![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/01e232-4551-4ce8-8cd8-7d8b1c91ec7b/1/2JkZ-1GnBREdaZbuww_8RC3pei8.mft
File: 2JkZ-1GnBREdaZbuww_8RC3pei8.mft (raw, json)
Hash identifier: ltH4efCDWN+RG0U8mIIHLiMBvSlfLD9lWvbblWxMzoM=
Subject key identifier: BC:88:75:F7:13:BA:FB:AA:0E:4D:26:09:66:15:D1:42:F2:5F:DB:45
Authority key identifier: D8:99:19:FB:51:A7:05:11:1D:69:96:EE:C3:0F:FC:44:2D:E9:7A:2F
Certificate issuer: /CN=d89919fb51a705111d6996eec30ffc442de97a2f
Certificate serial: 01901D467BDA7CE6B0731C907630D6B1C1D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JkZ-1GnBREdaZbuww_8RC3pei8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/01e232-4551-4ce8-8cd8-7d8b1c91ec7b/1/2JkZ-1GnBREdaZbuww_8RC3pei8.mft
Manifest number: 11C2
Signing time: Sat 15 Jun 2024 19:01:16 +0000
Manifest this update: Sat 15 Jun 2024 19:01:16 +0000
Manifest next update: Sun 16 Jun 2024 19:01:16 +0000
Files and hashes: 1: 2JkZ-1GnBREdaZbuww_8RC3pei8.crl (hash: d8xfsbZUXmvCmCgpIOrNfbMp2tRfQH623l66YRW3FKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/01e232-4551-4ce8-8cd8-7d8b1c91ec7b/1/2JkZ-1GnBREdaZbuww_8RC3pei8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/01e232-4551-4ce8-8cd8-7d8b1c91ec7b/1/2JkZ-1GnBREdaZbuww_8RC3pei8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JkZ-1GnBREdaZbuww_8RC3pei8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 19:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:46:7b:da:7c:e6:b0:73:1c:90:76:30:d6:b1:c1:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d89919fb51a705111d6996eec30ffc442de97a2f
Validity
Not Before: Jun 15 19:01:16 2024 GMT
Not After : Jun 16 19:01:16 2024 GMT
Subject: CN=bc8875f713bafbaa0e4d26096615d142f25fdb45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:7d:a8:6e:10:e4:a1:c9:8f:1f:70:16:61:d9:
5e:29:05:0c:0b:00:4c:0e:91:79:1c:61:2b:30:e0:
71:6b:57:54:cd:5d:ac:52:55:e4:55:94:03:e8:43:
38:79:28:db:00:da:cf:6b:3f:c3:a0:ba:2a:85:4f:
72:b7:4f:12:c8:12:7e:cd:70:f7:10:bd:02:64:8c:
11:45:55:86:35:55:e9:83:48:76:f9:42:6d:9f:20:
50:6a:cf:29:62:88:c2:61:4f:b5:63:98:4b:d6:1d:
b1:f0:8d:94:99:75:65:ef:b0:49:8f:3a:f0:ef:e4:
09:0f:31:32:94:d8:e2:39:b4:f9:74:22:b1:0f:1f:
55:30:97:89:a8:7f:2e:7b:41:66:61:9f:46:f2:2c:
72:41:62:4b:d7:20:32:3b:0f:04:47:55:1b:d3:bf:
29:9b:b0:b5:06:7b:97:c3:56:ed:a0:25:89:56:1b:
30:74:2d:49:82:ef:a6:17:78:78:e3:d8:13:cd:bd:
2f:44:fa:cf:f4:42:ba:90:d8:78:9a:0c:77:fb:1c:
05:af:fd:08:6b:85:18:d3:ab:48:b9:43:70:aa:48:
a3:7e:89:16:0b:1e:d5:2b:72:83:ed:f8:54:95:60:
b6:e3:bb:0d:75:d8:c7:70:8a:3d:80:aa:75:53:04:
fb:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:88:75:F7:13:BA:FB:AA:0E:4D:26:09:66:15:D1:42:F2:5F:DB:45
X509v3 Authority Key Identifier:
keyid:D8:99:19:FB:51:A7:05:11:1D:69:96:EE:C3:0F:FC:44:2D:E9:7A:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JkZ-1GnBREdaZbuww_8RC3pei8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/01e232-4551-4ce8-8cd8-7d8b1c91ec7b/1/2JkZ-1GnBREdaZbuww_8RC3pei8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/01e232-4551-4ce8-8cd8-7d8b1c91ec7b/1/2JkZ-1GnBREdaZbuww_8RC3pei8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:4e:8c:0f:73:99:48:51:9d:da:26:cd:a6:f5:bb:4b:35:d8:
87:40:e1:89:2f:ec:b7:5f:cd:ce:fa:f1:f5:18:6a:b0:b1:ed:
4a:93:90:0f:a8:53:36:9e:7f:9d:75:42:3c:3f:12:1c:63:d5:
5e:ac:e6:f1:58:41:f4:d4:7f:71:c5:f9:4e:91:8a:cc:57:72:
94:b7:62:95:0b:51:90:14:a8:a0:77:e5:22:3f:e0:44:45:74:
c6:de:f0:a3:75:53:1c:83:0e:0f:5a:b3:45:66:c1:8f:53:6d:
fd:6a:cc:ce:4d:85:65:7a:a2:97:9f:07:04:ec:c6:54:49:f1:
e1:d9:8b:2e:b6:0e:d5:04:57:12:51:ec:41:8e:88:c5:a9:00:
fe:83:97:72:5f:e8:4e:a2:d5:02:1e:c4:4a:57:85:1c:a8:31:
a6:47:91:1d:79:13:41:b6:b3:e4:54:25:6f:f3:2e:b1:f2:e4:
45:4b:cb:eb:a8:7c:bc:83:1c:c9:bf:02:2f:3a:fe:ff:58:f7:
08:fe:9f:f5:f9:0d:d1:7d:c0:10:87:7e:03:3b:9e:53:4f:56:
29:a5:d3:a1:42:c8:52:99:8f:bb:7a:12:a7:f7:41:82:47:9c:
73:4b:d1:aa:97:f9:25:d1:f6:e6:64:58:c5:4a:14:70:1e:d2:
ad:cc:37:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAdRnvafOawcxyQdjDWscHXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4OTkxOWZiNTFhNzA1MTExZDY5OTZlZWMzMGZmYzQ0MmRl
OTdhMmYwHhcNMjQwNjE1MTkwMTE2WhcNMjQwNjE2MTkwMTE2WjAzMTEwLwYDVQQD
EyhiYzg4NzVmNzEzYmFmYmFhMGU0ZDI2MDk2NjE1ZDE0MmYyNWZkYjQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkH2obhDkocmPH3AWYdleKQUMCwBM
DpF5HGErMOBxa1dUzV2sUlXkVZQD6EM4eSjbANrPaz/DoLoqhU9yt08SyBJ+zXD3
EL0CZIwRRVWGNVXpg0h2+UJtnyBQas8pYojCYU+1Y5hL1h2x8I2UmXVl77BJjzrw
7+QJDzEylNjiObT5dCKxDx9VMJeJqH8ue0FmYZ9G8ixyQWJL1yAyOw8ER1Ub078p
m7C1BnuXw1btoCWJVhswdC1Jgu+mF3h449gTzb0vRPrP9EK6kNh4mgx3+xwFr/0I
a4UY06tIuUNwqkijfokWCx7VK3KD7fhUlWC247sNddjHcIo9gKp1UwT7kQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLyIdfcTuvuqDk0mCWYV0ULyX9tFMB8GA1UdIwQY
MBaAFNiZGftRpwURHWmW7sMP/EQt6XovMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkprWi0xR25CUkVkYVpidXd3XzhSQzNwZWk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8wMWUyMzItNDU1MS00Y2U4LThjZDgt
N2Q4YjFjOTFlYzdiLzEvMkprWi0xR25CUkVkYVpidXd3XzhSQzNwZWk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi8wMWUyMzItNDU1MS00Y2U4LThjZDgtN2Q4YjFjOTFlYzdi
LzEvMkprWi0xR25CUkVkYVpidXd3XzhSQzNwZWk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbU6MD3OZ
SFGd2ibNpvW7SzXYh0DhiS/st1/Nzvrx9RhqsLHtSpOQD6hTNp5/nXVCPD8SHGPV
Xqzm8VhB9NR/ccX5TpGKzFdylLdilQtRkBSooHflIj/gREV0xt7wo3VTHIMOD1qz
RWbBj1Nt/WrMzk2FZXqil58HBOzGVEnx4dmLLrYO1QRXElHsQY6IxakA/oOXcl/o
TqLVAh7ESleFHKgxpkeRHXkTQbaz5FQlb/MusfLkRUvL66h8vIMcyb8CLzr+/1j3
CP6f9fkN0X3AEId+AzueU09WKaXToULIUpmPu3oSp/dBgkecc0vRqpf5JdH25mRY
xUoUcB7Srcw3vw==
-----END CERTIFICATE-----
Generated at Sun Jun 16 04:07:28 2024 by rpki-client on console-ams.rpki-client.org