![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.mft
File: Sa8hU_AkCaRk5NdGHIAtS43RDf8.mft (raw, json)
Hash identifier: kWP9/0xYmeIpEiEe4Quh1/chDO/bfunmEpmZkL2mI/c=
Subject key identifier: 1E:50:D2:40:3C:16:5C:D5:55:43:BC:2C:B0:A8:6E:6A:57:3F:E6:51
Authority key identifier: 49:AF:21:53:F0:24:09:A4:64:E4:D7:46:1C:80:2D:4B:8D:D1:0D:FF
Certificate issuer: /CN=49af2153f02409a464e4d7461c802d4b8dd10dff
Certificate serial: 01903DACD68E7D813FE74D25ABCFD175CBD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sa8hU_AkCaRk5NdGHIAtS43RDf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.mft
Manifest number: 11D8
Signing time: Sat 22 Jun 2024 02:00:55 +0000
Manifest this update: Sat 22 Jun 2024 02:00:55 +0000
Manifest next update: Sun 23 Jun 2024 02:00:55 +0000
Files and hashes: 1: Sa8hU_AkCaRk5NdGHIAtS43RDf8.crl (hash: 5yruAnjCRdKBQ6Uj3I8eC7n9ho5ZXQwyMOJEimBkIcU=)
2: V-X0FfH1iIc4O9V2gQ2WTvhoPrQ.roa (hash: iaL4zS71GHYM/ZuaGJm60qqy51ge6pHo1XVVFMjWuZA=)
3: pOWFiKd8k-Uvc89LTmPVn_EQGWE.roa (hash: RuHe+M3QcBd0YCaTlqd+grEwASZGXYBLtzCYRkEuNio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sa8hU_AkCaRk5NdGHIAtS43RDf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 02:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:3d:ac:d6:8e:7d:81:3f:e7:4d:25:ab:cf:d1:75:cb:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49af2153f02409a464e4d7461c802d4b8dd10dff
Validity
Not Before: Jun 22 02:00:55 2024 GMT
Not After : Jun 23 02:00:55 2024 GMT
Subject: CN=1e50d2403c165cd55543bc2cb0a86e6a573fe651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:72:bb:27:56:64:c7:db:d4:2e:a4:39:bc:b8:
af:4d:db:4b:c3:a4:c7:68:80:50:40:87:fc:23:5a:
08:4f:62:56:5e:e6:3d:1d:12:82:99:9b:aa:77:b0:
6d:48:fa:8b:a3:0f:c6:a6:27:37:f1:c4:11:54:b6:
2b:e4:e4:a0:d2:c6:39:60:b1:1c:6e:d6:8c:af:59:
cd:e9:cf:90:da:b9:6e:bc:b7:0b:8a:80:eb:bf:54:
fb:c3:be:05:5e:48:91:99:3e:9a:cf:3d:18:8b:e5:
2c:90:e7:c9:ff:97:11:ef:a9:1a:98:b2:7d:1f:ab:
27:8a:2b:33:53:1b:44:01:b4:fd:48:6c:1e:e9:cd:
57:54:6c:40:48:46:5d:08:74:dd:e1:ce:4b:e4:73:
14:14:c0:35:04:a6:b7:7c:6b:c8:d4:25:54:b1:99:
2e:d9:dd:bc:86:d3:19:77:42:fa:2a:05:cc:81:8b:
3b:9b:28:2f:c6:19:d3:af:ee:c3:e8:c6:62:e0:2c:
25:d7:b9:fe:29:19:a2:5b:dd:34:60:e9:3a:22:34:
13:5f:92:48:7a:e8:bb:65:a3:56:ee:9f:e3:d6:23:
28:e8:1a:1b:af:84:b5:ea:82:fb:f3:bc:3f:61:ad:
47:93:69:44:59:25:e5:f3:e2:18:93:c9:52:47:92:
87:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:50:D2:40:3C:16:5C:D5:55:43:BC:2C:B0:A8:6E:6A:57:3F:E6:51
X509v3 Authority Key Identifier:
keyid:49:AF:21:53:F0:24:09:A4:64:E4:D7:46:1C:80:2D:4B:8D:D1:0D:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sa8hU_AkCaRk5NdGHIAtS43RDf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:17:a2:ac:ff:31:6f:32:43:67:3c:9d:29:8b:92:cd:9c:e0:
c8:8d:54:f3:93:04:06:5b:61:b9:4d:78:61:0b:b5:98:3e:52:
b6:81:25:c6:d2:21:2f:e2:61:c2:77:e1:e0:73:79:09:e1:c3:
42:61:f6:5e:11:71:f5:7d:3d:d2:6a:ef:05:96:b9:9b:81:90:
f8:5a:43:73:26:d4:b1:b8:d6:e7:0a:f1:26:e3:58:2a:88:ad:
04:b5:b4:19:3f:12:6d:4a:f5:82:28:06:08:7b:03:7d:6e:af:
fb:32:4c:63:d0:34:c8:3a:aa:ff:a1:c9:3d:e5:83:82:0a:86:
33:04:3b:63:8c:97:91:29:a4:43:d3:a0:83:87:56:3b:43:9d:
8b:6a:b5:04:fa:cf:91:df:c2:72:bc:ec:06:bf:bf:16:f7:2c:
39:67:69:0b:d0:12:6f:94:3e:2e:c0:59:5e:f1:d2:97:d5:88:
e0:17:ce:95:a8:3d:5b:18:09:67:c6:d6:9b:88:9e:11:a2:0c:
1f:f9:7a:0b:0c:f1:0c:1d:19:c5:1e:89:08:f5:e9:22:2d:6c:
d2:78:2e:59:24:a6:98:80:13:7c:9c:3e:c4:fb:7b:e9:0f:dd:
90:bc:3e:f6:6a:9c:6e:ca:0d:8d:a9:fe:f4:75:a5:17:a1:4e:
5a:16:31:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZA9rNaOfYE/500lq8/RdcvVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5YWYyMTUzZjAyNDA5YTQ2NGU0ZDc0NjFjODAyZDRiOGRk
MTBkZmYwHhcNMjQwNjIyMDIwMDU1WhcNMjQwNjIzMDIwMDU1WjAzMTEwLwYDVQQD
EygxZTUwZDI0MDNjMTY1Y2Q1NTU0M2JjMmNiMGE4NmU2YTU3M2ZlNjUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHK7J1Zkx9vULqQ5vLivTdtLw6TH
aIBQQIf8I1oIT2JWXuY9HRKCmZuqd7BtSPqLow/Gpic38cQRVLYr5OSg0sY5YLEc
btaMr1nN6c+Q2rluvLcLioDrv1T7w74FXkiRmT6azz0Yi+UskOfJ/5cR76kamLJ9
H6sniiszUxtEAbT9SGwe6c1XVGxASEZdCHTd4c5L5HMUFMA1BKa3fGvI1CVUsZku
2d28htMZd0L6KgXMgYs7mygvxhnTr+7D6MZi4Cwl17n+KRmiW900YOk6IjQTX5JI
eui7ZaNW7p/j1iMo6Bobr4S16oL787w/Ya1Hk2lEWSXl8+IYk8lSR5KHrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB5Q0kA8FlzVVUO8LLCobmpXP+ZRMB8GA1UdIwQY
MBaAFEmvIVPwJAmkZOTXRhyALUuN0Q3/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2E4aFVfQWtDYVJrNU5kR0hJQXRTNDNSRGY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9lYjI1YjUtNzFlYS00NjlkLTk0ODQt
NGVhNmRmYjJlNWQzLzEvU2E4aFVfQWtDYVJrNU5kR0hJQXRTNDNSRGY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9lYjI1YjUtNzFlYS00NjlkLTk0ODQtNGVhNmRmYjJlNWQz
LzEvU2E4aFVfQWtDYVJrNU5kR0hJQXRTNDNSRGY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdxeirP8x
bzJDZzydKYuSzZzgyI1U85MEBlthuU14YQu1mD5StoElxtIhL+Jhwnfh4HN5CeHD
QmH2XhFx9X090mrvBZa5m4GQ+FpDcybUsbjW5wrxJuNYKoitBLW0GT8SbUr1gigG
CHsDfW6v+zJMY9A0yDqq/6HJPeWDggqGMwQ7Y4yXkSmkQ9Ogg4dWO0Odi2q1BPrP
kd/CcrzsBr+/FvcsOWdpC9ASb5Q+LsBZXvHSl9WI4BfOlag9WxgJZ8bWm4ieEaIM
H/l6CwzxDB0ZxR6JCPXpIi1s0nguWSSmmIATfJw+xPt76Q/dkLw+9mqcbsoNjan+
9HWlF6FOWhYxrQ==
-----END CERTIFICATE-----
Generated at Sat Jun 22 10:00:28 2024 by rpki-client on console-ams.rpki-client.org