![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0fd3cf-4f07-49ad-99b7-676a4c6ebb39/1/b5yYlLET59Wj8LK8OdY2Bbi8rNM.mft
File: b5yYlLET59Wj8LK8OdY2Bbi8rNM.mft (raw, json)
Hash identifier: PT1SvbxyKqUoZw6IhwZXdUIHMWp5nvmhK4p+2pcNQrQ=
Subject key identifier: 92:31:9D:44:1D:6E:92:5C:1B:F3:E8:76:11:72:27:79:C3:2F:F6:BD
Authority key identifier: 6F:9C:98:94:B1:13:E7:D5:A3:F0:B2:BC:39:D6:36:05:B8:BC:AC:D3
Certificate issuer: /CN=6f9c9894b113e7d5a3f0b2bc39d63605b8bcacd3
Certificate serial: 0195116BD321C3E10646B3B7750B843308E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b5yYlLET59Wj8LK8OdY2Bbi8rNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0fd3cf-4f07-49ad-99b7-676a4c6ebb39/1/b5yYlLET59Wj8LK8OdY2Bbi8rNM.mft
Manifest number: 1153
Signing time: Mon 17 Feb 2025 01:00:33 +0000
Manifest this update: Mon 17 Feb 2025 01:00:33 +0000
Manifest next update: Tue 18 Feb 2025 01:00:33 +0000
Files and hashes: 1: b5yYlLET59Wj8LK8OdY2Bbi8rNM.crl (hash: 2redmtVPwFzBwFY1TOgTiiGM8Pfqk1Xh4GedvRZwWyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/0fd3cf-4f07-49ad-99b7-676a4c6ebb39/1/b5yYlLET59Wj8LK8OdY2Bbi8rNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/0fd3cf-4f07-49ad-99b7-676a4c6ebb39/1/b5yYlLET59Wj8LK8OdY2Bbi8rNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/b5yYlLET59Wj8LK8OdY2Bbi8rNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6b:d3:21:c3:e1:06:46:b3:b7:75:0b:84:33:08:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f9c9894b113e7d5a3f0b2bc39d63605b8bcacd3
Validity
Not Before: Feb 17 01:00:33 2025 GMT
Not After : Feb 18 01:00:33 2025 GMT
Subject: CN=92319d441d6e925c1bf3e87611722779c32ff6bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e9:17:65:fa:71:b2:42:6f:fb:3c:0f:36:69:
54:09:fb:84:0b:ec:b0:ea:e6:a9:6e:f6:9a:67:38:
61:f1:a8:00:e6:2d:01:43:0f:62:1b:c2:46:c8:58:
1a:93:7c:a3:c8:fe:4c:a0:f0:1f:85:aa:3c:71:e4:
ab:4e:0a:ad:a2:29:4c:2b:94:fe:a5:d9:c2:a5:9d:
f4:5b:99:52:a7:9b:86:1a:74:81:cf:9b:5c:cc:18:
af:a4:fc:27:00:99:19:b3:84:fd:6a:9c:da:49:02:
70:05:0d:52:b3:7b:63:52:4a:4e:f3:a3:0f:d2:d5:
24:01:7d:c7:cb:09:61:87:49:3d:bf:69:6b:5e:a0:
4b:63:0f:2c:9a:cf:98:b6:b3:8b:c0:48:23:ac:5d:
76:91:2c:c0:c7:68:6a:1a:ef:8d:c9:e5:ec:3a:9a:
cd:43:69:7e:3b:c7:8a:8f:a8:5f:73:21:82:12:40:
0b:6a:0a:d3:2c:38:ae:26:d7:b9:b5:ad:63:94:51:
60:f9:89:a2:b0:ba:3e:bd:9f:28:d6:75:36:40:bf:
c6:9c:4b:b8:43:65:f0:5c:18:c7:37:96:80:8f:0f:
cd:55:19:39:4c:59:d1:72:5f:06:82:7b:66:88:b8:
46:01:05:82:81:d5:88:45:02:39:3c:78:bb:67:bc:
c8:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:31:9D:44:1D:6E:92:5C:1B:F3:E8:76:11:72:27:79:C3:2F:F6:BD
X509v3 Authority Key Identifier:
keyid:6F:9C:98:94:B1:13:E7:D5:A3:F0:B2:BC:39:D6:36:05:B8:BC:AC:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5yYlLET59Wj8LK8OdY2Bbi8rNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0fd3cf-4f07-49ad-99b7-676a4c6ebb39/1/b5yYlLET59Wj8LK8OdY2Bbi8rNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0fd3cf-4f07-49ad-99b7-676a4c6ebb39/1/b5yYlLET59Wj8LK8OdY2Bbi8rNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:05:55:73:e5:9f:fd:e7:e5:a6:f5:1f:ba:13:b4:8f:8e:eb:
62:c1:34:1d:b4:a2:93:42:aa:df:ed:d8:cb:f1:18:64:c3:ca:
59:a1:ac:98:0f:2a:85:28:92:6d:9d:a6:9e:84:ef:72:d4:59:
3c:b8:57:72:fb:f5:73:d5:71:f9:5e:ff:2f:93:d7:a3:70:c5:
d6:34:6e:f5:4f:1c:52:8d:83:84:e9:07:f7:ed:b3:b1:53:21:
9d:f8:3e:a0:35:0f:96:d5:c2:08:4c:bc:4e:e8:59:b0:e5:05:
79:f1:a9:1b:91:b3:e5:ed:5f:7d:6f:4b:33:ca:87:3a:7f:8f:
da:f6:84:85:46:a7:da:11:06:7c:27:19:0d:6e:bb:e7:b2:ac:
19:0a:05:c3:cb:e1:6b:a1:9f:d2:a3:c9:9d:63:7a:1a:30:2a:
e4:c4:80:c6:8a:c8:e3:d0:93:60:d9:69:0b:02:0f:52:7a:6f:
1d:dd:ab:a2:c9:65:e7:d4:d7:c0:bc:58:40:a6:b8:ea:e6:0f:
87:a7:a5:47:72:a5:15:79:ff:f4:ca:b2:bd:67:f8:1c:b8:41:
63:77:5f:3c:61:ca:39:11:e8:11:db:23:45:c4:7b:ee:c2:aa:
2c:9a:95:45:65:39:ce:d2:60:2b:74:bd:6a:fd:78:7b:16:84:
7a:ef:ea:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURa9Mhw+EGRrO3dQuEMwjoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmOWM5ODk0YjExM2U3ZDVhM2YwYjJiYzM5ZDYzNjA1Yjhi
Y2FjZDMwHhcNMjUwMjE3MDEwMDMzWhcNMjUwMjE4MDEwMDMzWjAzMTEwLwYDVQQD
Eyg5MjMxOWQ0NDFkNmU5MjVjMWJmM2U4NzYxMTcyMjc3OWMzMmZmNmJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOkXZfpxskJv+zwPNmlUCfuEC+yw
6uapbvaaZzhh8agA5i0BQw9iG8JGyFgak3yjyP5MoPAfhao8ceSrTgqtoilMK5T+
pdnCpZ30W5lSp5uGGnSBz5tczBivpPwnAJkZs4T9apzaSQJwBQ1Ss3tjUkpO86MP
0tUkAX3Hywlhh0k9v2lrXqBLYw8sms+YtrOLwEgjrF12kSzAx2hqGu+NyeXsOprN
Q2l+O8eKj6hfcyGCEkALagrTLDiuJte5ta1jlFFg+YmisLo+vZ8o1nU2QL/GnEu4
Q2XwXBjHN5aAjw/NVRk5TFnRcl8GgntmiLhGAQWCgdWIRQI5PHi7Z7zI2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJIxnUQdbpJcG/PodhFyJ3nDL/a9MB8GA1UdIwQY
MBaAFG+cmJSxE+fVo/CyvDnWNgW4vKzTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjV5WWxMRVQ1OVdqOExLOE9kWTJCYmk4ck5NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8wZmQzY2YtNGYwNy00OWFkLTk5Yjct
Njc2YTRjNmViYjM5LzEvYjV5WWxMRVQ1OVdqOExLOE9kWTJCYmk4ck5NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC8wZmQzY2YtNGYwNy00OWFkLTk5YjctNjc2YTRjNmViYjM5
LzEvYjV5WWxMRVQ1OVdqOExLOE9kWTJCYmk4ck5NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGgVVc+Wf
/eflpvUfuhO0j47rYsE0HbSik0Kq3+3Yy/EYZMPKWaGsmA8qhSiSbZ2mnoTvctRZ
PLhXcvv1c9Vx+V7/L5PXo3DF1jRu9U8cUo2DhOkH9+2zsVMhnfg+oDUPltXCCEy8
TuhZsOUFefGpG5Gz5e1ffW9LM8qHOn+P2vaEhUan2hEGfCcZDW6757KsGQoFw8vh
a6Gf0qPJnWN6GjAq5MSAxorI49CTYNlpCwIPUnpvHd2rosll59TXwLxYQKa46uYP
h6elR3KlFXn/9MqyvWf4HLhBY3dfPGHKORHoEdsjRcR77sKqLJqVRWU5ztJgK3S9
av14exaEeu/qRQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:05:28 2025 by rpki-client