![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.mft
File: P-SE99D_9CD2t3E6k83LDFEAcmc.mft (raw, json)
Hash identifier: 7OG605Yb9X3uGTJEtptm7omk+twSHnR2ME0aGatwfrw=
Subject key identifier: BF:56:41:3A:1D:5E:37:8B:7D:A4:5A:6E:6B:C9:47:7D:B4:B2:E1:BD
Authority key identifier: 3F:E4:84:F7:D0:FF:F4:20:F6:B7:71:3A:93:CD:CB:0C:51:00:72:67
Certificate issuer: /CN=3fe484f7d0fff420f6b7713a93cdcb0c51007267
Certificate serial: 01901D45F3BABA46815651021BE5805B0CBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-SE99D_9CD2t3E6k83LDFEAcmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.mft
Manifest number: 01AC
Signing time: Sat 15 Jun 2024 19:00:41 +0000
Manifest this update: Sat 15 Jun 2024 19:00:41 +0000
Manifest next update: Sun 16 Jun 2024 19:00:41 +0000
Files and hashes: 1: HjAjT39aXpYLw1z7v6rIupa-Ygk.roa (hash: XkaQZ5RK/xIryCN1D25OfDv6bzkrGzvh/7ttQ2ao2Mw=)
2: P-SE99D_9CD2t3E6k83LDFEAcmc.crl (hash: Z/bsWmehxLGbTzLXO6EjoLDptBShZl1xmPGnI3bexK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-SE99D_9CD2t3E6k83LDFEAcmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:45:f3:ba:ba:46:81:56:51:02:1b:e5:80:5b:0c:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fe484f7d0fff420f6b7713a93cdcb0c51007267
Validity
Not Before: Jun 15 19:00:41 2024 GMT
Not After : Jun 16 19:00:41 2024 GMT
Subject: CN=bf56413a1d5e378b7da45a6e6bc9477db4b2e1bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b4:e1:a0:1e:30:d5:38:57:86:67:c4:a4:74:
ca:44:35:46:de:f6:9b:33:cf:19:3f:81:87:2f:d6:
59:2c:b7:84:80:39:f3:3b:30:06:7f:e8:57:5a:4f:
b4:c6:6c:8d:ae:80:a8:08:68:b6:96:cf:e8:2f:c7:
be:21:43:f8:1b:79:77:37:9d:f7:63:01:6d:52:77:
3d:0f:fd:75:c4:3f:79:78:86:19:7f:8b:70:f2:60:
e6:43:1f:09:22:77:4d:61:a3:12:66:26:7e:02:f3:
af:f0:7a:f9:fd:d1:9a:1e:e0:13:fb:e8:3c:b1:63:
20:4a:82:5c:3f:99:10:c9:c2:55:14:a1:0a:1c:73:
2b:c9:ee:bc:4f:57:84:a2:63:1c:c3:1c:34:9b:cd:
3a:20:44:6e:26:b0:dd:36:19:43:51:07:cd:69:71:
5a:9d:59:df:32:17:df:05:54:69:e1:2b:e0:4d:56:
89:db:ba:56:ae:9b:fc:6d:fe:7d:a8:05:e0:c4:85:
c0:3e:bf:e3:f1:2f:f6:2c:39:48:4a:f8:de:e2:c1:
1e:69:db:9c:a9:ca:83:f0:ca:3d:e6:e1:70:6f:32:
e4:d4:17:e5:ba:50:7a:ac:f5:8b:a3:b1:8e:a1:09:
71:d5:de:21:fd:f0:99:fc:33:ee:71:75:6c:11:39:
70:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:56:41:3A:1D:5E:37:8B:7D:A4:5A:6E:6B:C9:47:7D:B4:B2:E1:BD
X509v3 Authority Key Identifier:
keyid:3F:E4:84:F7:D0:FF:F4:20:F6:B7:71:3A:93:CD:CB:0C:51:00:72:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-SE99D_9CD2t3E6k83LDFEAcmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:7a:d6:dd:33:e3:65:1f:e1:63:b1:f0:86:1f:95:27:d9:12:
cf:a8:3e:35:54:a8:0f:aa:3b:f4:95:e3:4f:25:03:4f:6b:87:
ae:05:e5:73:3c:2f:e3:d6:bf:51:64:ec:e2:2b:e0:1a:73:09:
e3:b0:35:2f:da:4b:29:ed:c0:83:f6:67:50:94:1e:4a:3c:3b:
55:66:e0:5d:a5:b9:ff:bd:87:df:d0:fa:74:37:cb:40:2f:c1:
ce:9e:25:8b:fb:fb:38:ea:0f:81:17:46:79:a7:a2:ef:70:f1:
6b:ac:cb:a1:c6:6e:3d:9d:b1:bc:a5:dd:74:66:b5:23:34:34:
b9:96:67:9b:32:a5:0e:6b:05:14:20:86:15:28:83:5c:8b:0a:
e6:5e:f8:af:7d:9f:c9:06:15:e0:dc:00:ae:30:6c:c0:bb:a4:
a2:d2:47:8c:54:e5:55:1d:f3:41:60:4f:b3:e5:ce:04:91:67:
03:cb:f0:1e:ed:4f:1a:f5:d6:ed:c0:1c:b0:a9:8c:78:28:c8:
75:ca:91:8e:02:aa:74:c9:07:7d:99:1f:81:3e:37:8e:1c:34:
c3:a8:2e:eb:bd:1b:e5:cd:da:47:d7:8d:f4:e3:f8:0c:61:da:
69:33:6c:7e:d6:7b:49:69:db:09:52:59:81:22:22:6c:09:66:
d0:05:4e:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAdRfO6ukaBVlECG+WAWwy7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZTQ4NGY3ZDBmZmY0MjBmNmI3NzEzYTkzY2RjYjBjNTEw
MDcyNjcwHhcNMjQwNjE1MTkwMDQxWhcNMjQwNjE2MTkwMDQxWjAzMTEwLwYDVQQD
EyhiZjU2NDEzYTFkNWUzNzhiN2RhNDVhNmU2YmM5NDc3ZGI0YjJlMWJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLThoB4w1ThXhmfEpHTKRDVG3vab
M88ZP4GHL9ZZLLeEgDnzOzAGf+hXWk+0xmyNroCoCGi2ls/oL8e+IUP4G3l3N533
YwFtUnc9D/11xD95eIYZf4tw8mDmQx8JIndNYaMSZiZ+AvOv8Hr5/dGaHuAT++g8
sWMgSoJcP5kQycJVFKEKHHMrye68T1eEomMcwxw0m806IERuJrDdNhlDUQfNaXFa
nVnfMhffBVRp4SvgTVaJ27pWrpv8bf59qAXgxIXAPr/j8S/2LDlISvje4sEeaduc
qcqD8Mo95uFwbzLk1BflulB6rPWLo7GOoQlx1d4h/fCZ/DPucXVsETlwWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL9WQTodXjeLfaRabmvJR320suG9MB8GA1UdIwQY
MBaAFD/khPfQ//Qg9rdxOpPNywxRAHJnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUC1TRTk5RF85Q0QydDNFNms4M0xERkVBY21jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8xYjcxMGItZDJmMS00ZTE1LWFhM2Mt
OTMyNjA2OTNhZGQ1LzEvUC1TRTk5RF85Q0QydDNFNms4M0xERkVBY21jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi8xYjcxMGItZDJmMS00ZTE1LWFhM2MtOTMyNjA2OTNhZGQ1
LzEvUC1TRTk5RF85Q0QydDNFNms4M0xERkVBY21jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnHrW3TPj
ZR/hY7Hwhh+VJ9kSz6g+NVSoD6o79JXjTyUDT2uHrgXlczwv49a/UWTs4ivgGnMJ
47A1L9pLKe3Ag/ZnUJQeSjw7VWbgXaW5/72H39D6dDfLQC/Bzp4li/v7OOoPgRdG
eaei73Dxa6zLocZuPZ2xvKXddGa1IzQ0uZZnmzKlDmsFFCCGFSiDXIsK5l74r32f
yQYV4NwArjBswLukotJHjFTlVR3zQWBPs+XOBJFnA8vwHu1PGvXW7cAcsKmMeCjI
dcqRjgKqdMkHfZkfgT43jhw0w6gu670b5c3aR9eN9OP4DGHaaTNsftZ7SWnbCVJZ
gSIibAlm0AVOkA==
-----END CERTIFICATE-----
Generated at Sat Jun 15 22:20:24 2024 by rpki-client on console-ams.rpki-client.org