![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/39a6d4-b937-4d5f-8016-f2700864c187/1/yyaLUpOTAY1LyfxUBzAwoD2SlyE.mft
File: yyaLUpOTAY1LyfxUBzAwoD2SlyE.mft (raw, json)
Hash identifier: RvQXspIrMA5/m8yt3vyOaWddLb07BLzZe8wdJOr4Jqg=
Subject key identifier: 03:65:8D:12:FF:96:6B:68:DC:56:FD:4B:BD:A8:77:A3:30:22:EF:51
Authority key identifier: CB:26:8B:52:93:93:01:8D:4B:C9:FC:54:07:30:30:A0:3D:92:97:21
Certificate issuer: /CN=cb268b529393018d4bc9fc54073030a03d929721
Certificate serial: 01901D4632B4D5B94DAA447FC8BA72295CB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yyaLUpOTAY1LyfxUBzAwoD2SlyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/39a6d4-b937-4d5f-8016-f2700864c187/1/yyaLUpOTAY1LyfxUBzAwoD2SlyE.mft
Manifest number: 0E5A
Signing time: Sat 15 Jun 2024 19:00:58 +0000
Manifest this update: Sat 15 Jun 2024 19:00:58 +0000
Manifest next update: Sun 16 Jun 2024 19:00:58 +0000
Files and hashes: 1: yyaLUpOTAY1LyfxUBzAwoD2SlyE.crl (hash: CWAtn5+D2p0x2xGZWRT7nePpRVWX0e8EzU4sK5wlvKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/39a6d4-b937-4d5f-8016-f2700864c187/1/yyaLUpOTAY1LyfxUBzAwoD2SlyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/39a6d4-b937-4d5f-8016-f2700864c187/1/yyaLUpOTAY1LyfxUBzAwoD2SlyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yyaLUpOTAY1LyfxUBzAwoD2SlyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:46:32:b4:d5:b9:4d:aa:44:7f:c8:ba:72:29:5c:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb268b529393018d4bc9fc54073030a03d929721
Validity
Not Before: Jun 15 19:00:58 2024 GMT
Not After : Jun 16 19:00:58 2024 GMT
Subject: CN=03658d12ff966b68dc56fd4bbda877a33022ef51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8f:83:4b:22:ec:fc:5a:4a:c7:b3:8d:5c:2e:
e5:22:69:22:44:0d:57:d0:79:23:b4:2d:6d:c7:f0:
8d:e8:e4:7f:b5:e5:8d:34:41:40:b8:db:e0:cc:13:
31:90:b1:ba:59:23:14:f9:1a:d6:8c:a8:4b:8a:cc:
b5:a4:ba:b4:67:e9:a0:e6:32:aa:6b:5e:ea:a7:29:
06:62:f9:f2:12:f7:9a:3a:ef:8e:4f:57:d0:06:bd:
1a:9f:a7:b7:9d:e3:5d:f9:6f:ff:ef:ef:3b:1d:e0:
c6:ed:6f:96:06:de:c8:55:8f:04:66:1e:19:9a:75:
93:db:7a:c4:92:e2:b5:9e:41:28:11:21:ad:8b:d0:
aa:4f:e9:7f:eb:1a:1f:8f:19:50:e1:e8:f3:04:ae:
2e:09:f3:ad:5a:e7:44:80:38:dc:22:64:58:f9:f3:
2c:2e:51:ce:15:f5:42:3e:c4:7f:cf:af:f0:64:0d:
73:eb:8c:7f:ad:e3:99:88:98:5e:bf:20:23:9e:fc:
95:c0:c5:24:4f:97:48:47:c0:26:e2:a1:c8:4e:9d:
17:83:63:a0:b2:7f:01:89:00:1d:43:2d:9e:ea:e9:
72:dd:47:c7:5c:7c:bf:44:bf:b7:d5:25:41:3b:c2:
55:c2:91:ae:95:6b:0b:d4:4b:60:41:0f:cf:d5:2e:
f5:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:65:8D:12:FF:96:6B:68:DC:56:FD:4B:BD:A8:77:A3:30:22:EF:51
X509v3 Authority Key Identifier:
keyid:CB:26:8B:52:93:93:01:8D:4B:C9:FC:54:07:30:30:A0:3D:92:97:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yyaLUpOTAY1LyfxUBzAwoD2SlyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/39a6d4-b937-4d5f-8016-f2700864c187/1/yyaLUpOTAY1LyfxUBzAwoD2SlyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/39a6d4-b937-4d5f-8016-f2700864c187/1/yyaLUpOTAY1LyfxUBzAwoD2SlyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:6b:c2:3e:2f:50:a8:31:36:1b:92:f8:61:ba:fd:23:84:39:
08:84:d8:2b:dc:42:26:a5:1c:90:d0:8e:bd:b4:f4:1b:4d:cd:
97:ce:3c:03:56:77:7e:2a:c9:f8:75:3a:71:c4:9e:00:a7:a6:
cc:16:60:95:a3:ab:04:f3:92:77:9d:1a:4a:cd:00:25:6b:34:
e7:bd:ab:60:94:4b:ea:94:c7:9d:63:91:28:da:6b:94:77:04:
5a:aa:89:40:72:2d:bc:ae:9b:ba:f7:a8:32:88:9b:46:f1:2b:
f6:a2:13:76:90:4d:45:bc:a0:13:e5:0b:bd:91:0c:ff:55:30:
7c:97:da:6f:2d:92:b0:9d:a7:4d:ce:6d:3a:23:59:ce:fa:00:
fd:1d:cf:a9:f0:21:7e:06:b7:95:f2:af:11:41:40:14:27:e2:
5f:a8:f5:c8:4e:6f:91:4f:58:f8:40:89:cc:31:d2:0b:73:f4:
cd:c8:ad:1d:d3:83:f9:ab:16:65:a1:92:79:a1:43:f8:07:bf:
f3:5f:80:06:94:3c:f8:77:f1:ef:5d:41:4b:a4:ae:60:81:90:
30:ce:7c:19:af:53:2c:db:73:22:bf:8a:6e:6a:93:99:e3:d2:
58:29:1c:ca:01:8d:cf:c7:c8:55:5b:46:ba:ef:1f:b2:ed:54:
3c:00:9f:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAdRjK01blNqkR/yLpyKVyxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiMjY4YjUyOTM5MzAxOGQ0YmM5ZmM1NDA3MzAzMGEwM2Q5
Mjk3MjEwHhcNMjQwNjE1MTkwMDU4WhcNMjQwNjE2MTkwMDU4WjAzMTEwLwYDVQQD
EygwMzY1OGQxMmZmOTY2YjY4ZGM1NmZkNGJiZGE4NzdhMzMwMjJlZjUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxo+DSyLs/FpKx7ONXC7lImkiRA1X
0HkjtC1tx/CN6OR/teWNNEFAuNvgzBMxkLG6WSMU+RrWjKhLisy1pLq0Z+mg5jKq
a17qpykGYvnyEveaOu+OT1fQBr0an6e3neNd+W//7+87HeDG7W+WBt7IVY8EZh4Z
mnWT23rEkuK1nkEoESGti9CqT+l/6xofjxlQ4ejzBK4uCfOtWudEgDjcImRY+fMs
LlHOFfVCPsR/z6/wZA1z64x/reOZiJhevyAjnvyVwMUkT5dIR8Am4qHITp0Xg2Og
sn8BiQAdQy2e6uly3UfHXHy/RL+31SVBO8JVwpGulWsL1EtgQQ/P1S71twIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFANljRL/lmto3Fb9S72od6MwIu9RMB8GA1UdIwQY
MBaAFMsmi1KTkwGNS8n8VAcwMKA9kpchMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXlhTFVwT1RBWTFMeWZ4VUJ6QXdvRDJTbHlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi8zOWE2ZDQtYjkzNy00ZDVmLTgwMTYt
ZjI3MDA4NjRjMTg3LzEveXlhTFVwT1RBWTFMeWZ4VUJ6QXdvRDJTbHlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi8zOWE2ZDQtYjkzNy00ZDVmLTgwMTYtZjI3MDA4NjRjMTg3
LzEveXlhTFVwT1RBWTFMeWZ4VUJ6QXdvRDJTbHlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdGvCPi9Q
qDE2G5L4Ybr9I4Q5CITYK9xCJqUckNCOvbT0G03Nl848A1Z3firJ+HU6ccSeAKem
zBZglaOrBPOSd50aSs0AJWs0572rYJRL6pTHnWORKNprlHcEWqqJQHItvK6buveo
MoibRvEr9qITdpBNRbygE+ULvZEM/1UwfJfaby2SsJ2nTc5tOiNZzvoA/R3PqfAh
fga3lfKvEUFAFCfiX6j1yE5vkU9Y+ECJzDHSC3P0zcitHdOD+asWZaGSeaFD+Ae/
81+ABpQ8+Hfx711BS6SuYIGQMM58Ga9TLNtzIr+KbmqTmePSWCkcygGNz8fIVVtG
uu8fsu1UPACfqg==
-----END CERTIFICATE-----
Generated at Sat Jun 15 20:37:46 2024 by rpki-client on console-fra.rpki-client.org