![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/34fd08-ce76-4bc3-87c0-36d4d7f07c8a/1/qYI63d9sNfBbfByuB5BL_58vass.mft
File: qYI63d9sNfBbfByuB5BL_58vass.mft (raw, json)
Hash identifier: nmbkgek8zzBqEW9zOl/sfKTLmel9zL7CI/c7yZ+x8hs=
Subject key identifier: AC:98:EA:D1:37:4E:6E:0E:5B:1D:8C:B1:92:CE:B0:4D:05:3E:E0:CF
Authority key identifier: A9:82:3A:DD:DF:6C:35:F0:5B:7C:1C:AE:07:90:4B:FF:9F:2F:6A:CB
Certificate issuer: /CN=a9823adddf6c35f05b7c1cae07904bff9f2f6acb
Certificate serial: 01901C6A6B725AB89C4B239253FC7D6E1BAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYI63d9sNfBbfByuB5BL_58vass.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/34fd08-ce76-4bc3-87c0-36d4d7f07c8a/1/qYI63d9sNfBbfByuB5BL_58vass.mft
Manifest number: 063B
Signing time: Sat 15 Jun 2024 15:00:54 +0000
Manifest this update: Sat 15 Jun 2024 15:00:54 +0000
Manifest next update: Sun 16 Jun 2024 15:00:54 +0000
Files and hashes: 1: qYI63d9sNfBbfByuB5BL_58vass.crl (hash: vkQm2qmABn/SK7wxYD80m3BOLaq8MFv+amZ4t1re0qI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/34fd08-ce76-4bc3-87c0-36d4d7f07c8a/1/qYI63d9sNfBbfByuB5BL_58vass.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/34fd08-ce76-4bc3-87c0-36d4d7f07c8a/1/qYI63d9sNfBbfByuB5BL_58vass.mft
rsync://rpki.ripe.net/repository/DEFAULT/qYI63d9sNfBbfByuB5BL_58vass.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1c:6a:6b:72:5a:b8:9c:4b:23:92:53:fc:7d:6e:1b:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9823adddf6c35f05b7c1cae07904bff9f2f6acb
Validity
Not Before: Jun 15 15:00:54 2024 GMT
Not After : Jun 16 15:00:54 2024 GMT
Subject: CN=ac98ead1374e6e0e5b1d8cb192ceb04d053ee0cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d6:45:8d:a0:df:5c:a7:f4:39:ee:f0:f8:94:
af:bc:e7:f2:bc:51:55:37:3d:70:ed:7a:6d:26:8e:
98:3e:d5:65:0a:05:57:04:65:7e:95:59:a2:01:81:
5a:b2:3e:c1:79:72:8b:2d:02:22:e2:7d:28:23:6b:
8f:73:69:c3:84:1f:07:44:93:82:d5:04:96:22:51:
f9:c4:c2:72:fa:c3:25:4c:d6:d7:a6:90:15:1f:ae:
66:03:a8:79:a4:a1:a7:c8:d1:46:64:54:2c:16:79:
8a:13:0c:ba:70:c2:3f:f4:8b:83:15:ff:28:e3:2b:
41:b7:23:0a:09:82:d1:b6:39:c6:a6:a1:e1:64:4d:
de:84:5e:e6:32:a0:7e:00:11:bb:32:e9:bc:d8:58:
48:56:49:22:23:57:cf:b0:2e:d2:20:81:0e:4d:a4:
d0:05:f9:c7:a4:e9:1d:59:72:91:73:11:71:3f:ba:
16:c9:17:c1:30:f1:48:a4:e8:60:15:b0:c2:6a:2f:
c8:01:f7:69:e5:4b:92:42:b9:9e:3b:b8:aa:d1:07:
ee:bf:45:9a:ff:54:8a:c7:c4:61:52:64:2a:77:25:
03:5d:38:1e:df:0f:2b:f3:6b:66:32:2b:7a:e2:45:
3b:cd:37:59:53:cd:7e:b1:d0:ba:f4:f0:85:84:27:
ef:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:98:EA:D1:37:4E:6E:0E:5B:1D:8C:B1:92:CE:B0:4D:05:3E:E0:CF
X509v3 Authority Key Identifier:
keyid:A9:82:3A:DD:DF:6C:35:F0:5B:7C:1C:AE:07:90:4B:FF:9F:2F:6A:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYI63d9sNfBbfByuB5BL_58vass.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/34fd08-ce76-4bc3-87c0-36d4d7f07c8a/1/qYI63d9sNfBbfByuB5BL_58vass.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/34fd08-ce76-4bc3-87c0-36d4d7f07c8a/1/qYI63d9sNfBbfByuB5BL_58vass.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:c8:0f:fd:90:21:46:fb:20:bf:bd:37:13:37:26:36:dc:87:
f3:b7:b7:42:3f:b3:f3:f5:34:46:6f:4f:44:e6:ea:77:d7:69:
cf:d4:30:2e:9a:83:de:41:42:bd:6f:9c:08:b1:87:d9:5a:83:
7f:66:8f:a6:19:28:fd:5c:fd:e4:7d:41:6d:88:e0:3b:15:9a:
1c:3b:7d:b4:e8:9c:61:da:54:b3:6b:fe:2c:b9:08:98:b9:84:
ac:c4:7a:e6:cc:2d:7c:cb:91:bd:f2:f7:c5:c4:17:ce:ba:45:
97:a3:aa:d4:4f:b3:4f:49:e5:5f:63:a7:9e:fa:8a:68:25:30:
09:1c:21:1e:ae:4d:d1:69:ce:06:68:eb:9a:98:20:7e:1e:bc:
aa:96:33:29:b5:07:dc:a9:5d:e5:fe:40:b8:3f:1b:05:9a:fe:
3a:df:05:86:dc:bd:1f:38:03:d2:7f:da:fd:49:00:a9:78:5d:
e0:e3:73:4f:8f:f6:1f:a9:3a:f3:e3:da:a7:67:c0:a2:55:7c:
20:9c:b5:70:16:4b:c9:b3:d8:4e:26:60:4d:19:4e:c3:02:70:
2d:46:6c:dc:b8:40:31:e3:45:44:47:65:df:4d:13:c2:58:cf:
5a:d0:05:48:dd:a2:e3:b6:a2:46:34:1f:02:7f:e9:f3:77:f9:
2f:a4:97:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAcamtyWricSyOSU/x9bhutMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5ODIzYWRkZGY2YzM1ZjA1YjdjMWNhZTA3OTA0YmZmOWYy
ZjZhY2IwHhcNMjQwNjE1MTUwMDU0WhcNMjQwNjE2MTUwMDU0WjAzMTEwLwYDVQQD
EyhhYzk4ZWFkMTM3NGU2ZTBlNWIxZDhjYjE5MmNlYjA0ZDA1M2VlMGNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdZFjaDfXKf0Oe7w+JSvvOfyvFFV
Nz1w7XptJo6YPtVlCgVXBGV+lVmiAYFasj7BeXKLLQIi4n0oI2uPc2nDhB8HRJOC
1QSWIlH5xMJy+sMlTNbXppAVH65mA6h5pKGnyNFGZFQsFnmKEwy6cMI/9IuDFf8o
4ytBtyMKCYLRtjnGpqHhZE3ehF7mMqB+ABG7Mum82FhIVkkiI1fPsC7SIIEOTaTQ
BfnHpOkdWXKRcxFxP7oWyRfBMPFIpOhgFbDCai/IAfdp5UuSQrmeO7iq0Qfuv0Wa
/1SKx8RhUmQqdyUDXTge3w8r82tmMit64kU7zTdZU81+sdC69PCFhCfvSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKyY6tE3Tm4OWx2MsZLOsE0FPuDPMB8GA1UdIwQY
MBaAFKmCOt3fbDXwW3wcrgeQS/+fL2rLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVlJNjNkOXNOZkJiZkJ5dUI1QkxfNTh2YXNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8zNGZkMDgtY2U3Ni00YmMzLTg3YzAt
MzZkNGQ3ZjA3YzhhLzEvcVlJNjNkOXNOZkJiZkJ5dUI1QkxfNTh2YXNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS8zNGZkMDgtY2U3Ni00YmMzLTg3YzAtMzZkNGQ3ZjA3Yzhh
LzEvcVlJNjNkOXNOZkJiZkJ5dUI1QkxfNTh2YXNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALMgP/ZAh
Rvsgv703EzcmNtyH87e3Qj+z8/U0Rm9PRObqd9dpz9QwLpqD3kFCvW+cCLGH2VqD
f2aPphko/Vz95H1BbYjgOxWaHDt9tOicYdpUs2v+LLkImLmErMR65swtfMuRvfL3
xcQXzrpFl6Oq1E+zT0nlX2OnnvqKaCUwCRwhHq5N0WnOBmjrmpggfh68qpYzKbUH
3Kld5f5AuD8bBZr+Ot8Fhty9HzgD0n/a/UkAqXhd4ONzT4/2H6k68+Pap2fAolV8
IJy1cBZLybPYTiZgTRlOwwJwLUZs3LhAMeNFREdl300TwljPWtAFSN2i47aiRjQf
An/p83f5L6SX2Q==
-----END CERTIFICATE-----
Generated at Sat Jun 15 19:43:56 2024 by rpki-client on console-fra.rpki-client.org