![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/3tcjnbgdYfmNWGODzMEl1mEGyzA.mft
File: 3tcjnbgdYfmNWGODzMEl1mEGyzA.mft (raw, json)
Hash identifier: HL5S8p7DUF8uB5ux6JD7K1Kkx6+fmpaF3QRpO0XOG6s=
Subject key identifier: 2E:AA:87:B4:B3:BB:67:50:D2:F8:8F:F5:7C:04:2C:49:84:CA:4E:24
Authority key identifier: DE:D7:23:9D:B8:1D:61:F9:8D:58:63:83:CC:C1:25:D6:61:06:CB:30
Certificate issuer: /CN=ded7239db81d61f98d586383ccc125d66106cb30
Certificate serial: 01950FB43525477E73996C69A68DB198894C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3tcjnbgdYfmNWGODzMEl1mEGyzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/3tcjnbgdYfmNWGODzMEl1mEGyzA.mft
Manifest number: 1456
Signing time: Sun 16 Feb 2025 17:00:23 +0000
Manifest this update: Sun 16 Feb 2025 17:00:23 +0000
Manifest next update: Mon 17 Feb 2025 17:00:23 +0000
Files and hashes: 1: 3tcjnbgdYfmNWGODzMEl1mEGyzA.crl (hash: GTfhJNqbPXBrj+SosIF0y9lHxW91GKmWLLWWUnUPtSE=)
2: E2CYjkWjcDRjmlm-uGqq2cX3-bw.roa (hash: SlY4rIEahH8X3kEcUUwCddcbIz7/S16cK2GTdrw1N+Y=)
3: EpMLaYChUvPW43eW66M41o2KSpc.roa (hash: PU2MBAWGAP6VAtPvAGor5W80iPyTDbgTBn9WAJahQLs=)
4: w0PKwUFljbRq5uVzYVthjHLkXQY.roa (hash: 6g4grLiYtJiUu1m03msVb0si+AZ8cTE6ZMD8wFTtcLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/3tcjnbgdYfmNWGODzMEl1mEGyzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/3tcjnbgdYfmNWGODzMEl1mEGyzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3tcjnbgdYfmNWGODzMEl1mEGyzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:0f:b4:35:25:47:7e:73:99:6c:69:a6:8d:b1:98:89:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ded7239db81d61f98d586383ccc125d66106cb30
Validity
Not Before: Feb 16 17:00:23 2025 GMT
Not After : Feb 17 17:00:23 2025 GMT
Subject: CN=2eaa87b4b3bb6750d2f88ff57c042c4984ca4e24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9e:7c:29:4a:8d:5b:c0:43:c1:64:6a:1d:31:
67:4d:3d:8e:0f:ab:bb:8a:b5:fb:7e:f1:d3:eb:b1:
e9:0a:ca:c0:af:a1:b2:b5:1f:79:b7:53:60:27:00:
4f:01:30:0b:fc:14:85:0e:63:0f:03:99:eb:fb:8d:
0d:79:da:d2:48:43:7a:47:0b:a4:b1:2f:05:f5:5e:
66:a3:44:c9:fe:8b:28:45:ed:80:90:5b:be:4a:54:
ca:34:09:86:32:27:4d:12:be:27:f5:2e:c3:f0:b1:
8c:b0:59:b1:b5:33:f9:28:5c:35:e6:04:58:2e:51:
57:51:8a:eb:65:e3:eb:58:dc:45:d9:ff:bd:d6:73:
41:91:de:68:6a:a3:75:3f:0b:24:fc:aa:b6:69:4e:
29:cc:f6:2f:14:be:af:00:a3:8b:a4:d1:5c:f2:78:
8a:6c:53:4f:71:f7:b1:52:ee:a2:9b:22:6a:0d:91:
8a:68:97:18:2a:77:ef:11:7b:27:6e:0c:5c:0b:ce:
cc:7f:e3:b0:68:25:f4:6d:49:64:a7:13:1a:96:19:
c5:04:1f:ea:e5:a6:e7:f6:ad:a2:95:b4:85:4d:6d:
a3:a8:76:63:23:08:44:2e:dd:72:bc:d4:67:74:99:
79:7b:3b:a9:2f:9b:97:17:45:6a:bb:33:57:e1:1b:
bc:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:AA:87:B4:B3:BB:67:50:D2:F8:8F:F5:7C:04:2C:49:84:CA:4E:24
X509v3 Authority Key Identifier:
keyid:DE:D7:23:9D:B8:1D:61:F9:8D:58:63:83:CC:C1:25:D6:61:06:CB:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tcjnbgdYfmNWGODzMEl1mEGyzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/3tcjnbgdYfmNWGODzMEl1mEGyzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/3tcjnbgdYfmNWGODzMEl1mEGyzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:9c:d5:a3:8b:1c:f6:88:6d:de:f1:77:73:ed:33:7b:83:7a:
e6:22:e1:8d:0f:7c:c3:75:eb:04:98:00:7b:83:62:98:7f:4e:
35:c1:e6:c3:f2:79:6d:49:77:10:25:ee:95:f0:85:80:e1:ea:
a5:ae:cc:b5:44:68:8a:57:58:6f:b5:eb:f0:41:7d:c1:5f:d5:
a6:31:98:a8:52:c3:7e:61:83:4e:79:db:7b:70:09:aa:93:58:
ab:dc:55:22:a7:b5:14:69:c2:ea:c2:5d:61:27:46:6c:43:15:
a4:57:45:26:71:4f:7d:af:bf:9d:3c:2e:81:c8:52:19:ff:68:
cb:ec:d2:0a:d1:9a:b3:f2:4a:ea:22:36:62:74:5e:ad:f4:52:
29:74:8d:64:03:bc:a5:90:1b:41:cd:28:d8:6d:63:8f:d4:8a:
a4:dc:c5:4f:d8:15:27:25:c5:04:7e:19:69:a2:97:1b:f3:0e:
43:2b:83:68:af:d6:59:d4:d5:fb:82:9c:6c:ae:d5:57:d6:c6:
40:82:a3:06:7e:80:63:63:d3:52:14:0a:3b:6f:bf:f9:6e:84:
ec:81:4c:9d:bf:cd:ab:a9:b5:8c:97:9c:5b:24:a6:01:54:48:
29:2d:5e:60:d6:13:98:72:4d:e9:fc:f1:1d:5d:11:52:fe:a4:
ec:ba:c8:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUPtDUlR35zmWxppo2xmIlMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlZDcyMzlkYjgxZDYxZjk4ZDU4NjM4M2NjYzEyNWQ2NjEw
NmNiMzAwHhcNMjUwMjE2MTcwMDIzWhcNMjUwMjE3MTcwMDIzWjAzMTEwLwYDVQQD
EygyZWFhODdiNGIzYmI2NzUwZDJmODhmZjU3YzA0MmM0OTg0Y2E0ZTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqp58KUqNW8BDwWRqHTFnTT2OD6u7
irX7fvHT67HpCsrAr6GytR95t1NgJwBPATAL/BSFDmMPA5nr+40NedrSSEN6Rwuk
sS8F9V5mo0TJ/osoRe2AkFu+SlTKNAmGMidNEr4n9S7D8LGMsFmxtTP5KFw15gRY
LlFXUYrrZePrWNxF2f+91nNBkd5oaqN1Pwsk/Kq2aU4pzPYvFL6vAKOLpNFc8niK
bFNPcfexUu6imyJqDZGKaJcYKnfvEXsnbgxcC87Mf+OwaCX0bUlkpxMalhnFBB/q
5abn9q2ilbSFTW2jqHZjIwhELt1yvNRndJl5ezupL5uXF0VquzNX4Ru8pwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC6qh7Szu2dQ0viP9XwELEmEyk4kMB8GA1UdIwQY
MBaAFN7XI524HWH5jVhjg8zBJdZhBsswMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3Rjam5iZ2RZZm1OV0dPRHpNRWwxbUVHeXpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9iNmM0MjYtNzZkNS00YTgyLTliNWYt
ODU2YjY1Yzc1YzI2LzEvM3Rjam5iZ2RZZm1OV0dPRHpNRWwxbUVHeXpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9iNmM0MjYtNzZkNS00YTgyLTliNWYtODU2YjY1Yzc1YzI2
LzEvM3Rjam5iZ2RZZm1OV0dPRHpNRWwxbUVHeXpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA5zVo4sc
9oht3vF3c+0ze4N65iLhjQ98w3XrBJgAe4NimH9ONcHmw/J5bUl3ECXulfCFgOHq
pa7MtURoildYb7Xr8EF9wV/VpjGYqFLDfmGDTnnbe3AJqpNYq9xVIqe1FGnC6sJd
YSdGbEMVpFdFJnFPfa+/nTwugchSGf9oy+zSCtGas/JK6iI2YnRerfRSKXSNZAO8
pZAbQc0o2G1jj9SKpNzFT9gVJyXFBH4ZaaKXG/MOQyuDaK/WWdTV+4KcbK7VV9bG
QIKjBn6AY2PTUhQKO2+/+W6E7IFMnb/Nq6m1jJecWySmAVRIKS1eYNYTmHJN6fzx
HV0RUv6k7LrIIA==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:04:53 2025 by rpki-client