![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.mft
File: lSFWyIR_JNCdpg1fWxBUKy7PkBY.mft (raw, json)
Hash identifier: iPK6Z0aRJa1gRoZa4Rd1XQe3kwjE3TGmEISmHmyAC9I=
Subject key identifier: E4:D7:7C:DB:DC:5D:03:0A:D3:9E:49:5B:44:3D:A2:7A:CD:08:C9:40
Authority key identifier: 95:21:56:C8:84:7F:24:D0:9D:A6:0D:5F:5B:10:54:2B:2E:CF:90:16
Certificate issuer: /CN=952156c8847f24d09da60d5f5b10542b2ecf9016
Certificate serial: 01901DEAC023A5E768058E5FF06BEA73EEBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSFWyIR_JNCdpg1fWxBUKy7PkBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.mft
Manifest number: 11C4
Signing time: Sat 15 Jun 2024 22:00:42 +0000
Manifest this update: Sat 15 Jun 2024 22:00:42 +0000
Manifest next update: Sun 16 Jun 2024 22:00:42 +0000
Files and hashes: 1: 5qqADF7xXAE0vGXAS2yMAC0m-jo.roa (hash: afC0o7pauI1PgnxWpkbqoTCoF6fTTjzatCF4va5W4GA=)
2: lSFWyIR_JNCdpg1fWxBUKy7PkBY.crl (hash: Y7ltDsTq3Jg3vqIBH+iUUfib+hA/37tq70a0SeY+n1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lSFWyIR_JNCdpg1fWxBUKy7PkBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 22:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:ea:c0:23:a5:e7:68:05:8e:5f:f0:6b:ea:73:ee:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=952156c8847f24d09da60d5f5b10542b2ecf9016
Validity
Not Before: Jun 15 22:00:42 2024 GMT
Not After : Jun 16 22:00:42 2024 GMT
Subject: CN=e4d77cdbdc5d030ad39e495b443da27acd08c940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:be:c5:b2:5a:9d:65:9d:8b:5d:e7:35:34:8b:
ad:ea:bb:a2:c5:98:47:30:ca:dc:42:1e:d3:b7:c8:
ef:0c:b3:6b:6a:6a:02:85:7a:24:7b:20:22:59:5a:
84:32:dc:bb:a5:6e:9b:2f:f9:e9:bb:73:0d:ad:72:
e1:82:65:a9:99:57:cf:bd:a9:e2:6c:fe:cf:7a:54:
99:71:81:b6:91:0d:85:4a:8c:52:2a:3f:f7:f1:4b:
f9:ca:b3:6e:57:71:44:09:7a:55:02:f5:23:f4:a9:
ff:59:d1:93:62:b0:83:e9:09:06:44:e8:dd:c1:01:
f2:f1:45:78:03:5d:34:b2:a5:ac:8d:b2:11:d8:78:
c8:48:1d:6d:0b:a7:0f:6b:7b:92:6b:37:04:81:73:
4c:2e:c4:bf:ad:c7:1e:1e:a8:88:27:7a:dd:97:ec:
28:1a:d2:18:e5:24:ab:bf:70:65:7c:63:1b:55:7c:
27:2b:c7:1e:54:6b:b0:8c:33:66:39:8f:91:0e:28:
a4:b5:c3:fa:89:20:79:69:40:ed:b8:51:23:e8:74:
ca:89:21:d6:3a:64:36:24:17:71:22:db:df:d2:92:
b3:3c:32:a5:c3:cb:74:b9:52:2d:7d:96:ef:8d:20:
b4:ec:bd:b8:a8:db:a1:50:ff:ec:ba:2d:3f:7f:11:
ec:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:D7:7C:DB:DC:5D:03:0A:D3:9E:49:5B:44:3D:A2:7A:CD:08:C9:40
X509v3 Authority Key Identifier:
keyid:95:21:56:C8:84:7F:24:D0:9D:A6:0D:5F:5B:10:54:2B:2E:CF:90:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSFWyIR_JNCdpg1fWxBUKy7PkBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:5f:78:89:0e:17:34:e5:20:a7:4d:e0:3f:eb:77:0e:68:2d:
4a:14:fc:ee:f8:bf:5c:82:83:d1:76:54:69:8e:f6:c0:98:5f:
b6:1c:00:3c:da:1c:32:01:a0:0a:46:9d:70:82:7d:13:43:e3:
c0:a1:6e:af:f1:67:84:3a:48:81:4d:df:dc:3f:8c:66:80:32:
f8:54:b3:0f:14:0d:e3:56:6e:be:d0:a4:6d:04:94:e8:c8:b5:
51:fa:52:af:9e:18:28:6e:e6:96:f5:e4:3e:56:64:d1:9e:1b:
48:71:02:29:ff:8e:ea:d5:4e:17:ea:3c:52:8e:b8:fa:0c:1b:
e9:a0:29:b4:84:62:9b:6f:5b:2f:9f:42:df:a5:6d:94:d7:c8:
d7:3b:30:cc:19:82:2c:c8:86:52:94:be:06:c5:4d:69:64:db:
b5:49:f5:77:32:e6:56:22:df:75:82:5d:43:66:70:1f:74:d5:
ac:1f:25:f2:39:d3:eb:ca:af:3e:42:78:4b:e4:5a:e5:66:6c:
2b:f6:61:05:5b:87:ff:03:9f:38:0a:fe:5c:9b:6a:eb:1c:2e:
4b:ca:40:cf:97:6c:f7:e6:96:e9:fa:f9:12:ca:e6:92:a0:15:
e8:62:4e:1c:58:90:e6:1e:ea:4d:2b:38:59:96:c9:6b:d6:76:
75:91:90:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAd6sAjpedoBY5f8Gvqc+6+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1MjE1NmM4ODQ3ZjI0ZDA5ZGE2MGQ1ZjViMTA1NDJiMmVj
ZjkwMTYwHhcNMjQwNjE1MjIwMDQyWhcNMjQwNjE2MjIwMDQyWjAzMTEwLwYDVQQD
EyhlNGQ3N2NkYmRjNWQwMzBhZDM5ZTQ5NWI0NDNkYTI3YWNkMDhjOTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvb7FslqdZZ2LXec1NIut6ruixZhH
MMrcQh7Tt8jvDLNramoChXokeyAiWVqEMty7pW6bL/npu3MNrXLhgmWpmVfPvani
bP7PelSZcYG2kQ2FSoxSKj/38Uv5yrNuV3FECXpVAvUj9Kn/WdGTYrCD6QkGROjd
wQHy8UV4A100sqWsjbIR2HjISB1tC6cPa3uSazcEgXNMLsS/rcceHqiIJ3rdl+wo
GtIY5SSrv3BlfGMbVXwnK8ceVGuwjDNmOY+RDiiktcP6iSB5aUDtuFEj6HTKiSHW
OmQ2JBdxItvf0pKzPDKlw8t0uVItfZbvjSC07L24qNuhUP/sui0/fxHsSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOTXfNvcXQMK055JW0Q9onrNCMlAMB8GA1UdIwQY
MBaAFJUhVsiEfyTQnaYNX1sQVCsuz5AWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFNGV3lJUl9KTkNkcGcxZld4QlVLeTdQa0JZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9jNDNkNGYtZjUyYy00Mzg3LTkzNjIt
YjNjMDFkMWE2Yzg1LzEvbFNGV3lJUl9KTkNkcGcxZld4QlVLeTdQa0JZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9jNDNkNGYtZjUyYy00Mzg3LTkzNjItYjNjMDFkMWE2Yzg1
LzEvbFNGV3lJUl9KTkNkcGcxZld4QlVLeTdQa0JZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUF94iQ4X
NOUgp03gP+t3DmgtShT87vi/XIKD0XZUaY72wJhfthwAPNocMgGgCkadcIJ9E0Pj
wKFur/FnhDpIgU3f3D+MZoAy+FSzDxQN41ZuvtCkbQSU6Mi1UfpSr54YKG7mlvXk
PlZk0Z4bSHECKf+O6tVOF+o8Uo64+gwb6aAptIRim29bL59C36VtlNfI1zswzBmC
LMiGUpS+BsVNaWTbtUn1dzLmViLfdYJdQ2ZwH3TVrB8l8jnT68qvPkJ4S+Ra5WZs
K/ZhBVuH/wOfOAr+XJtq6xwuS8pAz5ds9+aW6fr5EsrmkqAV6GJOHFiQ5h7qTSs4
WZbJa9Z2dZGQMw==
-----END CERTIFICATE-----
Generated at Sun Jun 16 04:21:00 2024 by rpki-client on console-ams.rpki-client.org