![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/41cc57-06a4-4732-8bfc-f3f15b1265bb/1/S8zQ21Lw7U9zpoHj02q2wjAnfTw.mft
File: S8zQ21Lw7U9zpoHj02q2wjAnfTw.mft (raw, json)
Hash identifier: 0I679xEODWP96IfUO14WoBd646GCr5Ua3mFGfgi3Vxc=
Subject key identifier: DD:A2:86:B8:E7:28:87:7E:20:DB:83:23:39:A3:28:E7:30:91:D9:D4
Authority key identifier: 4B:CC:D0:DB:52:F0:ED:4F:73:A6:81:E3:D3:6A:B6:C2:30:27:7D:3C
Certificate issuer: /CN=4bccd0db52f0ed4f73a681e3d36ab6c230277d3c
Certificate serial: 01901D4640CF3994C9A99F724692EAFE2C04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S8zQ21Lw7U9zpoHj02q2wjAnfTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/41cc57-06a4-4732-8bfc-f3f15b1265bb/1/S8zQ21Lw7U9zpoHj02q2wjAnfTw.mft
Manifest number: 03D8
Signing time: Sat 15 Jun 2024 19:01:01 +0000
Manifest this update: Sat 15 Jun 2024 19:01:01 +0000
Manifest next update: Sun 16 Jun 2024 19:01:01 +0000
Files and hashes: 1: S8zQ21Lw7U9zpoHj02q2wjAnfTw.crl (hash: smqOW8l6KQmkR4A7wor3WxNetSPZwnSzf6gGg3zxaA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/41cc57-06a4-4732-8bfc-f3f15b1265bb/1/S8zQ21Lw7U9zpoHj02q2wjAnfTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/41cc57-06a4-4732-8bfc-f3f15b1265bb/1/S8zQ21Lw7U9zpoHj02q2wjAnfTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/S8zQ21Lw7U9zpoHj02q2wjAnfTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 19:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:46:40:cf:39:94:c9:a9:9f:72:46:92:ea:fe:2c:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bccd0db52f0ed4f73a681e3d36ab6c230277d3c
Validity
Not Before: Jun 15 19:01:01 2024 GMT
Not After : Jun 16 19:01:01 2024 GMT
Subject: CN=dda286b8e728877e20db832339a328e73091d9d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b0:70:c7:70:fe:cd:fb:17:c0:12:05:16:fe:
ba:37:6a:e3:b9:17:66:c7:01:ee:0d:14:77:df:f0:
e3:3b:e2:5e:95:c7:89:da:bf:ce:a3:4c:99:96:49:
3a:7b:f3:bc:3e:7f:f7:27:67:67:b6:3e:36:75:de:
40:13:d7:a4:69:b7:51:82:c3:87:76:99:21:53:dc:
2f:69:68:3a:96:77:e9:b7:bd:71:34:b4:77:bf:4d:
d4:75:84:d2:5c:6b:ef:a3:9b:37:b0:f2:f1:26:40:
fd:74:1d:3f:9e:f9:7b:ad:57:a6:c0:33:9b:1c:1e:
d6:eb:2a:f4:c6:80:a8:37:36:76:a3:32:6a:ca:fe:
4a:21:1d:ed:83:b3:73:c3:f1:bd:c8:ae:c0:47:c4:
72:32:fe:35:25:83:42:2a:78:9d:74:82:b3:51:ae:
1b:81:e8:56:44:f4:2e:d9:4b:fe:4a:ef:30:06:92:
2f:0b:8d:12:26:4a:c1:9a:d3:65:3f:ec:fc:12:70:
15:7b:41:97:ff:6f:3a:0e:9e:ec:0d:46:f9:e6:f6:
85:89:5c:1c:f7:e5:b9:fe:fc:42:9c:82:dd:a7:6b:
c1:6a:0b:9d:ce:85:d0:b6:20:e9:42:4d:8d:b5:3d:
b0:80:61:bb:b9:36:35:0f:5e:19:66:99:83:52:8e:
59:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:A2:86:B8:E7:28:87:7E:20:DB:83:23:39:A3:28:E7:30:91:D9:D4
X509v3 Authority Key Identifier:
keyid:4B:CC:D0:DB:52:F0:ED:4F:73:A6:81:E3:D3:6A:B6:C2:30:27:7D:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S8zQ21Lw7U9zpoHj02q2wjAnfTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/41cc57-06a4-4732-8bfc-f3f15b1265bb/1/S8zQ21Lw7U9zpoHj02q2wjAnfTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/41cc57-06a4-4732-8bfc-f3f15b1265bb/1/S8zQ21Lw7U9zpoHj02q2wjAnfTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:bf:02:a0:94:df:93:c8:bf:8c:8a:f9:ba:7f:3a:28:49:7c:
98:e7:ed:e5:1b:25:9d:47:0b:f9:fd:c9:08:98:85:e6:de:2a:
a3:2c:29:4b:f9:bb:f9:17:8a:e5:fc:a2:cd:4c:a3:55:17:ba:
7c:54:22:3b:66:7c:fd:59:0f:60:3a:2a:4f:31:23:68:32:0c:
0d:45:8d:51:01:9d:37:3e:4d:33:06:bd:25:38:01:c9:9b:f6:
db:ed:7e:43:8c:5b:58:b4:1f:73:32:6b:18:e6:de:d8:09:9f:
10:00:df:44:28:49:21:00:c8:6c:dc:a0:37:a4:2f:e2:d6:61:
7f:32:d9:0c:69:43:a4:4d:5f:d7:66:0c:73:be:42:2b:36:29:
f1:90:a5:8b:7f:ee:fc:46:d7:19:b6:6f:23:15:a3:26:7e:10:
2b:5a:81:41:90:ee:05:6a:0f:0a:57:b3:47:1a:54:a4:8b:7f:
e1:ed:88:8d:54:81:42:89:59:5f:34:f4:41:0f:e2:30:39:ee:
6f:0d:42:7b:c2:00:3d:d3:93:54:51:aa:85:cb:1a:0a:8d:bb:
4d:32:f3:19:0e:01:65:d8:1a:68:74:fe:55:d0:43:8c:7c:ac:
28:dc:b7:e2:b5:f4:f8:9f:e1:45:ef:79:f4:99:ca:91:6e:29:
25:e1:16:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAdRkDPOZTJqZ9yRpLq/iwEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiY2NkMGRiNTJmMGVkNGY3M2E2ODFlM2QzNmFiNmMyMzAy
NzdkM2MwHhcNMjQwNjE1MTkwMTAxWhcNMjQwNjE2MTkwMTAxWjAzMTEwLwYDVQQD
EyhkZGEyODZiOGU3Mjg4NzdlMjBkYjgzMjMzOWEzMjhlNzMwOTFkOWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbBwx3D+zfsXwBIFFv66N2rjuRdm
xwHuDRR33/DjO+JelceJ2r/Oo0yZlkk6e/O8Pn/3J2dntj42dd5AE9ekabdRgsOH
dpkhU9wvaWg6lnfpt71xNLR3v03UdYTSXGvvo5s3sPLxJkD9dB0/nvl7rVemwDOb
HB7W6yr0xoCoNzZ2ozJqyv5KIR3tg7Nzw/G9yK7AR8RyMv41JYNCKniddIKzUa4b
gehWRPQu2Uv+Su8wBpIvC40SJkrBmtNlP+z8EnAVe0GX/286Dp7sDUb55vaFiVwc
9+W5/vxCnILdp2vBagudzoXQtiDpQk2NtT2wgGG7uTY1D14ZZpmDUo5ZKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN2ihrjnKId+INuDIzmjKOcwkdnUMB8GA1UdIwQY
MBaAFEvM0NtS8O1Pc6aB49NqtsIwJ308MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzh6UTIxTHc3VTl6cG9IajAycTJ3akFuZlR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80MWNjNTctMDZhNC00NzMyLThiZmMt
ZjNmMTViMTI2NWJiLzEvUzh6UTIxTHc3VTl6cG9IajAycTJ3akFuZlR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC80MWNjNTctMDZhNC00NzMyLThiZmMtZjNmMTViMTI2NWJi
LzEvUzh6UTIxTHc3VTl6cG9IajAycTJ3akFuZlR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE78CoJTf
k8i/jIr5un86KEl8mOft5RslnUcL+f3JCJiF5t4qoywpS/m7+ReK5fyizUyjVRe6
fFQiO2Z8/VkPYDoqTzEjaDIMDUWNUQGdNz5NMwa9JTgByZv22+1+Q4xbWLQfczJr
GObe2AmfEADfRChJIQDIbNygN6Qv4tZhfzLZDGlDpE1f12YMc75CKzYp8ZCli3/u
/EbXGbZvIxWjJn4QK1qBQZDuBWoPClezRxpUpIt/4e2IjVSBQolZXzT0QQ/iMDnu
bw1Ce8IAPdOTVFGqhcsaCo27TTLzGQ4BZdgaaHT+VdBDjHysKNy34rX0+J/hRe95
9JnKkW4pJeEWrQ==
-----END CERTIFICATE-----
Generated at Sun Jun 16 04:49:45 2024 by rpki-client on console-ams.rpki-client.org