![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft
File: 14pJFNlgCbaCLRaKDtU-k206Qfg.mft (raw, json)
Hash identifier: pTKvkEKlHvcpoBFvFTN+zmCwos7aJ6z6fpwmjy/lI7Y=
Subject key identifier: DE:8D:5A:FB:77:F8:7C:41:2C:61:33:2A:DF:46:23:2D:63:49:EB:E0
Authority key identifier: D7:8A:49:14:D9:60:09:B6:82:2D:16:8A:0E:D5:3E:93:6D:3A:41:F8
Certificate issuer: /CN=d78a4914d96009b6822d168a0ed53e936d3a41f8
Certificate serial: 01901D469CD0D4B9BDF43E8572750D506A11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/14pJFNlgCbaCLRaKDtU-k206Qfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft
Manifest number: 11C8
Signing time: Sat 15 Jun 2024 19:01:25 +0000
Manifest this update: Sat 15 Jun 2024 19:01:25 +0000
Manifest next update: Sun 16 Jun 2024 19:01:25 +0000
Files and hashes: 1: 14pJFNlgCbaCLRaKDtU-k206Qfg.crl (hash: YVrRYyvAne3CYnqK7yocSZL6PSrl1QO005SkicooMDo=)
2: 1eAGu-ABlEPU4KJiTuXsMZAbFvU.roa (hash: i21aTnx+e9HS61Jw+liOBppQXdu89MRUq8Vn/TP1eAA=)
3: 8Qu62nIJ6nAm6s-a2LmqX1L2lZQ.roa (hash: j5kkv1pJCYTRAbSuy9COE6ZdMN7LSnwUi5WlLG8hhpo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/14pJFNlgCbaCLRaKDtU-k206Qfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 19:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:46:9c:d0:d4:b9:bd:f4:3e:85:72:75:0d:50:6a:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d78a4914d96009b6822d168a0ed53e936d3a41f8
Validity
Not Before: Jun 15 19:01:25 2024 GMT
Not After : Jun 16 19:01:25 2024 GMT
Subject: CN=de8d5afb77f87c412c61332adf46232d6349ebe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:95:7a:77:8f:e4:13:7c:24:8f:1e:d2:07:a5:
73:00:60:0b:e9:c5:d8:72:84:f9:c8:1d:1a:0a:73:
77:a5:e6:6f:63:33:41:7d:0b:27:04:eb:a1:93:e9:
18:e1:23:ba:23:38:cf:9b:d4:75:19:5c:ae:60:eb:
b0:d2:cc:aa:35:0a:0a:b7:b8:fb:2d:02:ab:5d:9d:
03:98:f2:40:a2:92:d9:20:0d:3a:b2:dc:98:c1:1b:
af:e0:c1:88:bd:22:dd:a3:7f:84:df:d0:9b:80:40:
77:fd:59:98:26:db:d8:40:cb:27:e7:3f:20:35:c0:
a2:08:b1:f2:6f:28:08:c9:00:56:ec:08:a8:0e:f8:
4a:bd:51:6f:b1:29:af:04:d2:f2:66:22:ed:9d:df:
f6:0e:50:46:79:a8:d2:32:f9:4c:70:11:b0:90:fe:
1f:eb:cb:1a:74:00:6f:7a:0c:ae:10:9a:ee:bf:04:
77:0c:41:82:be:5d:7e:ca:90:98:25:79:60:8c:88:
ab:78:8f:73:d8:04:bb:13:b2:58:af:2b:ce:88:14:
37:1e:fe:bf:e5:f8:81:8b:79:23:27:51:b1:6d:29:
9d:49:00:16:e9:c8:b0:de:12:8a:b0:09:53:03:d2:
a6:6c:f0:8b:a0:da:6e:49:ea:87:a9:e5:93:cf:32:
e0:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:8D:5A:FB:77:F8:7C:41:2C:61:33:2A:DF:46:23:2D:63:49:EB:E0
X509v3 Authority Key Identifier:
keyid:D7:8A:49:14:D9:60:09:B6:82:2D:16:8A:0E:D5:3E:93:6D:3A:41:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14pJFNlgCbaCLRaKDtU-k206Qfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:4c:73:d8:b5:e3:9c:b2:a9:e9:41:2c:63:68:07:15:37:f2:
2c:35:ed:ee:84:d3:e4:77:00:6b:49:67:ee:8e:cd:67:ad:c4:
06:cf:4f:e4:ed:ab:67:d8:55:70:55:0e:9f:45:c5:d5:27:0a:
18:00:43:06:c6:35:02:52:ee:43:b4:66:28:43:28:78:8b:be:
42:14:0a:a6:1c:3a:dc:15:22:43:ae:eb:1b:35:63:5f:d2:11:
5b:29:cd:93:a6:fd:57:c9:c4:93:c2:8f:1c:5b:32:d6:43:4b:
2a:98:77:9e:18:b4:2f:51:6a:e5:69:50:92:a7:13:3b:e8:f4:
1c:35:39:bf:be:3f:45:d8:fa:a4:c7:a5:2f:e6:d3:4d:8c:29:
23:61:13:19:eb:ec:a3:4a:67:a6:7d:5f:02:45:ea:65:53:54:
48:b1:38:61:f2:24:24:e9:19:c4:11:22:ae:51:84:b5:44:38:
bf:32:a8:22:cb:0f:b6:64:d2:5b:0b:3c:7c:3e:10:a3:d9:cc:
8b:6b:9f:cc:1a:26:bc:8e:26:c5:a4:d0:0e:1a:7d:87:9b:29:
0e:32:85:e3:1a:c2:56:2d:2c:c2:a2:f4:fe:54:7b:a0:25:bc:
d7:52:24:bc:63:82:98:6a:76:6f:6f:23:76:91:e1:25:96:b7:
f3:65:c4:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAdRpzQ1Lm99D6FcnUNUGoRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3OGE0OTE0ZDk2MDA5YjY4MjJkMTY4YTBlZDUzZTkzNmQz
YTQxZjgwHhcNMjQwNjE1MTkwMTI1WhcNMjQwNjE2MTkwMTI1WjAzMTEwLwYDVQQD
EyhkZThkNWFmYjc3Zjg3YzQxMmM2MTMzMmFkZjQ2MjMyZDYzNDllYmUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpV6d4/kE3wkjx7SB6VzAGAL6cXY
coT5yB0aCnN3peZvYzNBfQsnBOuhk+kY4SO6IzjPm9R1GVyuYOuw0syqNQoKt7j7
LQKrXZ0DmPJAopLZIA06styYwRuv4MGIvSLdo3+E39CbgEB3/VmYJtvYQMsn5z8g
NcCiCLHybygIyQBW7AioDvhKvVFvsSmvBNLyZiLtnd/2DlBGeajSMvlMcBGwkP4f
68sadABvegyuEJruvwR3DEGCvl1+ypCYJXlgjIireI9z2AS7E7JYryvOiBQ3Hv6/
5fiBi3kjJ1GxbSmdSQAW6ciw3hKKsAlTA9KmbPCLoNpuSeqHqeWTzzLg6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN6NWvt3+HxBLGEzKt9GIy1jSevgMB8GA1UdIwQY
MBaAFNeKSRTZYAm2gi0Wig7VPpNtOkH4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTRwSkZObGdDYmFDTFJhS0R0VS1rMjA2UWZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi83Y2Y0M2QtOGM4NS00ODE3LWJkNzUt
MjMwZmRhNjZhYmNiLzEvMTRwSkZObGdDYmFDTFJhS0R0VS1rMjA2UWZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi83Y2Y0M2QtOGM4NS00ODE3LWJkNzUtMjMwZmRhNjZhYmNi
LzEvMTRwSkZObGdDYmFDTFJhS0R0VS1rMjA2UWZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ0xz2LXj
nLKp6UEsY2gHFTfyLDXt7oTT5HcAa0ln7o7NZ63EBs9P5O2rZ9hVcFUOn0XF1ScK
GABDBsY1AlLuQ7RmKEMoeIu+QhQKphw63BUiQ67rGzVjX9IRWynNk6b9V8nEk8KP
HFsy1kNLKph3nhi0L1Fq5WlQkqcTO+j0HDU5v74/Rdj6pMelL+bTTYwpI2ETGevs
o0pnpn1fAkXqZVNUSLE4YfIkJOkZxBEirlGEtUQ4vzKoIssPtmTSWws8fD4Qo9nM
i2ufzBomvI4mxaTQDhp9h5spDjKF4xrCVi0swqL0/lR7oCW811IkvGOCmGp2b28j
dpHhJZa382XESg==
-----END CERTIFICATE-----
Generated at Sun Jun 16 03:39:22 2024 by rpki-client on console-fra.rpki-client.org