![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/24281e-e1ea-4f69-b53d-7f0338e49ee1/1/Quv9iRe1jwaG2T60jeQh7AE3Csk.mft
File: Quv9iRe1jwaG2T60jeQh7AE3Csk.mft (raw, json)
Hash identifier: Bkk0VW+LPwhlK4U6QLq7SywYFI/Why0+F3NgwErbCNg=
Subject key identifier: E4:3D:B2:B0:2F:92:D5:66:39:C8:F7:C0:5C:5E:ED:38:73:0E:C2:97
Authority key identifier: 42:EB:FD:89:17:B5:8F:06:86:D9:3E:B4:8D:E4:21:EC:01:37:0A:C9
Certificate issuer: /CN=42ebfd8917b58f0686d93eb48de421ec01370ac9
Certificate serial: 01951134FA67938CFDF8829C68D33CB0A660
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Quv9iRe1jwaG2T60jeQh7AE3Csk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/24281e-e1ea-4f69-b53d-7f0338e49ee1/1/Quv9iRe1jwaG2T60jeQh7AE3Csk.mft
Manifest number: 1455
Signing time: Mon 17 Feb 2025 00:00:39 +0000
Manifest this update: Mon 17 Feb 2025 00:00:39 +0000
Manifest next update: Tue 18 Feb 2025 00:00:39 +0000
Files and hashes: 1: Dct1KnHlMjQEBf8FzrUaVj8hNPo.roa (hash: GFTblhcJpBtD5bZfbGwg+0xfnKk6qwYm9g5i1rXxbnw=)
2: Quv9iRe1jwaG2T60jeQh7AE3Csk.crl (hash: LFpOBZ1uOuuRczYk+uIgvsCj3/btYnTF+XElhXdZR/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/24281e-e1ea-4f69-b53d-7f0338e49ee1/1/Quv9iRe1jwaG2T60jeQh7AE3Csk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/24281e-e1ea-4f69-b53d-7f0338e49ee1/1/Quv9iRe1jwaG2T60jeQh7AE3Csk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Quv9iRe1jwaG2T60jeQh7AE3Csk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:fa:67:93:8c:fd:f8:82:9c:68:d3:3c:b0:a6:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42ebfd8917b58f0686d93eb48de421ec01370ac9
Validity
Not Before: Feb 17 00:00:39 2025 GMT
Not After : Feb 18 00:00:39 2025 GMT
Subject: CN=e43db2b02f92d56639c8f7c05c5eed38730ec297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ec:42:1b:42:01:3f:90:9b:3c:1d:3d:b0:66:
af:b7:be:16:03:1f:79:76:1e:dc:6e:67:f8:b6:3c:
ae:53:cb:43:05:64:72:9e:74:41:08:84:f4:50:2d:
79:95:aa:94:db:51:cf:42:7d:d3:50:cd:e4:b3:f2:
05:b7:89:9b:e5:7b:15:9f:21:9c:6a:47:19:d0:27:
2a:37:26:09:e8:bc:6f:b1:19:fe:4c:23:59:ec:94:
1d:24:b8:56:02:58:da:56:05:41:2d:0e:0e:a8:29:
b3:7b:a7:67:da:c7:c4:19:ae:54:ad:e7:a0:b0:c8:
33:90:20:c4:e7:07:0f:21:d5:3f:1b:58:9f:c6:bb:
d7:06:f0:1c:77:d6:ea:2e:4e:46:f4:e0:61:30:8d:
7b:3e:98:95:29:e2:6b:5f:49:57:18:c4:35:32:03:
3c:45:8a:fb:49:eb:97:45:5c:63:aa:d4:0f:16:23:
b9:af:4d:16:3f:51:3c:cd:e5:6c:eb:20:bd:d3:cc:
51:dc:ca:c9:d8:3c:e1:f3:91:9e:af:d3:26:08:8d:
ec:9f:51:e0:4b:22:9d:33:c2:54:6f:06:60:c1:54:
33:be:d9:60:42:39:ba:46:f3:be:e2:2c:cc:ce:71:
28:d3:cc:09:5e:12:f6:63:ca:6a:74:b8:78:1e:74:
00:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:3D:B2:B0:2F:92:D5:66:39:C8:F7:C0:5C:5E:ED:38:73:0E:C2:97
X509v3 Authority Key Identifier:
keyid:42:EB:FD:89:17:B5:8F:06:86:D9:3E:B4:8D:E4:21:EC:01:37:0A:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Quv9iRe1jwaG2T60jeQh7AE3Csk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/24281e-e1ea-4f69-b53d-7f0338e49ee1/1/Quv9iRe1jwaG2T60jeQh7AE3Csk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/24281e-e1ea-4f69-b53d-7f0338e49ee1/1/Quv9iRe1jwaG2T60jeQh7AE3Csk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:83:a9:01:47:49:9b:6d:00:bd:ee:2d:06:d5:e8:d3:75:76:
f0:5f:ae:5d:ab:a3:af:21:71:eb:50:05:40:85:bd:0c:74:20:
d6:51:08:3e:d5:f1:56:08:30:e8:26:50:a8:eb:be:eb:22:6c:
79:1e:23:c0:15:ce:ad:6b:b2:dc:e3:f5:06:b2:2a:31:4f:d4:
11:4f:e0:83:e8:a6:7c:6e:20:44:6c:62:63:a5:ee:0a:da:26:
6d:d1:76:17:20:00:51:54:b5:8f:f1:0c:b8:a5:77:4b:29:bd:
8d:82:b1:37:50:f4:4b:0e:f6:f8:0b:26:32:f3:f3:d7:25:c9:
9e:6b:fe:f6:5e:53:23:2b:9b:0a:51:b0:1c:69:12:d8:b7:6a:
f9:aa:af:bd:e2:46:0c:8e:33:b9:3c:16:e7:d0:57:a6:bc:31:
40:8a:00:8f:02:a4:69:4b:8a:ec:a3:e9:64:58:4e:09:1e:3d:
99:52:9b:d8:62:e8:1a:e0:e0:6b:88:55:5c:ac:54:68:ae:a5:
1a:a5:73:ed:5b:6b:23:d8:82:20:6d:bc:5c:b7:c0:c2:19:b3:
25:db:80:d0:3a:58:48:f4:cd:c9:e5:b4:31:18:1b:61:00:18:
b3:4f:f8:bf:87:61:ba:bc:2a:31:b2:57:06:94:94:80:1a:97:
5e:68:f0:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURNPpnk4z9+IKcaNM8sKZgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyZWJmZDg5MTdiNThmMDY4NmQ5M2ViNDhkZTQyMWVjMDEz
NzBhYzkwHhcNMjUwMjE3MDAwMDM5WhcNMjUwMjE4MDAwMDM5WjAzMTEwLwYDVQQD
EyhlNDNkYjJiMDJmOTJkNTY2MzljOGY3YzA1YzVlZWQzODczMGVjMjk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOxCG0IBP5CbPB09sGavt74WAx95
dh7cbmf4tjyuU8tDBWRynnRBCIT0UC15laqU21HPQn3TUM3ks/IFt4mb5XsVnyGc
akcZ0CcqNyYJ6LxvsRn+TCNZ7JQdJLhWAljaVgVBLQ4OqCmze6dn2sfEGa5Ureeg
sMgzkCDE5wcPIdU/G1ifxrvXBvAcd9bqLk5G9OBhMI17PpiVKeJrX0lXGMQ1MgM8
RYr7SeuXRVxjqtQPFiO5r00WP1E8zeVs6yC908xR3MrJ2Dzh85Ger9MmCI3sn1Hg
SyKdM8JUbwZgwVQzvtlgQjm6RvO+4izMznEo08wJXhL2Y8pqdLh4HnQA8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOQ9srAvktVmOcj3wFxe7ThzDsKXMB8GA1UdIwQY
MBaAFELr/YkXtY8Ghtk+tI3kIewBNwrJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXV2OWlSZTFqd2FHMlQ2MGplUWg3QUUzQ3NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8yNDI4MWUtZTFlYS00ZjY5LWI1M2Qt
N2YwMzM4ZTQ5ZWUxLzEvUXV2OWlSZTFqd2FHMlQ2MGplUWg3QUUzQ3NrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8yNDI4MWUtZTFlYS00ZjY5LWI1M2QtN2YwMzM4ZTQ5ZWUx
LzEvUXV2OWlSZTFqd2FHMlQ2MGplUWg3QUUzQ3NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXoOpAUdJ
m20Ave4tBtXo03V28F+uXaujryFx61AFQIW9DHQg1lEIPtXxVggw6CZQqOu+6yJs
eR4jwBXOrWuy3OP1BrIqMU/UEU/gg+imfG4gRGxiY6XuCtombdF2FyAAUVS1j/EM
uKV3Sym9jYKxN1D0Sw72+AsmMvPz1yXJnmv+9l5TIyubClGwHGkS2Ldq+aqvveJG
DI4zuTwW59BXprwxQIoAjwKkaUuK7KPpZFhOCR49mVKb2GLoGuDga4hVXKxUaK6l
GqVz7VtrI9iCIG28XLfAwhmzJduA0DpYSPTNyeW0MRgbYQAYs0/4v4dhurwqMbJX
BpSUgBqXXmjwlg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:41:14 2025 by rpki-client