![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.mft
File: Ul0cSVWy778Anp5Bsecupt_4JLM.mft (raw, json)
Hash identifier: lTwPr1nk8pE7/tVujufL9Jo4bTE5B3crCXAzv37QEmk=
Subject key identifier: BD:AD:EA:A9:60:89:6C:AB:38:E2:AA:82:EF:47:C5:03:73:69:12:C8
Authority key identifier: 52:5D:1C:49:55:B2:EF:BF:00:9E:9E:41:B1:E7:2E:A6:DF:F8:24:B3
Certificate issuer: /CN=525d1c4955b2efbf009e9e41b1e72ea6dff824b3
Certificate serial: 019510C73B935E44240B36FB5F6B2E744E34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ul0cSVWy778Anp5Bsecupt_4JLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.mft
Manifest number: 05E7
Signing time: Sun 16 Feb 2025 22:00:47 +0000
Manifest this update: Sun 16 Feb 2025 22:00:47 +0000
Manifest next update: Mon 17 Feb 2025 22:00:47 +0000
Files and hashes: 1: Ul0cSVWy778Anp5Bsecupt_4JLM.crl (hash: hNUr5Y5Ih6BKITtK2ML/Ipxv4DdTvRYIQQayt0lDp1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ul0cSVWy778Anp5Bsecupt_4JLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:3b:93:5e:44:24:0b:36:fb:5f:6b:2e:74:4e:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=525d1c4955b2efbf009e9e41b1e72ea6dff824b3
Validity
Not Before: Feb 16 22:00:47 2025 GMT
Not After : Feb 17 22:00:47 2025 GMT
Subject: CN=bdadeaa960896cab38e2aa82ef47c503736912c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a9:26:cc:8f:11:61:ee:68:54:f5:eb:0a:e4:
1a:c0:0b:35:ae:1e:8d:ea:04:30:a5:be:9e:df:f5:
e7:2f:92:31:3c:b2:ca:77:27:63:da:dc:fb:dd:77:
74:c3:a0:63:2c:e4:67:9e:c7:c8:45:a7:18:82:65:
be:1c:c1:4a:3a:b0:07:d8:a2:70:98:b4:7c:38:d8:
12:60:74:89:fb:b7:02:85:44:a1:ea:1b:2f:0f:0e:
1d:fe:0d:ef:f5:87:8f:85:4a:e2:5a:fc:7c:6e:fa:
85:43:6a:37:e8:9d:06:55:b2:5f:0c:38:57:df:b5:
65:db:d2:b5:0d:83:bf:57:77:8e:79:b6:05:3d:42:
b8:04:51:f6:95:3a:1b:81:96:3e:df:be:eb:4c:5f:
c3:d5:63:0a:ba:1f:79:63:e1:5d:2f:d2:ba:ae:c1:
83:ef:3f:48:d1:0e:4c:a1:af:b1:7f:88:19:44:34:
d8:c6:ff:95:2c:b5:b7:ca:f1:90:f4:72:f6:a9:1b:
86:e6:a3:c1:4e:e4:d4:85:f1:78:ae:90:57:51:dd:
30:80:5d:ce:0a:5f:8d:34:89:4e:5f:a4:3a:21:39:
fa:dc:67:41:0e:13:09:59:74:c6:f9:03:9e:75:21:
18:4a:fb:63:3e:9e:a3:94:7c:3c:4c:f5:fc:4b:42:
46:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:AD:EA:A9:60:89:6C:AB:38:E2:AA:82:EF:47:C5:03:73:69:12:C8
X509v3 Authority Key Identifier:
keyid:52:5D:1C:49:55:B2:EF:BF:00:9E:9E:41:B1:E7:2E:A6:DF:F8:24:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ul0cSVWy778Anp5Bsecupt_4JLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:80:a6:15:70:e1:d5:9f:d4:f9:d6:d0:6b:29:10:14:ec:0d:
a1:39:0e:af:04:88:9f:07:af:ad:ea:aa:8b:88:9f:c8:2c:c8:
17:79:9e:84:de:18:d6:9e:e9:60:69:31:7e:00:e1:e2:05:9a:
1d:a5:70:42:51:70:e4:52:d8:89:c4:de:ce:7b:c0:05:f8:d0:
2b:3e:5f:1d:5c:3c:60:8b:be:79:cf:e6:70:a3:82:ac:b4:0b:
4d:05:5a:64:49:28:4d:a5:f4:11:f8:af:e9:18:b8:57:42:5e:
a9:0d:5f:78:79:86:71:f4:ac:42:36:84:48:f8:bd:e8:04:17:
af:68:c8:8b:7b:73:24:3d:a3:83:82:7d:ce:ac:e9:47:b0:2b:
08:d9:84:05:af:ca:5e:0f:66:08:94:1f:25:b4:54:62:0f:11:
91:4a:c5:00:45:ab:3f:c8:f3:fa:67:6a:3d:ec:67:66:31:79:
56:02:7e:8a:bd:be:0c:e9:2e:15:59:9e:bc:5a:1a:ce:5e:00:
02:b6:91:f5:51:7b:3c:39:9b:b7:62:57:1a:08:6f:c3:65:dc:
5f:f2:99:a1:26:57:c0:4a:61:d5:ae:0e:bd:09:e1:14:1e:51:
12:1d:04:14:a5:c2:26:46:21:67:96:c9:3a:54:10:2f:4c:7e:
99:bb:69:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUQxzuTXkQkCzb7X2sudE40MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNWQxYzQ5NTViMmVmYmYwMDllOWU0MWIxZTcyZWE2ZGZm
ODI0YjMwHhcNMjUwMjE2MjIwMDQ3WhcNMjUwMjE3MjIwMDQ3WjAzMTEwLwYDVQQD
EyhiZGFkZWFhOTYwODk2Y2FiMzhlMmFhODJlZjQ3YzUwMzczNjkxMmM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqkmzI8RYe5oVPXrCuQawAs1rh6N
6gQwpb6e3/XnL5IxPLLKdydj2tz73Xd0w6BjLORnnsfIRacYgmW+HMFKOrAH2KJw
mLR8ONgSYHSJ+7cChUSh6hsvDw4d/g3v9YePhUriWvx8bvqFQ2o36J0GVbJfDDhX
37Vl29K1DYO/V3eOebYFPUK4BFH2lTobgZY+377rTF/D1WMKuh95Y+FdL9K6rsGD
7z9I0Q5Moa+xf4gZRDTYxv+VLLW3yvGQ9HL2qRuG5qPBTuTUhfF4rpBXUd0wgF3O
Cl+NNIlOX6Q6ITn63GdBDhMJWXTG+QOedSEYSvtjPp6jlHw8TPX8S0JGWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL2t6qlgiWyrOOKqgu9HxQNzaRLIMB8GA1UdIwQY
MBaAFFJdHElVsu+/AJ6eQbHnLqbf+CSzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWwwY1NWV3k3NzhBbnA1QnNlY3VwdF80SkxNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi84MTk1YjMtYzQ3NS00Y2E0LWI0MmQt
NjYyN2E0ZWI1OTYzLzEvVWwwY1NWV3k3NzhBbnA1QnNlY3VwdF80SkxNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi84MTk1YjMtYzQ3NS00Y2E0LWI0MmQtNjYyN2E0ZWI1OTYz
LzEvVWwwY1NWV3k3NzhBbnA1QnNlY3VwdF80SkxNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoICmFXDh
1Z/U+dbQaykQFOwNoTkOrwSInwevreqqi4ifyCzIF3mehN4Y1p7pYGkxfgDh4gWa
HaVwQlFw5FLYicTeznvABfjQKz5fHVw8YIu+ec/mcKOCrLQLTQVaZEkoTaX0Efiv
6Ri4V0JeqQ1feHmGcfSsQjaESPi96AQXr2jIi3tzJD2jg4J9zqzpR7ArCNmEBa/K
Xg9mCJQfJbRUYg8RkUrFAEWrP8jz+mdqPexnZjF5VgJ+ir2+DOkuFVmevFoazl4A
AraR9VF7PDmbt2JXGghvw2XcX/KZoSZXwEph1a4OvQnhFB5REh0EFKXCJkYhZ5bJ
OlQQL0x+mbtp+g==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:11:18 2025 by rpki-client