![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/abd9eb-e070-4a61-b403-53eac0b0acb5/1/rNbaLhYbceF0IP0x2l9D5VWNxH8.mft
File: rNbaLhYbceF0IP0x2l9D5VWNxH8.mft (raw, json)
Hash identifier: u6Lg0Bjef5AbcSj/E+R/zEHnzNqcmyJ3g3U7Wd6yru8=
Subject key identifier: 8B:E6:5A:97:62:CC:7A:05:0D:80:86:8D:24:23:29:31:0C:3E:EF:28
Authority key identifier: AC:D6:DA:2E:16:1B:71:E1:74:20:FD:31:DA:5F:43:E5:55:8D:C4:7F
Certificate issuer: /CN=acd6da2e161b71e17420fd31da5f43e5558dc47f
Certificate serial: 01901BFF1717B40BAE62F6965E52E97A3D22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rNbaLhYbceF0IP0x2l9D5VWNxH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/abd9eb-e070-4a61-b403-53eac0b0acb5/1/rNbaLhYbceF0IP0x2l9D5VWNxH8.mft
Manifest number: 025B
Signing time: Sat 15 Jun 2024 13:03:40 +0000
Manifest this update: Sat 15 Jun 2024 13:03:40 +0000
Manifest next update: Sun 16 Jun 2024 13:03:40 +0000
Files and hashes: 1: rNbaLhYbceF0IP0x2l9D5VWNxH8.crl (hash: j1hb5jZlwm+lF163lsuGb3cY4T0exEVmD2h6y0c3mX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/abd9eb-e070-4a61-b403-53eac0b0acb5/1/rNbaLhYbceF0IP0x2l9D5VWNxH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/abd9eb-e070-4a61-b403-53eac0b0acb5/1/rNbaLhYbceF0IP0x2l9D5VWNxH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rNbaLhYbceF0IP0x2l9D5VWNxH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 11:16:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1b:ff:17:17:b4:0b:ae:62:f6:96:5e:52:e9:7a:3d:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acd6da2e161b71e17420fd31da5f43e5558dc47f
Validity
Not Before: Jun 15 13:03:40 2024 GMT
Not After : Jun 16 13:03:40 2024 GMT
Subject: CN=8be65a9762cc7a050d80868d242329310c3eef28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:bc:d3:df:71:b4:e7:ff:b8:ad:a8:0f:39:c1:
aa:6a:c4:4e:2b:5a:e1:60:aa:09:a7:e0:c7:31:f1:
87:d9:9a:ba:e7:b7:03:7b:bf:46:47:82:89:ad:66:
57:16:e2:49:56:9c:cf:f8:9c:55:c7:25:68:3a:82:
93:10:cd:0b:b7:0a:27:a9:17:3a:ee:81:68:7f:0b:
e4:22:2e:cf:df:f4:5b:b9:a7:9b:8f:f8:65:4c:f3:
d8:e5:b0:76:1f:ef:a0:a4:34:22:ea:4f:52:6f:99:
a5:77:51:3b:2b:e2:59:5e:e4:73:6a:d7:81:ca:9c:
b4:99:25:f1:de:04:6d:2b:ec:74:6c:b5:61:06:e0:
05:2c:de:c4:99:10:70:18:d6:54:d5:e1:01:da:0d:
4e:5c:2d:bf:ff:ef:e9:02:9b:5a:60:ee:0b:cc:86:
3c:74:38:78:af:f3:ec:bf:6d:39:41:91:43:6d:b8:
d2:2e:c8:37:11:82:52:ce:01:88:0c:64:92:a8:5e:
4a:9b:20:54:50:6d:8f:96:ab:ac:ce:32:1f:30:33:
a4:74:e0:f0:10:70:6f:a6:cc:5a:b7:38:04:7c:cb:
06:53:9e:99:5b:ff:77:cd:c1:10:f9:59:0a:1b:37:
67:79:5f:5b:ee:b9:ca:9c:1b:c7:92:e8:fe:96:de:
3c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:E6:5A:97:62:CC:7A:05:0D:80:86:8D:24:23:29:31:0C:3E:EF:28
X509v3 Authority Key Identifier:
keyid:AC:D6:DA:2E:16:1B:71:E1:74:20:FD:31:DA:5F:43:E5:55:8D:C4:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rNbaLhYbceF0IP0x2l9D5VWNxH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/abd9eb-e070-4a61-b403-53eac0b0acb5/1/rNbaLhYbceF0IP0x2l9D5VWNxH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/abd9eb-e070-4a61-b403-53eac0b0acb5/1/rNbaLhYbceF0IP0x2l9D5VWNxH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:16:d0:5a:17:b6:4f:ee:36:87:4d:40:a9:45:09:ff:93:7b:
4e:3d:4c:bd:7c:2f:5b:88:e2:3e:4b:79:fa:0c:df:68:d3:e2:
43:1d:dd:ea:0f:6a:bd:ad:fd:44:7f:2a:28:65:a9:b1:96:22:
8d:96:aa:da:a6:36:f5:24:a3:2f:83:c9:3a:39:3e:09:29:9d:
a8:6f:76:de:01:c2:95:fe:48:16:d7:07:7d:7e:15:80:74:45:
9c:a3:6b:ff:fa:6e:10:1f:33:b3:41:dc:d4:a5:83:ae:c4:72:
2b:d2:66:72:cf:ef:34:ed:72:55:b9:b1:49:0a:ab:e0:46:ab:
e8:fd:2e:16:22:42:91:7f:ff:94:5d:f9:9a:e8:3f:2a:c1:f9:
34:93:6b:71:b6:31:35:a2:75:4e:37:53:72:ab:6f:fb:14:bc:
dd:6b:15:2b:19:bd:87:8b:27:c4:68:da:67:40:1b:82:51:ba:
f9:02:fd:28:31:05:99:c9:4a:26:7a:dc:23:d3:82:77:df:fc:
60:60:d7:ba:45:64:2b:43:ef:6a:a5:8c:c8:8a:1b:9f:c1:0e:
55:30:d7:aa:30:b4:29:18:92:4e:46:5e:57:74:45:50:8b:d4:
cf:2f:4c:28:0c:08:50:30:d1:b0:16:8b:e1:34:49:02:e8:12:
fc:1f:86:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAb/xcXtAuuYvaWXlLpej0iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjZDZkYTJlMTYxYjcxZTE3NDIwZmQzMWRhNWY0M2U1NTU4
ZGM0N2YwHhcNMjQwNjE1MTMwMzQwWhcNMjQwNjE2MTMwMzQwWjAzMTEwLwYDVQQD
Eyg4YmU2NWE5NzYyY2M3YTA1MGQ4MDg2OGQyNDIzMjkzMTBjM2VlZjI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbzT33G05/+4ragPOcGqasROK1rh
YKoJp+DHMfGH2Zq657cDe79GR4KJrWZXFuJJVpzP+JxVxyVoOoKTEM0LtwonqRc6
7oFofwvkIi7P3/Rbuaebj/hlTPPY5bB2H++gpDQi6k9Sb5mld1E7K+JZXuRzateB
ypy0mSXx3gRtK+x0bLVhBuAFLN7EmRBwGNZU1eEB2g1OXC2//+/pAptaYO4LzIY8
dDh4r/Psv205QZFDbbjSLsg3EYJSzgGIDGSSqF5KmyBUUG2PlquszjIfMDOkdODw
EHBvpsxatzgEfMsGU56ZW/93zcEQ+VkKGzdneV9b7rnKnBvHkuj+lt48YwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIvmWpdizHoFDYCGjSQjKTEMPu8oMB8GA1UdIwQY
MBaAFKzW2i4WG3HhdCD9MdpfQ+VVjcR/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvck5iYUxoWWJjZUYwSVAweDJsOUQ1VldOeEg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9hYmQ5ZWItZTA3MC00YTYxLWI0MDMt
NTNlYWMwYjBhY2I1LzEvck5iYUxoWWJjZUYwSVAweDJsOUQ1VldOeEg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9hYmQ5ZWItZTA3MC00YTYxLWI0MDMtNTNlYWMwYjBhY2I1
LzEvck5iYUxoWWJjZUYwSVAweDJsOUQ1VldOeEg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMhbQWhe2
T+42h01AqUUJ/5N7Tj1MvXwvW4jiPkt5+gzfaNPiQx3d6g9qva39RH8qKGWpsZYi
jZaq2qY29SSjL4PJOjk+CSmdqG923gHClf5IFtcHfX4VgHRFnKNr//puEB8zs0Hc
1KWDrsRyK9Jmcs/vNO1yVbmxSQqr4Ear6P0uFiJCkX//lF35mug/KsH5NJNrcbYx
NaJ1TjdTcqtv+xS83WsVKxm9h4snxGjaZ0AbglG6+QL9KDEFmclKJnrcI9OCd9/8
YGDXukVkK0PvaqWMyIobn8EOVTDXqjC0KRiSTkZeV3RFUIvUzy9MKAwIUDDRsBaL
4TRJAugS/B+Gww==
-----END CERTIFICATE-----
Generated at Sat Jun 15 17:26:47 2024 by rpki-client on console-ams.rpki-client.org