![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/c55cbc-e43d-40cb-844f-31c5137ec38a/1/q2TJrlviZApf1pRYanBMo0wgh78.mft
File: q2TJrlviZApf1pRYanBMo0wgh78.mft (raw, json)
Hash identifier: J9BrD60svl8d+l/AEizjSCvtCHU4vkjBDbL8AZgABKs=
Subject key identifier: 9A:51:31:33:B0:74:89:79:72:C3:94:14:DD:47:5F:10:D0:BF:B9:BA
Authority key identifier: AB:64:C9:AE:5B:E2:64:0A:5F:D6:94:58:6A:70:4C:A3:4C:20:87:BF
Certificate issuer: /CN=ab64c9ae5be2640a5fd694586a704ca34c2087bf
Certificate serial: 01901EFD9163CB121977C581E797FACF38AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q2TJrlviZApf1pRYanBMo0wgh78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/c55cbc-e43d-40cb-844f-31c5137ec38a/1/q2TJrlviZApf1pRYanBMo0wgh78.mft
Manifest number: 11C7
Signing time: Sun 16 Jun 2024 03:00:52 +0000
Manifest this update: Sun 16 Jun 2024 03:00:52 +0000
Manifest next update: Mon 17 Jun 2024 03:00:52 +0000
Files and hashes: 1: 8EkUapj8IF7YIl3XI2tkWtq4w5Y.roa (hash: a5v1nvhFUtyIEd8TJdGis5g4iu9eaEtbSXXEy3xSx+g=)
2: q2TJrlviZApf1pRYanBMo0wgh78.crl (hash: KVnZte2Z4Vwe4oQAhlVpzAaU4Td8KHWe3c8QEUyiURQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/c55cbc-e43d-40cb-844f-31c5137ec38a/1/q2TJrlviZApf1pRYanBMo0wgh78.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/c55cbc-e43d-40cb-844f-31c5137ec38a/1/q2TJrlviZApf1pRYanBMo0wgh78.mft
rsync://rpki.ripe.net/repository/DEFAULT/q2TJrlviZApf1pRYanBMo0wgh78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1e:fd:91:63:cb:12:19:77:c5:81:e7:97:fa:cf:38:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab64c9ae5be2640a5fd694586a704ca34c2087bf
Validity
Not Before: Jun 16 03:00:52 2024 GMT
Not After : Jun 17 03:00:52 2024 GMT
Subject: CN=9a513133b074897972c39414dd475f10d0bfb9ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d5:81:3f:fd:81:4b:b7:27:f9:10:05:51:c6:
7e:3a:fb:74:a8:d3:93:63:28:b4:56:3f:f2:92:e1:
51:42:fd:87:4a:7a:1c:2e:67:c6:e3:ed:0a:b2:44:
bd:d4:d8:df:1c:b1:a3:7d:29:c0:bc:91:57:ef:0a:
4b:e3:08:3f:ea:ba:37:a2:a6:be:db:2f:ca:fb:bb:
39:3c:37:8e:f9:b3:ae:80:20:dd:05:4c:c0:6b:57:
95:07:a4:e6:f3:96:8a:c1:70:b1:bd:df:b0:d8:54:
4c:3f:ca:48:db:df:32:98:64:04:5d:e1:39:4e:7e:
52:90:38:23:09:43:8c:5d:7a:bc:9d:0f:22:08:c5:
6a:4c:ca:69:a5:b9:7e:9c:b8:cc:c6:de:47:f2:96:
9a:3f:22:e7:65:45:30:27:76:36:1a:79:e7:31:14:
31:5f:b6:d2:f6:36:a3:aa:d7:b3:f7:83:16:9f:50:
7e:7b:26:ef:42:10:8a:1e:6f:3a:02:0e:c9:78:84:
ed:63:c4:7a:57:0f:89:69:fc:5d:0a:b6:33:73:d7:
c9:8e:06:ac:8c:94:d3:5f:d6:43:18:81:80:e9:90:
63:a9:7b:bf:ed:c4:3c:7a:ee:6a:11:91:27:99:12:
e8:ee:52:2f:5d:6b:2d:13:d7:44:a2:81:e0:9c:35:
ed:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:51:31:33:B0:74:89:79:72:C3:94:14:DD:47:5F:10:D0:BF:B9:BA
X509v3 Authority Key Identifier:
keyid:AB:64:C9:AE:5B:E2:64:0A:5F:D6:94:58:6A:70:4C:A3:4C:20:87:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q2TJrlviZApf1pRYanBMo0wgh78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c55cbc-e43d-40cb-844f-31c5137ec38a/1/q2TJrlviZApf1pRYanBMo0wgh78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c55cbc-e43d-40cb-844f-31c5137ec38a/1/q2TJrlviZApf1pRYanBMo0wgh78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:9f:5a:74:03:15:41:70:45:1d:68:23:3e:bc:7c:61:6d:92:
84:7c:cb:29:73:b9:86:50:bb:fe:87:c0:58:f0:ca:4a:d5:0a:
4c:b2:cb:83:23:38:07:72:1e:e9:e2:30:33:c4:98:62:bb:15:
99:db:30:3c:bd:6a:6f:84:f4:66:a1:49:19:d3:ab:fa:7d:3c:
3f:8f:20:b8:5e:ee:95:06:36:8e:98:a2:ed:c7:32:0a:2e:38:
a1:5a:90:79:63:ef:29:e9:30:06:f0:8d:69:6b:c6:10:81:81:
17:60:a1:2e:60:44:fe:a9:85:13:2c:8f:70:26:61:ef:d9:58:
80:0c:01:7f:55:56:b3:6f:29:97:51:15:23:a7:6a:45:b4:5d:
68:c5:95:fd:de:37:c0:37:e0:5d:32:e8:72:fc:79:d6:8c:3f:
c6:99:51:13:04:45:d3:60:a8:3f:bf:64:e2:78:48:28:ba:8d:
13:da:41:86:90:71:a9:8a:51:42:53:28:1f:c6:b3:d8:08:bd:
01:68:7a:9d:29:34:10:db:23:2c:52:4f:d7:da:26:23:c6:77:
5d:c4:35:91:8a:55:c7:98:47:f2:89:5a:43:68:5e:83:89:b6:
a0:7e:ad:0f:c8:0a:37:2b:6e:42:91:3f:49:90:9a:66:9c:71:
36:6d:18:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAe/ZFjyxIZd8WB55f6zzivMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiNjRjOWFlNWJlMjY0MGE1ZmQ2OTQ1ODZhNzA0Y2EzNGMy
MDg3YmYwHhcNMjQwNjE2MDMwMDUyWhcNMjQwNjE3MDMwMDUyWjAzMTEwLwYDVQQD
Eyg5YTUxMzEzM2IwNzQ4OTc5NzJjMzk0MTRkZDQ3NWYxMGQwYmZiOWJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydWBP/2BS7cn+RAFUcZ+Ovt0qNOT
Yyi0Vj/ykuFRQv2HSnocLmfG4+0KskS91NjfHLGjfSnAvJFX7wpL4wg/6ro3oqa+
2y/K+7s5PDeO+bOugCDdBUzAa1eVB6Tm85aKwXCxvd+w2FRMP8pI298ymGQEXeE5
Tn5SkDgjCUOMXXq8nQ8iCMVqTMpppbl+nLjMxt5H8paaPyLnZUUwJ3Y2GnnnMRQx
X7bS9jajqtez94MWn1B+eybvQhCKHm86Ag7JeITtY8R6Vw+JafxdCrYzc9fJjgas
jJTTX9ZDGIGA6ZBjqXu/7cQ8eu5qEZEnmRLo7lIvXWstE9dEooHgnDXtPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJpRMTOwdIl5csOUFN1HXxDQv7m6MB8GA1UdIwQY
MBaAFKtkya5b4mQKX9aUWGpwTKNMIIe/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTJUSnJsdmlaQXBmMXBSWWFuQk1vMHdnaDc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9jNTVjYmMtZTQzZC00MGNiLTg0NGYt
MzFjNTEzN2VjMzhhLzEvcTJUSnJsdmlaQXBmMXBSWWFuQk1vMHdnaDc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9jNTVjYmMtZTQzZC00MGNiLTg0NGYtMzFjNTEzN2VjMzhh
LzEvcTJUSnJsdmlaQXBmMXBSWWFuQk1vMHdnaDc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqZ9adAMV
QXBFHWgjPrx8YW2ShHzLKXO5hlC7/ofAWPDKStUKTLLLgyM4B3Ie6eIwM8SYYrsV
mdswPL1qb4T0ZqFJGdOr+n08P48guF7ulQY2jpii7ccyCi44oVqQeWPvKekwBvCN
aWvGEIGBF2ChLmBE/qmFEyyPcCZh79lYgAwBf1VWs28pl1EVI6dqRbRdaMWV/d43
wDfgXTLocvx51ow/xplREwRF02CoP79k4nhIKLqNE9pBhpBxqYpRQlMoH8az2Ai9
AWh6nSk0ENsjLFJP19omI8Z3XcQ1kYpVx5hH8olaQ2heg4m2oH6tD8gKNytuQpE/
SZCaZpxxNm0Y+Q==
-----END CERTIFICATE-----
Generated at Sun Jun 16 04:45:15 2024 by rpki-client on console-fra.rpki-client.org