![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.mft
File: yvYTMRp4acM1ymbLQjzG6LL6kCw.mft (raw, json)
Hash identifier: NkI2+VekwSGhUpB4gnVpsJbZHh3IPH0eeQoVuRQZDbM=
Subject key identifier: 27:95:E7:48:D7:43:0B:10:C1:DC:FA:BE:8E:50:E3:45:4F:0F:66:9C
Authority key identifier: CA:F6:13:31:1A:78:69:C3:35:CA:66:CB:42:3C:C6:E8:B2:FA:90:2C
Certificate issuer: /CN=caf613311a7869c335ca66cb423cc6e8b2fa902c
Certificate serial: 019033976FB95AFF8F674DBB24AD8CCDF3F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yvYTMRp4acM1ymbLQjzG6LL6kCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.mft
Manifest number: 11D2
Signing time: Thu 20 Jun 2024 03:01:20 +0000
Manifest this update: Thu 20 Jun 2024 03:01:20 +0000
Manifest next update: Fri 21 Jun 2024 03:01:20 +0000
Files and hashes: 1: EmcUcl_6Dhby46seFgpu1CWyPws.roa (hash: TLxUIg6DoFe+DYf4/43NLMSXkovCRrZ7/4ANlkDgpJQ=)
2: yvYTMRp4acM1ymbLQjzG6LL6kCw.crl (hash: ofzspv2ASgNy5Yengl2YAuZ2j0ocPqvNc1+bNzWvKX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/yvYTMRp4acM1ymbLQjzG6LL6kCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 03:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:33:97:6f:b9:5a:ff:8f:67:4d:bb:24:ad:8c:cd:f3:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caf613311a7869c335ca66cb423cc6e8b2fa902c
Validity
Not Before: Jun 20 03:01:20 2024 GMT
Not After : Jun 21 03:01:20 2024 GMT
Subject: CN=2795e748d7430b10c1dcfabe8e50e3454f0f669c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:14:58:64:58:72:1c:a6:3e:31:e8:68:96:cc:
0f:69:ce:b9:76:a4:82:47:bf:9b:2c:ff:b3:66:d5:
18:2b:ce:6c:39:f3:ae:93:76:94:6f:86:a2:66:fd:
76:9f:cd:12:5c:6e:49:52:58:28:1e:f1:38:ba:82:
ad:40:7d:e0:ec:07:b4:a3:32:40:1d:e3:e7:43:89:
b5:01:4c:32:fa:ef:e9:10:dc:c0:3c:4e:d4:b1:12:
53:fb:46:3e:4f:92:6f:1e:27:68:07:fb:52:54:42:
97:19:20:5d:37:4e:b8:f6:58:cc:3e:c9:45:97:35:
79:48:78:9c:3b:36:44:a1:f3:0a:58:4b:27:b0:9d:
3f:d8:61:b3:bd:db:95:9b:98:e6:75:2d:ef:8d:7a:
f2:7a:59:43:1b:58:be:64:5b:a7:7d:44:56:a0:a5:
ec:28:ac:3d:1e:25:62:2c:36:2c:db:f4:af:e0:fb:
22:58:b2:76:c8:45:54:0c:fb:27:55:cc:1d:44:b1:
48:a2:f2:d1:b5:ec:0d:bb:98:52:88:46:a2:8c:fe:
07:c4:c3:ab:b7:f2:de:8b:c0:2a:56:2b:7a:d7:b8:
ff:7c:d2:db:28:f0:90:a9:1d:f1:b7:b8:9c:dc:7b:
4c:30:c1:14:fd:34:62:56:dc:c3:83:08:b0:a0:fc:
77:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:95:E7:48:D7:43:0B:10:C1:DC:FA:BE:8E:50:E3:45:4F:0F:66:9C
X509v3 Authority Key Identifier:
keyid:CA:F6:13:31:1A:78:69:C3:35:CA:66:CB:42:3C:C6:E8:B2:FA:90:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvYTMRp4acM1ymbLQjzG6LL6kCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:ef:25:40:b1:d7:c8:f3:5a:5c:2c:64:8e:cf:98:33:0a:d3:
57:de:59:9e:fe:d5:8e:c9:e1:17:47:61:5d:1b:34:63:71:a8:
87:09:d8:40:50:09:22:73:0d:05:0b:89:e2:f8:fa:d6:0c:c5:
1e:b7:8e:ac:c5:55:7e:f2:90:a0:c9:41:22:a8:23:5d:96:63:
59:9c:46:91:a3:bc:bc:8f:83:9b:46:67:ff:aa:d0:6c:85:af:
52:25:23:33:7d:fc:ab:10:7d:a9:55:0d:43:89:70:71:71:2e:
ac:9f:98:57:79:ea:b4:ca:fb:6a:16:14:1f:1f:2c:47:3a:0e:
79:3a:d7:d3:29:7a:e8:b6:97:b8:8e:94:7b:bd:d4:5d:19:78:
26:1d:62:a4:8d:5a:23:88:22:f6:52:ba:68:67:79:81:ab:3b:
e0:d0:a2:a9:25:8f:44:2d:47:92:d6:87:e4:fc:84:cc:ba:48:
9c:63:46:14:14:68:33:2d:cc:ec:e7:e6:c8:55:29:3b:85:79:
8e:4c:9e:7d:4c:4c:d2:54:82:9e:62:92:74:e7:c5:de:c7:da:
31:38:e6:77:80:42:d7:e6:ed:1d:5e:ce:58:10:ca:0c:45:19:
1c:62:dd:f5:e6:59:b0:3c:8a:d2:fa:46:5e:00:62:41:38:3e:
e7:c6:9e:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAzl2+5Wv+PZ027JK2MzfP1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhZjYxMzMxMWE3ODY5YzMzNWNhNjZjYjQyM2NjNmU4YjJm
YTkwMmMwHhcNMjQwNjIwMDMwMTIwWhcNMjQwNjIxMDMwMTIwWjAzMTEwLwYDVQQD
EygyNzk1ZTc0OGQ3NDMwYjEwYzFkY2ZhYmU4ZTUwZTM0NTRmMGY2NjljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0BRYZFhyHKY+MeholswPac65dqSC
R7+bLP+zZtUYK85sOfOuk3aUb4aiZv12n80SXG5JUlgoHvE4uoKtQH3g7Ae0ozJA
HePnQ4m1AUwy+u/pENzAPE7UsRJT+0Y+T5JvHidoB/tSVEKXGSBdN0649ljMPslF
lzV5SHicOzZEofMKWEsnsJ0/2GGzvduVm5jmdS3vjXryellDG1i+ZFunfURWoKXs
KKw9HiViLDYs2/Sv4PsiWLJ2yEVUDPsnVcwdRLFIovLRtewNu5hSiEaijP4HxMOr
t/Lei8AqVit617j/fNLbKPCQqR3xt7ic3HtMMMEU/TRiVtzDgwiwoPx37QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCeV50jXQwsQwdz6vo5Q40VPD2acMB8GA1UdIwQY
MBaAFMr2EzEaeGnDNcpmy0I8xuiy+pAsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXZZVE1ScDRhY00xeW1iTFFqekc2TEw2a0N3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC85NGVhNGItM2ZmMC00ZjdiLTlkODMt
YzMxMGVjYTNjMDdiLzEveXZZVE1ScDRhY00xeW1iTFFqekc2TEw2a0N3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC85NGVhNGItM2ZmMC00ZjdiLTlkODMtYzMxMGVjYTNjMDdi
LzEveXZZVE1ScDRhY00xeW1iTFFqekc2TEw2a0N3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI+8lQLHX
yPNaXCxkjs+YMwrTV95Znv7VjsnhF0dhXRs0Y3GohwnYQFAJInMNBQuJ4vj61gzF
HreOrMVVfvKQoMlBIqgjXZZjWZxGkaO8vI+Dm0Zn/6rQbIWvUiUjM338qxB9qVUN
Q4lwcXEurJ+YV3nqtMr7ahYUHx8sRzoOeTrX0yl66LaXuI6Ue73UXRl4Jh1ipI1a
I4gi9lK6aGd5gas74NCiqSWPRC1HktaH5PyEzLpInGNGFBRoMy3M7OfmyFUpO4V5
jkyefUxM0lSCnmKSdOfF3sfaMTjmd4BC1+btHV7OWBDKDEUZHGLd9eZZsDyK0vpG
XgBiQTg+58aecw==
-----END CERTIFICATE-----
Generated at Thu Jun 20 09:57:53 2024 by rpki-client on console-fra.rpki-client.org