![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/c7fb27-1f7e-4ad4-ab84-242301f9aa10/1/Cxki4fchUHXN_Lx0U7vAiGf_0lM.mft
File: Cxki4fchUHXN_Lx0U7vAiGf_0lM.mft (raw, json)
Hash identifier: xWtopRsdXLNLdfrAS42zCfuVQ0EH+Mrm1nfID3SeOsg=
Subject key identifier: A5:32:FE:D1:5F:C0:47:78:0A:F2:D0:9C:E8:80:A5:D5:73:AB:F0:A3
Authority key identifier: 0B:19:22:E1:F7:21:50:75:CD:FC:BC:74:53:BB:C0:88:67:FF:D2:53
Certificate issuer: /CN=0b1922e1f7215075cdfcbc7453bbc08867ffd253
Certificate serial: 01901DEBB3B273A67FEC3B24AFAEA0F764A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cxki4fchUHXN_Lx0U7vAiGf_0lM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/c7fb27-1f7e-4ad4-ab84-242301f9aa10/1/Cxki4fchUHXN_Lx0U7vAiGf_0lM.mft
Manifest number: 0299
Signing time: Sat 15 Jun 2024 22:01:44 +0000
Manifest this update: Sat 15 Jun 2024 22:01:44 +0000
Manifest next update: Sun 16 Jun 2024 22:01:44 +0000
Files and hashes: 1: Cxki4fchUHXN_Lx0U7vAiGf_0lM.crl (hash: gdd0R5ii7ecTTpdxeIK+qItVd3ru0/SXSm8g6rWhg1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/c7fb27-1f7e-4ad4-ab84-242301f9aa10/1/Cxki4fchUHXN_Lx0U7vAiGf_0lM.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/c7fb27-1f7e-4ad4-ab84-242301f9aa10/1/Cxki4fchUHXN_Lx0U7vAiGf_0lM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cxki4fchUHXN_Lx0U7vAiGf_0lM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 22:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:eb:b3:b2:73:a6:7f:ec:3b:24:af:ae:a0:f7:64:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1922e1f7215075cdfcbc7453bbc08867ffd253
Validity
Not Before: Jun 15 22:01:44 2024 GMT
Not After : Jun 16 22:01:44 2024 GMT
Subject: CN=a532fed15fc047780af2d09ce880a5d573abf0a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:0a:35:ed:15:57:77:fc:5c:74:38:d3:93:f1:
d5:81:6e:33:55:02:b2:a3:c9:c6:79:20:fc:eb:1f:
90:8d:83:46:1e:3c:da:84:eb:5e:af:13:ff:32:84:
fd:62:44:b4:2e:c7:e5:2b:71:15:c1:dd:eb:ee:b2:
34:54:b3:1d:76:57:c6:1d:94:5c:6c:32:3a:bc:b0:
73:63:15:5a:d2:f1:64:ba:23:2c:ee:c4:7d:11:a3:
47:7d:1f:61:2a:90:68:ed:be:11:10:a1:a0:2b:dc:
a5:12:dc:61:94:53:17:ab:e0:b2:90:25:b3:21:a7:
27:2d:4a:70:ff:f6:06:89:c3:76:50:88:71:95:e7:
80:d2:0a:65:27:8d:f4:90:ff:36:9c:c2:50:12:f4:
bb:b4:2b:cb:0a:68:e4:17:12:df:a0:b4:d8:b1:48:
aa:f8:f9:80:8e:c8:6a:45:ce:ae:85:2c:e6:9a:34:
d6:c6:dd:ce:43:8c:19:93:af:86:26:3b:8d:b4:77:
d6:79:56:1c:c4:06:4e:d8:58:11:49:42:0b:79:2f:
bf:1d:66:06:16:84:2d:4b:7a:f7:d3:cc:6f:a1:32:
c7:bd:eb:1d:63:a2:26:36:f8:21:23:ca:fa:3e:35:
53:b4:7b:e5:5a:f8:4f:3c:8e:39:80:90:a3:86:91:
34:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:32:FE:D1:5F:C0:47:78:0A:F2:D0:9C:E8:80:A5:D5:73:AB:F0:A3
X509v3 Authority Key Identifier:
keyid:0B:19:22:E1:F7:21:50:75:CD:FC:BC:74:53:BB:C0:88:67:FF:D2:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cxki4fchUHXN_Lx0U7vAiGf_0lM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/c7fb27-1f7e-4ad4-ab84-242301f9aa10/1/Cxki4fchUHXN_Lx0U7vAiGf_0lM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/c7fb27-1f7e-4ad4-ab84-242301f9aa10/1/Cxki4fchUHXN_Lx0U7vAiGf_0lM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:bb:6b:cb:b5:ce:41:5b:5f:7e:e3:8a:79:7d:33:21:16:61:
72:3a:31:b5:49:47:88:07:30:79:31:d6:ac:a2:a4:33:c8:9a:
a6:ab:cd:60:f5:14:c7:d4:9d:92:44:5f:05:80:b1:21:64:05:
5a:38:c1:08:cf:36:83:9d:6f:31:27:6a:74:57:fa:6d:45:1b:
86:ff:9c:6e:fe:7b:8f:d1:51:bd:ec:b0:06:94:bd:d1:d1:0e:
96:8c:c0:63:ed:a8:de:7c:44:3f:40:b6:c3:cf:9c:e2:81:29:
5a:f5:97:cf:13:5d:c8:70:19:13:dd:7c:a6:77:80:f6:00:ba:
c0:99:e5:97:13:d8:b4:c2:4d:98:72:96:27:2e:c7:3e:e4:5b:
c7:8e:f8:30:4c:85:99:8c:76:10:0b:93:fe:20:34:21:35:bb:
fe:ff:46:55:74:b9:5d:8d:c5:3a:0b:95:3b:a8:0c:60:30:7d:
50:4b:df:22:c4:c3:ef:f9:af:15:f2:a5:85:54:27:35:9a:a4:
b4:d3:b2:49:ef:78:28:37:33:21:70:1b:6f:02:66:71:a9:19:
9d:71:56:d7:57:9d:f1:0c:6e:d3:db:69:2e:2b:b6:c6:ff:5d:
df:9b:18:a6:ba:37:ae:50:64:3f:7e:80:2a:10:68:5b:2d:a0:
27:1d:0f:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAd67Oyc6Z/7Dskr66g92SpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiMTkyMmUxZjcyMTUwNzVjZGZjYmM3NDUzYmJjMDg4Njdm
ZmQyNTMwHhcNMjQwNjE1MjIwMTQ0WhcNMjQwNjE2MjIwMTQ0WjAzMTEwLwYDVQQD
EyhhNTMyZmVkMTVmYzA0Nzc4MGFmMmQwOWNlODgwYTVkNTczYWJmMGEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiAo17RVXd/xcdDjTk/HVgW4zVQKy
o8nGeSD86x+QjYNGHjzahOterxP/MoT9YkS0LsflK3EVwd3r7rI0VLMddlfGHZRc
bDI6vLBzYxVa0vFkuiMs7sR9EaNHfR9hKpBo7b4REKGgK9ylEtxhlFMXq+CykCWz
IacnLUpw//YGicN2UIhxleeA0gplJ430kP82nMJQEvS7tCvLCmjkFxLfoLTYsUiq
+PmAjshqRc6uhSzmmjTWxt3OQ4wZk6+GJjuNtHfWeVYcxAZO2FgRSUILeS+/HWYG
FoQtS3r308xvoTLHvesdY6ImNvghI8r6PjVTtHvlWvhPPI45gJCjhpE0pQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKUy/tFfwEd4CvLQnOiApdVzq/CjMB8GA1UdIwQY
MBaAFAsZIuH3IVB1zfy8dFO7wIhn/9JTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3hraTRmY2hVSFhOX0x4MFU3dkFpR2ZfMGxNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9jN2ZiMjctMWY3ZS00YWQ0LWFiODQt
MjQyMzAxZjlhYTEwLzEvQ3hraTRmY2hVSFhOX0x4MFU3dkFpR2ZfMGxNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy9jN2ZiMjctMWY3ZS00YWQ0LWFiODQtMjQyMzAxZjlhYTEw
LzEvQ3hraTRmY2hVSFhOX0x4MFU3dkFpR2ZfMGxNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnrtry7XO
QVtffuOKeX0zIRZhcjoxtUlHiAcweTHWrKKkM8iapqvNYPUUx9SdkkRfBYCxIWQF
WjjBCM82g51vMSdqdFf6bUUbhv+cbv57j9FRveywBpS90dEOlozAY+2o3nxEP0C2
w8+c4oEpWvWXzxNdyHAZE918pneA9gC6wJnllxPYtMJNmHKWJy7HPuRbx474MEyF
mYx2EAuT/iA0ITW7/v9GVXS5XY3FOguVO6gMYDB9UEvfIsTD7/mvFfKlhVQnNZqk
tNOySe94KDczIXAbbwJmcakZnXFW11ed8Qxu09tpLiu2xv9d35sYpro3rlBkP36A
KhBoWy2gJx0Pfw==
-----END CERTIFICATE-----
Generated at Sun Jun 16 03:50:52 2024 by rpki-client on console-ams.rpki-client.org