![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/0fc7d8-2a5f-4b38-a230-8396f8c6255a/1/NHi9VqAesq4wdvaW0B1P_NFAGp8.mft
File: NHi9VqAesq4wdvaW0B1P_NFAGp8.mft (raw, json)
Hash identifier: 1FyTLfJEuS4+hBsyfXxc132IALsWjNn7p//FnLvSt+Y=
Subject key identifier: 2D:7F:51:DB:16:94:76:23:44:CE:26:E6:18:72:EC:25:54:E1:66:50
Authority key identifier: 34:78:BD:56:A0:1E:B2:AE:30:76:F6:96:D0:1D:4F:FC:D1:40:1A:9F
Certificate issuer: /CN=3478bd56a01eb2ae3076f696d01d4ffcd1401a9f
Certificate serial: 01901DEABD2821EC33D08DA3D629920B9AC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHi9VqAesq4wdvaW0B1P_NFAGp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/0fc7d8-2a5f-4b38-a230-8396f8c6255a/1/NHi9VqAesq4wdvaW0B1P_NFAGp8.mft
Manifest number: 11C5
Signing time: Sat 15 Jun 2024 22:00:41 +0000
Manifest this update: Sat 15 Jun 2024 22:00:41 +0000
Manifest next update: Sun 16 Jun 2024 22:00:41 +0000
Files and hashes: 1: NHi9VqAesq4wdvaW0B1P_NFAGp8.crl (hash: ZXP09HzB0AHysEy++JSUC1q13kG7E8zVRpbz2tNq06k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/0fc7d8-2a5f-4b38-a230-8396f8c6255a/1/NHi9VqAesq4wdvaW0B1P_NFAGp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/0fc7d8-2a5f-4b38-a230-8396f8c6255a/1/NHi9VqAesq4wdvaW0B1P_NFAGp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NHi9VqAesq4wdvaW0B1P_NFAGp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 22:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:ea:bd:28:21:ec:33:d0:8d:a3:d6:29:92:0b:9a:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3478bd56a01eb2ae3076f696d01d4ffcd1401a9f
Validity
Not Before: Jun 15 22:00:41 2024 GMT
Not After : Jun 16 22:00:41 2024 GMT
Subject: CN=2d7f51db1694762344ce26e61872ec2554e16650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6a:e7:58:ac:f6:77:6a:19:47:f6:9d:43:6d:
56:c2:a7:4d:bd:c6:51:a8:dd:23:61:38:e9:88:19:
7c:c2:67:63:ae:9b:64:f6:05:80:6d:48:c9:47:26:
5e:49:09:6c:8c:21:d3:c2:d7:22:6d:d5:8d:aa:39:
c3:75:a0:8d:3d:ec:59:f3:e2:8d:be:e5:d6:dc:cf:
92:45:b3:5f:a5:b6:03:4d:54:23:e7:20:49:d0:46:
ca:22:79:76:f2:e5:4e:24:fa:a1:fc:24:1f:a3:70:
36:bd:ba:1f:32:61:f5:92:d1:6c:23:cf:2b:19:de:
c8:f9:84:63:8e:c7:82:3d:96:be:18:43:94:81:1c:
dd:06:a6:07:dc:18:c8:fb:3e:d9:43:b6:e9:79:eb:
4f:df:52:6f:8f:aa:1e:cc:f5:78:39:51:c5:af:67:
89:50:55:c8:9b:4a:60:4f:5c:bd:8f:bb:41:5f:31:
30:92:a6:0e:50:1f:a3:26:d0:ec:61:b9:50:ce:a8:
5c:ec:aa:63:52:32:89:0f:35:7f:b4:31:91:20:4c:
6b:63:c5:ef:69:30:07:b5:3b:5c:d9:c1:ab:75:1c:
54:1f:57:fe:2c:c6:53:59:c9:5b:d6:04:4b:81:32:
92:cf:c3:41:06:16:51:c7:cb:4e:c4:a5:d7:16:c9:
39:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:7F:51:DB:16:94:76:23:44:CE:26:E6:18:72:EC:25:54:E1:66:50
X509v3 Authority Key Identifier:
keyid:34:78:BD:56:A0:1E:B2:AE:30:76:F6:96:D0:1D:4F:FC:D1:40:1A:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHi9VqAesq4wdvaW0B1P_NFAGp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0fc7d8-2a5f-4b38-a230-8396f8c6255a/1/NHi9VqAesq4wdvaW0B1P_NFAGp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0fc7d8-2a5f-4b38-a230-8396f8c6255a/1/NHi9VqAesq4wdvaW0B1P_NFAGp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:33:51:4e:91:32:dd:1b:59:b3:c8:a8:f1:c5:ba:71:c5:b3:
16:20:30:d8:73:d2:57:45:32:fa:eb:45:7c:ad:80:b8:38:1e:
f5:1b:39:27:c9:c2:08:30:f3:4f:83:ae:61:17:25:40:7a:c9:
8f:99:26:c5:78:d0:c2:f3:4c:11:55:81:cc:aa:d8:57:76:8b:
67:ee:bf:c5:b1:d3:b9:44:5d:e7:4a:56:16:81:86:e8:b8:08:
36:a1:1d:eb:7e:2c:ca:75:9f:3f:ec:23:d3:36:a8:40:4c:a7:
4d:24:0b:48:2a:90:43:eb:66:4a:05:00:6d:2c:27:62:8f:58:
98:d2:ae:3d:89:a8:98:45:0e:26:b7:77:05:c2:70:5c:94:64:
af:3b:0f:ce:b5:ac:e7:f5:4e:1e:fc:74:3b:cb:2e:af:b8:26:
48:f0:14:3f:2e:ae:d5:b7:56:58:74:63:ce:0f:91:d9:e3:ba:
c8:ba:f4:25:75:8e:ee:f6:93:ab:57:f3:70:dd:84:72:69:7b:
83:34:bd:3a:4a:80:53:3d:b2:7b:01:60:94:b4:90:67:71:63:
14:54:61:b1:a8:70:de:ba:b2:58:23:1e:9d:e7:d3:88:66:12:
a1:c7:57:f2:41:e1:68:a2:db:10:5e:8c:4c:9d:83:45:70:3a:
8b:03:03:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAd6r0oIewz0I2j1imSC5rCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0NzhiZDU2YTAxZWIyYWUzMDc2ZjY5NmQwMWQ0ZmZjZDE0
MDFhOWYwHhcNMjQwNjE1MjIwMDQxWhcNMjQwNjE2MjIwMDQxWjAzMTEwLwYDVQQD
EygyZDdmNTFkYjE2OTQ3NjIzNDRjZTI2ZTYxODcyZWMyNTU0ZTE2NjUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2rnWKz2d2oZR/adQ21WwqdNvcZR
qN0jYTjpiBl8wmdjrptk9gWAbUjJRyZeSQlsjCHTwtcibdWNqjnDdaCNPexZ8+KN
vuXW3M+SRbNfpbYDTVQj5yBJ0EbKInl28uVOJPqh/CQfo3A2vbofMmH1ktFsI88r
Gd7I+YRjjseCPZa+GEOUgRzdBqYH3BjI+z7ZQ7bpeetP31Jvj6oezPV4OVHFr2eJ
UFXIm0pgT1y9j7tBXzEwkqYOUB+jJtDsYblQzqhc7KpjUjKJDzV/tDGRIExrY8Xv
aTAHtTtc2cGrdRxUH1f+LMZTWclb1gRLgTKSz8NBBhZRx8tOxKXXFsk5dwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC1/UdsWlHYjRM4m5hhy7CVU4WZQMB8GA1UdIwQY
MBaAFDR4vVagHrKuMHb2ltAdT/zRQBqfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkhpOVZxQWVzcTR3ZHZhVzBCMVBfTkZBR3A4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8wZmM3ZDgtMmE1Zi00YjM4LWEyMzAt
ODM5NmY4YzYyNTVhLzEvTkhpOVZxQWVzcTR3ZHZhVzBCMVBfTkZBR3A4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC8wZmM3ZDgtMmE1Zi00YjM4LWEyMzAtODM5NmY4YzYyNTVh
LzEvTkhpOVZxQWVzcTR3ZHZhVzBCMVBfTkZBR3A4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPTNRTpEy
3RtZs8io8cW6ccWzFiAw2HPSV0Uy+utFfK2AuDge9Rs5J8nCCDDzT4OuYRclQHrJ
j5kmxXjQwvNMEVWBzKrYV3aLZ+6/xbHTuURd50pWFoGG6LgINqEd634synWfP+wj
0zaoQEynTSQLSCqQQ+tmSgUAbSwnYo9YmNKuPYmomEUOJrd3BcJwXJRkrzsPzrWs
5/VOHvx0O8sur7gmSPAUPy6u1bdWWHRjzg+R2eO6yLr0JXWO7vaTq1fzcN2Ecml7
gzS9OkqAUz2yewFglLSQZ3FjFFRhsahw3rqyWCMenefTiGYSocdX8kHhaKLbEF6M
TJ2DRXA6iwMDkg==
-----END CERTIFICATE-----
Generated at Sun Jun 16 04:56:20 2024 by rpki-client on console-ams.rpki-client.org