![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/7fdfea-be70-42a3-8a47-d5a0b098df34/1/brk9vAG87DpLmI6PjVMwpaL8Smg.mft
File: brk9vAG87DpLmI6PjVMwpaL8Smg.mft (raw, json)
Hash identifier: NhgFWx8oHdMSER/98zZwrP1kuHimkVUPImAeeSXTrZg=
Subject key identifier: FB:A5:F0:04:F3:7B:7E:38:EE:58:2B:F7:F9:DA:60:E5:68:E2:18:9A
Authority key identifier: 6E:B9:3D:BC:01:BC:EC:3A:4B:98:8E:8F:8D:53:30:A5:A2:FC:4A:68
Certificate issuer: /CN=6eb93dbc01bcec3a4b988e8f8d5330a5a2fc4a68
Certificate serial: 0190448B2887B7194C67553054763B7B27C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/brk9vAG87DpLmI6PjVMwpaL8Smg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/7fdfea-be70-42a3-8a47-d5a0b098df34/1/brk9vAG87DpLmI6PjVMwpaL8Smg.mft
Manifest number: 0B0D
Signing time: Sun 23 Jun 2024 10:01:28 +0000
Manifest this update: Sun 23 Jun 2024 10:01:28 +0000
Manifest next update: Mon 24 Jun 2024 10:01:28 +0000
Files and hashes: 1: brk9vAG87DpLmI6PjVMwpaL8Smg.crl (hash: At+nV1QPXe6cv4TKoVHdKUTllvN2yJPPyd2/sJguzsw=)
2: h2PKVziHgjbPzvExGjakfQE76A8.roa (hash: jdQ4IFNE4ICdVJAkwBK7pSN43833tJMcRY9MVnppBd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/7fdfea-be70-42a3-8a47-d5a0b098df34/1/brk9vAG87DpLmI6PjVMwpaL8Smg.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/7fdfea-be70-42a3-8a47-d5a0b098df34/1/brk9vAG87DpLmI6PjVMwpaL8Smg.mft
rsync://rpki.ripe.net/repository/DEFAULT/brk9vAG87DpLmI6PjVMwpaL8Smg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 10:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:44:8b:28:87:b7:19:4c:67:55:30:54:76:3b:7b:27:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eb93dbc01bcec3a4b988e8f8d5330a5a2fc4a68
Validity
Not Before: Jun 23 10:01:28 2024 GMT
Not After : Jun 24 10:01:28 2024 GMT
Subject: CN=fba5f004f37b7e38ee582bf7f9da60e568e2189a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e9:4c:b6:25:8f:cd:49:a0:0d:fe:7d:d0:86:
4a:33:10:4e:8a:9f:9c:d0:0c:54:47:85:87:98:22:
4f:59:5a:da:5e:30:a2:76:d0:88:f0:70:64:36:50:
98:67:18:b3:69:81:b7:87:36:3f:78:ea:66:a2:41:
df:8a:0c:43:5f:c1:1b:ab:5e:e6:ab:1e:71:44:ac:
9f:eb:69:0f:78:f8:70:3d:15:14:ae:23:71:32:ec:
08:59:72:c1:46:93:c6:63:98:c5:15:70:ab:b9:fd:
79:a1:21:50:63:d8:21:cc:f3:b0:22:7f:06:b8:50:
cd:c4:42:74:da:1e:82:1c:2f:c3:ee:89:ad:e4:dd:
0f:1c:42:2e:30:36:d2:7b:a3:bc:c1:6c:04:2e:58:
6a:cd:8c:d4:99:60:2d:42:2d:06:3c:21:7b:d6:38:
eb:1c:fd:88:3f:6c:4e:69:2d:96:1b:56:f9:cd:59:
2a:39:8d:fa:e5:ed:89:0e:f2:f1:23:f1:2e:39:17:
cc:63:bf:b4:1d:c9:dc:54:cb:71:59:e8:7d:55:66:
c0:92:f8:9e:37:0b:e3:87:e5:dc:99:56:86:e0:66:
1b:4a:59:6b:b7:4d:8a:d5:9a:00:4b:6e:80:8b:d3:
c6:04:a2:7d:17:57:68:c0:e7:4a:2a:65:ad:44:93:
de:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:A5:F0:04:F3:7B:7E:38:EE:58:2B:F7:F9:DA:60:E5:68:E2:18:9A
X509v3 Authority Key Identifier:
keyid:6E:B9:3D:BC:01:BC:EC:3A:4B:98:8E:8F:8D:53:30:A5:A2:FC:4A:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brk9vAG87DpLmI6PjVMwpaL8Smg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7fdfea-be70-42a3-8a47-d5a0b098df34/1/brk9vAG87DpLmI6PjVMwpaL8Smg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7fdfea-be70-42a3-8a47-d5a0b098df34/1/brk9vAG87DpLmI6PjVMwpaL8Smg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:c9:bc:ca:6d:88:24:d8:58:a9:fe:af:8b:6b:ff:ac:98:2e:
d0:69:3e:c1:af:5e:71:6f:58:60:f3:70:1c:38:52:94:31:11:
be:7d:0b:6a:c2:28:66:7e:b5:30:0d:f9:fe:29:ea:5e:9e:8f:
86:12:15:5e:e7:57:2e:82:94:67:87:f4:5a:a5:42:2b:43:85:
af:44:dd:4f:d3:8b:87:81:ef:d7:4c:07:8e:f6:17:80:23:61:
58:35:d9:a3:6f:ec:c9:68:d0:d5:c7:0a:e4:e8:ac:0f:91:3a:
5d:d6:91:b5:90:b4:0e:87:d1:d8:14:b7:fe:db:52:f7:f2:be:
5e:3a:59:ad:8d:d9:63:13:a8:9e:3e:e6:3b:3f:03:ad:64:e3:
83:dc:fa:2b:18:33:30:1d:8c:cf:3a:08:aa:51:79:fa:d1:4a:
25:77:a3:9a:b3:e1:9d:dd:1b:b8:88:27:cc:a6:4c:ff:fd:61:
6d:58:8d:1a:e9:40:2c:00:d4:3d:0c:b4:2b:fb:10:3d:79:4d:
55:64:15:3e:de:ed:1f:da:b6:d0:66:ff:3d:ec:15:de:8c:7a:
c2:2f:10:8b:f2:d9:46:6c:2f:c0:ae:69:39:6c:80:e5:a4:50:
77:8b:04:a3:d8:23:82:88:b4:96:7e:ef:3c:15:7b:54:5e:24:
bd:84:d4:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBEiyiHtxlMZ1UwVHY7eyfIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlYjkzZGJjMDFiY2VjM2E0Yjk4OGU4ZjhkNTMzMGE1YTJm
YzRhNjgwHhcNMjQwNjIzMTAwMTI4WhcNMjQwNjI0MTAwMTI4WjAzMTEwLwYDVQQD
EyhmYmE1ZjAwNGYzN2I3ZTM4ZWU1ODJiZjdmOWRhNjBlNTY4ZTIxODlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqulMtiWPzUmgDf590IZKMxBOip+c
0AxUR4WHmCJPWVraXjCidtCI8HBkNlCYZxizaYG3hzY/eOpmokHfigxDX8Ebq17m
qx5xRKyf62kPePhwPRUUriNxMuwIWXLBRpPGY5jFFXCruf15oSFQY9ghzPOwIn8G
uFDNxEJ02h6CHC/D7omt5N0PHEIuMDbSe6O8wWwELlhqzYzUmWAtQi0GPCF71jjr
HP2IP2xOaS2WG1b5zVkqOY365e2JDvLxI/EuORfMY7+0HcncVMtxWeh9VWbAkvie
Nwvjh+XcmVaG4GYbSllrt02K1ZoAS26Ai9PGBKJ9F1dowOdKKmWtRJPeXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPul8ATze3447lgr9/naYOVo4hiaMB8GA1UdIwQY
MBaAFG65PbwBvOw6S5iOj41TMKWi/EpoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnJrOXZBRzg3RHBMbUk2UGpWTXdwYUw4U21nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC83ZmRmZWEtYmU3MC00MmEzLThhNDct
ZDVhMGIwOThkZjM0LzEvYnJrOXZBRzg3RHBMbUk2UGpWTXdwYUw4U21nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC83ZmRmZWEtYmU3MC00MmEzLThhNDctZDVhMGIwOThkZjM0
LzEvYnJrOXZBRzg3RHBMbUk2UGpWTXdwYUw4U21nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkcm8ym2I
JNhYqf6vi2v/rJgu0Gk+wa9ecW9YYPNwHDhSlDERvn0LasIoZn61MA35/inqXp6P
hhIVXudXLoKUZ4f0WqVCK0OFr0TdT9OLh4Hv10wHjvYXgCNhWDXZo2/syWjQ1ccK
5OisD5E6XdaRtZC0DofR2BS3/ttS9/K+XjpZrY3ZYxOonj7mOz8DrWTjg9z6Kxgz
MB2MzzoIqlF5+tFKJXejmrPhnd0buIgnzKZM//1hbViNGulALADUPQy0K/sQPXlN
VWQVPt7tH9q20Gb/PewV3ox6wi8Qi/LZRmwvwK5pOWyA5aRQd4sEo9gjgoi0ln7v
PBV7VF4kvYTU4A==
-----END CERTIFICATE-----
Generated at Sun Jun 23 17:57:36 2024 by rpki-client on console-ams.rpki-client.org