![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.mft
File: qC-5s0GMRYzbxs_WhFFL4krQw8k.mft (raw, json)
Hash identifier: AKdim2F5lYWhPLI/mj9O/yNvG1Q2HclGoyMGrjwsBkU=
Subject key identifier: BB:D9:2D:31:D8:1E:0F:AC:A9:69:32:95:D7:5A:44:03:7C:22:E1:6A
Authority key identifier: A8:2F:B9:B3:41:8C:45:8C:DB:C6:CF:D6:84:51:4B:E2:4A:D0:C3:C9
Certificate issuer: /CN=a82fb9b3418c458cdbc6cfd684514be24ad0c3c9
Certificate serial: 01901D0F3F2EB541A49AA38BE5BEBC6F4734
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qC-5s0GMRYzbxs_WhFFL4krQw8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.mft
Manifest number: 10F9
Signing time: Sat 15 Jun 2024 18:00:56 +0000
Manifest this update: Sat 15 Jun 2024 18:00:56 +0000
Manifest next update: Sun 16 Jun 2024 18:00:56 +0000
Files and hashes: 1: bZP-cto19TrOHBNuQoGq-plcH4A.roa (hash: TcuSOqHOgSfGF6GOWj8uOYgUJfEzdorC3fZCig0XH+w=)
2: qC-5s0GMRYzbxs_WhFFL4krQw8k.crl (hash: IsFWwVO+6nIi2bH3VrhDCDusLMvcYJDp+GaicAnx23w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/qC-5s0GMRYzbxs_WhFFL4krQw8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 18:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:0f:3f:2e:b5:41:a4:9a:a3:8b:e5:be:bc:6f:47:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a82fb9b3418c458cdbc6cfd684514be24ad0c3c9
Validity
Not Before: Jun 15 18:00:56 2024 GMT
Not After : Jun 16 18:00:56 2024 GMT
Subject: CN=bbd92d31d81e0faca9693295d75a44037c22e16a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:b8:72:d3:3b:39:7a:eb:7d:c4:0d:b5:9f:64:
42:94:80:6e:4b:e4:f7:76:4f:6d:bc:77:28:e7:da:
43:f1:3b:b1:0c:38:b7:5e:17:b7:58:86:8f:59:ee:
4d:85:73:b9:03:be:ba:1a:c2:6c:c1:57:1b:1d:78:
85:6d:06:aa:b9:a6:22:f9:44:25:b1:ff:e9:81:5d:
88:8e:4c:43:5f:43:13:5c:a7:95:43:bf:12:fc:d0:
b7:c0:5f:cd:92:78:a9:8a:fc:8d:9d:67:81:ec:7d:
00:1b:27:2b:b5:0f:51:11:fc:d6:f4:2c:23:3e:5f:
fc:18:87:8d:16:e3:ca:c2:91:1b:22:66:bf:ee:98:
91:f2:1e:32:c7:6c:b0:a3:24:44:66:26:c6:4a:b1:
13:e9:6a:67:8f:46:ed:31:fe:3b:3f:07:6f:e0:7c:
81:48:f7:b0:4d:bd:ea:83:b2:7d:54:68:8c:82:f9:
9e:3b:51:79:3d:0c:26:ab:38:ce:a9:fc:51:b8:f6:
f4:51:87:b2:83:a1:0c:02:e3:0f:0b:0c:01:9b:90:
fc:a3:6a:2a:6c:a8:5f:ba:72:06:9a:bf:08:1c:4f:
d3:3c:22:af:c1:fb:f6:9f:3e:68:ec:c9:71:09:cf:
73:02:76:b5:07:cc:87:da:cd:5e:46:9b:c9:bb:d0:
9a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:D9:2D:31:D8:1E:0F:AC:A9:69:32:95:D7:5A:44:03:7C:22:E1:6A
X509v3 Authority Key Identifier:
keyid:A8:2F:B9:B3:41:8C:45:8C:DB:C6:CF:D6:84:51:4B:E2:4A:D0:C3:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qC-5s0GMRYzbxs_WhFFL4krQw8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:16:b6:05:b6:a1:bc:d0:fe:ed:3d:69:d4:50:29:b2:2a:57:
c1:66:aa:6a:b3:2a:40:9b:42:00:ab:8c:54:6e:e2:b5:72:1a:
a4:39:c2:73:de:4a:64:a1:1e:59:5b:63:0b:99:0a:17:e9:d0:
0d:11:2f:2e:60:19:c5:da:db:cd:2f:1e:ba:44:35:58:82:a7:
d8:fe:7a:88:63:4f:e6:fa:17:ef:63:de:7b:14:0e:5c:92:21:
6e:b4:23:68:8e:10:b8:1a:a5:14:7f:41:cb:cf:8b:56:71:7d:
32:de:c2:9d:63:b0:d8:10:fe:f1:df:0c:81:8e:9a:a9:1d:30:
1d:42:69:bd:3e:a2:79:b7:aa:61:97:c0:95:0c:db:84:63:b5:
af:9c:93:c0:68:ba:05:ac:82:51:ee:80:b9:0b:63:c3:b1:18:
ec:10:00:f2:0e:12:30:1a:03:3d:c9:9c:4b:79:d8:68:de:c1:
a7:c4:b8:bf:65:fd:2b:1f:cc:a8:b3:ce:ee:9f:47:80:f2:86:
12:9b:b1:bb:30:9c:c3:7b:47:8f:49:8c:a9:72:ea:e0:d5:9c:
a7:e8:f6:3e:dd:52:c4:39:a4:08:dc:a3:fc:4e:1b:89:7f:39:
8e:f6:02:85:49:90:00:10:9e:43:b8:ea:ee:81:3a:4b:e1:79:
87:ee:37:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAdDz8utUGkmqOL5b68b0c0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4MmZiOWIzNDE4YzQ1OGNkYmM2Y2ZkNjg0NTE0YmUyNGFk
MGMzYzkwHhcNMjQwNjE1MTgwMDU2WhcNMjQwNjE2MTgwMDU2WjAzMTEwLwYDVQQD
EyhiYmQ5MmQzMWQ4MWUwZmFjYTk2OTMyOTVkNzVhNDQwMzdjMjJlMTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8bhy0zs5eut9xA21n2RClIBuS+T3
dk9tvHco59pD8TuxDDi3Xhe3WIaPWe5NhXO5A766GsJswVcbHXiFbQaquaYi+UQl
sf/pgV2IjkxDX0MTXKeVQ78S/NC3wF/NknipivyNnWeB7H0AGycrtQ9REfzW9Cwj
Pl/8GIeNFuPKwpEbIma/7piR8h4yx2ywoyREZibGSrET6Wpnj0btMf47Pwdv4HyB
SPewTb3qg7J9VGiMgvmeO1F5PQwmqzjOqfxRuPb0UYeyg6EMAuMPCwwBm5D8o2oq
bKhfunIGmr8IHE/TPCKvwfv2nz5o7MlxCc9zAna1B8yH2s1eRpvJu9Ca7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLvZLTHYHg+sqWkylddaRAN8IuFqMB8GA1UdIwQY
MBaAFKgvubNBjEWM28bP1oRRS+JK0MPJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUMtNXMwR01SWXpieHNfV2hGRkw0a3JRdzhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84YjdmZTktNWRmMi00NzNlLTgwMTgt
YjI2MzQxZDM4YzNmLzEvcUMtNXMwR01SWXpieHNfV2hGRkw0a3JRdzhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi84YjdmZTktNWRmMi00NzNlLTgwMTgtYjI2MzQxZDM4YzNm
LzEvcUMtNXMwR01SWXpieHNfV2hGRkw0a3JRdzhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARha2Bbah
vND+7T1p1FApsipXwWaqarMqQJtCAKuMVG7itXIapDnCc95KZKEeWVtjC5kKF+nQ
DREvLmAZxdrbzS8eukQ1WIKn2P56iGNP5voX72PeexQOXJIhbrQjaI4QuBqlFH9B
y8+LVnF9Mt7CnWOw2BD+8d8MgY6aqR0wHUJpvT6iebeqYZfAlQzbhGO1r5yTwGi6
BayCUe6AuQtjw7EY7BAA8g4SMBoDPcmcS3nYaN7Bp8S4v2X9Kx/MqLPO7p9HgPKG
EpuxuzCcw3tHj0mMqXLq4NWcp+j2Pt1SxDmkCNyj/E4biX85jvYChUmQABCeQ7jq
7oE6S+F5h+43dw==
-----END CERTIFICATE-----
Generated at Sun Jun 16 05:02:31 2024 by rpki-client on console-ams.rpki-client.org