![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.mft
File: Xpub7Y-NPVebsFUuT8S4GYaGHmQ.mft (raw, json)
Hash identifier: d2ExF9G9HmbhcFrUDVZYA8S/O+jbxxDUcp2gbRrSDQY=
Subject key identifier: 76:7B:1F:F1:0D:EF:A2:99:BF:0F:42:0B:5F:6A:DF:B9:00:8E:20:D8
Authority key identifier: 5E:9B:9B:ED:8F:8D:3D:57:9B:B0:55:2E:4F:C4:B8:19:86:86:1E:64
Certificate issuer: /CN=5e9b9bed8f8d3d579bb0552e4fc4b81986861e64
Certificate serial: 019048D584F02A929980B62D12E0E30DD498
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.mft
Manifest number: 0C99
Signing time: Mon 24 Jun 2024 06:01:11 +0000
Manifest this update: Mon 24 Jun 2024 06:01:11 +0000
Manifest next update: Tue 25 Jun 2024 06:01:11 +0000
Files and hashes: 1: Xpub7Y-NPVebsFUuT8S4GYaGHmQ.crl (hash: OMdRkxQvQ5EVLdSWF4sk0rhq1yEPiDo63mJM6BncfMY=)
2: lEXlTYgc1VivLY8DRNAz_sz89Bw.roa (hash: CiPmwSFuqQy+UuaJiDK6CkaDyZSY8qHcd7zI7jlyf2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 06:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:48:d5:84:f0:2a:92:99:80:b6:2d:12:e0:e3:0d:d4:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9b9bed8f8d3d579bb0552e4fc4b81986861e64
Validity
Not Before: Jun 24 06:01:11 2024 GMT
Not After : Jun 25 06:01:11 2024 GMT
Subject: CN=767b1ff10defa299bf0f420b5f6adfb9008e20d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a0:96:ba:e6:91:07:96:3a:ec:d5:09:f8:4f:
22:c2:d8:27:bc:75:a0:d9:c2:23:8f:8e:0f:f4:40:
e3:67:83:5c:a2:a5:3e:97:fc:8b:3f:9a:f5:34:74:
ec:31:d4:f9:ac:d3:6a:a8:6c:34:bc:c3:b1:1d:ce:
c3:77:fe:0a:96:ed:b2:b6:42:55:59:4f:9e:83:c9:
75:4c:a5:97:5a:74:52:d5:bc:36:56:52:66:5c:02:
fc:ac:ee:1e:69:7b:40:5d:75:eb:c6:73:8b:70:52:
60:e4:bc:a4:21:ec:2a:d5:54:df:8e:b4:e7:12:05:
10:c3:fb:82:63:b7:9c:64:2b:25:9a:80:21:2e:38:
45:98:22:50:70:8e:19:6f:8c:87:23:78:0b:83:79:
5f:8f:19:e5:c3:44:0a:61:ec:b7:c8:07:b8:39:c2:
27:f9:42:e1:e6:e6:93:49:a7:f7:02:74:1f:08:8d:
7d:e5:68:70:3b:37:5e:30:cc:33:3a:b5:f0:dd:c2:
5f:58:db:7a:66:07:97:66:8a:ea:2a:ac:92:75:0a:
2b:f1:c7:f9:9d:a0:3f:97:d7:14:5b:f6:6a:46:d7:
25:a1:f7:95:0c:01:f0:a4:63:ff:f3:a3:99:53:2a:
33:66:80:25:ad:35:d7:bc:23:29:ff:b3:4b:6f:b1:
11:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:7B:1F:F1:0D:EF:A2:99:BF:0F:42:0B:5F:6A:DF:B9:00:8E:20:D8
X509v3 Authority Key Identifier:
keyid:5E:9B:9B:ED:8F:8D:3D:57:9B:B0:55:2E:4F:C4:B8:19:86:86:1E:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:ae:80:1f:f4:62:36:22:40:5c:c2:d3:0a:53:3f:e1:c2:15:
4a:57:d4:cc:73:0d:1d:dd:2d:55:8f:22:69:12:89:07:a3:d5:
ff:da:22:f7:40:7a:02:5a:3d:b3:30:17:f7:b3:19:a7:71:12:
c4:ec:db:af:66:66:b0:4b:55:89:f8:e0:75:f3:33:fb:65:9e:
c7:c0:dd:e7:b4:9f:c9:49:01:04:b6:58:5f:e6:ed:b5:dc:80:
72:84:77:34:53:11:c5:80:10:4e:61:67:fa:6e:ed:9c:eb:fa:
09:27:4e:d5:68:53:87:65:c6:e9:3a:36:b1:1a:dd:dc:10:c5:
26:cc:ec:82:df:d4:40:ba:0d:f8:a2:82:44:44:2c:d1:7a:87:
1d:7d:8b:3c:2f:bb:5c:b7:e7:88:0d:c0:6c:f5:c2:47:61:48:
a6:2c:36:77:eb:e5:91:53:fe:33:e4:2d:f8:df:90:d8:ab:9f:
f9:65:d0:a3:09:6e:80:60:52:a5:7d:f0:c0:49:63:cd:1d:93:
51:68:3e:ac:04:5f:3c:b8:07:ae:cb:11:e3:5c:30:a4:10:20:
62:87:40:a2:4c:de:d3:66:f4:a8:8a:b1:57:6b:77:d7:0f:06:
88:ce:39:fa:21:75:e6:6b:d3:1d:3f:39:07:34:bc:74:2b:c0:
fd:da:52:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBI1YTwKpKZgLYtEuDjDdSYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlOWI5YmVkOGY4ZDNkNTc5YmIwNTUyZTRmYzRiODE5ODY4
NjFlNjQwHhcNMjQwNjI0MDYwMTExWhcNMjQwNjI1MDYwMTExWjAzMTEwLwYDVQQD
Eyg3NjdiMWZmMTBkZWZhMjk5YmYwZjQyMGI1ZjZhZGZiOTAwOGUyMGQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6CWuuaRB5Y67NUJ+E8iwtgnvHWg
2cIjj44P9EDjZ4NcoqU+l/yLP5r1NHTsMdT5rNNqqGw0vMOxHc7Dd/4Klu2ytkJV
WU+eg8l1TKWXWnRS1bw2VlJmXAL8rO4eaXtAXXXrxnOLcFJg5LykIewq1VTfjrTn
EgUQw/uCY7ecZCslmoAhLjhFmCJQcI4Zb4yHI3gLg3lfjxnlw0QKYey3yAe4OcIn
+ULh5uaTSaf3AnQfCI195WhwOzdeMMwzOrXw3cJfWNt6ZgeXZorqKqySdQor8cf5
naA/l9cUW/ZqRtclofeVDAHwpGP/86OZUyozZoAlrTXXvCMp/7NLb7ERQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHZ7H/EN76KZvw9CC19q37kAjiDYMB8GA1UdIwQY
MBaAFF6bm+2PjT1Xm7BVLk/EuBmGhh5kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHB1YjdZLU5QVmVic0ZVdVQ4UzRHWWFHSG1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC80NDhjODUtYTk2Ni00ZGYyLTk4ZTQt
YTVhNWFkMDZlYjQzLzEvWHB1YjdZLU5QVmVic0ZVdVQ4UzRHWWFHSG1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC80NDhjODUtYTk2Ni00ZGYyLTk4ZTQtYTVhNWFkMDZlYjQz
LzEvWHB1YjdZLU5QVmVic0ZVdVQ4UzRHWWFHSG1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgq6AH/Ri
NiJAXMLTClM/4cIVSlfUzHMNHd0tVY8iaRKJB6PV/9oi90B6Alo9szAX97MZp3ES
xOzbr2ZmsEtVifjgdfMz+2Wex8Dd57SfyUkBBLZYX+bttdyAcoR3NFMRxYAQTmFn
+m7tnOv6CSdO1WhTh2XG6To2sRrd3BDFJszsgt/UQLoN+KKCREQs0XqHHX2LPC+7
XLfniA3AbPXCR2FIpiw2d+vlkVP+M+Qt+N+Q2Kuf+WXQowlugGBSpX3wwEljzR2T
UWg+rARfPLgHrssR41wwpBAgYodAokze02b0qIqxV2t31w8GiM45+iF15mvTHT85
BzS8dCvA/dpSow==
-----END CERTIFICATE-----
Generated at Mon Jun 24 11:08:46 2024 by rpki-client on console-ams.rpki-client.org