![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.mft
File: wkdsjbVJ97WIqQKw9M6AvrbSV0g.mft (raw, json)
Hash identifier: +CFAho/So5jf15atUDPv6+5SSJrhEkvei69REMnMK0g=
Subject key identifier: 46:4C:99:B0:D0:17:C4:CA:BD:95:5D:B7:31:B1:18:6D:13:F1:D8:BA
Authority key identifier: C2:47:6C:8D:B5:49:F7:B5:88:A9:02:B0:F4:CE:80:BE:B6:D2:57:48
Certificate issuer: /CN=c2476c8db549f7b588a902b0f4ce80beb6d25748
Certificate serial: 01901E591AD2275CADE9CACC145E2CB5599A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wkdsjbVJ97WIqQKw9M6AvrbSV0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.mft
Manifest number: 0851
Signing time: Sun 16 Jun 2024 00:01:14 +0000
Manifest this update: Sun 16 Jun 2024 00:01:14 +0000
Manifest next update: Mon 17 Jun 2024 00:01:14 +0000
Files and hashes: 1: wkdsjbVJ97WIqQKw9M6AvrbSV0g.crl (hash: WtzaAxKA7j+srRAV35vsMZD8UJpU7mtJKjlZ0alq4gU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/wkdsjbVJ97WIqQKw9M6AvrbSV0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 19:09:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1e:59:1a:d2:27:5c:ad:e9:ca:cc:14:5e:2c:b5:59:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2476c8db549f7b588a902b0f4ce80beb6d25748
Validity
Not Before: Jun 16 00:01:14 2024 GMT
Not After : Jun 17 00:01:14 2024 GMT
Subject: CN=464c99b0d017c4cabd955db731b1186d13f1d8ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fe:9f:f0:61:78:33:33:4c:fe:53:15:b1:7c:
89:31:31:a0:c3:df:5f:f3:80:d2:ca:fb:8a:32:35:
23:c4:28:41:e0:74:94:61:cb:93:a8:28:f9:67:1f:
00:7e:f0:8b:3c:27:91:19:03:41:34:7e:76:d1:05:
28:23:a8:de:b7:7f:e2:b1:e2:6a:cd:11:18:05:73:
00:2d:aa:db:05:e9:bf:d6:70:60:fd:ef:11:a3:24:
90:de:14:9a:1b:fb:8c:d5:40:5a:2d:cc:41:48:95:
a5:9b:51:25:f2:da:4f:07:3e:bb:3e:97:05:4a:9d:
c0:4a:79:e0:e2:2c:64:99:36:80:21:87:cc:cd:c6:
a0:46:ef:59:57:1f:45:98:06:c6:3d:e5:18:a4:72:
04:1d:31:ef:4b:a7:0b:c1:aa:8d:c3:da:7f:ce:e7:
ec:ee:59:8e:88:9d:ef:03:d5:2f:d3:a7:fc:19:49:
0e:12:fd:98:ab:5d:52:33:fa:c1:67:09:31:0a:34:
c4:0f:42:5c:81:a9:b0:38:fb:7c:2e:56:f7:9c:78:
3e:5c:32:3b:6a:b8:06:5c:91:e6:c8:e6:9d:34:6a:
95:2b:68:d5:18:59:ff:4c:a6:bb:a4:6f:24:44:ea:
25:81:4b:e7:b4:72:77:65:7f:f4:0f:cf:7d:56:ad:
05:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:4C:99:B0:D0:17:C4:CA:BD:95:5D:B7:31:B1:18:6D:13:F1:D8:BA
X509v3 Authority Key Identifier:
keyid:C2:47:6C:8D:B5:49:F7:B5:88:A9:02:B0:F4:CE:80:BE:B6:D2:57:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wkdsjbVJ97WIqQKw9M6AvrbSV0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:8f:22:e8:20:4b:70:a6:5c:03:12:88:53:6c:f1:63:7f:91:
58:6f:db:fe:7f:33:b9:ed:8d:52:43:88:83:d3:9c:d5:a6:20:
e7:5b:58:46:d3:72:9c:ea:72:42:58:38:e1:c7:b7:11:6b:a2:
5e:d5:55:29:78:cd:80:b1:e7:16:b3:bd:97:5c:d0:c9:ed:22:
2d:69:57:44:2e:f2:e6:ab:35:16:c0:3d:7e:9a:79:7a:f6:c4:
b6:75:78:1c:46:35:ed:22:c9:3a:6e:0a:e6:2d:3e:28:7e:96:
5f:05:61:3b:a1:f1:c6:73:74:78:64:18:2b:59:09:5a:02:d5:
79:08:67:71:8a:5e:68:de:62:71:cd:b6:ba:04:fd:5b:83:20:
14:79:4d:2d:22:79:27:a3:af:85:cc:96:ca:2e:db:cc:fd:1c:
9a:2b:00:20:bc:3b:2d:57:c5:b5:ce:e6:61:31:ac:b2:6d:0e:
5d:0b:f2:97:e1:3f:2d:35:c0:25:2b:6b:c7:77:23:a2:65:55:
db:1c:8e:e4:02:2e:ed:06:40:37:9b:83:5f:a5:b2:f5:48:2f:
8d:cd:bf:dd:5b:a6:dd:75:3a:3b:c2:6e:9f:c9:3b:02:a2:ab:
b4:1a:8f:db:47:0d:c3:b2:59:1a:92:ce:2b:b3:bd:18:ce:4b:
b6:e4:9d:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAeWRrSJ1yt6crMFF4stVmaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyNDc2YzhkYjU0OWY3YjU4OGE5MDJiMGY0Y2U4MGJlYjZk
MjU3NDgwHhcNMjQwNjE2MDAwMTE0WhcNMjQwNjE3MDAwMTE0WjAzMTEwLwYDVQQD
Eyg0NjRjOTliMGQwMTdjNGNhYmQ5NTVkYjczMWIxMTg2ZDEzZjFkOGJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuP6f8GF4MzNM/lMVsXyJMTGgw99f
84DSyvuKMjUjxChB4HSUYcuTqCj5Zx8AfvCLPCeRGQNBNH520QUoI6jet3/iseJq
zREYBXMALarbBem/1nBg/e8RoySQ3hSaG/uM1UBaLcxBSJWlm1El8tpPBz67PpcF
Sp3ASnng4ixkmTaAIYfMzcagRu9ZVx9FmAbGPeUYpHIEHTHvS6cLwaqNw9p/zufs
7lmOiJ3vA9Uv06f8GUkOEv2Yq11SM/rBZwkxCjTED0JcgamwOPt8Llb3nHg+XDI7
argGXJHmyOadNGqVK2jVGFn/TKa7pG8kROolgUvntHJ3ZX/0D899Vq0FRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEZMmbDQF8TKvZVdtzGxGG0T8di6MB8GA1UdIwQY
MBaAFMJHbI21Sfe1iKkCsPTOgL620ldIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2tkc2piVko5N1dJcVFLdzlNNkF2cmJTVjBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS8xNGViOTItMzNmMy00ZWNlLWFlY2It
MWYwYmYwZDhjYjM2LzEvd2tkc2piVko5N1dJcVFLdzlNNkF2cmJTVjBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS8xNGViOTItMzNmMy00ZWNlLWFlY2ItMWYwYmYwZDhjYjM2
LzEvd2tkc2piVko5N1dJcVFLdzlNNkF2cmJTVjBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA048i6CBL
cKZcAxKIU2zxY3+RWG/b/n8zue2NUkOIg9Oc1aYg51tYRtNynOpyQlg44ce3EWui
XtVVKXjNgLHnFrO9l1zQye0iLWlXRC7y5qs1FsA9fpp5evbEtnV4HEY17SLJOm4K
5i0+KH6WXwVhO6HxxnN0eGQYK1kJWgLVeQhncYpeaN5icc22ugT9W4MgFHlNLSJ5
J6OvhcyWyi7bzP0cmisAILw7LVfFtc7mYTGssm0OXQvyl+E/LTXAJStrx3cjomVV
2xyO5AIu7QZAN5uDX6Wy9Ugvjc2/3Vum3XU6O8Jun8k7AqKrtBqP20cNw7JZGpLO
K7O9GM5LtuSdig==
-----END CERTIFICATE-----
Generated at Sun Jun 16 01:05:50 2024 by rpki-client on console-fra.rpki-client.org