![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.mft
File: Mu0BRXesc_-H7yDKb3V5XkyTf84.mft (raw, json)
Hash identifier: j9HdFyQ+m7gx8aXWE+ZonmixjL0q8Q0SYLUS4NIBCtQ=
Subject key identifier: A2:F2:70:7A:2D:D8:27:27:FB:88:53:74:2B:7C:30:04:D3:2A:58:81
Authority key identifier: 32:ED:01:45:77:AC:73:FF:87:EF:20:CA:6F:75:79:5E:4C:93:7F:CE
Certificate issuer: /CN=32ed014577ac73ff87ef20ca6f75795e4c937fce
Certificate serial: 019511A262FC0A207F5C898D1CF820E3C74A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mu0BRXesc_-H7yDKb3V5XkyTf84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.mft
Manifest number: 0647
Signing time: Mon 17 Feb 2025 02:00:09 +0000
Manifest this update: Mon 17 Feb 2025 02:00:09 +0000
Manifest next update: Tue 18 Feb 2025 02:00:09 +0000
Files and hashes: 1: Mu0BRXesc_-H7yDKb3V5XkyTf84.crl (hash: 2/z8UWXU65dfgc4THlsqGyTbtPZDz+Bg+hzB53ZrUBc=)
2: Szpv7SbbTq_ZPkpVt0ZS-yigLYQ.roa (hash: tot/yU4vNOc3RqisHsJwZZdti1Jdkg5nZCtY1DuBRp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mu0BRXesc_-H7yDKb3V5XkyTf84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:62:fc:0a:20:7f:5c:89:8d:1c:f8:20:e3:c7:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32ed014577ac73ff87ef20ca6f75795e4c937fce
Validity
Not Before: Feb 17 02:00:09 2025 GMT
Not After : Feb 18 02:00:09 2025 GMT
Subject: CN=a2f2707a2dd82727fb8853742b7c3004d32a5881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:42:7e:61:69:78:64:05:28:2a:70:f7:23:cb:
67:c9:3d:39:33:7f:ef:b6:6d:3d:3f:d7:97:7a:15:
1f:86:0a:53:95:d3:a7:c6:ee:33:03:ce:85:59:27:
b3:70:90:d6:b8:72:da:8b:f9:39:a6:bd:9c:3c:9a:
5e:1e:b5:b3:e0:ac:07:de:5f:9e:21:5d:b7:e1:56:
fb:4e:49:00:a5:4e:c8:64:94:46:57:77:14:4d:db:
da:ee:06:22:22:c3:8f:9d:e1:8e:eb:81:47:14:5d:
c9:31:33:1b:84:e6:7d:06:3f:70:7a:9c:21:ec:86:
c5:4f:d0:52:37:fb:db:de:da:bc:bd:ab:3d:92:f2:
4a:5c:0e:3a:84:b8:77:b6:86:a4:a3:04:2c:03:92:
11:d9:c2:bf:39:b5:87:35:f7:fe:f4:33:fa:32:e4:
cb:ae:e7:75:dc:c4:db:9a:7d:7e:02:c2:41:50:b6:
57:d0:63:ce:94:7b:e5:4c:5d:23:33:75:0f:38:ae:
34:12:84:99:18:e5:33:a5:11:11:1c:6e:5f:d7:7f:
34:bf:c4:32:41:86:d9:d5:81:54:65:c8:b9:6c:be:
0d:e5:ca:c7:75:05:32:11:ec:89:32:cf:b0:96:c7:
8d:a3:ba:6a:21:d7:76:95:15:3b:fc:03:c6:ab:b8:
c4:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:F2:70:7A:2D:D8:27:27:FB:88:53:74:2B:7C:30:04:D3:2A:58:81
X509v3 Authority Key Identifier:
keyid:32:ED:01:45:77:AC:73:FF:87:EF:20:CA:6F:75:79:5E:4C:93:7F:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mu0BRXesc_-H7yDKb3V5XkyTf84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:ce:89:02:83:5e:f7:c0:4c:0b:72:d4:77:3c:e8:9c:64:a1:
ee:59:59:d2:2d:40:d5:de:db:3e:2b:c3:c9:4b:bb:dc:95:fb:
1e:cb:89:f1:44:e9:3f:a7:2e:6f:a1:fc:4a:d6:89:94:f9:53:
5e:b7:1f:d7:9d:b8:a4:93:a4:35:ab:7c:63:b5:f8:51:bf:f1:
c8:dd:e9:fa:d4:d2:13:ea:9c:c7:4f:ee:ab:ae:f0:17:52:0c:
91:aa:b6:17:5c:86:73:d3:49:53:83:6a:92:fc:20:f3:1d:7b:
2a:0a:44:54:f9:c7:1c:32:39:0e:ce:d9:2e:b8:d6:38:51:a1:
67:71:76:5d:49:a3:b8:6b:a3:cb:45:c9:fa:29:7f:85:c0:fd:
da:52:1d:44:d4:f3:eb:de:88:07:2c:1e:83:1f:0b:30:d4:98:
fa:dd:b2:53:4a:68:ac:97:ef:04:97:99:62:62:58:0b:6f:ad:
78:3f:35:5a:3d:63:77:c1:b0:9d:9e:37:99:e5:a7:08:6c:9f:
88:94:ea:82:4d:c2:f1:23:4f:21:09:15:c5:0b:19:15:a3:1f:
e8:0f:37:c0:37:f1:49:82:2d:32:f9:0e:fe:37:6d:52:c0:85:
bc:30:4f:3d:f4:ef:77:7b:5d:d5:d4:1b:bc:2b:16:2d:c1:97:
8f:e2:67:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURomL8CiB/XImNHPgg48dKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyZWQwMTQ1NzdhYzczZmY4N2VmMjBjYTZmNzU3OTVlNGM5
MzdmY2UwHhcNMjUwMjE3MDIwMDA5WhcNMjUwMjE4MDIwMDA5WjAzMTEwLwYDVQQD
EyhhMmYyNzA3YTJkZDgyNzI3ZmI4ODUzNzQyYjdjMzAwNGQzMmE1ODgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEJ+YWl4ZAUoKnD3I8tnyT05M3/v
tm09P9eXehUfhgpTldOnxu4zA86FWSezcJDWuHLai/k5pr2cPJpeHrWz4KwH3l+e
IV234Vb7TkkApU7IZJRGV3cUTdva7gYiIsOPneGO64FHFF3JMTMbhOZ9Bj9wepwh
7IbFT9BSN/vb3tq8vas9kvJKXA46hLh3toakowQsA5IR2cK/ObWHNff+9DP6MuTL
rud13MTbmn1+AsJBULZX0GPOlHvlTF0jM3UPOK40EoSZGOUzpRERHG5f1380v8Qy
QYbZ1YFUZci5bL4N5crHdQUyEeyJMs+wlseNo7pqIdd2lRU7/APGq7jESwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKLycHot2Ccn+4hTdCt8MATTKliBMB8GA1UdIwQY
MBaAFDLtAUV3rHP/h+8gym91eV5Mk3/OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXUwQlJYZXNjXy1IN3lES2IzVjVYa3lUZjg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy80YTM5NWMtNTE4NS00MmVlLTk0OGIt
OGZjMmI3MWQwMzBmLzEvTXUwQlJYZXNjXy1IN3lES2IzVjVYa3lUZjg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy80YTM5NWMtNTE4NS00MmVlLTk0OGItOGZjMmI3MWQwMzBm
LzEvTXUwQlJYZXNjXy1IN3lES2IzVjVYa3lUZjg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgs6JAoNe
98BMC3LUdzzonGSh7llZ0i1A1d7bPivDyUu73JX7HsuJ8UTpP6cub6H8StaJlPlT
Xrcf1524pJOkNat8Y7X4Ub/xyN3p+tTSE+qcx0/uq67wF1IMkaq2F1yGc9NJU4Nq
kvwg8x17KgpEVPnHHDI5Ds7ZLrjWOFGhZ3F2XUmjuGujy0XJ+il/hcD92lIdRNTz
696IBywegx8LMNSY+t2yU0porJfvBJeZYmJYC2+teD81Wj1jd8GwnZ43meWnCGyf
iJTqgk3C8SNPIQkVxQsZFaMf6A83wDfxSYItMvkO/jdtUsCFvDBPPfTvd3td1dQb
vCsWLcGXj+JnGw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:29:02 2025 by rpki-client