![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/bfc6b1-02af-4cb1-a06d-4d493082da1c/1/aweCDo1ADzwl3dC-G0bFTpVZYKE.mft
File: aweCDo1ADzwl3dC-G0bFTpVZYKE.mft (raw, json)
Hash identifier: ENr0pI1NlptUjA5HgLzati0la3zRzqBBkI3QOGrMbYs=
Subject key identifier: 4C:DB:A4:47:3B:3E:3C:43:A0:52:A6:25:5D:55:98:B2:38:3A:90:32
Authority key identifier: 6B:07:82:0E:8D:40:0F:3C:25:DD:D0:BE:1B:46:C5:4E:95:59:60:A1
Certificate issuer: /CN=6b07820e8d400f3c25ddd0be1b46c54e955960a1
Certificate serial: 0190418971606DDD4A5B342143477DABBA26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aweCDo1ADzwl3dC-G0bFTpVZYKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/bfc6b1-02af-4cb1-a06d-4d493082da1c/1/aweCDo1ADzwl3dC-G0bFTpVZYKE.mft
Manifest number: 08F2
Signing time: Sat 22 Jun 2024 20:00:44 +0000
Manifest this update: Sat 22 Jun 2024 20:00:44 +0000
Manifest next update: Sun 23 Jun 2024 20:00:44 +0000
Files and hashes: 1: aweCDo1ADzwl3dC-G0bFTpVZYKE.crl (hash: GXB7X+e8Rgr7mai65Dp+cDSy8at7noXkKqUWOzUioBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/bfc6b1-02af-4cb1-a06d-4d493082da1c/1/aweCDo1ADzwl3dC-G0bFTpVZYKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/bfc6b1-02af-4cb1-a06d-4d493082da1c/1/aweCDo1ADzwl3dC-G0bFTpVZYKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/aweCDo1ADzwl3dC-G0bFTpVZYKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 20:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:41:89:71:60:6d:dd:4a:5b:34:21:43:47:7d:ab:ba:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b07820e8d400f3c25ddd0be1b46c54e955960a1
Validity
Not Before: Jun 22 20:00:44 2024 GMT
Not After : Jun 23 20:00:44 2024 GMT
Subject: CN=4cdba4473b3e3c43a052a6255d5598b2383a9032
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:62:03:a8:30:dd:5e:26:12:ea:fc:6e:75:34:
41:08:43:f0:2d:85:a1:45:f5:db:d2:13:d4:e5:59:
66:75:d8:b2:81:f9:e1:e6:e3:a0:c0:33:d3:66:10:
be:6d:e8:a2:a1:8f:ca:b3:9a:c8:0a:db:31:de:52:
24:03:60:59:79:d5:64:17:55:cf:71:d5:a5:01:78:
a2:3f:94:4b:66:7c:dc:a0:27:a4:a7:35:7c:55:a8:
5d:59:f0:67:9e:a3:26:c4:92:8f:70:58:62:ed:55:
d7:9b:0e:cb:c8:73:37:87:9d:07:bb:95:ab:aa:85:
c0:90:22:dd:98:05:d3:09:ff:b0:5d:91:90:c6:67:
f0:31:24:28:e7:84:36:8e:ee:4b:9e:63:f1:75:68:
55:5a:9e:26:0c:53:2f:ff:1d:dc:e3:38:e7:3f:e7:
3a:4c:55:b5:ce:bf:f5:13:fb:3a:be:f5:75:6e:61:
67:b5:d3:cf:8d:61:41:7c:6e:65:24:7e:96:b0:4f:
cb:e2:0a:99:e1:b7:52:a5:25:0e:9b:57:d3:3a:73:
67:1f:ed:b6:1d:d5:bf:43:9f:90:6c:ee:4a:98:d5:
9b:16:79:c5:e5:65:6d:44:37:c9:60:11:fb:f3:74:
a4:c8:37:c9:e8:6f:c9:a5:b8:90:81:6c:0d:dc:34:
8c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:DB:A4:47:3B:3E:3C:43:A0:52:A6:25:5D:55:98:B2:38:3A:90:32
X509v3 Authority Key Identifier:
keyid:6B:07:82:0E:8D:40:0F:3C:25:DD:D0:BE:1B:46:C5:4E:95:59:60:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aweCDo1ADzwl3dC-G0bFTpVZYKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/bfc6b1-02af-4cb1-a06d-4d493082da1c/1/aweCDo1ADzwl3dC-G0bFTpVZYKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/bfc6b1-02af-4cb1-a06d-4d493082da1c/1/aweCDo1ADzwl3dC-G0bFTpVZYKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:09:f5:ad:e5:0e:99:29:37:46:f5:48:c5:14:82:db:3e:d8:
c3:e5:2d:f3:10:46:14:3b:c1:dc:e2:76:4b:96:33:dd:e6:bc:
e9:54:ea:28:65:e6:2b:65:0f:e8:94:88:31:00:2e:78:d4:e1:
08:a6:95:91:42:27:5e:a8:e8:dd:c4:c7:d4:8f:a5:32:9a:d2:
8f:99:c6:ff:64:55:9c:77:98:fd:f0:4b:ed:3f:b7:b4:33:7f:
44:de:ea:04:ab:df:0d:f6:02:fa:f8:51:c0:45:ad:01:29:9b:
b5:a2:68:91:ce:95:b0:35:ec:b5:4d:51:bc:75:9c:ce:03:85:
8e:d0:4d:80:fe:ce:15:dc:82:9f:c8:1b:19:b5:c3:f8:35:02:
ee:bd:fd:42:d3:a5:cc:98:04:13:d9:21:ab:eb:8c:88:07:1f:
fb:2e:7f:7f:cb:df:54:90:41:6a:47:11:6d:e7:c5:bb:a7:ca:
f6:c1:dd:aa:21:56:0f:96:6d:07:ee:3c:4d:36:8d:64:93:44:
27:5e:7e:eb:0e:62:49:c3:53:de:d8:26:56:05:16:70:24:34:
8b:1e:3f:5a:62:a2:64:b1:56:f1:31:bb:5c:46:20:66:68:33:
66:47:57:8f:c9:01:2e:22:af:71:93:4f:d9:89:e8:cc:42:c8:
95:94:a7:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:06:19 2024 by rpki-client on console-ams.rpki-client.org