![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/85ae1b-b077-448e-a328-7c05a1ff549b/1/obfHtAmGdKBPsXeELOxO65v4nh4.mft
File: obfHtAmGdKBPsXeELOxO65v4nh4.mft (raw, json)
Hash identifier: Ih3VSehMP4S3xq3c+l5q8P7Z4jlyZYRrcWthf4FCwgY=
Subject key identifier: AA:68:F1:1B:06:C9:2F:17:AF:25:47:A9:51:FA:8A:DC:0A:A7:A9:36
Authority key identifier: A1:B7:C7:B4:09:86:74:A0:4F:B1:77:84:2C:EC:4E:EB:9B:F8:9E:1E
Certificate issuer: /CN=a1b7c7b4098674a04fb177842cec4eeb9bf89e1e
Certificate serial: 01901DED94E83E7ADB9D60290D552AB3E3E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obfHtAmGdKBPsXeELOxO65v4nh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/85ae1b-b077-448e-a328-7c05a1ff549b/1/obfHtAmGdKBPsXeELOxO65v4nh4.mft
Manifest number: 11C2
Signing time: Sat 15 Jun 2024 22:03:47 +0000
Manifest this update: Sat 15 Jun 2024 22:03:47 +0000
Manifest next update: Sun 16 Jun 2024 22:03:47 +0000
Files and hashes: 1: obfHtAmGdKBPsXeELOxO65v4nh4.crl (hash: SjgKharAe/XnKMlQ4pK4beHF4En58Hu7tLMNRt7ZIiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/85ae1b-b077-448e-a328-7c05a1ff549b/1/obfHtAmGdKBPsXeELOxO65v4nh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/85ae1b-b077-448e-a328-7c05a1ff549b/1/obfHtAmGdKBPsXeELOxO65v4nh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/obfHtAmGdKBPsXeELOxO65v4nh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 22:03:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:ed:94:e8:3e:7a:db:9d:60:29:0d:55:2a:b3:e3:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1b7c7b4098674a04fb177842cec4eeb9bf89e1e
Validity
Not Before: Jun 15 22:03:47 2024 GMT
Not After : Jun 16 22:03:47 2024 GMT
Subject: CN=aa68f11b06c92f17af2547a951fa8adc0aa7a936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9c:21:80:41:92:8e:2a:7e:15:ec:88:9e:7f:
7a:08:24:1c:db:fe:02:19:23:e3:01:24:56:f1:69:
f3:42:bf:c4:c8:84:5b:9e:da:5b:79:6a:84:ea:d3:
c0:0d:c7:5c:a9:1a:d9:7a:c5:c4:a7:2f:fe:47:ab:
12:62:18:a7:86:10:76:a0:4a:f8:4e:dd:90:d9:3b:
2a:54:b7:b9:10:62:b3:af:16:3e:f3:bd:84:a7:65:
c7:fe:ad:34:0e:3a:63:2d:2a:ba:a3:e3:87:db:b0:
24:c2:db:71:86:20:39:cf:2b:1c:08:45:9f:10:d8:
3c:af:14:cd:ab:e6:e2:6a:b2:f0:d8:ed:dd:c6:53:
40:c0:05:c0:8d:3d:f0:c8:ec:1a:ac:aa:bf:08:16:
b6:f3:5b:5f:90:29:84:81:ae:ff:7a:c8:5a:53:16:
eb:3a:b1:d1:d1:1d:5a:dc:d8:85:66:83:e9:6a:67:
3c:54:f9:13:e3:6a:63:f2:11:97:cb:d1:44:28:0c:
71:b5:e3:28:46:d5:4f:87:d3:65:1a:2e:43:1d:3e:
0a:4d:a4:76:01:1b:07:90:11:07:58:7f:6f:d8:6a:
e6:da:c6:91:e7:a3:8e:1f:09:1e:38:3c:69:45:8f:
bc:1f:45:38:0b:8c:2a:56:73:ab:20:fb:9e:67:22:
02:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:68:F1:1B:06:C9:2F:17:AF:25:47:A9:51:FA:8A:DC:0A:A7:A9:36
X509v3 Authority Key Identifier:
keyid:A1:B7:C7:B4:09:86:74:A0:4F:B1:77:84:2C:EC:4E:EB:9B:F8:9E:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obfHtAmGdKBPsXeELOxO65v4nh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/85ae1b-b077-448e-a328-7c05a1ff549b/1/obfHtAmGdKBPsXeELOxO65v4nh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/85ae1b-b077-448e-a328-7c05a1ff549b/1/obfHtAmGdKBPsXeELOxO65v4nh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:98:4d:e5:91:d5:e5:ce:2a:75:d8:37:e7:93:75:74:d6:bb:
df:cd:fb:4d:fb:1b:d9:cd:46:ad:f0:57:5c:fd:4b:1c:bb:6c:
4b:b2:d6:e1:03:79:f7:5a:6c:f3:43:c9:8d:ab:e6:24:bc:c2:
f8:1d:ea:6d:60:6b:bc:e6:28:a0:21:60:55:fa:a6:4c:59:75:
94:22:cd:f2:31:8d:76:c3:2f:ef:ba:59:31:c9:7f:4a:22:5a:
ec:2e:3e:c2:04:44:39:ea:41:7c:fa:64:b5:43:7c:d2:45:28:
c0:0b:c5:e5:51:b3:a8:94:5b:68:d9:e6:4b:87:9a:7a:e2:c8:
64:bd:de:ac:c9:72:4e:51:0f:e8:04:08:0c:b6:7a:ac:e5:c9:
f6:f7:c4:7d:3a:70:77:0b:ef:43:e9:2c:8c:2d:58:50:d6:49:
5a:0f:1d:ee:49:76:94:62:58:23:c7:43:8c:df:58:97:43:fd:
97:87:56:8e:75:9d:96:33:bf:64:33:4e:da:7f:bb:0c:d6:0e:
cb:0f:b0:6d:8b:b4:0e:34:bb:08:61:77:e7:89:52:33:65:94:
cf:ef:f9:1e:2f:4d:e0:ed:bc:19:71:b8:e3:11:4c:57:b9:c8:
51:0d:c7:43:0f:bf:6a:c1:ea:95:5b:40:c1:73:86:97:07:8a:
44:02:53:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:34:16 2024 by rpki-client on console-ams.rpki-client.org