![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/646891-045e-44e5-8991-27cc0aa0c049/1/ZmpvQy0MMfsQF-KraLsdbu_M9pk.mft
File: ZmpvQy0MMfsQF-KraLsdbu_M9pk.mft (raw, json)
Hash identifier: vzUhcvUkfhYWM8A9S9FxUS/wA3K0cU5gKJf4SL2zCrY=
Subject key identifier: 2B:C0:2F:37:CA:02:8D:43:1B:F7:96:0E:45:AC:D9:28:6C:E4:AB:D4
Authority key identifier: 66:6A:6F:43:2D:0C:31:FB:10:17:E2:AB:68:BB:1D:6E:EF:CC:F6:99
Certificate issuer: /CN=666a6f432d0c31fb1017e2ab68bb1d6eefccf699
Certificate serial: 01901FD93E262668ACAA182D2FB801F39A50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZmpvQy0MMfsQF-KraLsdbu_M9pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/646891-045e-44e5-8991-27cc0aa0c049/1/ZmpvQy0MMfsQF-KraLsdbu_M9pk.mft
Manifest number: 0EA4
Signing time: Sun 16 Jun 2024 07:00:49 +0000
Manifest this update: Sun 16 Jun 2024 07:00:49 +0000
Manifest next update: Mon 17 Jun 2024 07:00:49 +0000
Files and hashes: 1: ZmpvQy0MMfsQF-KraLsdbu_M9pk.crl (hash: dYq4RRAioYnHBklgEj3vk5MlgpQVCbvqwwhd2oBD1wQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/646891-045e-44e5-8991-27cc0aa0c049/1/ZmpvQy0MMfsQF-KraLsdbu_M9pk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/646891-045e-44e5-8991-27cc0aa0c049/1/ZmpvQy0MMfsQF-KraLsdbu_M9pk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZmpvQy0MMfsQF-KraLsdbu_M9pk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1f:d9:3e:26:26:68:ac:aa:18:2d:2f:b8:01:f3:9a:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=666a6f432d0c31fb1017e2ab68bb1d6eefccf699
Validity
Not Before: Jun 16 07:00:49 2024 GMT
Not After : Jun 17 07:00:49 2024 GMT
Subject: CN=2bc02f37ca028d431bf7960e45acd9286ce4abd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:5d:2b:7a:6f:4a:bf:36:f8:a4:80:cc:f3:2b:
e5:9d:71:97:fe:27:d7:b0:bc:da:f5:b0:e1:de:b1:
b5:9e:8b:a7:a2:97:74:e8:0e:2a:2e:b5:4b:fd:d8:
2c:23:87:fb:9d:56:3e:f9:06:b3:4e:3d:f7:b6:08:
1c:25:a1:f9:af:bb:9a:0e:ce:ca:28:4b:df:92:1a:
ec:eb:fe:c4:b7:b3:68:56:3d:c7:9f:ab:7e:ea:32:
1e:cb:c2:43:a5:36:9f:0a:84:a2:90:27:f6:06:61:
ac:cb:7e:99:07:0b:a1:35:8e:ff:dd:85:4b:51:c0:
73:31:2c:21:2d:da:57:79:7c:06:f4:86:68:db:bf:
d5:0d:8f:91:f1:62:d6:b0:a3:1f:ad:2e:e5:d4:fc:
de:f0:fb:b3:6f:06:b4:d5:6b:e0:1e:4d:68:09:3c:
34:4a:1a:dd:e7:88:c5:4c:b2:6c:22:a8:11:70:74:
30:51:17:b1:74:b0:e1:66:66:fb:52:b4:6e:cc:d9:
5a:02:17:fa:cb:74:4d:0e:49:4b:cd:64:82:9d:e5:
9c:b2:50:5a:3c:ba:76:99:ee:66:db:1c:43:73:da:
7a:9b:57:ed:e8:91:72:c2:17:8a:0d:93:bd:1b:48:
7a:96:47:f3:f6:c7:36:0d:28:2c:af:6a:ac:ba:48:
ce:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:C0:2F:37:CA:02:8D:43:1B:F7:96:0E:45:AC:D9:28:6C:E4:AB:D4
X509v3 Authority Key Identifier:
keyid:66:6A:6F:43:2D:0C:31:FB:10:17:E2:AB:68:BB:1D:6E:EF:CC:F6:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmpvQy0MMfsQF-KraLsdbu_M9pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/646891-045e-44e5-8991-27cc0aa0c049/1/ZmpvQy0MMfsQF-KraLsdbu_M9pk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/646891-045e-44e5-8991-27cc0aa0c049/1/ZmpvQy0MMfsQF-KraLsdbu_M9pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:a7:cc:dd:c6:2f:68:8f:1a:5a:08:16:a2:b8:cf:93:e5:1d:
9f:14:68:9f:8c:9c:56:17:99:84:f4:a7:3e:d5:83:f0:2e:9f:
16:b9:f8:11:ea:d4:1b:85:63:a4:be:50:87:4b:1c:f0:99:ed:
5d:fc:e6:5d:8b:3a:8e:8e:d2:0a:58:b7:82:33:1d:19:9c:6b:
77:bb:d3:cb:e1:44:d8:7e:ec:79:4e:a6:f8:51:6d:4d:2d:52:
4a:6b:1e:64:ef:d5:c6:94:51:ea:24:bf:86:08:5d:75:87:7a:
77:e0:7d:25:90:93:c5:29:e2:31:19:98:13:b9:04:f3:74:89:
8a:af:34:14:e8:d2:7b:4f:0d:d4:84:e9:bb:81:92:09:90:cb:
cf:7b:2c:90:4b:65:50:ab:a7:bf:8d:ab:bd:d5:18:dc:49:1e:
29:a3:89:da:4b:31:a9:7e:3f:8d:01:34:29:50:91:ab:4b:97:
76:82:85:a5:47:9b:ad:c6:97:bc:0b:b3:8a:d2:05:30:4d:62:
83:5e:a7:17:37:9e:8d:51:a0:6b:32:21:4d:eb:dc:fc:d3:c0:
ee:b2:7a:d1:13:a6:b2:e9:5e:f1:d0:11:ce:51:84:f1:90:38:
d3:78:cf:8e:20:a9:62:06:2a:e4:ca:9f:b4:91:0e:0d:31:6a:
05:5e:ac:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 07:50:47 2024 by rpki-client on console-ams.rpki-client.org