![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/de78c9-a5fa-4385-9edf-54f72d7f5c20/1/V3l3onVhz5BYpS5GDJSZSAVb3T0.mft
File: V3l3onVhz5BYpS5GDJSZSAVb3T0.mft (raw, json)
Hash identifier: P/guN+sIAbk1vPFO+rmNEWHaVUbpm5VP1ceV/JRsY7I=
Subject key identifier: 2B:BD:DC:36:CA:68:31:A4:A4:8A:0F:FF:4F:06:75:36:78:15:C3:D7
Authority key identifier: 57:79:77:A2:75:61:CF:90:58:A5:2E:46:0C:94:99:48:05:5B:DD:3D
Certificate issuer: /CN=577977a27561cf9058a52e460c949948055bdd3d
Certificate serial: 01901FD988987A77A8791F953A3728D9BC7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V3l3onVhz5BYpS5GDJSZSAVb3T0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/de78c9-a5fa-4385-9edf-54f72d7f5c20/1/V3l3onVhz5BYpS5GDJSZSAVb3T0.mft
Manifest number: 03D5
Signing time: Sun 16 Jun 2024 07:01:08 +0000
Manifest this update: Sun 16 Jun 2024 07:01:08 +0000
Manifest next update: Mon 17 Jun 2024 07:01:08 +0000
Files and hashes: 1: V3l3onVhz5BYpS5GDJSZSAVb3T0.crl (hash: 7xfXRqmNu7NEN/OnCt8qMhgiRykaMB8Q3auJifj9mDY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/de78c9-a5fa-4385-9edf-54f72d7f5c20/1/V3l3onVhz5BYpS5GDJSZSAVb3T0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/de78c9-a5fa-4385-9edf-54f72d7f5c20/1/V3l3onVhz5BYpS5GDJSZSAVb3T0.mft
rsync://rpki.ripe.net/repository/DEFAULT/V3l3onVhz5BYpS5GDJSZSAVb3T0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1f:d9:88:98:7a:77:a8:79:1f:95:3a:37:28:d9:bc:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=577977a27561cf9058a52e460c949948055bdd3d
Validity
Not Before: Jun 16 07:01:08 2024 GMT
Not After : Jun 17 07:01:08 2024 GMT
Subject: CN=2bbddc36ca6831a4a48a0fff4f0675367815c3d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b9:ee:69:76:64:35:a5:b3:95:96:ce:4d:8e:
20:fa:e8:45:ab:e2:ef:cb:52:c1:c3:5d:20:f5:29:
84:5c:c2:8d:f8:18:78:5d:e6:40:d0:22:ad:09:3f:
9b:98:ba:24:58:cc:cb:ab:b2:dc:ad:e7:fd:68:00:
9f:3c:61:94:10:ed:61:29:52:cb:34:72:3f:64:f9:
dc:bf:83:a7:1b:95:19:fe:94:55:e6:7a:79:4f:98:
d2:b8:d6:a9:41:57:e4:fa:19:9b:25:e2:02:5f:54:
0d:c5:91:b7:4a:7a:4d:ac:46:84:8c:ec:98:59:54:
69:6a:03:f6:17:6f:d2:da:cd:8c:93:37:74:26:47:
4d:d7:4b:71:37:df:95:4d:b9:72:d1:88:d4:fa:c4:
ee:a4:3d:e1:39:cb:ef:d0:c3:3a:88:63:11:cd:6b:
9f:34:9c:67:5e:42:aa:c1:c0:b2:81:a7:25:b5:0e:
a1:26:9d:f2:ce:c0:54:4b:15:68:d1:aa:0b:cf:03:
e0:cc:bb:b1:5d:ea:43:70:8d:3d:91:9e:b6:bb:f8:
b3:64:78:33:c0:e8:42:f8:1e:2a:5f:b5:8a:d3:ce:
24:63:69:fb:c8:92:fc:2a:ae:8c:f1:a7:8f:c9:86:
0a:f4:86:68:af:e6:17:65:d5:51:9d:37:01:f5:89:
7e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:BD:DC:36:CA:68:31:A4:A4:8A:0F:FF:4F:06:75:36:78:15:C3:D7
X509v3 Authority Key Identifier:
keyid:57:79:77:A2:75:61:CF:90:58:A5:2E:46:0C:94:99:48:05:5B:DD:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3l3onVhz5BYpS5GDJSZSAVb3T0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/de78c9-a5fa-4385-9edf-54f72d7f5c20/1/V3l3onVhz5BYpS5GDJSZSAVb3T0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/de78c9-a5fa-4385-9edf-54f72d7f5c20/1/V3l3onVhz5BYpS5GDJSZSAVb3T0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:96:14:27:9c:83:44:fd:b0:68:9d:1a:df:7a:46:46:be:27:
b4:f6:dc:e1:da:5c:e4:56:b4:e6:74:49:05:44:f7:8f:c9:7e:
c5:06:c9:c4:12:a8:3c:50:33:de:f5:29:f7:f2:39:74:4c:14:
c6:e7:c9:96:58:e5:a2:ad:29:c2:38:6a:1a:03:a8:e8:49:0f:
e0:85:4d:e7:f8:16:12:ed:f0:a1:06:24:49:71:c9:4b:9c:a4:
1a:28:06:3d:f5:2e:57:fa:8f:af:a5:ed:f2:d8:74:19:bc:60:
a0:e7:48:a6:2f:f6:34:53:c1:53:75:a4:1e:ec:e9:a2:38:dc:
06:3c:3c:c9:a1:66:6a:d8:e6:cd:c1:95:4e:5e:e3:83:71:f5:
ec:61:95:50:0a:6b:1f:8d:9c:d5:0a:13:a6:d2:60:77:3d:9d:
d8:d8:04:ac:3c:b5:bf:1e:de:29:f1:ea:01:3e:35:f2:ed:fa:
fa:ad:20:10:ee:59:bf:23:12:a4:35:d4:c1:24:6a:2f:8a:d8:
8e:13:3d:87:0d:08:3e:90:0e:e6:c3:ff:1f:e4:d4:3a:13:3b:
d4:1b:4c:3f:24:13:68:46:5c:68:72:82:c9:10:b8:94:95:a3:
7f:72:58:ac:ff:6b:ba:fa:9d:b2:cd:7b:d8:60:2f:c1:c2:f7:
76:44:37:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAf2YiYeneoeR+VOjco2bx+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3Nzk3N2EyNzU2MWNmOTA1OGE1MmU0NjBjOTQ5OTQ4MDU1
YmRkM2QwHhcNMjQwNjE2MDcwMTA4WhcNMjQwNjE3MDcwMTA4WjAzMTEwLwYDVQQD
EygyYmJkZGMzNmNhNjgzMWE0YTQ4YTBmZmY0ZjA2NzUzNjc4MTVjM2Q3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrnuaXZkNaWzlZbOTY4g+uhFq+Lv
y1LBw10g9SmEXMKN+Bh4XeZA0CKtCT+bmLokWMzLq7Lcref9aACfPGGUEO1hKVLL
NHI/ZPncv4OnG5UZ/pRV5np5T5jSuNapQVfk+hmbJeICX1QNxZG3SnpNrEaEjOyY
WVRpagP2F2/S2s2Mkzd0JkdN10txN9+VTbly0YjU+sTupD3hOcvv0MM6iGMRzWuf
NJxnXkKqwcCygacltQ6hJp3yzsBUSxVo0aoLzwPgzLuxXepDcI09kZ62u/izZHgz
wOhC+B4qX7WK084kY2n7yJL8Kq6M8aePyYYK9IZor+YXZdVRnTcB9Yl+UwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCu93DbKaDGkpIoP/08GdTZ4FcPXMB8GA1UdIwQY
MBaAFFd5d6J1Yc+QWKUuRgyUmUgFW909MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjNsM29uVmh6NUJZcFM1R0RKU1pTQVZiM1QwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9kZTc4YzktYTVmYS00Mzg1LTllZGYt
NTRmNzJkN2Y1YzIwLzEvVjNsM29uVmh6NUJZcFM1R0RKU1pTQVZiM1QwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9kZTc4YzktYTVmYS00Mzg1LTllZGYtNTRmNzJkN2Y1YzIw
LzEvVjNsM29uVmh6NUJZcFM1R0RKU1pTQVZiM1QwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh5YUJ5yD
RP2waJ0a33pGRr4ntPbc4dpc5Fa05nRJBUT3j8l+xQbJxBKoPFAz3vUp9/I5dEwU
xufJlljloq0pwjhqGgOo6EkP4IVN5/gWEu3woQYkSXHJS5ykGigGPfUuV/qPr6Xt
8th0GbxgoOdIpi/2NFPBU3WkHuzpojjcBjw8yaFmatjmzcGVTl7jg3H17GGVUApr
H42c1QoTptJgdz2d2NgErDy1vx7eKfHqAT418u36+q0gEO5ZvyMSpDXUwSRqL4rY
jhM9hw0IPpAO5sP/H+TUOhM71BtMPyQTaEZcaHKCyRC4lJWjf3JYrP9ruvqdss17
2GAvwcL3dkQ3/A==
-----END CERTIFICATE-----
Generated at Sun Jun 16 08:12:34 2024 by rpki-client on console-ams.rpki-client.org