![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/920c9e-a157-4cb8-ac01-92ac803c0545/1/Jb6Oq69y-65n5x64nRz-otLVHCY.mft
File: Jb6Oq69y-65n5x64nRz-otLVHCY.mft (raw, json)
Hash identifier: o4XSyFJ2XrCsg/nLc1J+r11IN+CG2WLSWAvd8ypnvCY=
Subject key identifier: 02:C3:B4:19:07:30:20:42:60:C4:A4:1E:99:09:B0:DD:09:59:E0:AB
Authority key identifier: 25:BE:8E:AB:AF:72:FB:AE:67:E7:1E:B8:9D:1C:FE:A2:D2:D5:1C:26
Certificate issuer: /CN=25be8eabaf72fbae67e71eb89d1cfea2d2d51c26
Certificate serial: 019044F897A68A6C458868AE8EDDE2DE4C01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jb6Oq69y-65n5x64nRz-otLVHCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/920c9e-a157-4cb8-ac01-92ac803c0545/1/Jb6Oq69y-65n5x64nRz-otLVHCY.mft
Manifest number: 03E3
Signing time: Sun 23 Jun 2024 12:01:00 +0000
Manifest this update: Sun 23 Jun 2024 12:01:00 +0000
Manifest next update: Mon 24 Jun 2024 12:01:00 +0000
Files and hashes: 1: Jb6Oq69y-65n5x64nRz-otLVHCY.crl (hash: sgZ6yg7GBqGlHIlqV1kSMguVSMrweOidwsW2W/PK48Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/920c9e-a157-4cb8-ac01-92ac803c0545/1/Jb6Oq69y-65n5x64nRz-otLVHCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/920c9e-a157-4cb8-ac01-92ac803c0545/1/Jb6Oq69y-65n5x64nRz-otLVHCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jb6Oq69y-65n5x64nRz-otLVHCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 12:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:44:f8:97:a6:8a:6c:45:88:68:ae:8e:dd:e2:de:4c:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25be8eabaf72fbae67e71eb89d1cfea2d2d51c26
Validity
Not Before: Jun 23 12:01:00 2024 GMT
Not After : Jun 24 12:01:00 2024 GMT
Subject: CN=02c3b4190730204260c4a41e9909b0dd0959e0ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:29:d6:8a:49:ef:4e:70:01:b3:79:fa:79:86:
78:de:3a:95:b7:19:24:f4:b7:9f:d2:17:ea:11:65:
8e:4c:06:73:ca:19:15:2c:ae:59:96:95:f2:ec:65:
17:35:b0:45:fa:d9:1a:0a:00:8b:0c:30:7e:db:0c:
d0:f5:a5:2b:ac:72:3a:6b:33:a2:04:26:d8:28:dc:
d2:73:65:83:9f:07:9a:bb:74:94:31:a2:df:9a:cf:
5d:4a:ef:9d:82:02:c6:08:36:f1:7e:79:e2:92:62:
84:d4:e2:25:fa:67:7c:61:28:2b:38:15:41:1f:70:
b4:74:f9:19:bb:47:d0:2d:ae:33:fb:fb:e5:37:26:
e0:6e:09:84:94:47:3c:55:f8:33:d4:84:de:b0:11:
1d:41:b4:fc:d9:bf:63:22:07:c6:c7:dc:b5:4c:8c:
c1:41:d8:4f:9e:77:8f:97:08:3b:4c:04:d4:c0:c9:
a5:78:c8:19:1d:65:7f:3b:57:1c:4b:f0:f8:87:88:
06:bd:58:cd:03:a2:af:60:58:8a:85:af:7f:5c:d5:
0b:9f:c4:fa:29:a8:15:3d:12:12:9f:f2:94:73:ae:
91:60:51:37:04:43:48:4c:e5:55:cb:8f:98:45:db:
14:c6:95:03:da:f3:d8:0e:75:66:8f:af:c4:91:ea:
2d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:C3:B4:19:07:30:20:42:60:C4:A4:1E:99:09:B0:DD:09:59:E0:AB
X509v3 Authority Key Identifier:
keyid:25:BE:8E:AB:AF:72:FB:AE:67:E7:1E:B8:9D:1C:FE:A2:D2:D5:1C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jb6Oq69y-65n5x64nRz-otLVHCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/920c9e-a157-4cb8-ac01-92ac803c0545/1/Jb6Oq69y-65n5x64nRz-otLVHCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/920c9e-a157-4cb8-ac01-92ac803c0545/1/Jb6Oq69y-65n5x64nRz-otLVHCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:d7:6c:02:d9:de:de:32:e8:7e:d4:05:6c:d8:6d:2f:99:48:
70:88:e2:5a:66:36:c6:69:ab:4d:22:8b:af:ba:f6:bd:1e:68:
ba:59:72:94:22:2a:1b:2f:4e:5f:55:c8:93:44:ee:b7:e7:16:
5f:e2:d3:4d:c5:32:6b:57:33:50:09:df:27:ff:89:da:a3:40:
4a:32:01:d8:69:d7:ec:cb:4b:ec:77:fd:6e:f6:0e:6c:68:eb:
42:cb:8b:7d:ae:cc:93:2d:14:1b:9a:b4:42:27:f4:7a:e4:98:
db:1a:b5:dc:59:91:51:89:70:dd:a3:c2:ca:24:6f:10:a1:02:
22:a2:aa:00:42:b4:70:b6:de:72:a9:18:19:5d:6c:4b:1c:06:
80:33:31:bd:58:0e:d3:e1:5c:bf:06:9f:6b:eb:1c:b4:af:39:
c3:ee:26:6e:9f:54:95:c4:dc:92:9d:3d:e2:6a:a9:c3:db:88:
79:df:2d:d5:39:1e:ba:f4:3f:03:9b:b6:bc:85:b4:c6:64:65:
d8:2e:94:b9:4f:8f:98:17:35:23:99:e8:45:a5:2f:7c:54:fa:
3e:90:d2:95:06:39:37:53:5a:2c:8f:67:ce:3e:c1:7a:dc:16:
af:8e:66:b2:ec:17:80:9a:e0:7b:ad:28:23:e1:d3:8b:a7:2c:
82:24:ba:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBE+JemimxFiGiujt3i3kwBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1YmU4ZWFiYWY3MmZiYWU2N2U3MWViODlkMWNmZWEyZDJk
NTFjMjYwHhcNMjQwNjIzMTIwMTAwWhcNMjQwNjI0MTIwMTAwWjAzMTEwLwYDVQQD
EygwMmMzYjQxOTA3MzAyMDQyNjBjNGE0MWU5OTA5YjBkZDA5NTllMGFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjinWiknvTnABs3n6eYZ43jqVtxkk
9Lef0hfqEWWOTAZzyhkVLK5ZlpXy7GUXNbBF+tkaCgCLDDB+2wzQ9aUrrHI6azOi
BCbYKNzSc2WDnweau3SUMaLfms9dSu+dggLGCDbxfnnikmKE1OIl+md8YSgrOBVB
H3C0dPkZu0fQLa4z+/vlNybgbgmElEc8Vfgz1ITesBEdQbT82b9jIgfGx9y1TIzB
QdhPnnePlwg7TATUwMmleMgZHWV/O1ccS/D4h4gGvVjNA6KvYFiKha9/XNULn8T6
KagVPRISn/KUc66RYFE3BENITOVVy4+YRdsUxpUD2vPYDnVmj6/Ekeot/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFALDtBkHMCBCYMSkHpkJsN0JWeCrMB8GA1UdIwQY
MBaAFCW+jquvcvuuZ+ceuJ0c/qLS1RwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmI2T3E2OXktNjVuNXg2NG5Sei1vdExWSENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC85MjBjOWUtYTE1Ny00Y2I4LWFjMDEt
OTJhYzgwM2MwNTQ1LzEvSmI2T3E2OXktNjVuNXg2NG5Sei1vdExWSENZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC85MjBjOWUtYTE1Ny00Y2I4LWFjMDEtOTJhYzgwM2MwNTQ1
LzEvSmI2T3E2OXktNjVuNXg2NG5Sei1vdExWSENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdNdsAtne
3jLoftQFbNhtL5lIcIjiWmY2xmmrTSKLr7r2vR5oullylCIqGy9OX1XIk0Tut+cW
X+LTTcUya1czUAnfJ/+J2qNASjIB2GnX7MtL7Hf9bvYObGjrQsuLfa7Mky0UG5q0
Qif0euSY2xq13FmRUYlw3aPCyiRvEKECIqKqAEK0cLbecqkYGV1sSxwGgDMxvVgO
0+Fcvwafa+sctK85w+4mbp9UlcTckp094mqpw9uIed8t1TkeuvQ/A5u2vIW0xmRl
2C6UuU+PmBc1I5noRaUvfFT6PpDSlQY5N1NaLI9nzj7BetwWr45msuwXgJrge60o
I+HTi6csgiS6jg==
-----END CERTIFICATE-----
Generated at Sun Jun 23 18:56:29 2024 by rpki-client on console-fra.rpki-client.org