![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dbc83e-4e42-4038-8157-8f99f9afd7a1/1/nJ_uAycbFcIzokWJ8jZacQ1DUtc.mft
File: nJ_uAycbFcIzokWJ8jZacQ1DUtc.mft (raw, json)
Hash identifier: A1y8VcXPJtjCLJ0gN4IvLuWCPvl6pgJDXck2QjoAfqY=
Subject key identifier: 23:33:D3:A1:73:F5:45:9B:3D:65:E7:2F:F9:E1:00:29:87:21:63:B4
Authority key identifier: 9C:9F:EE:03:27:1B:15:C2:33:A2:45:89:F2:36:5A:71:0D:43:52:D7
Certificate issuer: /CN=9c9fee03271b15c233a24589f2365a710d4352d7
Certificate serial: 01907163206618DD5A57C2DB199878282FE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nJ_uAycbFcIzokWJ8jZacQ1DUtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/dbc83e-4e42-4038-8157-8f99f9afd7a1/1/nJ_uAycbFcIzokWJ8jZacQ1DUtc.mft
Manifest number: 11ED
Signing time: Tue 02 Jul 2024 03:00:39 +0000
Manifest this update: Tue 02 Jul 2024 03:00:39 +0000
Manifest next update: Wed 03 Jul 2024 03:00:39 +0000
Files and hashes: 1: nJ_uAycbFcIzokWJ8jZacQ1DUtc.crl (hash: EkBcCAJ2Xs7leJFumVLLeN3mSwVDc0k+UtDx9DpEg30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/dbc83e-4e42-4038-8157-8f99f9afd7a1/1/nJ_uAycbFcIzokWJ8jZacQ1DUtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/dbc83e-4e42-4038-8157-8f99f9afd7a1/1/nJ_uAycbFcIzokWJ8jZacQ1DUtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/nJ_uAycbFcIzokWJ8jZacQ1DUtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 02 Jul 2024 21:43:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:71:63:20:66:18:dd:5a:57:c2:db:19:98:78:28:2f:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c9fee03271b15c233a24589f2365a710d4352d7
Validity
Not Before: Jul 2 03:00:39 2024 GMT
Not After : Jul 3 03:00:39 2024 GMT
Subject: CN=2333d3a173f5459b3d65e72ff9e10029872163b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:5f:25:7d:ac:ec:d9:d6:d9:2d:43:09:27:8a:
31:d2:37:b2:e2:da:a8:5e:0e:de:aa:ac:15:f0:95:
29:44:e2:5f:6f:a3:90:98:ed:ef:3d:b9:5e:3a:be:
db:51:2c:78:40:45:af:b9:f5:76:69:65:23:a2:2e:
9d:36:8c:a6:20:1d:8c:8d:15:d1:d0:cc:4d:96:3e:
d3:35:7f:ab:9e:cd:95:5b:8d:c4:e9:04:44:7d:43:
30:4f:74:ef:8b:59:2e:cc:d2:37:02:77:f2:f2:84:
48:57:43:f3:ae:f6:2f:ee:e7:12:f1:cd:24:c9:81:
d3:33:87:3b:4e:40:ae:a9:a8:ba:d3:c8:1e:b6:67:
a7:81:bc:33:b9:a7:03:0b:79:c5:ea:87:13:33:4e:
ec:eb:1e:03:ca:c1:8d:88:a7:4e:03:e5:11:e4:ab:
72:0c:f4:ca:6c:f6:d9:3a:c3:f5:55:b0:ca:a2:85:
95:a7:d9:8a:0f:dc:c3:6e:65:93:22:94:bc:f5:e1:
ed:3d:6c:5b:8b:dc:46:a9:bc:98:47:d0:3f:3f:c9:
51:89:e3:37:d6:61:55:71:d4:61:7c:f0:e3:d7:6f:
4e:1d:b9:55:dd:6c:52:3b:9a:e8:fa:57:be:3d:d5:
da:4f:81:f4:fb:26:18:a8:fd:cb:b9:29:68:22:ae:
46:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:33:D3:A1:73:F5:45:9B:3D:65:E7:2F:F9:E1:00:29:87:21:63:B4
X509v3 Authority Key Identifier:
keyid:9C:9F:EE:03:27:1B:15:C2:33:A2:45:89:F2:36:5A:71:0D:43:52:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJ_uAycbFcIzokWJ8jZacQ1DUtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dbc83e-4e42-4038-8157-8f99f9afd7a1/1/nJ_uAycbFcIzokWJ8jZacQ1DUtc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dbc83e-4e42-4038-8157-8f99f9afd7a1/1/nJ_uAycbFcIzokWJ8jZacQ1DUtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:1a:bc:f3:4e:23:79:27:c0:f1:50:06:17:c1:ce:2c:e7:89:
ec:01:53:25:72:f4:f0:b1:8e:e9:07:ab:d6:57:2c:39:8a:3d:
b8:5f:b4:8b:8a:55:2a:b1:f0:59:19:a8:d4:5f:09:cb:cb:16:
f3:44:98:4f:9f:de:76:7d:20:d1:d6:31:f9:f0:54:e2:b1:09:
e2:83:aa:74:eb:62:50:f5:0e:d4:38:c8:05:30:86:5e:a4:73:
7a:8a:46:18:09:6c:06:10:0b:b6:0d:1d:d8:64:d3:03:fd:bc:
4f:dd:6f:b1:30:ef:7d:27:b6:2b:ba:01:c8:e2:8f:82:d4:d8:
40:02:72:7c:48:f3:7f:b7:4a:2b:39:a1:5f:0a:04:c9:d5:e2:
5a:99:0c:78:8a:f4:6d:58:f0:6d:35:00:59:3a:ed:c5:e2:93:
0d:e2:1a:2b:56:4a:ca:ef:c4:22:66:11:49:e9:7d:60:f3:23:
13:c8:7b:96:00:ba:1c:44:fe:86:c9:f0:f2:cc:ad:8a:ac:b2:
b5:3f:fb:20:04:6a:c2:24:1d:9e:ee:e8:51:35:0c:98:35:a9:
26:14:7a:69:39:b0:00:ab:ed:b4:2e:41:5f:ed:2d:cf:7f:51:
3d:fd:95:11:18:d8:67:33:aa:a7:ac:68:9c:22:22:a9:f9:3d:
1c:b3:8b:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBxYyBmGN1aV8LbGZh4KC/lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljOWZlZTAzMjcxYjE1YzIzM2EyNDU4OWYyMzY1YTcxMGQ0
MzUyZDcwHhcNMjQwNzAyMDMwMDM5WhcNMjQwNzAzMDMwMDM5WjAzMTEwLwYDVQQD
EygyMzMzZDNhMTczZjU0NTliM2Q2NWU3MmZmOWUxMDAyOTg3MjE2M2I0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlF8lfazs2dbZLUMJJ4ox0jey4tqo
Xg7eqqwV8JUpROJfb6OQmO3vPbleOr7bUSx4QEWvufV2aWUjoi6dNoymIB2MjRXR
0MxNlj7TNX+rns2VW43E6QREfUMwT3Tvi1kuzNI3Anfy8oRIV0PzrvYv7ucS8c0k
yYHTM4c7TkCuqai608getmengbwzuacDC3nF6ocTM07s6x4DysGNiKdOA+UR5Kty
DPTKbPbZOsP1VbDKooWVp9mKD9zDbmWTIpS89eHtPWxbi9xGqbyYR9A/P8lRieM3
1mFVcdRhfPDj129OHblV3WxSO5ro+le+PdXaT4H0+yYYqP3LuSloIq5GTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCMz06Fz9UWbPWXnL/nhACmHIWO0MB8GA1UdIwQY
MBaAFJyf7gMnGxXCM6JFifI2WnENQ1LXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkpfdUF5Y2JGY0l6b2tXSjhqWmFjUTFEVXRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9kYmM4M2UtNGU0Mi00MDM4LTgxNTct
OGY5OWY5YWZkN2ExLzEvbkpfdUF5Y2JGY0l6b2tXSjhqWmFjUTFEVXRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9kYmM4M2UtNGU0Mi00MDM4LTgxNTctOGY5OWY5YWZkN2Ex
LzEvbkpfdUF5Y2JGY0l6b2tXSjhqWmFjUTFEVXRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFBq8804j
eSfA8VAGF8HOLOeJ7AFTJXL08LGO6Qer1lcsOYo9uF+0i4pVKrHwWRmo1F8Jy8sW
80SYT5/edn0g0dYx+fBU4rEJ4oOqdOtiUPUO1DjIBTCGXqRzeopGGAlsBhALtg0d
2GTTA/28T91vsTDvfSe2K7oByOKPgtTYQAJyfEjzf7dKKzmhXwoEydXiWpkMeIr0
bVjwbTUAWTrtxeKTDeIaK1ZKyu/EImYRSel9YPMjE8h7lgC6HET+hsnw8sytiqyy
tT/7IARqwiQdnu7oUTUMmDWpJhR6aTmwAKvttC5BX+0tz39RPf2VERjYZzOqp6xo
nCIiqfk9HLOLHg==
-----END CERTIFICATE-----
Generated at Tue Jul 2 04:42:51 2024 by rpki-client on console-ams.rpki-client.org