![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/bc41f1-ca7e-4205-b81b-bebfa2fca46f/1/3Rc4MRWBIorSh1OUS-i88hafq6k.mft
File: 3Rc4MRWBIorSh1OUS-i88hafq6k.mft (raw, json)
Hash identifier: G5HmhI3MC4eg9pE9O6uw+WtoRODZfFQQhubCWK0U1Ak=
Subject key identifier: 44:9C:08:B7:3A:0D:74:E3:E0:B7:97:BD:C1:DC:79:75:B4:22:F5:4D
Authority key identifier: DD:17:38:31:15:81:22:8A:D2:87:53:94:4B:E8:BC:F2:16:9F:AB:A9
Certificate issuer: /CN=dd1738311581228ad28753944be8bcf2169faba9
Certificate serial: 019040ADA77ED17660D2F69612A0A4932C82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Rc4MRWBIorSh1OUS-i88hafq6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/bc41f1-ca7e-4205-b81b-bebfa2fca46f/1/3Rc4MRWBIorSh1OUS-i88hafq6k.mft
Manifest number: 0979
Signing time: Sat 22 Jun 2024 16:00:40 +0000
Manifest this update: Sat 22 Jun 2024 16:00:40 +0000
Manifest next update: Sun 23 Jun 2024 16:00:40 +0000
Files and hashes: 1: 3Rc4MRWBIorSh1OUS-i88hafq6k.crl (hash: L1jZdPKg2Eqo+J2deomHBOF3HGSZ3bqG3AKIStKqOz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/bc41f1-ca7e-4205-b81b-bebfa2fca46f/1/3Rc4MRWBIorSh1OUS-i88hafq6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/bc41f1-ca7e-4205-b81b-bebfa2fca46f/1/3Rc4MRWBIorSh1OUS-i88hafq6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Rc4MRWBIorSh1OUS-i88hafq6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:40:ad:a7:7e:d1:76:60:d2:f6:96:12:a0:a4:93:2c:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd1738311581228ad28753944be8bcf2169faba9
Validity
Not Before: Jun 22 16:00:40 2024 GMT
Not After : Jun 23 16:00:40 2024 GMT
Subject: CN=449c08b73a0d74e3e0b797bdc1dc7975b422f54d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:00:a1:57:80:ce:a0:28:e1:bf:45:86:fb:1f:
c5:78:50:8f:05:b3:49:65:18:00:2c:be:df:28:b3:
ab:2b:02:c9:5c:ea:ab:96:23:63:fd:82:86:2c:e4:
85:f3:1a:9f:b2:c4:de:de:65:a3:a5:92:f0:81:51:
c3:1c:9f:35:0e:cd:57:60:ef:be:8d:f0:6e:f2:db:
11:5a:fb:d9:27:2d:1d:ef:24:72:89:a1:d2:39:8f:
a9:57:c5:3d:0d:7c:a6:aa:ed:c3:3d:d8:e1:7a:07:
93:c1:14:91:c9:c1:90:4e:54:06:73:69:5a:31:e4:
20:61:7e:5d:3b:44:c2:77:78:30:99:7f:9b:41:66:
f0:8b:60:f8:6b:b8:4c:79:18:b7:b3:31:cc:6d:80:
d7:33:8c:6c:73:0a:f8:38:d1:a0:fd:50:40:b9:31:
09:ca:9a:2e:4e:16:ee:59:98:93:7b:2d:3d:b2:f0:
97:03:38:27:98:41:a5:44:5e:44:66:22:20:df:7b:
ad:26:f4:3f:98:48:bb:cc:2e:87:46:09:0d:57:07:
88:97:81:f5:82:15:d1:17:c1:6e:a2:e5:c6:2e:87:
b6:fc:f7:32:1f:ff:fd:e9:fd:e4:06:d3:d7:0a:fa:
55:a4:1a:13:7d:a2:ce:13:36:18:94:d9:e0:b8:bc:
3d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:9C:08:B7:3A:0D:74:E3:E0:B7:97:BD:C1:DC:79:75:B4:22:F5:4D
X509v3 Authority Key Identifier:
keyid:DD:17:38:31:15:81:22:8A:D2:87:53:94:4B:E8:BC:F2:16:9F:AB:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Rc4MRWBIorSh1OUS-i88hafq6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/bc41f1-ca7e-4205-b81b-bebfa2fca46f/1/3Rc4MRWBIorSh1OUS-i88hafq6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/bc41f1-ca7e-4205-b81b-bebfa2fca46f/1/3Rc4MRWBIorSh1OUS-i88hafq6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:7c:91:46:41:b7:f0:1a:2e:cc:9d:13:da:9f:97:26:f9:78:
33:6b:95:47:78:77:fc:31:f9:60:31:44:36:79:d5:c4:8c:9f:
30:2f:47:39:5a:49:b8:86:98:81:9a:a0:a1:37:de:af:db:c5:
ee:8c:20:60:ca:00:79:e2:b6:a5:8a:3b:2b:2f:e3:58:13:c9:
8d:d4:c9:8e:2d:f2:bb:0a:45:0b:19:c9:67:50:e9:12:88:2b:
6a:bf:f2:10:42:52:4c:01:3c:02:04:fb:0b:b6:a8:7a:f1:f9:
d6:ac:e3:fc:0b:95:f8:69:f3:81:6c:e8:db:da:45:e4:45:18:
c2:c6:bd:7c:40:80:aa:6b:f7:5a:73:49:60:63:27:e7:d4:09:
3f:5f:a3:0b:e0:44:ce:43:39:0e:15:16:01:04:6b:a3:a4:2b:
62:26:09:0f:be:67:03:d9:8f:86:1b:2f:f5:69:9b:d4:9d:a7:
94:89:2d:d8:97:bc:48:c9:2c:12:06:7c:f7:5e:7e:fc:20:64:
bb:e6:59:59:2e:64:c8:6f:78:30:f5:74:4f:01:92:68:91:64:
97:58:89:06:c3:18:0a:66:49:36:63:3f:b6:7c:32:a5:03:8a:
82:e1:f9:01:e8:bd:db:f7:49:ba:c6:d1:d3:79:1d:bb:30:80:
e9:da:03:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:06:37 2024 by rpki-client on console-ams.rpki-client.org