![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/578faa-0a03-46ac-bb5c-9bdbb626b595/1/Rvbuv4C9ZN_1qxASuQpVaGWoSNs.mft
File: Rvbuv4C9ZN_1qxASuQpVaGWoSNs.mft (raw, json)
Hash identifier: SLmcVv5VKrrDajx2R56mDLdnXpOiafrC87sR+W1SzQM=
Subject key identifier: 9C:F6:6C:1F:74:7F:77:F3:40:67:70:1B:59:D2:09:FA:CD:C3:7F:0A
Authority key identifier: 46:F6:EE:BF:80:BD:64:DF:F5:AB:10:12:B9:0A:55:68:65:A8:48:DB
Certificate issuer: /CN=46f6eebf80bd64dff5ab1012b90a556865a848db
Certificate serial: 019040E4960BA84CB894068CC5F3D8BDFB7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rvbuv4C9ZN_1qxASuQpVaGWoSNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/578faa-0a03-46ac-bb5c-9bdbb626b595/1/Rvbuv4C9ZN_1qxASuQpVaGWoSNs.mft
Manifest number: 7A
Signing time: Sat 22 Jun 2024 17:00:40 +0000
Manifest this update: Sat 22 Jun 2024 17:00:40 +0000
Manifest next update: Sun 23 Jun 2024 17:00:40 +0000
Files and hashes: 1: Rvbuv4C9ZN_1qxASuQpVaGWoSNs.crl (hash: ue3hjSpwZPj17HkCF7mCC0lKHr1L1KJtvzXcOUmNgFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/578faa-0a03-46ac-bb5c-9bdbb626b595/1/Rvbuv4C9ZN_1qxASuQpVaGWoSNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/578faa-0a03-46ac-bb5c-9bdbb626b595/1/Rvbuv4C9ZN_1qxASuQpVaGWoSNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rvbuv4C9ZN_1qxASuQpVaGWoSNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 17:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:40:e4:96:0b:a8:4c:b8:94:06:8c:c5:f3:d8:bd:fb:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46f6eebf80bd64dff5ab1012b90a556865a848db
Validity
Not Before: Jun 22 17:00:40 2024 GMT
Not After : Jun 23 17:00:40 2024 GMT
Subject: CN=9cf66c1f747f77f34067701b59d209facdc37f0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:02:d1:75:9d:87:b7:d6:a8:37:79:54:8d:57:
d9:c4:74:91:40:2f:03:af:d8:40:31:0a:4c:1b:c7:
ca:b1:db:32:81:81:b5:20:81:ab:5a:d0:d7:82:44:
b8:bb:53:8a:37:53:17:03:1e:dc:47:c9:9d:f5:08:
91:b0:da:2c:d9:db:85:91:77:71:86:db:0a:3d:29:
b4:61:9a:6e:f4:98:2c:0a:9c:7a:57:a4:09:c8:b0:
7b:1d:b2:fe:56:52:1c:43:28:41:34:78:3a:b1:6a:
a6:9e:78:66:5c:c9:d8:25:b1:a2:23:92:b3:f4:d7:
a1:53:1f:70:1e:4f:a9:12:aa:da:1b:eb:bb:5b:c8:
64:ca:8e:a9:a5:7a:93:2f:72:52:88:d9:69:07:92:
6f:b6:34:31:55:c0:6a:b0:95:dd:58:29:17:3a:c4:
8e:95:5f:37:59:83:71:2d:cb:04:e1:92:e8:34:78:
e2:19:fe:ff:ee:f0:9f:b2:32:63:28:f2:09:20:c4:
df:4e:08:8c:bf:e8:94:08:03:49:31:21:2b:58:40:
ce:5e:a8:7f:27:ee:d5:2d:d2:78:3c:a7:6f:ee:40:
1c:bd:74:55:39:ce:2d:3c:79:24:b8:90:1e:f3:9d:
16:6f:35:7a:7b:8d:72:5b:37:24:7c:f9:41:14:32:
84:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:F6:6C:1F:74:7F:77:F3:40:67:70:1B:59:D2:09:FA:CD:C3:7F:0A
X509v3 Authority Key Identifier:
keyid:46:F6:EE:BF:80:BD:64:DF:F5:AB:10:12:B9:0A:55:68:65:A8:48:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rvbuv4C9ZN_1qxASuQpVaGWoSNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/578faa-0a03-46ac-bb5c-9bdbb626b595/1/Rvbuv4C9ZN_1qxASuQpVaGWoSNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/578faa-0a03-46ac-bb5c-9bdbb626b595/1/Rvbuv4C9ZN_1qxASuQpVaGWoSNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:19:5a:e4:d5:f1:f1:bc:73:0b:a9:6e:12:71:9d:00:70:2d:
cc:1e:81:7e:73:35:47:87:65:89:e3:01:66:b3:2c:1b:3d:0b:
c4:90:06:5e:bd:c7:a7:bd:54:61:e6:4b:09:33:47:c9:91:6b:
4d:d9:95:6b:8c:7d:bc:7a:52:4b:f6:cc:8d:01:7b:fc:ad:b2:
3a:51:81:c5:5d:95:20:30:cd:5b:0b:fa:a9:75:ae:f9:bf:66:
8e:9b:9e:03:95:26:2f:00:64:69:fe:59:19:59:fb:05:21:18:
33:30:40:e2:ce:2d:a9:ab:a2:0d:22:e9:39:9a:1f:88:89:0b:
f5:19:2a:eb:93:bc:a8:3e:26:ee:d7:c8:83:f8:32:bc:61:cd:
3c:e1:48:35:af:83:4b:7c:4b:cd:6d:ed:b0:32:3e:c0:49:20:
eb:89:c9:91:17:a3:66:83:2e:75:43:bb:a8:45:ba:10:8c:f8:
31:1f:57:b2:a0:33:20:61:95:84:6a:c4:00:63:31:00:06:10:
1f:3b:9d:32:c5:4d:11:08:7d:58:4d:f1:0d:ee:af:6d:bd:a7:
01:d7:be:73:c0:e2:25:58:e7:10:30:e5:70:b0:c4:32:6a:19:
fc:83:48:c4:14:7d:46:5e:a4:ae:d8:7a:46:bb:4b:71:c3:38:
f9:d2:d7:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBA5JYLqEy4lAaMxfPYvft9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2ZjZlZWJmODBiZDY0ZGZmNWFiMTAxMmI5MGE1NTY4NjVh
ODQ4ZGIwHhcNMjQwNjIyMTcwMDQwWhcNMjQwNjIzMTcwMDQwWjAzMTEwLwYDVQQD
Eyg5Y2Y2NmMxZjc0N2Y3N2YzNDA2NzcwMWI1OWQyMDlmYWNkYzM3ZjBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQLRdZ2Ht9aoN3lUjVfZxHSRQC8D
r9hAMQpMG8fKsdsygYG1IIGrWtDXgkS4u1OKN1MXAx7cR8md9QiRsNos2duFkXdx
htsKPSm0YZpu9JgsCpx6V6QJyLB7HbL+VlIcQyhBNHg6sWqmnnhmXMnYJbGiI5Kz
9NehUx9wHk+pEqraG+u7W8hkyo6ppXqTL3JSiNlpB5JvtjQxVcBqsJXdWCkXOsSO
lV83WYNxLcsE4ZLoNHjiGf7/7vCfsjJjKPIJIMTfTgiMv+iUCANJMSErWEDOXqh/
J+7VLdJ4PKdv7kAcvXRVOc4tPHkkuJAe850WbzV6e41yWzckfPlBFDKEEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJz2bB90f3fzQGdwG1nSCfrNw38KMB8GA1UdIwQY
MBaAFEb27r+AvWTf9asQErkKVWhlqEjbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnZidXY0QzlaTl8xcXhBU3VRcFZhR1dvU05zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC81NzhmYWEtMGEwMy00NmFjLWJiNWMt
OWJkYmI2MjZiNTk1LzEvUnZidXY0QzlaTl8xcXhBU3VRcFZhR1dvU05zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC81NzhmYWEtMGEwMy00NmFjLWJiNWMtOWJkYmI2MjZiNTk1
LzEvUnZidXY0QzlaTl8xcXhBU3VRcFZhR1dvU05zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuhla5NXx
8bxzC6luEnGdAHAtzB6BfnM1R4dlieMBZrMsGz0LxJAGXr3Hp71UYeZLCTNHyZFr
TdmVa4x9vHpSS/bMjQF7/K2yOlGBxV2VIDDNWwv6qXWu+b9mjpueA5UmLwBkaf5Z
GVn7BSEYMzBA4s4tqauiDSLpOZofiIkL9Rkq65O8qD4m7tfIg/gyvGHNPOFINa+D
S3xLzW3tsDI+wEkg64nJkRejZoMudUO7qEW6EIz4MR9XsqAzIGGVhGrEAGMxAAYQ
HzudMsVNEQh9WE3xDe6vbb2nAde+c8DiJVjnEDDlcLDEMmoZ/INIxBR9Rl6krth6
RrtLccM4+dLXIA==
-----END CERTIFICATE-----
Generated at Sun Jun 23 01:25:22 2024 by rpki-client on console-ams.rpki-client.org