![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/3a6b4b-757b-4d01-a3d7-dbb4ca54d294/1/94hH4ENTVu5e8IbBIEhAigQZG3g.mft
File: 94hH4ENTVu5e8IbBIEhAigQZG3g.mft (raw, json)
Hash identifier: q/RxP+YwB7CKdxeWHt2yz20NiSnj9VTBR7n1Kcg348I=
Subject key identifier: 7A:8F:1B:15:EA:D5:F3:06:9D:9E:E6:FD:AA:EA:60:9A:92:37:9D:14
Authority key identifier: F7:88:47:E0:43:53:56:EE:5E:F0:86:C1:20:48:40:8A:04:19:1B:78
Certificate issuer: /CN=f78847e0435356ee5ef086c12048408a04191b78
Certificate serial: 01901A7C4512FAB4C9693BC31815BB545C7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/94hH4ENTVu5e8IbBIEhAigQZG3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/3a6b4b-757b-4d01-a3d7-dbb4ca54d294/1/94hH4ENTVu5e8IbBIEhAigQZG3g.mft
Manifest number: 11C2
Signing time: Sat 15 Jun 2024 06:01:10 +0000
Manifest this update: Sat 15 Jun 2024 06:01:10 +0000
Manifest next update: Sun 16 Jun 2024 06:01:10 +0000
Files and hashes: 1: 94hH4ENTVu5e8IbBIEhAigQZG3g.crl (hash: NbXKaFsFmuvhMkV+kJgQY1Vl/PWj9LW5wWEaaxXbkbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/3a6b4b-757b-4d01-a3d7-dbb4ca54d294/1/94hH4ENTVu5e8IbBIEhAigQZG3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/3a6b4b-757b-4d01-a3d7-dbb4ca54d294/1/94hH4ENTVu5e8IbBIEhAigQZG3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/94hH4ENTVu5e8IbBIEhAigQZG3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1a:7c:45:12:fa:b4:c9:69:3b:c3:18:15:bb:54:5c:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f78847e0435356ee5ef086c12048408a04191b78
Validity
Not Before: Jun 15 06:01:10 2024 GMT
Not After : Jun 16 06:01:10 2024 GMT
Subject: CN=7a8f1b15ead5f3069d9ee6fdaaea609a92379d14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ba:50:2f:01:6b:ff:5f:36:6d:d0:23:a4:80:
57:3e:78:1d:7e:a8:93:98:8c:bd:09:ec:be:d5:27:
7c:15:b1:38:98:df:a7:76:b6:ac:40:29:f5:f2:fe:
b2:2a:e0:75:a6:e4:83:4b:29:06:d0:c3:9d:2b:e4:
45:2c:75:f0:64:95:bd:83:ed:fe:d9:d4:7a:6c:37:
d8:b4:f4:a8:63:c7:18:8d:35:fe:7a:c3:dd:a1:88:
1a:92:b4:8d:09:a7:7f:b0:bb:18:aa:0b:95:b1:96:
42:6a:c4:53:bb:8e:a2:ce:c8:e4:85:55:09:e9:00:
e2:e4:e4:6a:05:85:16:46:16:2e:a8:99:bc:77:7c:
b1:57:26:03:31:9a:da:ec:ce:07:3b:fb:80:75:04:
af:e2:19:80:ac:d2:5e:a1:d2:7d:62:d9:c0:50:ce:
c8:6b:80:13:29:d3:be:a4:2b:03:37:40:76:bc:1d:
df:00:aa:b1:b8:1a:0f:f4:20:02:d4:45:a6:16:a4:
bd:c9:f9:42:c9:d8:d4:ff:fa:48:ea:82:31:e8:87:
3a:5d:b2:90:15:95:13:85:90:2f:50:94:64:aa:af:
8e:2b:e2:47:83:42:c8:a3:a5:68:4e:9e:c9:8b:50:
bc:bf:d6:0c:75:f1:52:33:02:00:41:05:4f:54:bc:
a1:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:8F:1B:15:EA:D5:F3:06:9D:9E:E6:FD:AA:EA:60:9A:92:37:9D:14
X509v3 Authority Key Identifier:
keyid:F7:88:47:E0:43:53:56:EE:5E:F0:86:C1:20:48:40:8A:04:19:1B:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94hH4ENTVu5e8IbBIEhAigQZG3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/3a6b4b-757b-4d01-a3d7-dbb4ca54d294/1/94hH4ENTVu5e8IbBIEhAigQZG3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/3a6b4b-757b-4d01-a3d7-dbb4ca54d294/1/94hH4ENTVu5e8IbBIEhAigQZG3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:aa:b8:37:df:e2:9d:70:b2:67:e6:e1:36:70:e8:73:be:88:
14:44:9a:44:8d:93:5c:bc:35:38:41:73:61:c0:9c:9c:4d:23:
b0:a5:36:36:46:31:35:eb:ef:93:48:68:3b:7d:eb:9f:0e:c4:
5f:00:2a:88:7d:e2:0f:dc:db:7d:3d:47:b3:ea:36:4b:a9:5e:
20:1c:80:9a:2b:52:94:f4:7d:a8:63:90:3b:19:27:25:90:c1:
32:7c:0b:a5:40:ab:f1:2d:db:7b:db:e9:84:7a:1c:55:26:68:
36:9e:77:de:88:d5:fe:f7:72:71:03:3c:b0:7f:81:c9:93:7d:
b4:7d:ed:35:1b:06:e7:8a:38:d6:45:c1:9e:27:1b:21:16:db:
b6:d4:e0:e0:a1:cd:fb:61:56:08:73:ed:71:b5:59:c1:5b:9e:
0d:4e:3d:8e:b9:90:a4:c6:e5:59:35:c0:71:79:9d:7a:eb:93:
5b:f0:52:98:f0:ca:d0:78:fa:48:23:a4:67:94:3b:00:d3:be:
0d:f2:6c:01:a0:c4:66:a0:26:b5:36:a4:c0:14:3e:84:eb:ab:
ad:5e:bf:80:3f:c7:89:4b:d8:36:41:c4:cd:b4:f0:f8:59:70:
61:56:2a:11:0d:38:55:e2:cd:40:31:9a:1e:d5:5a:77:5f:ab:
68:22:c2:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAafEUS+rTJaTvDGBW7VFx7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3ODg0N2UwNDM1MzU2ZWU1ZWYwODZjMTIwNDg0MDhhMDQx
OTFiNzgwHhcNMjQwNjE1MDYwMTEwWhcNMjQwNjE2MDYwMTEwWjAzMTEwLwYDVQQD
Eyg3YThmMWIxNWVhZDVmMzA2OWQ5ZWU2ZmRhYWVhNjA5YTkyMzc5ZDE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7pQLwFr/182bdAjpIBXPngdfqiT
mIy9Cey+1Sd8FbE4mN+ndrasQCn18v6yKuB1puSDSykG0MOdK+RFLHXwZJW9g+3+
2dR6bDfYtPSoY8cYjTX+esPdoYgakrSNCad/sLsYqguVsZZCasRTu46izsjkhVUJ
6QDi5ORqBYUWRhYuqJm8d3yxVyYDMZra7M4HO/uAdQSv4hmArNJeodJ9YtnAUM7I
a4ATKdO+pCsDN0B2vB3fAKqxuBoP9CAC1EWmFqS9yflCydjU//pI6oIx6Ic6XbKQ
FZUThZAvUJRkqq+OK+JHg0LIo6VoTp7Ji1C8v9YMdfFSMwIAQQVPVLyhwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHqPGxXq1fMGnZ7m/arqYJqSN50UMB8GA1UdIwQY
MBaAFPeIR+BDU1buXvCGwSBIQIoEGRt4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTRoSDRFTlRWdTVlOEliQklFaEFpZ1FaRzNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS8zYTZiNGItNzU3Yi00ZDAxLWEzZDct
ZGJiNGNhNTRkMjk0LzEvOTRoSDRFTlRWdTVlOEliQklFaEFpZ1FaRzNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS8zYTZiNGItNzU3Yi00ZDAxLWEzZDctZGJiNGNhNTRkMjk0
LzEvOTRoSDRFTlRWdTVlOEliQklFaEFpZ1FaRzNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsKq4N9/i
nXCyZ+bhNnDoc76IFESaRI2TXLw1OEFzYcCcnE0jsKU2NkYxNevvk0hoO33rnw7E
XwAqiH3iD9zbfT1Hs+o2S6leIByAmitSlPR9qGOQOxknJZDBMnwLpUCr8S3be9vp
hHocVSZoNp533ojV/vdycQM8sH+ByZN9tH3tNRsG54o41kXBnicbIRbbttTg4KHN
+2FWCHPtcbVZwVueDU49jrmQpMblWTXAcXmdeuuTW/BSmPDK0Hj6SCOkZ5Q7ANO+
DfJsAaDEZqAmtTakwBQ+hOurrV6/gD/HiUvYNkHEzbTw+FlwYVYqEQ04VeLNQDGa
HtVad1+raCLCyw==
-----END CERTIFICATE-----
Generated at Sat Jun 15 15:10:24 2024 by rpki-client on console-ams.rpki-client.org