![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/dfead7-586a-4b35-b199-dfe45f672f81/1/H3FCtFtc45AW4l4Jsv7Veam9d9Y.mft
File: H3FCtFtc45AW4l4Jsv7Veam9d9Y.mft (raw, json)
Hash identifier: TsI5UTlclneRLxOrpxHKuE/W50mll5wfq3b75g0cku0=
Subject key identifier: 68:86:84:B9:EB:53:77:DB:21:0F:9C:68:04:BB:A1:C3:D0:60:C2:03
Authority key identifier: 1F:71:42:B4:5B:5C:E3:90:16:E2:5E:09:B2:FE:D5:79:A9:BD:77:D6
Certificate issuer: /CN=1f7142b45b5ce39016e25e09b2fed579a9bd77d6
Certificate serial: 01901CD86D4C27C4C3A125F21F1E53C1983A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H3FCtFtc45AW4l4Jsv7Veam9d9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/dfead7-586a-4b35-b199-dfe45f672f81/1/H3FCtFtc45AW4l4Jsv7Veam9d9Y.mft
Manifest number: 05DF
Signing time: Sat 15 Jun 2024 17:01:04 +0000
Manifest this update: Sat 15 Jun 2024 17:01:04 +0000
Manifest next update: Sun 16 Jun 2024 17:01:04 +0000
Files and hashes: 1: GEpl7NTUbFHjWisNjaf_nzeN9yc.roa (hash: 3vf87rdXyJRx62/etIJ+rvU9KoXiHC3EHYfORtZLzQw=)
2: H3FCtFtc45AW4l4Jsv7Veam9d9Y.crl (hash: w+xLvOgzpfeuat9Mp7O1JugAJ2XCDPTG8Fg6lYsJ6w8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/dfead7-586a-4b35-b199-dfe45f672f81/1/H3FCtFtc45AW4l4Jsv7Veam9d9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/dfead7-586a-4b35-b199-dfe45f672f81/1/H3FCtFtc45AW4l4Jsv7Veam9d9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/H3FCtFtc45AW4l4Jsv7Veam9d9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1c:d8:6d:4c:27:c4:c3:a1:25:f2:1f:1e:53:c1:98:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f7142b45b5ce39016e25e09b2fed579a9bd77d6
Validity
Not Before: Jun 15 17:01:04 2024 GMT
Not After : Jun 16 17:01:04 2024 GMT
Subject: CN=688684b9eb5377db210f9c6804bba1c3d060c203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:45:6a:3a:c7:b4:a7:ca:91:7a:aa:b7:37:d7:
30:21:7b:27:d8:5f:d7:f7:af:1c:d6:ef:67:c2:9a:
11:75:82:a4:4b:a1:26:ad:20:cf:43:e6:7f:ba:75:
33:58:20:19:01:3c:2f:7e:bd:61:5e:53:c6:45:6e:
83:21:fa:87:6c:42:df:1a:72:a2:0c:7e:9b:eb:1a:
74:d4:8a:69:75:e9:2f:c7:c3:6a:2d:2a:6f:9d:76:
da:21:75:22:50:0b:3c:2e:07:a6:c9:e8:db:3a:09:
22:f9:36:c8:b1:fe:cc:2c:e2:43:ec:64:ea:9b:80:
16:6c:35:93:e2:e5:8c:f9:9d:4f:33:ae:a2:5f:d0:
ed:5a:6f:15:57:5e:d7:af:e7:db:a9:97:99:e9:c5:
99:90:bd:59:bc:57:99:3e:81:62:1f:2e:87:d3:52:
7c:24:d4:f1:90:36:56:f9:6e:6b:9c:ba:30:fd:53:
a3:77:d4:6a:a5:74:09:7b:e7:61:5e:81:89:2d:9f:
eb:29:36:cc:88:7b:40:75:07:61:1b:2e:34:79:fb:
bf:c2:25:d2:0d:f9:99:d8:01:df:60:f1:45:20:b3:
4b:fe:00:50:7b:71:c6:a8:0b:97:fe:ed:e6:19:a8:
1f:95:8f:88:83:1b:78:1d:47:91:43:5c:fa:c9:dc:
de:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:86:84:B9:EB:53:77:DB:21:0F:9C:68:04:BB:A1:C3:D0:60:C2:03
X509v3 Authority Key Identifier:
keyid:1F:71:42:B4:5B:5C:E3:90:16:E2:5E:09:B2:FE:D5:79:A9:BD:77:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H3FCtFtc45AW4l4Jsv7Veam9d9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/dfead7-586a-4b35-b199-dfe45f672f81/1/H3FCtFtc45AW4l4Jsv7Veam9d9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/dfead7-586a-4b35-b199-dfe45f672f81/1/H3FCtFtc45AW4l4Jsv7Veam9d9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:2c:b9:be:5f:b5:6e:fb:86:c7:ef:9f:41:00:26:1f:25:b1:
13:bd:36:3f:a8:27:d5:3d:fc:27:0d:a0:f2:31:ff:36:a7:1e:
04:18:24:15:d5:b2:2b:9a:e6:e2:87:b8:29:4d:fd:83:46:cf:
15:3f:89:85:10:19:a5:55:ac:7c:01:1c:bb:62:59:4e:37:4f:
db:0e:77:49:e7:b2:55:5e:32:57:f3:c1:a6:cc:4a:2c:05:dc:
bb:d1:59:05:2f:0b:fa:6e:d1:30:0e:e0:a3:6e:19:2b:9c:c2:
39:58:66:2c:69:81:1b:52:ea:d4:29:d2:c0:de:9d:e9:7e:ba:
27:4e:52:98:6a:cb:3b:e1:7f:e9:20:97:41:de:30:0a:80:fd:
f8:4d:70:1f:5e:31:5d:2a:e3:27:c2:02:a0:1e:ff:a6:5c:c7:
f2:8f:b7:7c:8b:b9:8d:f7:7f:11:a1:3b:68:f3:6b:68:8a:b4:
ff:d2:f1:56:69:0a:12:0b:19:2c:7a:b6:a2:b1:1e:51:d2:84:
91:d9:3e:7d:1e:33:15:c4:a0:be:c9:b5:67:c5:6f:47:11:65:
3e:6c:6e:d0:b3:92:58:31:d0:13:da:53:32:8f:a9:df:f5:00:
3c:dd:5f:8f:91:f0:b7:fc:50:ce:6c:95:b8:a1:a1:f4:72:12:
62:1f:2f:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAc2G1MJ8TDoSXyHx5TwZg6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmNzE0MmI0NWI1Y2UzOTAxNmUyNWUwOWIyZmVkNTc5YTli
ZDc3ZDYwHhcNMjQwNjE1MTcwMTA0WhcNMjQwNjE2MTcwMTA0WjAzMTEwLwYDVQQD
Eyg2ODg2ODRiOWViNTM3N2RiMjEwZjljNjgwNGJiYTFjM2QwNjBjMjAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4kVqOse0p8qReqq3N9cwIXsn2F/X
968c1u9nwpoRdYKkS6EmrSDPQ+Z/unUzWCAZATwvfr1hXlPGRW6DIfqHbELfGnKi
DH6b6xp01Ippdekvx8NqLSpvnXbaIXUiUAs8LgemyejbOgki+TbIsf7MLOJD7GTq
m4AWbDWT4uWM+Z1PM66iX9DtWm8VV17Xr+fbqZeZ6cWZkL1ZvFeZPoFiHy6H01J8
JNTxkDZW+W5rnLow/VOjd9RqpXQJe+dhXoGJLZ/rKTbMiHtAdQdhGy40efu/wiXS
DfmZ2AHfYPFFILNL/gBQe3HGqAuX/u3mGagflY+Igxt4HUeRQ1z6ydze/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGiGhLnrU3fbIQ+caAS7ocPQYMIDMB8GA1UdIwQY
MBaAFB9xQrRbXOOQFuJeCbL+1XmpvXfWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDNGQ3RGdGM0NUFXNGw0SnN2N1ZlYW05ZDlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9kZmVhZDctNTg2YS00YjM1LWIxOTkt
ZGZlNDVmNjcyZjgxLzEvSDNGQ3RGdGM0NUFXNGw0SnN2N1ZlYW05ZDlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9kZmVhZDctNTg2YS00YjM1LWIxOTktZGZlNDVmNjcyZjgx
LzEvSDNGQ3RGdGM0NUFXNGw0SnN2N1ZlYW05ZDlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqCy5vl+1
bvuGx++fQQAmHyWxE702P6gn1T38Jw2g8jH/NqceBBgkFdWyK5rm4oe4KU39g0bP
FT+JhRAZpVWsfAEcu2JZTjdP2w53SeeyVV4yV/PBpsxKLAXcu9FZBS8L+m7RMA7g
o24ZK5zCOVhmLGmBG1Lq1CnSwN6d6X66J05SmGrLO+F/6SCXQd4wCoD9+E1wH14x
XSrjJ8ICoB7/plzH8o+3fIu5jfd/EaE7aPNraIq0/9LxVmkKEgsZLHq2orEeUdKE
kdk+fR4zFcSgvsm1Z8VvRxFlPmxu0LOSWDHQE9pTMo+p3/UAPN1fj5Hwt/xQzmyV
uKGh9HISYh8vHw==
-----END CERTIFICATE-----
Generated at Sat Jun 15 22:00:17 2024 by rpki-client on console-ams.rpki-client.org