![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/2a6fb0-48b2-4f93-855b-877c65b01456/1/aaEKEpVYyDgLwT2axFQB0h2rnfA.mft
File: aaEKEpVYyDgLwT2axFQB0h2rnfA.mft (raw, json)
Hash identifier: SVYPM6JDhMihViIVbpPGL81KS3FPIn3JvyPROEh8NTk=
Subject key identifier: 45:84:0B:88:45:EE:D0:8B:BE:FC:CD:1B:C4:16:C5:05:AA:46:56:19
Authority key identifier: 69:A1:0A:12:95:58:C8:38:0B:C1:3D:9A:C4:54:01:D2:1D:AB:9D:F0
Certificate issuer: /CN=69a10a129558c8380bc13d9ac45401d21dab9df0
Certificate serial: 01901DEAB70854F07CC52A8830522BFB9802
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aaEKEpVYyDgLwT2axFQB0h2rnfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/2a6fb0-48b2-4f93-855b-877c65b01456/1/aaEKEpVYyDgLwT2axFQB0h2rnfA.mft
Manifest number: 11C3
Signing time: Sat 15 Jun 2024 22:00:39 +0000
Manifest this update: Sat 15 Jun 2024 22:00:39 +0000
Manifest next update: Sun 16 Jun 2024 22:00:39 +0000
Files and hashes: 1: aaEKEpVYyDgLwT2axFQB0h2rnfA.crl (hash: AhGPE1turoL/uZV67En6/ULWfD+B0VDt17ldbjch2KQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/2a6fb0-48b2-4f93-855b-877c65b01456/1/aaEKEpVYyDgLwT2axFQB0h2rnfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/2a6fb0-48b2-4f93-855b-877c65b01456/1/aaEKEpVYyDgLwT2axFQB0h2rnfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aaEKEpVYyDgLwT2axFQB0h2rnfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:ea:b7:08:54:f0:7c:c5:2a:88:30:52:2b:fb:98:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69a10a129558c8380bc13d9ac45401d21dab9df0
Validity
Not Before: Jun 15 22:00:39 2024 GMT
Not After : Jun 16 22:00:39 2024 GMT
Subject: CN=45840b8845eed08bbefccd1bc416c505aa465619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:05:29:b2:17:d5:90:dd:a0:94:6c:b3:a1:fa:
1f:6c:d8:c8:03:70:5a:bf:9c:73:21:53:04:1e:7e:
6c:8c:27:d0:38:2b:1f:71:f9:b6:fa:f2:a0:87:1e:
ab:db:65:3d:a6:1c:e6:38:a8:a3:74:b6:96:ef:eb:
06:6f:e2:53:4a:17:7c:35:2c:83:9c:8e:f0:39:be:
27:38:11:50:75:ab:ff:58:5e:0c:9d:53:03:c3:89:
fb:d3:9c:67:0d:d2:1b:42:51:23:06:ad:9d:7e:60:
9a:ba:0d:bc:f9:ed:94:ee:14:32:db:57:8c:df:0e:
0a:a6:d0:20:b6:4e:96:27:fe:02:d3:03:2b:f1:36:
1f:09:ac:1a:5f:c3:d2:18:43:b0:25:3c:69:c1:d5:
d1:3d:17:b1:0f:b2:f0:fc:36:93:63:64:da:c2:97:
ab:e2:24:91:08:59:12:8f:cc:f2:3f:7d:94:01:c1:
d3:b0:8a:8e:1c:ec:5a:7d:3f:78:61:19:91:e4:9d:
d2:7d:b8:1c:2a:56:f7:54:3d:78:18:d4:69:97:e9:
bd:1f:3e:e3:a0:e2:cd:83:23:a3:d0:2c:50:6f:d3:
69:11:3c:d0:fa:69:de:f9:ed:bd:d6:c9:be:3d:9e:
b4:5a:26:b3:c1:80:cc:c5:47:f8:45:95:96:93:3c:
8e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:84:0B:88:45:EE:D0:8B:BE:FC:CD:1B:C4:16:C5:05:AA:46:56:19
X509v3 Authority Key Identifier:
keyid:69:A1:0A:12:95:58:C8:38:0B:C1:3D:9A:C4:54:01:D2:1D:AB:9D:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaEKEpVYyDgLwT2axFQB0h2rnfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/2a6fb0-48b2-4f93-855b-877c65b01456/1/aaEKEpVYyDgLwT2axFQB0h2rnfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/2a6fb0-48b2-4f93-855b-877c65b01456/1/aaEKEpVYyDgLwT2axFQB0h2rnfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:d6:af:e2:0e:16:6d:ad:92:82:84:8e:33:9c:f2:c9:23:e9:
82:e8:ac:cf:a5:74:ab:48:05:21:ce:20:d0:79:9e:8f:9f:fb:
62:c3:c1:29:64:3e:de:39:c6:22:95:1d:fd:a6:3f:67:f9:2a:
9d:ab:33:70:5c:8e:c5:c0:b7:a0:ea:99:9c:57:3b:ca:24:f6:
14:18:01:90:00:30:74:8d:dc:c8:cf:a7:79:e1:f0:a4:1a:08:
5d:ac:3b:98:ab:50:67:74:21:d9:04:12:58:9e:3b:f2:d5:92:
f5:e3:eb:fa:86:c5:df:6f:d0:a3:33:f0:a7:11:87:df:0b:ed:
22:90:cf:90:1e:ad:24:1d:15:92:be:bf:7d:5c:ff:7d:95:a8:
d6:4c:6a:9a:12:a6:9c:e7:af:bb:39:0d:7e:1b:6e:55:2d:b4:
ee:ec:ef:a0:23:57:70:ac:69:8a:04:44:67:b9:b3:6a:2b:22:
5a:89:ba:26:ce:aa:fb:33:0b:a1:f2:65:af:c7:65:d6:f2:27:
4a:bf:32:f5:37:30:a8:a6:b9:0f:01:b9:76:80:6a:bc:c5:ff:
9c:b1:9f:6c:bb:1f:76:dc:7c:f8:d0:f7:01:1d:9e:b2:37:b3:
5a:96:63:56:49:43:2c:cc:e2:9a:e3:2e:f5:6f:99:e8:53:9d:
ed:0c:c0:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAd6rcIVPB8xSqIMFIr+5gCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5YTEwYTEyOTU1OGM4MzgwYmMxM2Q5YWM0NTQwMWQyMWRh
YjlkZjAwHhcNMjQwNjE1MjIwMDM5WhcNMjQwNjE2MjIwMDM5WjAzMTEwLwYDVQQD
Eyg0NTg0MGI4ODQ1ZWVkMDhiYmVmY2NkMWJjNDE2YzUwNWFhNDY1NjE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAUpshfVkN2glGyzofofbNjIA3Ba
v5xzIVMEHn5sjCfQOCsfcfm2+vKghx6r22U9phzmOKijdLaW7+sGb+JTShd8NSyD
nI7wOb4nOBFQdav/WF4MnVMDw4n705xnDdIbQlEjBq2dfmCaug28+e2U7hQy21eM
3w4KptAgtk6WJ/4C0wMr8TYfCawaX8PSGEOwJTxpwdXRPRexD7Lw/DaTY2Tawper
4iSRCFkSj8zyP32UAcHTsIqOHOxafT94YRmR5J3SfbgcKlb3VD14GNRpl+m9Hz7j
oOLNgyOj0CxQb9NpETzQ+mne+e291sm+PZ60WiazwYDMxUf4RZWWkzyONwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEWEC4hF7tCLvvzNG8QWxQWqRlYZMB8GA1UdIwQY
MBaAFGmhChKVWMg4C8E9msRUAdIdq53wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWFFS0VwVll5RGdMd1QyYXhGUUIwaDJybmZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8yYTZmYjAtNDhiMi00ZjkzLTg1NWIt
ODc3YzY1YjAxNDU2LzEvYWFFS0VwVll5RGdMd1QyYXhGUUIwaDJybmZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS8yYTZmYjAtNDhiMi00ZjkzLTg1NWItODc3YzY1YjAxNDU2
LzEvYWFFS0VwVll5RGdMd1QyYXhGUUIwaDJybmZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr9av4g4W
ba2SgoSOM5zyySPpguisz6V0q0gFIc4g0Hmej5/7YsPBKWQ+3jnGIpUd/aY/Z/kq
naszcFyOxcC3oOqZnFc7yiT2FBgBkAAwdI3cyM+neeHwpBoIXaw7mKtQZ3Qh2QQS
WJ478tWS9ePr+obF32/QozPwpxGH3wvtIpDPkB6tJB0Vkr6/fVz/fZWo1kxqmhKm
nOevuzkNfhtuVS207uzvoCNXcKxpigREZ7mzaisiWom6Js6q+zMLofJlr8dl1vIn
Sr8y9TcwqKa5DwG5doBqvMX/nLGfbLsfdtx8+ND3AR2esjezWpZjVklDLMzimuMu
9W+Z6FOd7QzApA==
-----END CERTIFICATE-----
Generated at Sat Jun 15 23:00:45 2024 by rpki-client on console-fra.rpki-client.org