9TkNnEE4aCxhMufstw.mft
Manifest number: 1181
Signing time: Sun 16 Feb 2025 21:00:23 +0000
Manifest this update: Sun 16 Feb 2025 21:00:23 +0000
Manifest next update: Mon 17 Feb 2025 21:00:23 +0000
Files and hashes: 1: ZLIGk0OBNpgWvIEPM3FW64TyV6Q.roa (hash: tIZYbv9uO1ydifZNyOm/4u1qZclQNJ4gcOxn8zCiU24=)
2: kkMni6ptm9TkNnEE4aCxhMufstw.crl (hash: XFRm9LDZUa1/9XZozpEm/2DJUB8zFbftwIk5sWBZMyY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/30e7cf-b4b8-4272-87ab-4c2fbdd56279/1/kkMni6ptm9TkNnEE4aCxhMufstw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/30e7cf-b4b8-4272-87ab-4c2fbdd56279/1/kkMni6ptm9TkNnEE4aCxhMufstw.mft
rsync://rpki.ripe.net/repository/DEFAULT/kkMni6ptm9TkNnEE4aCxhMufstw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 21:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:8f:ee:f0:3d:6b:1a:df:d5:33:59:fc:61:93:92:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9243278baa6d9bd4e4367104e1a0b184cb9fb2dc
Validity
Not Before: Feb 16 21:00:23 2025 GMT
Not After : Feb 17 21:00:23 2025 GMT
Subject: CN=faec9ee72f143c7eb3daf9e3fef716bb9a4615b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c7:4c:d2:a8:30:9f:41:a9:5f:95:46:7d:73:
4c:84:0c:01:44:9c:f8:9d:bf:26:8b:61:ca:2b:a4:
ed:50:0a:04:ae:57:ce:c0:46:e7:3e:58:df:68:6b:
d6:d8:b9:62:a1:5b:88:d4:c7:45:5d:7d:ac:5f:f9:
f4:04:c1:be:50:05:1d:17:8e:56:4d:9f:9b:7e:30:
d1:c2:41:f0:c0:05:ab:e6:5c:90:a7:e2:2c:79:27:
2f:b1:09:72:a7:c3:1a:4d:c1:90:fc:05:1e:2c:d4:
2b:8b:51:6a:19:04:60:04:f6:c5:85:22:5f:5e:9c:
69:11:24:10:c4:90:f7:2b:8d:86:04:48:e1:f2:fd:
c4:29:76:67:fa:b7:46:fb:2a:59:c4:6e:df:a0:5d:
78:02:80:b0:0b:bb:d1:05:88:5d:19:7b:07:6b:b7:
46:95:27:d7:3c:d6:c5:e5:76:e6:de:bf:de:98:86:
65:eb:20:ab:3c:83:47:c8:4b:d1:fe:d6:b4:df:39:
e1:e8:c4:b4:1d:4f:6a:c4:a3:72:ff:b7:de:d0:e7:
c0:3d:aa:69:a3:c1:28:cf:de:41:4e:3f:51:f0:f3:
dd:f2:81:22:c7:72:f5:35:3f:cd:f8:e6:ce:82:51:
a8:e2:e7:43:a6:3c:2b:1b:4d:3d:11:bf:99:07:69:
3b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:EC:9E:E7:2F:14:3C:7E:B3:DA:F9:E3:FE:F7:16:BB:9A:46:15:B7
X509v3 Authority Key Identifier:
keyid:92:43:27:8B:AA:6D:9B:D4:E4:36:71:04:E1:A0:B1:84:CB:9F:B2:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkMni6ptm9TkNnEE4aCxhMufstw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/30e7cf-b4b8-4272-87ab-4c2fbdd56279/1/kkMni6ptm9TkNnEE4aCxhMufstw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/30e7cf-b4b8-4272-87ab-4c2fbdd56279/1/kkMni6ptm9TkNnEE4aCxhMufstw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:91:1c:0c:82:d3:27:75:23:d5:8f:24:bd:de:4f:64:ef:25:
8d:d3:76:fb:e4:35:5d:f1:8e:95:1a:c9:81:a5:e0:23:d3:06:
3c:4d:c0:60:ff:9a:a9:2f:1e:48:59:10:f9:d1:67:a0:8d:4a:
51:5a:62:1f:c9:9e:ac:76:23:4d:51:d8:91:a8:a3:7c:43:3b:
94:fa:c4:a6:af:93:db:cc:a3:ef:34:35:3e:ef:fa:d4:4b:6d:
7f:37:89:34:56:f1:58:af:83:31:23:22:12:3c:33:06:94:af:
e3:4e:e4:fc:76:87:6a:f9:dd:e8:d4:7c:3e:c7:9d:9b:09:33:
0d:c4:45:46:87:af:88:d8:f1:7c:eb:7f:f8:25:4d:88:82:d2:
3b:1f:f2:6a:9d:b8:47:94:35:13:91:54:18:0d:07:7d:4d:ac:
24:b5:82:66:65:cf:bd:61:6c:1d:70:bc:cb:52:ec:5c:1f:2f:
01:cc:7d:5f:29:79:52:74:3a:f5:ea:1b:9c:ee:bf:54:7b:52:
46:64:99:20:eb:c0:e4:9a:e2:45:5c:b5:4b:ee:21:3a:6d:80:
fc:20:8c:3e:b7:0d:97:9b:b0:cb:59:66:58:3a:09:5d:4b:ec:
1a:ec:36:fc:73:c4:ed:f7:88:8f:08:c9:35:41:2b:c2:98:d9:
94:a6:bc:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUQj+7wPWsa39UzWfxhk5IrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyNDMyNzhiYWE2ZDliZDRlNDM2NzEwNGUxYTBiMTg0Y2I5
ZmIyZGMwHhcNMjUwMjE2MjEwMDIzWhcNMjUwMjE3MjEwMDIzWjAzMTEwLwYDVQQD
EyhmYWVjOWVlNzJmMTQzYzdlYjNkYWY5ZTNmZWY3MTZiYjlhNDYxNWI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8dM0qgwn0GpX5VGfXNMhAwBRJz4
nb8mi2HKK6TtUAoErlfOwEbnPljfaGvW2LlioVuI1MdFXX2sX/n0BMG+UAUdF45W
TZ+bfjDRwkHwwAWr5lyQp+IseScvsQlyp8MaTcGQ/AUeLNQri1FqGQRgBPbFhSJf
XpxpESQQxJD3K42GBEjh8v3EKXZn+rdG+ypZxG7foF14AoCwC7vRBYhdGXsHa7dG
lSfXPNbF5Xbm3r/emIZl6yCrPINHyEvR/ta03znh6MS0HU9qxKNy/7fe0OfAPapp
o8Eoz95BTj9R8PPd8oEix3L1NT/N+ObOglGo4udDpjwrG009Eb+ZB2k7NQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPrsnucvFDx+s9r54/73FruaRhW3MB8GA1UdIwQY
MBaAFJJDJ4uqbZvU5DZxBOGgsYTLn7LcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2tNbmk2cHRtOVRrTm5FRTRhQ3hoTXVmc3R3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8zMGU3Y2YtYjRiOC00MjcyLTg3YWIt
NGMyZmJkZDU2Mjc5LzEva2tNbmk2cHRtOVRrTm5FRTRhQ3hoTXVmc3R3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS8zMGU3Y2YtYjRiOC00MjcyLTg3YWItNGMyZmJkZDU2Mjc5
LzEva2tNbmk2cHRtOVRrTm5FRTRhQ3hoTXVmc3R3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiZEcDILT
J3Uj1Y8kvd5PZO8ljdN2++Q1XfGOlRrJgaXgI9MGPE3AYP+aqS8eSFkQ+dFnoI1K
UVpiH8merHYjTVHYkaijfEM7lPrEpq+T28yj7zQ1Pu/61EttfzeJNFbxWK+DMSMi
EjwzBpSv407k/HaHavnd6NR8PsedmwkzDcRFRoeviNjxfOt/+CVNiILSOx/yap24
R5Q1E5FUGA0HfU2sJLWCZmXPvWFsHXC8y1LsXB8vAcx9Xyl5UnQ69eobnO6/VHtS
RmSZIOvA5JriRVy1S+4hOm2A/CCMPrcNl5uwy1lmWDoJXUvsGuw2/HPE7feIjwjJ
NUErwpjZlKa8oA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:12:16 2025 by rpki-client