![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/87aa20-222c-4acb-b291-f629508c072d/1/IvvvaV-pXQyVkJ5Rqh-rlPxAJn0.mft
File: IvvvaV-pXQyVkJ5Rqh-rlPxAJn0.mft (raw, json)
Hash identifier: aJc1f+XiVbW73DULYpdF5+Stp3W0VfuDDSFW0zn6MpA=
Subject key identifier: 53:41:D8:10:4A:12:63:1D:61:A8:1D:84:04:77:A8:DB:25:93:A4:00
Authority key identifier: 22:FB:EF:69:5F:A9:5D:0C:95:90:9E:51:AA:1F:AB:94:FC:40:26:7D
Certificate issuer: /CN=22fbef695fa95d0c95909e51aa1fab94fc40267d
Certificate serial: 01901EC715E6119329889B542073E23DE122
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvvvaV-pXQyVkJ5Rqh-rlPxAJn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/87aa20-222c-4acb-b291-f629508c072d/1/IvvvaV-pXQyVkJ5Rqh-rlPxAJn0.mft
Manifest number: 0797
Signing time: Sun 16 Jun 2024 02:01:21 +0000
Manifest this update: Sun 16 Jun 2024 02:01:21 +0000
Manifest next update: Mon 17 Jun 2024 02:01:21 +0000
Files and hashes: 1: IvvvaV-pXQyVkJ5Rqh-rlPxAJn0.crl (hash: 1FZLrbZ0t/Y2IWdprdqOPkVmrkfIKHiuipDcC44QKeE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/87aa20-222c-4acb-b291-f629508c072d/1/IvvvaV-pXQyVkJ5Rqh-rlPxAJn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/87aa20-222c-4acb-b291-f629508c072d/1/IvvvaV-pXQyVkJ5Rqh-rlPxAJn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IvvvaV-pXQyVkJ5Rqh-rlPxAJn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1e:c7:15:e6:11:93:29:88:9b:54:20:73:e2:3d:e1:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22fbef695fa95d0c95909e51aa1fab94fc40267d
Validity
Not Before: Jun 16 02:01:21 2024 GMT
Not After : Jun 17 02:01:21 2024 GMT
Subject: CN=5341d8104a12631d61a81d840477a8db2593a400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:07:ba:db:8d:90:6c:2a:01:9c:e5:a6:5d:ec:
d5:f2:52:0b:0e:1f:ef:f9:ae:ba:f1:4e:ef:fc:5f:
7d:80:1a:e2:fb:b6:b9:00:76:a4:ae:5e:97:c4:7a:
25:08:7a:b3:6d:a6:6c:51:30:32:b2:98:67:45:01:
85:1c:c4:0c:69:61:81:6e:f2:5e:23:6e:9a:94:14:
f1:c0:a2:56:3b:ba:af:c5:e8:0b:44:e1:a1:e4:69:
d2:fd:27:21:e4:25:a4:8c:58:e9:db:10:d6:a4:e2:
8d:69:6e:15:dc:c8:94:82:1e:d8:63:84:09:cb:29:
fa:47:69:fb:81:fc:18:26:ca:7a:2a:fc:6b:e2:d7:
2c:af:2f:78:8b:44:12:8f:b5:c4:69:9d:ba:3c:36:
c0:9d:37:e1:c8:4d:ad:38:8f:5c:61:6d:2e:df:6b:
9e:86:10:22:a6:16:5c:3d:af:0c:43:ef:be:1f:d5:
65:2f:3e:03:f0:4a:a5:fd:b1:8b:4a:07:1a:78:04:
af:ba:1f:d8:4a:82:8a:38:3e:00:cb:2f:cc:e4:e6:
f9:a9:a7:56:62:77:7f:d5:3f:a2:fe:44:06:6c:65:
6b:b8:c9:d7:92:28:9e:1d:89:40:62:d8:c0:a8:89:
23:da:27:9b:95:c6:8d:fc:2a:02:a6:44:11:6d:3c:
fe:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:41:D8:10:4A:12:63:1D:61:A8:1D:84:04:77:A8:DB:25:93:A4:00
X509v3 Authority Key Identifier:
keyid:22:FB:EF:69:5F:A9:5D:0C:95:90:9E:51:AA:1F:AB:94:FC:40:26:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvvvaV-pXQyVkJ5Rqh-rlPxAJn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/87aa20-222c-4acb-b291-f629508c072d/1/IvvvaV-pXQyVkJ5Rqh-rlPxAJn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/87aa20-222c-4acb-b291-f629508c072d/1/IvvvaV-pXQyVkJ5Rqh-rlPxAJn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:3f:91:9d:9a:17:ae:5a:67:8f:1d:46:c7:f9:c3:b8:eb:fc:
7f:76:f4:b7:cd:90:69:fa:04:e1:11:64:5c:a7:ba:0c:69:37:
42:88:82:b7:73:84:42:22:01:98:d3:e5:28:1a:f7:1e:5b:10:
b7:36:b0:56:fb:a1:83:63:64:a3:0c:ae:64:45:5c:3a:a6:67:
cb:2a:b1:97:6e:48:02:bd:c6:f0:dc:87:65:38:96:d3:a5:ab:
00:40:f8:8c:f2:b1:18:25:54:5b:82:69:7f:8b:cb:5e:14:1b:
ed:f5:a2:b5:87:9b:16:0b:cf:86:9a:2e:55:93:58:55:79:41:
31:94:42:ed:37:21:54:56:1e:8e:ed:35:37:16:ef:a9:c0:25:
eb:71:6c:f9:4f:ea:eb:da:fa:f7:68:6e:84:75:07:de:ad:96:
ce:8c:0f:8a:b1:e2:ab:08:cd:a5:79:f8:d3:05:13:91:39:21:
10:0b:0c:ca:cb:b2:19:37:2e:1b:44:96:be:ec:3d:43:1d:49:
11:a3:24:83:d6:91:9b:a8:25:90:2c:94:fd:5d:ee:d1:54:66:
db:fa:15:71:80:49:f7:fe:6d:04:26:15:5a:41:54:cb:84:df:
be:6e:4a:47:12:79:96:e2:a5:89:ba:82:9b:af:72:04:04:1b:
a7:fd:df:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAexxXmEZMpiJtUIHPiPeEiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyZmJlZjY5NWZhOTVkMGM5NTkwOWU1MWFhMWZhYjk0ZmM0
MDI2N2QwHhcNMjQwNjE2MDIwMTIxWhcNMjQwNjE3MDIwMTIxWjAzMTEwLwYDVQQD
Eyg1MzQxZDgxMDRhMTI2MzFkNjFhODFkODQwNDc3YThkYjI1OTNhNDAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnge6242QbCoBnOWmXezV8lILDh/v
+a668U7v/F99gBri+7a5AHakrl6XxHolCHqzbaZsUTAysphnRQGFHMQMaWGBbvJe
I26alBTxwKJWO7qvxegLROGh5GnS/Sch5CWkjFjp2xDWpOKNaW4V3MiUgh7YY4QJ
yyn6R2n7gfwYJsp6Kvxr4tcsry94i0QSj7XEaZ26PDbAnTfhyE2tOI9cYW0u32ue
hhAiphZcPa8MQ+++H9VlLz4D8Eql/bGLSgcaeASvuh/YSoKKOD4Ayy/M5Ob5qadW
Ynd/1T+i/kQGbGVruMnXkiieHYlAYtjAqIkj2ieblcaN/CoCpkQRbTz+GwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFNB2BBKEmMdYagdhAR3qNslk6QAMB8GA1UdIwQY
MBaAFCL772lfqV0MlZCeUaofq5T8QCZ9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXZ2dmFWLXBYUXlWa0o1UnFoLXJsUHhBSm4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi84N2FhMjAtMjIyYy00YWNiLWIyOTEt
ZjYyOTUwOGMwNzJkLzEvSXZ2dmFWLXBYUXlWa0o1UnFoLXJsUHhBSm4wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi84N2FhMjAtMjIyYy00YWNiLWIyOTEtZjYyOTUwOGMwNzJk
LzEvSXZ2dmFWLXBYUXlWa0o1UnFoLXJsUHhBSm4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuj+RnZoX
rlpnjx1Gx/nDuOv8f3b0t82QafoE4RFkXKe6DGk3QoiCt3OEQiIBmNPlKBr3HlsQ
tzawVvuhg2NkowyuZEVcOqZnyyqxl25IAr3G8NyHZTiW06WrAED4jPKxGCVUW4Jp
f4vLXhQb7fWitYebFgvPhpouVZNYVXlBMZRC7TchVFYeju01NxbvqcAl63Fs+U/q
69r692huhHUH3q2WzowPirHiqwjNpXn40wUTkTkhEAsMysuyGTcuG0SWvuw9Qx1J
EaMkg9aRm6glkCyU/V3u0VRm2/oVcYBJ9/5tBCYVWkFUy4Tfvm5KRxJ5luKlibqC
m69yBAQbp/3fvA==
-----END CERTIFICATE-----
Generated at Sun Jun 16 03:12:39 2024 by rpki-client on console-fra.rpki-client.org