![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.mft
File: dFkBtALUgvPW3Sko6oztLuts5BI.mft (raw, json)
Hash identifier: z67JrHdJlRvauELOfjn5HGYAqLjGKHT8nesI8PV/j7Q=
Subject key identifier: 22:F3:A9:98:40:62:D3:44:27:4E:CA:1F:6B:09:C2:EB:85:B8:C2:0A
Authority key identifier: 74:59:01:B4:02:D4:82:F3:D6:DD:29:28:EA:8C:ED:2E:EB:6C:E4:12
Certificate issuer: /CN=745901b402d482f3d6dd2928ea8ced2eeb6ce412
Certificate serial: 019072E4A7EF5665D876AF9FFE1ACA608C24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dFkBtALUgvPW3Sko6oztLuts5BI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.mft
Manifest number: 11F0
Signing time: Tue 02 Jul 2024 10:01:46 +0000
Manifest this update: Tue 02 Jul 2024 10:01:46 +0000
Manifest next update: Wed 03 Jul 2024 10:01:46 +0000
Files and hashes: 1: O1xTiJXJ9RaPXcM3TxZg263QSpk.roa (hash: CDxqgS9xIrcHYQQmsrHXKviaOf7QW0SeBJFT0aZjltg=)
2: dFkBtALUgvPW3Sko6oztLuts5BI.crl (hash: EtJKsIlROIWtWXdww2N8p4nzgSvjMiwRljWZA5g/LTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dFkBtALUgvPW3Sko6oztLuts5BI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jul 2024 07:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:72:e4:a7:ef:56:65:d8:76:af:9f:fe:1a:ca:60:8c:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=745901b402d482f3d6dd2928ea8ced2eeb6ce412
Validity
Not Before: Jul 2 10:01:46 2024 GMT
Not After : Jul 3 10:01:46 2024 GMT
Subject: CN=22f3a9984062d344274eca1f6b09c2eb85b8c20a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:73:70:80:f3:41:4a:f0:20:79:a2:f0:f3:38:
09:ca:2b:da:cd:cc:05:f4:d1:bd:57:fc:7c:39:07:
2d:d4:33:70:b8:f5:b3:f4:ec:b3:9a:a8:4d:0d:19:
71:5f:e0:f1:f1:15:56:c3:20:2a:81:b9:34:6d:c0:
35:22:84:a1:0e:75:5a:e0:06:8c:55:44:0d:17:e4:
65:fb:c7:02:71:d7:95:6d:f3:ca:5d:b8:93:0e:62:
07:df:9e:b3:98:d4:b7:b4:6a:0b:2c:6e:91:d1:2a:
a2:5e:16:ec:49:fa:13:5b:c4:36:fa:8a:85:0d:2c:
ae:b5:50:67:8e:83:92:63:54:3d:39:27:24:1f:e9:
cf:a3:4e:f0:92:aa:57:bf:fc:d8:42:85:d0:05:75:
cd:7b:7e:f1:f7:df:62:ac:83:25:bf:12:3f:b1:07:
4b:92:01:44:0f:9a:21:77:12:23:1c:c7:56:8b:43:
c5:60:51:18:db:af:8c:24:ac:bd:8b:2b:57:0a:96:
29:4c:a6:a0:bf:c9:35:0d:b3:ef:38:55:d2:63:2d:
9e:c6:47:0c:d5:f6:6d:b5:e2:7c:2f:38:e8:30:0d:
6c:e3:02:c9:37:79:14:84:b6:06:8d:b4:c3:25:d5:
5b:ab:c5:0d:c3:fa:25:34:2c:36:81:05:ff:ed:50:
2e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:F3:A9:98:40:62:D3:44:27:4E:CA:1F:6B:09:C2:EB:85:B8:C2:0A
X509v3 Authority Key Identifier:
keyid:74:59:01:B4:02:D4:82:F3:D6:DD:29:28:EA:8C:ED:2E:EB:6C:E4:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dFkBtALUgvPW3Sko6oztLuts5BI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:51:7f:7e:84:5a:81:9f:64:fc:5a:12:8f:54:0b:56:60:a2:
ee:ad:e2:29:b3:69:fb:8d:37:68:40:66:bc:d3:df:d1:82:b7:
ec:7b:4d:b9:36:81:71:df:1a:24:a5:6e:e6:8c:3e:ec:03:a8:
e0:ce:df:3e:c2:c5:e8:99:00:c9:42:96:ef:d6:5d:49:a3:22:
9b:38:2a:5a:f9:07:ab:0b:bf:46:64:d1:fc:b4:48:0c:e8:d7:
77:0d:19:f2:73:1f:99:b4:e9:54:88:ca:b8:1a:b1:87:d2:86:
13:05:69:81:7c:54:78:9e:38:c6:0f:b6:82:1c:10:68:e8:cd:
96:cb:0c:5d:55:67:1e:7d:51:a6:9b:c4:9a:88:a4:fe:c8:e0:
ea:ee:35:8b:45:4f:35:df:b0:bc:99:4b:29:30:36:eb:48:22:
01:96:a2:aa:2b:d9:d6:4e:d9:24:be:76:86:e1:4b:5a:db:6d:
02:a2:cc:d8:e5:a6:7c:f5:39:7c:fa:45:18:1b:52:a8:66:90:
94:4e:af:ab:60:f9:54:bb:af:b3:61:d1:14:b1:64:17:3e:48:
c5:54:23:37:a8:01:4d:2b:64:a6:4b:65:df:1b:4a:85:45:00:
db:4e:a9:7c:0b:3b:e6:e7:b6:7a:b2:64:79:5d:80:74:d2:67:
a3:d4:2f:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBy5KfvVmXYdq+f/hrKYIwkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0NTkwMWI0MDJkNDgyZjNkNmRkMjkyOGVhOGNlZDJlZWI2
Y2U0MTIwHhcNMjQwNzAyMTAwMTQ2WhcNMjQwNzAzMTAwMTQ2WjAzMTEwLwYDVQQD
EygyMmYzYTk5ODQwNjJkMzQ0Mjc0ZWNhMWY2YjA5YzJlYjg1YjhjMjBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnNwgPNBSvAgeaLw8zgJyivazcwF
9NG9V/x8OQct1DNwuPWz9OyzmqhNDRlxX+Dx8RVWwyAqgbk0bcA1IoShDnVa4AaM
VUQNF+Rl+8cCcdeVbfPKXbiTDmIH356zmNS3tGoLLG6R0SqiXhbsSfoTW8Q2+oqF
DSyutVBnjoOSY1Q9OSckH+nPo07wkqpXv/zYQoXQBXXNe37x999irIMlvxI/sQdL
kgFED5ohdxIjHMdWi0PFYFEY26+MJKy9iytXCpYpTKagv8k1DbPvOFXSYy2exkcM
1fZtteJ8LzjoMA1s4wLJN3kUhLYGjbTDJdVbq8UNw/olNCw2gQX/7VAuIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCLzqZhAYtNEJ07KH2sJwuuFuMIKMB8GA1UdIwQY
MBaAFHRZAbQC1ILz1t0pKOqM7S7rbOQSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEZrQnRBTFVndlBXM1NrbzZvenRMdXRzNUJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi84ZmQ2ZGYtMzAxMi00ZTQ2LWJiZDgt
ZDdjMzZlMTVjZjBlLzEvZEZrQnRBTFVndlBXM1NrbzZvenRMdXRzNUJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi84ZmQ2ZGYtMzAxMi00ZTQ2LWJiZDgtZDdjMzZlMTVjZjBl
LzEvZEZrQnRBTFVndlBXM1NrbzZvenRMdXRzNUJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK1F/foRa
gZ9k/FoSj1QLVmCi7q3iKbNp+403aEBmvNPf0YK37HtNuTaBcd8aJKVu5ow+7AOo
4M7fPsLF6JkAyUKW79ZdSaMimzgqWvkHqwu/RmTR/LRIDOjXdw0Z8nMfmbTpVIjK
uBqxh9KGEwVpgXxUeJ44xg+2ghwQaOjNlssMXVVnHn1RppvEmoik/sjg6u41i0VP
Nd+wvJlLKTA260giAZaiqivZ1k7ZJL52huFLWtttAqLM2OWmfPU5fPpFGBtSqGaQ
lE6vq2D5VLuvs2HRFLFkFz5IxVQjN6gBTStkpktl3xtKhUUA206pfAs75ue2erJk
eV2AdNJno9Qv6Q==
-----END CERTIFICATE-----
Generated at Tue Jul 2 12:46:27 2024 by rpki-client on console-ams.rpki-client.org