![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/217a30-8ee1-4913-a127-576d403c918f/1/KPev7E0_BvgNaHKm1iRs0B5z1qY.mft
File: KPev7E0_BvgNaHKm1iRs0B5z1qY.mft (raw, json)
Hash identifier: YBpZ1A0KSXTxqsm7UIDtLVts5J7jDHg09yANB2XQANg=
Subject key identifier: 8D:28:81:07:67:30:4B:69:23:F4:9B:43:F4:2B:71:7B:58:5F:1F:30
Authority key identifier: 28:F7:AF:EC:4D:3F:06:F8:0D:68:72:A6:D6:24:6C:D0:1E:73:D6:A6
Certificate issuer: /CN=28f7afec4d3f06f80d6872a6d6246cd01e73d6a6
Certificate serial: 0190448CC2AB8CF24C59442A030E81C34054
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KPev7E0_BvgNaHKm1iRs0B5z1qY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/217a30-8ee1-4913-a127-576d403c918f/1/KPev7E0_BvgNaHKm1iRs0B5z1qY.mft
Manifest number: 11D6
Signing time: Sun 23 Jun 2024 10:03:13 +0000
Manifest this update: Sun 23 Jun 2024 10:03:13 +0000
Manifest next update: Mon 24 Jun 2024 10:03:13 +0000
Files and hashes: 1: KPev7E0_BvgNaHKm1iRs0B5z1qY.crl (hash: e6fNFG+FdAPtzDYomeN6k818/U1TD3vhino1Md+GFEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/217a30-8ee1-4913-a127-576d403c918f/1/KPev7E0_BvgNaHKm1iRs0B5z1qY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/217a30-8ee1-4913-a127-576d403c918f/1/KPev7E0_BvgNaHKm1iRs0B5z1qY.mft
rsync://rpki.ripe.net/repository/DEFAULT/KPev7E0_BvgNaHKm1iRs0B5z1qY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 10:03:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:44:8c:c2:ab:8c:f2:4c:59:44:2a:03:0e:81:c3:40:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28f7afec4d3f06f80d6872a6d6246cd01e73d6a6
Validity
Not Before: Jun 23 10:03:13 2024 GMT
Not After : Jun 24 10:03:13 2024 GMT
Subject: CN=8d28810767304b6923f49b43f42b717b585f1f30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:d5:b2:9e:ee:d7:0f:5d:7d:c9:2b:0b:73:87:
ff:35:e9:4b:ce:32:4d:86:20:f3:41:a0:ba:37:b4:
e9:34:ab:de:b4:4f:da:36:84:9b:47:2d:2e:df:a6:
70:9b:73:df:e1:7c:c1:a9:47:6a:f7:26:7c:6b:fb:
87:c9:16:fd:c3:b0:f2:ed:cd:24:f7:af:8f:de:10:
92:d5:2e:47:fd:21:e3:6a:bb:75:b6:24:08:de:10:
db:19:d8:95:0f:24:c5:a1:8c:85:0f:1e:bc:c5:48:
80:97:81:da:c2:0c:bd:3c:38:a0:53:b8:bc:7c:8c:
40:fa:17:a4:9e:fd:62:1c:ac:85:65:4a:f1:05:58:
48:c8:f3:cb:47:1d:d2:d3:7a:ae:6c:03:df:1a:9a:
7c:cc:24:1b:de:3b:09:ff:9e:46:b7:93:df:b7:fc:
f9:bd:27:02:c9:a5:22:f2:21:7e:25:cf:42:23:14:
9d:70:97:a4:bd:48:a9:66:2e:ba:b3:d7:7c:f8:c4:
fa:0c:8c:70:2d:13:9b:c4:bd:e4:36:7e:12:0d:52:
d8:4e:e3:a9:ee:80:b9:e8:9c:85:23:d4:43:c1:1d:
44:cb:2b:9e:92:c9:24:af:f2:41:47:8e:12:80:60:
58:d2:5f:94:65:a8:1a:5a:9b:cc:b7:91:15:ae:ac:
8d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:28:81:07:67:30:4B:69:23:F4:9B:43:F4:2B:71:7B:58:5F:1F:30
X509v3 Authority Key Identifier:
keyid:28:F7:AF:EC:4D:3F:06:F8:0D:68:72:A6:D6:24:6C:D0:1E:73:D6:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KPev7E0_BvgNaHKm1iRs0B5z1qY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/217a30-8ee1-4913-a127-576d403c918f/1/KPev7E0_BvgNaHKm1iRs0B5z1qY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/217a30-8ee1-4913-a127-576d403c918f/1/KPev7E0_BvgNaHKm1iRs0B5z1qY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:1d:6c:8e:a1:57:0c:0d:b4:bd:0b:06:ab:f0:6d:2a:a5:e6:
c5:53:27:b6:33:76:07:33:0e:c0:76:a6:63:cd:96:b9:54:09:
64:0a:0b:16:ff:3b:84:72:7a:34:48:f9:c1:a7:6e:bb:e1:88:
ef:ee:58:a6:06:ad:29:65:55:a0:81:6c:ce:ec:84:78:11:a9:
15:3d:17:fb:c0:ab:5b:3f:d5:eb:67:77:96:20:bb:bc:06:62:
8f:e1:49:51:5d:2e:64:cd:34:c2:5c:7b:5a:75:1e:a9:e3:c6:
1b:72:77:48:25:ef:04:92:d2:f6:7a:68:25:bf:cc:b2:81:1f:
4a:02:25:ac:41:c0:77:1c:2e:af:2a:5e:89:9f:48:36:58:fb:
fd:9a:a8:5c:65:60:89:e7:23:ff:1a:29:98:27:d8:ec:c4:ef:
97:83:d2:6f:22:ec:ae:43:a1:07:31:3b:5e:2e:62:15:5e:37:
69:cd:c3:3d:6a:a0:c1:75:d1:c6:d7:fb:6c:e4:9c:1c:9f:eb:
b4:42:ec:fa:d3:e3:1a:35:2f:ec:d6:83:55:37:ef:e2:8a:68:
9a:bb:eb:b2:b3:e1:41:72:c3:af:19:c9:b2:dd:e4:fa:03:02:
3a:c6:e3:d6:de:f7:d7:27:1d:5c:ac:d7:0e:c2:ea:5a:52:71:
c0:86:d6:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBEjMKrjPJMWUQqAw6Bw0BUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4ZjdhZmVjNGQzZjA2ZjgwZDY4NzJhNmQ2MjQ2Y2QwMWU3
M2Q2YTYwHhcNMjQwNjIzMTAwMzEzWhcNMjQwNjI0MTAwMzEzWjAzMTEwLwYDVQQD
Eyg4ZDI4ODEwNzY3MzA0YjY5MjNmNDliNDNmNDJiNzE3YjU4NWYxZjMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8dWynu7XD119ySsLc4f/NelLzjJN
hiDzQaC6N7TpNKvetE/aNoSbRy0u36Zwm3Pf4XzBqUdq9yZ8a/uHyRb9w7Dy7c0k
96+P3hCS1S5H/SHjart1tiQI3hDbGdiVDyTFoYyFDx68xUiAl4Hawgy9PDigU7i8
fIxA+heknv1iHKyFZUrxBVhIyPPLRx3S03qubAPfGpp8zCQb3jsJ/55Gt5Pft/z5
vScCyaUi8iF+Jc9CIxSdcJekvUipZi66s9d8+MT6DIxwLRObxL3kNn4SDVLYTuOp
7oC56JyFI9RDwR1Eyyuekskkr/JBR44SgGBY0l+UZagaWpvMt5EVrqyN4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI0ogQdnMEtpI/SbQ/QrcXtYXx8wMB8GA1UdIwQY
MBaAFCj3r+xNPwb4DWhyptYkbNAec9amMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1BldjdFMF9CdmdOYUhLbTFpUnMwQjV6MXFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8yMTdhMzAtOGVlMS00OTEzLWExMjct
NTc2ZDQwM2M5MThmLzEvS1BldjdFMF9CdmdOYUhLbTFpUnMwQjV6MXFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS8yMTdhMzAtOGVlMS00OTEzLWExMjctNTc2ZDQwM2M5MThm
LzEvS1BldjdFMF9CdmdOYUhLbTFpUnMwQjV6MXFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgx1sjqFX
DA20vQsGq/BtKqXmxVMntjN2BzMOwHamY82WuVQJZAoLFv87hHJ6NEj5waduu+GI
7+5YpgatKWVVoIFszuyEeBGpFT0X+8CrWz/V62d3liC7vAZij+FJUV0uZM00wlx7
WnUeqePGG3J3SCXvBJLS9npoJb/MsoEfSgIlrEHAdxwurypeiZ9INlj7/ZqoXGVg
iecj/xopmCfY7MTvl4PSbyLsrkOhBzE7Xi5iFV43ac3DPWqgwXXRxtf7bOScHJ/r
tELs+tPjGjUv7NaDVTfv4opomrvrsrPhQXLDrxnJst3k+gMCOsbj1t731ycdXKzX
DsLqWlJxwIbWOQ==
-----END CERTIFICATE-----
Generated at Sun Jun 23 18:03:37 2024 by rpki-client on console-fra.rpki-client.org