![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.mft
File: N0MfG-n9wkGQmEec3kV7v3lXF1k.mft (raw, json)
Hash identifier: tTEwY/Z/E0GZtS+sCs4E5C24zTaoThxkh76NVWa+BKc=
Subject key identifier: D2:5C:8C:04:E6:FC:26:DD:0B:E5:47:C6:61:65:07:7D:71:D7:70:1F
Authority key identifier: 37:43:1F:1B:E9:FD:C2:41:90:98:47:9C:DE:45:7B:BF:79:57:17:59
Certificate issuer: /CN=37431f1be9fdc2419098479cde457bbf79571759
Certificate serial: 019044F8560879E449493EE79940CCDC39C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N0MfG-n9wkGQmEec3kV7v3lXF1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.mft
Manifest number: 045F
Signing time: Sun 23 Jun 2024 12:00:43 +0000
Manifest this update: Sun 23 Jun 2024 12:00:43 +0000
Manifest next update: Mon 24 Jun 2024 12:00:43 +0000
Files and hashes: 1: N0MfG-n9wkGQmEec3kV7v3lXF1k.crl (hash: B1/9Y67/OTDaYpZzQSdqkhjCzQ1akx47lRuLcw4b0Q4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/N0MfG-n9wkGQmEec3kV7v3lXF1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 12:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:44:f8:56:08:79:e4:49:49:3e:e7:99:40:cc:dc:39:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37431f1be9fdc2419098479cde457bbf79571759
Validity
Not Before: Jun 23 12:00:43 2024 GMT
Not After : Jun 24 12:00:43 2024 GMT
Subject: CN=d25c8c04e6fc26dd0be547c66165077d71d7701f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:9a:46:5d:fb:ab:07:a6:38:4b:25:bb:2d:c5:
ec:fb:e1:47:c8:72:cb:22:be:7f:6e:dd:27:9b:0d:
5e:a7:79:5c:45:12:05:88:f7:c6:02:c8:f9:92:1a:
f7:9a:1a:43:76:e7:d1:4f:8d:ac:29:7a:16:48:67:
59:ae:0b:ac:e7:d3:1a:1a:dd:b6:a2:01:9e:32:79:
c3:a3:a0:fa:1b:2d:1e:2f:3b:e6:76:28:93:fa:7c:
3d:a5:4f:0d:7d:6a:0a:d5:96:75:c4:29:c2:72:04:
d5:f7:ad:fb:17:24:b3:11:40:79:a0:9f:19:57:71:
67:ef:1e:b4:61:d4:c3:79:8d:37:12:10:d0:c8:48:
5a:85:69:e2:61:ac:15:4d:96:ce:57:82:60:09:ea:
ba:15:19:8c:ef:5d:63:21:53:31:01:eb:cb:fe:63:
4e:68:e0:7c:52:dc:3d:4f:d6:11:d2:7f:b5:3e:43:
29:bb:c1:8b:df:cc:0c:0d:9e:a1:c9:8d:7c:69:1e:
0b:12:a8:02:9b:af:f0:b4:57:ec:c4:b5:23:bb:67:
1a:50:c2:e0:3a:39:fd:94:50:f3:59:b1:38:2e:1d:
d9:bf:e9:af:cc:fa:3a:ad:a5:6d:bb:10:a6:bb:37:
d8:d9:ba:51:01:6f:2a:f3:04:3f:0c:34:03:77:25:
74:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:5C:8C:04:E6:FC:26:DD:0B:E5:47:C6:61:65:07:7D:71:D7:70:1F
X509v3 Authority Key Identifier:
keyid:37:43:1F:1B:E9:FD:C2:41:90:98:47:9C:DE:45:7B:BF:79:57:17:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0MfG-n9wkGQmEec3kV7v3lXF1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:e1:03:6c:50:15:56:fb:f1:bd:7f:08:81:20:c6:5e:d9:c9:
05:f1:d1:78:29:69:a7:00:c4:85:65:5a:a1:dc:ee:8c:b5:60:
af:75:6e:5c:ad:ce:49:83:dc:d2:c2:6b:56:da:70:22:ec:69:
dc:67:9b:3d:0a:ac:7d:c9:99:1f:2c:e6:40:6d:ce:d2:6d:37:
13:77:6d:e8:40:ac:8f:e0:ff:7a:b2:22:73:b0:70:76:25:4e:
df:68:ce:58:9e:50:41:82:db:66:44:5c:5c:45:f2:27:08:1e:
68:4a:09:67:b4:9a:f2:0e:e7:96:b6:db:9c:6a:68:b2:37:ab:
0c:37:ad:af:b8:b1:44:67:34:11:85:0b:f6:df:d5:b6:ac:33:
2f:bb:12:f4:3b:4d:87:9f:52:6f:ac:6d:5d:2f:5b:5d:2b:04:
3f:0b:bc:11:3b:e2:55:ae:2b:c4:d0:5e:96:b1:fc:b4:96:33:
b0:a2:4b:dc:a0:42:e7:7b:10:a0:5a:60:1f:6b:14:22:60:a5:
f4:34:58:c9:90:d5:b2:5b:5d:6c:c0:3b:41:8d:93:d7:b3:35:
9d:e6:92:e9:2c:5d:27:29:f7:e7:08:14:2d:67:f4:33:ec:6e:
cd:93:7c:49:98:63:5d:51:b3:35:fe:7f:09:d2:4c:8b:73:ae:
8b:32:f0:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBE+FYIeeRJST7nmUDM3DnCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3NDMxZjFiZTlmZGMyNDE5MDk4NDc5Y2RlNDU3YmJmNzk1
NzE3NTkwHhcNMjQwNjIzMTIwMDQzWhcNMjQwNjI0MTIwMDQzWjAzMTEwLwYDVQQD
EyhkMjVjOGMwNGU2ZmMyNmRkMGJlNTQ3YzY2MTY1MDc3ZDcxZDc3MDFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7JpGXfurB6Y4SyW7LcXs++FHyHLL
Ir5/bt0nmw1ep3lcRRIFiPfGAsj5khr3mhpDdufRT42sKXoWSGdZrgus59MaGt22
ogGeMnnDo6D6Gy0eLzvmdiiT+nw9pU8NfWoK1ZZ1xCnCcgTV9637FySzEUB5oJ8Z
V3Fn7x60YdTDeY03EhDQyEhahWniYawVTZbOV4JgCeq6FRmM711jIVMxAevL/mNO
aOB8Utw9T9YR0n+1PkMpu8GL38wMDZ6hyY18aR4LEqgCm6/wtFfsxLUju2caUMLg
Ojn9lFDzWbE4Lh3Zv+mvzPo6raVtuxCmuzfY2bpRAW8q8wQ/DDQDdyV0fwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNJcjATm/CbdC+VHxmFlB31x13AfMB8GA1UdIwQY
MBaAFDdDHxvp/cJBkJhHnN5Fe795VxdZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjBNZkctbjl3a0dRbUVlYzNrVjd2M2xYRjFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9iNTM1NDctZDM0MC00MzkyLWFmNDYt
NjE1OTYxMzEyYjUyLzEvTjBNZkctbjl3a0dRbUVlYzNrVjd2M2xYRjFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9iNTM1NDctZDM0MC00MzkyLWFmNDYtNjE1OTYxMzEyYjUy
LzEvTjBNZkctbjl3a0dRbUVlYzNrVjd2M2xYRjFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjuEDbFAV
VvvxvX8IgSDGXtnJBfHReClppwDEhWVaodzujLVgr3VuXK3OSYPc0sJrVtpwIuxp
3GebPQqsfcmZHyzmQG3O0m03E3dt6ECsj+D/erIic7BwdiVO32jOWJ5QQYLbZkRc
XEXyJwgeaEoJZ7Sa8g7nlrbbnGposjerDDetr7ixRGc0EYUL9t/VtqwzL7sS9DtN
h59Sb6xtXS9bXSsEPwu8ETviVa4rxNBelrH8tJYzsKJL3KBC53sQoFpgH2sUImCl
9DRYyZDVsltdbMA7QY2T17M1neaS6SxdJyn35wgULWf0M+xuzZN8SZhjXVGzNf5/
CdJMi3OuizLwkw==
-----END CERTIFICATE-----
Generated at Sun Jun 23 18:38:21 2024 by rpki-client on console-ams.rpki-client.org