![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft
File: jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft (raw, json)
Hash identifier: /rt3p+Fi/s7lB7nBG+x2Tdl1MYvhW8NypLoggDowxCI=
Subject key identifier: 70:9B:F4:EC:1C:9F:DB:10:CF:36:20:31:BE:3C:38:38:05:9E:40:89
Authority key identifier: 8F:14:00:3D:65:7E:CB:E5:F9:B6:F4:94:7B:8C:A7:2A:DA:CE:9D:29
Certificate issuer: /CN=8f14003d657ecbe5f9b6f4947b8ca72adace9d29
Certificate serial: 01901C6A86F2D630A513A132C24CD0763102
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxQAPWV-y-X5tvSUe4ynKtrOnSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft
Manifest number: 0C77
Signing time: Sat 15 Jun 2024 15:01:01 +0000
Manifest this update: Sat 15 Jun 2024 15:01:01 +0000
Manifest next update: Sun 16 Jun 2024 15:01:01 +0000
Files and hashes: 1: jxQAPWV-y-X5tvSUe4ynKtrOnSk.crl (hash: 8jwOO/zabeQhRbx9CUX4OIpbBB8sag+MT60BuL8hcaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jxQAPWV-y-X5tvSUe4ynKtrOnSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 11:16:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1c:6a:86:f2:d6:30:a5:13:a1:32:c2:4c:d0:76:31:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f14003d657ecbe5f9b6f4947b8ca72adace9d29
Validity
Not Before: Jun 15 15:01:01 2024 GMT
Not After : Jun 16 15:01:01 2024 GMT
Subject: CN=709bf4ec1c9fdb10cf362031be3c3838059e4089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:60:f0:5f:7b:5c:e0:17:68:fc:02:27:64:41:
87:c8:2f:89:0e:fa:f4:c8:1f:65:29:61:f8:57:fb:
f0:22:91:31:4a:35:5a:94:83:f2:16:bd:2b:fd:2f:
6e:d0:cf:7d:ef:52:3b:6e:b4:21:8b:d6:4c:fa:b9:
fe:a0:c8:f7:ac:5f:0a:b7:ff:e0:b2:f8:0c:08:cc:
5c:eb:26:a5:c7:de:06:56:d3:12:38:21:29:cf:c5:
d3:0c:ec:ee:ca:51:39:23:20:87:94:96:6d:0e:77:
cb:46:c0:53:3a:d3:61:ea:ce:04:8c:d0:10:a3:20:
93:f3:c1:a8:7d:2e:7c:d3:57:08:72:07:53:e0:3a:
a1:28:a0:4a:fe:96:91:4e:2f:6f:1b:5c:5e:91:d5:
cd:24:5e:90:b6:df:53:eb:16:03:4a:8e:85:79:52:
b9:22:38:e6:c2:a8:3d:fd:2a:75:2b:a0:a2:61:f2:
0f:7e:07:2f:e3:57:ac:60:fa:ff:13:88:8f:24:f0:
42:08:5e:8a:34:be:c4:0e:2c:5d:01:17:61:2c:38:
f3:ec:67:ad:64:a0:58:9d:87:1b:c3:ba:bc:47:03:
c3:5f:6e:1d:e1:2c:d8:2b:1c:ec:0f:2d:93:d6:f4:
fa:ab:42:92:12:4e:56:c3:cc:d8:c7:1b:28:63:8f:
aa:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:9B:F4:EC:1C:9F:DB:10:CF:36:20:31:BE:3C:38:38:05:9E:40:89
X509v3 Authority Key Identifier:
keyid:8F:14:00:3D:65:7E:CB:E5:F9:B6:F4:94:7B:8C:A7:2A:DA:CE:9D:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxQAPWV-y-X5tvSUe4ynKtrOnSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:5b:c4:6d:88:ba:00:f3:e0:63:9e:5e:11:6f:aa:4e:16:32:
f1:c7:fa:d2:e3:cc:fe:4e:88:31:03:10:99:76:0f:e6:1d:75:
47:a0:63:08:a6:48:be:d3:10:ec:13:4f:c5:39:60:de:ee:51:
fe:a1:22:33:9e:4e:06:0e:ff:2f:1e:90:73:cd:10:d5:64:d3:
09:35:cd:f7:95:5b:46:9e:de:db:15:88:96:29:3b:d2:8b:53:
a2:20:63:9a:10:cc:0b:9f:a1:68:1f:c7:08:56:1f:86:3d:cd:
f1:5c:1d:a5:44:70:88:5c:63:06:62:64:4e:53:e7:18:07:6f:
c8:ba:d8:b0:5c:3a:6f:2b:37:64:ea:b9:3d:5b:bc:88:58:8a:
c5:ad:6c:f9:6d:5e:ad:bf:72:a0:1d:62:3f:1f:08:aa:4a:2f:
33:ac:f0:88:21:7f:aa:06:03:2c:d6:cd:83:f8:36:8a:7c:e3:
62:af:d1:92:61:61:1c:32:21:b3:4c:27:b2:61:0d:d1:b7:6f:
d4:29:83:aa:f9:09:4b:ab:b7:2d:9f:33:64:08:0a:a8:27:35:
8b:10:0b:66:02:76:9e:be:33:e8:19:37:3f:9b:b2:7b:6d:72:
38:60:4e:c1:7e:1b:62:b0:8d:12:96:6a:1d:47:7e:4d:29:c6:
29:2c:bb:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 17:21:36 2024 by rpki-client on console-ams.rpki-client.org