![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft
File: ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft (raw, json)
Hash identifier: KAKuknzLUDB+7oiXYKb13f/Qv5vwKz3rU1RP/0l7Zp0=
Subject key identifier: 07:94:2A:5F:C3:02:BB:CC:D1:FE:1A:B9:53:1A:EA:C6:4B:71:48:1D
Authority key identifier: 8B:19:F3:D7:FF:EA:95:72:61:50:1E:91:66:4F:F6:82:3E:D9:36:AD
Certificate issuer: /CN=8b19f3d7ffea957261501e91664ff6823ed936ad
Certificate serial: 019511D9C87F846A186C29360088675C8114
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ixnz1__qlXJhUB6RZk_2gj7ZNq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft
Manifest number: 1455
Signing time: Mon 17 Feb 2025 03:00:40 +0000
Manifest this update: Mon 17 Feb 2025 03:00:40 +0000
Manifest next update: Tue 18 Feb 2025 03:00:40 +0000
Files and hashes: 1: ixnz1__qlXJhUB6RZk_2gj7ZNq0.crl (hash: 91c4WJcYseOGuBvzoyRiJO44NXzC8ZLcI2caVs+azYI=)
2: yIUv-9UBFSosZaxk_SAM-oPYWDg.roa (hash: A5HtFiQ3ZfwDO/6Fs5djNbIUq/3hrajgNOS9o/n1CuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ixnz1__qlXJhUB6RZk_2gj7ZNq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:c8:7f:84:6a:18:6c:29:36:00:88:67:5c:81:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b19f3d7ffea957261501e91664ff6823ed936ad
Validity
Not Before: Feb 17 03:00:40 2025 GMT
Not After : Feb 18 03:00:40 2025 GMT
Subject: CN=07942a5fc302bbccd1fe1ab9531aeac64b71481d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:59:ac:3b:26:c7:4b:23:aa:a9:13:86:c5:eb:
c1:d2:56:88:07:d4:e1:de:05:71:52:ea:24:4b:8f:
f3:6c:76:91:35:47:59:d3:79:f4:7e:77:ed:66:38:
c8:ea:d9:30:47:6d:c1:27:40:f4:7e:99:49:88:12:
c7:02:e8:b6:e0:2b:ad:87:11:81:dd:dc:de:29:a9:
d7:56:0b:51:ef:cf:9c:65:3e:64:51:40:a7:d5:78:
73:e8:94:b9:dd:0d:6a:a5:38:0b:fd:85:d1:8d:38:
56:9e:dd:98:57:74:3b:fa:38:ec:06:ea:2d:e1:6f:
6b:d1:53:f7:1e:87:97:ea:cb:a9:0e:9a:16:c3:23:
ef:8b:f9:38:35:41:96:8e:f7:41:a6:af:dc:dc:66:
7d:26:db:71:98:8e:f1:9d:03:b8:bb:69:a8:13:1e:
34:c6:53:60:5a:2b:36:ab:50:97:c0:e6:3a:a9:de:
27:9c:21:69:6c:84:75:39:7d:3a:c9:72:d7:45:c7:
8f:e5:e5:86:82:57:24:81:e0:56:da:25:01:43:33:
c4:09:10:5f:17:86:c1:46:df:b0:38:83:4b:44:bd:
f6:87:ce:4d:ba:56:ad:a7:45:49:3e:eb:82:1b:31:
2c:3c:65:81:be:4a:77:40:8d:a2:37:1d:d7:32:70:
fc:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:94:2A:5F:C3:02:BB:CC:D1:FE:1A:B9:53:1A:EA:C6:4B:71:48:1D
X509v3 Authority Key Identifier:
keyid:8B:19:F3:D7:FF:EA:95:72:61:50:1E:91:66:4F:F6:82:3E:D9:36:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ixnz1__qlXJhUB6RZk_2gj7ZNq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:73:24:0f:db:f6:8e:21:10:94:97:16:e2:87:71:4b:a1:b6:
a7:06:1d:f4:f3:ab:ed:9c:f5:4d:ff:ed:86:c0:82:af:08:95:
3b:f5:62:55:59:94:bb:d8:02:a8:d1:07:bf:8f:b2:8b:2c:6e:
f3:dd:3b:05:2c:9b:60:6d:93:6b:6a:2d:03:86:46:9f:3e:d0:
d1:3b:6c:37:8e:d9:75:23:cb:9b:45:0b:69:6b:5b:fa:b4:aa:
24:8b:54:e9:90:35:ca:f7:87:59:49:55:aa:92:1b:23:23:33:
0a:83:03:d2:f6:6c:90:49:74:e1:dd:66:0f:31:47:c0:99:14:
13:60:b9:32:f1:12:6c:45:c3:57:92:92:1d:fa:be:aa:2f:3e:
69:58:7d:0c:8e:f4:da:dd:19:e6:31:ae:d8:5f:16:53:c1:76:
2a:56:84:3c:9f:a7:69:7e:50:dc:67:39:93:70:85:69:ca:9a:
76:f8:29:9b:0c:55:63:52:65:3f:90:b9:8a:ac:d8:8f:e4:ae:
44:b9:f2:7a:0a:3c:0e:b9:7f:e5:c5:ea:a0:a7:43:7b:d6:16:
76:c2:15:0f:01:08:1e:f2:a8:47:ce:a4:c2:ee:f1:7b:6e:f9:
db:68:5b:e5:88:ff:96:ad:ce:ff:b7:bd:b7:95:44:f3:d0:e4:
3d:95:6d:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUR2ch/hGoYbCk2AIhnXIEUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiMTlmM2Q3ZmZlYTk1NzI2MTUwMWU5MTY2NGZmNjgyM2Vk
OTM2YWQwHhcNMjUwMjE3MDMwMDQwWhcNMjUwMjE4MDMwMDQwWjAzMTEwLwYDVQQD
EygwNzk0MmE1ZmMzMDJiYmNjZDFmZTFhYjk1MzFhZWFjNjRiNzE0ODFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFmsOybHSyOqqROGxevB0laIB9Th
3gVxUuokS4/zbHaRNUdZ03n0fnftZjjI6tkwR23BJ0D0fplJiBLHAui24CuthxGB
3dzeKanXVgtR78+cZT5kUUCn1Xhz6JS53Q1qpTgL/YXRjThWnt2YV3Q7+jjsBuot
4W9r0VP3HoeX6supDpoWwyPvi/k4NUGWjvdBpq/c3GZ9JttxmI7xnQO4u2moEx40
xlNgWis2q1CXwOY6qd4nnCFpbIR1OX06yXLXRceP5eWGglckgeBW2iUBQzPECRBf
F4bBRt+wOINLRL32h85Nulatp0VJPuuCGzEsPGWBvkp3QI2iNx3XMnD86QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAeUKl/DArvM0f4auVMa6sZLcUgdMB8GA1UdIwQY
MBaAFIsZ89f/6pVyYVAekWZP9oI+2TatMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXhuejFfX3FsWEpoVUI2UlprXzJnajdaTnEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9kMWFkZTctZmJlMi00MjAzLTg1NTEt
YjY1NDJlNjQ0N2EwLzEvaXhuejFfX3FsWEpoVUI2UlprXzJnajdaTnEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9kMWFkZTctZmJlMi00MjAzLTg1NTEtYjY1NDJlNjQ0N2Ew
LzEvaXhuejFfX3FsWEpoVUI2UlprXzJnajdaTnEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfnMkD9v2
jiEQlJcW4odxS6G2pwYd9POr7Zz1Tf/thsCCrwiVO/ViVVmUu9gCqNEHv4+yiyxu
8907BSybYG2Ta2otA4ZGnz7Q0TtsN47ZdSPLm0ULaWtb+rSqJItU6ZA1yveHWUlV
qpIbIyMzCoMD0vZskEl04d1mDzFHwJkUE2C5MvESbEXDV5KSHfq+qi8+aVh9DI70
2t0Z5jGu2F8WU8F2KlaEPJ+naX5Q3Gc5k3CFacqadvgpmwxVY1JlP5C5iqzYj+Su
RLnyego8Drl/5cXqoKdDe9YWdsIVDwEIHvKoR86kwu7xe27522hb5Yj/lq3O/7e9
t5VE89DkPZVt3w==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:23:48 2025 by rpki-client