![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.mft
File: OgQpta7KyDZFRL9iP5TxY6_c5WE.mft (raw, json)
Hash identifier: BB5wZa6LhfZIhTMVXjpjIqOfaAG8tyg9VHnTpc3lGpQ=
Subject key identifier: 67:E1:F6:6F:FC:0E:67:6F:B6:06:59:01:6C:F5:2C:17:F3:EF:85:5C
Authority key identifier: 3A:04:29:B5:AE:CA:C8:36:45:44:BF:62:3F:94:F1:63:AF:DC:E5:61
Certificate issuer: /CN=3a0429b5aecac8364544bf623f94f163afdce561
Certificate serial: 01951134C7DA495A485470CA38E8E7E89FA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgQpta7KyDZFRL9iP5TxY6_c5WE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.mft
Manifest number: 0683
Signing time: Mon 17 Feb 2025 00:00:26 +0000
Manifest this update: Mon 17 Feb 2025 00:00:26 +0000
Manifest next update: Tue 18 Feb 2025 00:00:26 +0000
Files and hashes: 1: OgQpta7KyDZFRL9iP5TxY6_c5WE.crl (hash: k1+4Wgm3X0przufOtkq9VFIs/pEyfHnecfiQ6aFZ6Ts=)
2: QLu-t4-kWwjTWD2HUVQ3JUjA93E.roa (hash: wwPcnLN7UsFWJVqWb0xH9PzsYRh1MZUdzN16ZynKLqU=)
3: X9-z3qhXpej4BCNHXlOlwIoxiSI.roa (hash: +XeMFApgKN+wHjuGvI8Wb1xE1s+7UuhIUkYxW35SfdA=)
4: hwkpF7GCiN1Fi1Bf-G_kcCT7lXg.roa (hash: owUDYc5hXMNAaSpXWFyOh6YRLado21xVEXGeqVIdneY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OgQpta7KyDZFRL9iP5TxY6_c5WE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:c7:da:49:5a:48:54:70:ca:38:e8:e7:e8:9f:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a0429b5aecac8364544bf623f94f163afdce561
Validity
Not Before: Feb 17 00:00:26 2025 GMT
Not After : Feb 18 00:00:26 2025 GMT
Subject: CN=67e1f66ffc0e676fb60659016cf52c17f3ef855c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:03:9a:d9:d6:7f:23:77:0d:a0:01:3e:d5:7c:
2a:40:eb:3d:bd:26:9d:10:82:16:12:e4:dd:9f:60:
c5:f8:a2:83:ac:a1:9a:de:1d:67:5c:9a:3d:b1:13:
2c:cd:c6:88:5e:31:7f:36:b6:6d:02:4f:ad:ad:dc:
97:1e:6b:d9:fa:eb:48:1b:32:50:94:99:09:99:28:
e3:d1:72:f7:18:0b:f9:1e:c2:43:c2:f5:d4:cb:81:
d0:90:fd:72:8a:bb:0a:08:a9:ab:fb:e7:c7:0f:41:
ff:46:43:88:ff:cf:79:97:ca:74:a1:5b:e9:fe:e4:
cd:79:db:ad:f2:98:d5:4a:4f:f4:eb:77:5b:87:93:
61:12:49:dc:f2:18:97:08:67:b5:8c:10:11:29:da:
00:02:9c:a4:8c:4d:09:ee:89:72:03:22:f8:56:60:
5f:cb:db:75:66:d4:ac:36:0a:7e:1e:88:f2:39:dc:
ff:dd:ce:80:4c:11:1c:f6:d5:34:97:73:fa:38:11:
91:64:89:bd:51:19:78:46:ab:ce:fb:f1:14:41:ec:
56:43:dd:be:68:3b:95:bf:3d:b6:4f:71:2f:b8:4b:
84:d0:16:d0:21:c3:95:4a:31:e5:c5:d3:fe:1f:fa:
b9:1b:d5:89:7e:a8:22:f0:e4:aa:6e:e5:4d:f0:2c:
cd:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:E1:F6:6F:FC:0E:67:6F:B6:06:59:01:6C:F5:2C:17:F3:EF:85:5C
X509v3 Authority Key Identifier:
keyid:3A:04:29:B5:AE:CA:C8:36:45:44:BF:62:3F:94:F1:63:AF:DC:E5:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgQpta7KyDZFRL9iP5TxY6_c5WE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:94:c5:47:ba:9d:19:c2:41:cf:ea:6d:c8:7c:f6:59:5f:b1:
ad:fa:09:20:7c:0c:ec:8b:87:1b:bf:d2:91:c0:8b:e8:80:b9:
41:44:23:f8:42:b7:ba:1c:4e:97:c8:ce:84:4e:70:cd:93:a8:
72:45:96:99:23:ea:f0:06:26:f0:81:5b:9a:f1:11:72:19:b2:
41:85:3f:e3:fa:45:ef:64:5f:1b:2a:bc:9a:1b:60:0d:3d:29:
c6:fa:ac:7f:22:8a:cd:97:35:90:97:d9:74:41:ba:94:0c:37:
8f:cc:42:c5:e6:58:6c:4c:7b:f9:48:1f:78:5a:a2:4f:0c:40:
5a:e0:c4:df:10:53:c6:5b:59:12:d9:f6:96:b7:26:e1:62:f4:
a9:de:ce:33:0a:96:dd:02:4b:24:f4:98:ab:c8:7e:8d:f4:6c:
44:1f:25:a6:55:24:fb:34:a3:3c:df:93:0f:b6:05:d3:61:38:
47:f8:ec:7b:55:ac:ad:dd:61:52:39:37:00:6b:0c:03:f3:f8:
fb:25:30:c3:bc:6c:a6:91:10:89:86:31:8e:23:3b:84:7b:74:
91:e1:3c:63:7c:7e:7d:d1:bc:36:52:ef:0c:50:3d:13:eb:fd:
bc:a8:9a:46:ba:da:da:a7:c2:59:2b:38:f8:3e:db:14:51:55:
8c:d2:54:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURNMfaSVpIVHDKOOjn6J+mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhMDQyOWI1YWVjYWM4MzY0NTQ0YmY2MjNmOTRmMTYzYWZk
Y2U1NjEwHhcNMjUwMjE3MDAwMDI2WhcNMjUwMjE4MDAwMDI2WjAzMTEwLwYDVQQD
Eyg2N2UxZjY2ZmZjMGU2NzZmYjYwNjU5MDE2Y2Y1MmMxN2YzZWY4NTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgOa2dZ/I3cNoAE+1XwqQOs9vSad
EIIWEuTdn2DF+KKDrKGa3h1nXJo9sRMszcaIXjF/NrZtAk+trdyXHmvZ+utIGzJQ
lJkJmSjj0XL3GAv5HsJDwvXUy4HQkP1yirsKCKmr++fHD0H/RkOI/895l8p0oVvp
/uTNedut8pjVSk/063dbh5NhEknc8hiXCGe1jBARKdoAApykjE0J7olyAyL4VmBf
y9t1ZtSsNgp+HojyOdz/3c6ATBEc9tU0l3P6OBGRZIm9URl4RqvO+/EUQexWQ92+
aDuVvz22T3EvuEuE0BbQIcOVSjHlxdP+H/q5G9WJfqgi8OSqbuVN8CzN4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGfh9m/8DmdvtgZZAWz1LBfz74VcMB8GA1UdIwQY
MBaAFDoEKbWuysg2RUS/Yj+U8WOv3OVhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2dRcHRhN0t5RFpGUkw5aVA1VHhZNl9jNVdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9mYjkyMTUtZDFkMS00N2MyLWFjODEt
ODQ3MTJjOWYzNDY0LzEvT2dRcHRhN0t5RFpGUkw5aVA1VHhZNl9jNVdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC9mYjkyMTUtZDFkMS00N2MyLWFjODEtODQ3MTJjOWYzNDY0
LzEvT2dRcHRhN0t5RFpGUkw5aVA1VHhZNl9jNVdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPJTFR7qd
GcJBz+ptyHz2WV+xrfoJIHwM7IuHG7/SkcCL6IC5QUQj+EK3uhxOl8jOhE5wzZOo
ckWWmSPq8AYm8IFbmvERchmyQYU/4/pF72RfGyq8mhtgDT0pxvqsfyKKzZc1kJfZ
dEG6lAw3j8xCxeZYbEx7+UgfeFqiTwxAWuDE3xBTxltZEtn2lrcm4WL0qd7OMwqW
3QJLJPSYq8h+jfRsRB8lplUk+zSjPN+TD7YF02E4R/jse1Wsrd1hUjk3AGsMA/P4
+yUww7xsppEQiYYxjiM7hHt0keE8Y3x+fdG8NlLvDFA9E+v9vKiaRrra2qfCWSs4
+D7bFFFVjNJUzQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:13:39 2025 by rpki-client