![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/596791-53cf-4d09-aeec-5e6cf96f70cb/1/6EKPwtpbZWN0nMuZd1d16CC3czw.mft
File: 6EKPwtpbZWN0nMuZd1d16CC3czw.mft (raw, json)
Hash identifier: WsBSarL+gG2fy1SxutiSVQGl4AWb+lbne1xYWdU4ns0=
Subject key identifier: 53:3B:FD:62:99:2C:E9:6E:29:60:AA:69:31:77:EB:DC:F4:DC:08:F8
Authority key identifier: E8:42:8F:C2:DA:5B:65:63:74:9C:CB:99:77:57:75:E8:20:B7:73:3C
Certificate issuer: /CN=e8428fc2da5b6563749ccb99775775e820b7733c
Certificate serial: 019511350DE53B5A6377E5B0E8A470917713
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6EKPwtpbZWN0nMuZd1d16CC3czw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/596791-53cf-4d09-aeec-5e6cf96f70cb/1/6EKPwtpbZWN0nMuZd1d16CC3czw.mft
Manifest number: 0E87
Signing time: Mon 17 Feb 2025 00:00:44 +0000
Manifest this update: Mon 17 Feb 2025 00:00:44 +0000
Manifest next update: Tue 18 Feb 2025 00:00:44 +0000
Files and hashes: 1: 6EKPwtpbZWN0nMuZd1d16CC3czw.crl (hash: BnEv2YDAaN49JFoGFdoU9JHKDd4ooiyYfH1FIWxHkyw=)
2: LFFuuAaPymw7mrLkEc1dJw_pneU.roa (hash: roCdm0ObDLqCzKMIH+P6b5BVl1CPDBPmD6VmUXfwJys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/596791-53cf-4d09-aeec-5e6cf96f70cb/1/6EKPwtpbZWN0nMuZd1d16CC3czw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/596791-53cf-4d09-aeec-5e6cf96f70cb/1/6EKPwtpbZWN0nMuZd1d16CC3czw.mft
rsync://rpki.ripe.net/repository/DEFAULT/6EKPwtpbZWN0nMuZd1d16CC3czw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:35:0d:e5:3b:5a:63:77:e5:b0:e8:a4:70:91:77:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8428fc2da5b6563749ccb99775775e820b7733c
Validity
Not Before: Feb 17 00:00:44 2025 GMT
Not After : Feb 18 00:00:44 2025 GMT
Subject: CN=533bfd62992ce96e2960aa693177ebdcf4dc08f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4d:0d:90:da:a4:34:10:b2:ff:f6:c8:b1:a0:
b6:12:1d:b9:dc:b6:d6:f5:04:4b:ae:26:a9:78:8b:
a9:da:65:70:90:3a:b5:de:98:e1:52:8b:1f:9a:05:
e5:ec:ef:e8:6d:a8:c0:94:ae:55:62:77:ad:03:46:
9b:a5:4e:5a:b4:3f:34:b6:7d:02:d9:82:3b:19:00:
25:46:f8:fb:10:7d:4c:1f:57:e2:62:83:70:f8:0a:
4b:35:13:11:9d:c0:00:8d:1f:02:74:8e:59:8b:a7:
59:90:87:3e:46:bb:18:89:a8:2b:4d:3e:e1:15:33:
03:e2:38:35:0a:3b:72:18:e7:9a:d8:77:8b:32:c0:
07:46:45:b6:22:5d:50:6b:0f:f9:18:2a:90:de:c8:
d0:4f:72:f8:14:3d:23:8c:ca:5d:76:93:88:85:3e:
c8:fe:85:77:1e:ff:ed:fe:f5:2d:9e:42:a5:e0:ca:
80:7d:82:0f:c3:2e:9d:07:96:02:59:42:6e:b6:4f:
88:12:3c:79:81:34:53:4c:0d:d4:e4:1a:1e:b4:7d:
ed:e6:44:a1:d4:0c:72:3f:90:18:5a:28:70:5a:0c:
ff:5f:de:a2:5d:d7:49:56:cd:88:56:2a:10:14:6f:
a8:59:b4:f1:0f:19:52:4b:18:89:6f:68:d8:cf:ed:
1b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:3B:FD:62:99:2C:E9:6E:29:60:AA:69:31:77:EB:DC:F4:DC:08:F8
X509v3 Authority Key Identifier:
keyid:E8:42:8F:C2:DA:5B:65:63:74:9C:CB:99:77:57:75:E8:20:B7:73:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EKPwtpbZWN0nMuZd1d16CC3czw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/596791-53cf-4d09-aeec-5e6cf96f70cb/1/6EKPwtpbZWN0nMuZd1d16CC3czw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/596791-53cf-4d09-aeec-5e6cf96f70cb/1/6EKPwtpbZWN0nMuZd1d16CC3czw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:8f:50:ee:45:14:45:78:5c:01:b8:29:f0:7f:df:75:ae:00:
23:05:8e:bc:60:95:91:37:de:08:1d:1c:de:8f:e0:74:99:80:
3b:e6:53:6c:35:97:35:72:92:b8:c3:5d:b1:db:b0:08:66:15:
16:87:ba:dc:48:72:49:d5:8a:48:2e:ce:7b:24:c7:01:a0:71:
e6:1f:2e:81:95:b9:7b:ad:00:b9:45:78:b4:e4:40:81:89:b5:
c6:5e:9b:b6:9b:c4:49:c6:d6:6f:5d:14:79:b7:c1:2d:68:c9:
5e:5c:40:85:ee:8c:9a:4a:b0:74:f8:51:02:0c:ea:54:88:ca:
d9:6c:f9:ac:60:bc:0e:70:35:76:6d:3a:8a:5f:3c:04:70:c7:
49:77:23:9f:21:de:72:20:b3:4e:26:a7:5c:1e:3f:87:70:39:
17:48:34:e1:5c:46:b2:c9:68:b5:ff:e2:12:65:77:e5:8a:74:
81:36:58:a3:69:39:21:07:60:49:ee:7c:59:e5:67:f4:c8:69:
00:2b:49:1e:0b:66:72:1e:13:6a:4f:25:e0:d4:77:23:88:34:
8f:86:46:43:15:3c:57:20:ba:2a:db:6c:93:70:38:15:be:4f:
4e:12:85:50:42:fb:7f:86:7a:cd:83:9d:b2:58:24:ad:80:7e:
c5:2c:b6:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURNQ3lO1pjd+Ww6KRwkXcTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4NDI4ZmMyZGE1YjY1NjM3NDljY2I5OTc3NTc3NWU4MjBi
NzczM2MwHhcNMjUwMjE3MDAwMDQ0WhcNMjUwMjE4MDAwMDQ0WjAzMTEwLwYDVQQD
Eyg1MzNiZmQ2Mjk5MmNlOTZlMjk2MGFhNjkzMTc3ZWJkY2Y0ZGMwOGY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqU0NkNqkNBCy//bIsaC2Eh253LbW
9QRLriapeIup2mVwkDq13pjhUosfmgXl7O/obajAlK5VYnetA0abpU5atD80tn0C
2YI7GQAlRvj7EH1MH1fiYoNw+ApLNRMRncAAjR8CdI5Zi6dZkIc+RrsYiagrTT7h
FTMD4jg1CjtyGOea2HeLMsAHRkW2Il1Qaw/5GCqQ3sjQT3L4FD0jjMpddpOIhT7I
/oV3Hv/t/vUtnkKl4MqAfYIPwy6dB5YCWUJutk+IEjx5gTRTTA3U5BoetH3t5kSh
1AxyP5AYWihwWgz/X96iXddJVs2IVioQFG+oWbTxDxlSSxiJb2jYz+0bXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFM7/WKZLOluKWCqaTF369z03Aj4MB8GA1UdIwQY
MBaAFOhCj8LaW2VjdJzLmXdXdeggt3M8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkVLUHd0cGJaV04wbk11WmQxZDE2Q0MzY3p3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy81OTY3OTEtNTNjZi00ZDA5LWFlZWMt
NWU2Y2Y5NmY3MGNiLzEvNkVLUHd0cGJaV04wbk11WmQxZDE2Q0MzY3p3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy81OTY3OTEtNTNjZi00ZDA5LWFlZWMtNWU2Y2Y5NmY3MGNi
LzEvNkVLUHd0cGJaV04wbk11WmQxZDE2Q0MzY3p3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdI9Q7kUU
RXhcAbgp8H/fda4AIwWOvGCVkTfeCB0c3o/gdJmAO+ZTbDWXNXKSuMNdsduwCGYV
Foe63EhySdWKSC7OeyTHAaBx5h8ugZW5e60AuUV4tORAgYm1xl6btpvEScbWb10U
ebfBLWjJXlxAhe6MmkqwdPhRAgzqVIjK2Wz5rGC8DnA1dm06il88BHDHSXcjnyHe
ciCzTianXB4/h3A5F0g04VxGsslotf/iEmV35Yp0gTZYo2k5IQdgSe58WeVn9Mhp
ACtJHgtmch4Tak8l4NR3I4g0j4ZGQxU8VyC6Kttsk3A4Fb5PThKFUEL7f4Z6zYOd
slgkrYB+xSy2BQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:26:14 2025 by rpki-client