![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/6a053e-5c3f-437b-8977-1ba830a7cc5c/1/m-FvmcTjXzrt2Bs3k53ow8TpHBw.mft
File: m-FvmcTjXzrt2Bs3k53ow8TpHBw.mft (raw, json)
Hash identifier: 5perGupmuFJOyuPvw6qMn+1La7zcBL6qO8Xf60UQOM8=
Subject key identifier: E2:E6:43:B6:13:81:25:43:95:5D:BA:81:0B:1F:09:0D:40:BD:3C:E8
Authority key identifier: 9B:E1:6F:99:C4:E3:5F:3A:ED:D8:1B:37:93:9D:E8:C3:C4:E9:1C:1C
Certificate issuer: /CN=9be16f99c4e35f3aedd81b37939de8c3c4e91c1c
Certificate serial: 01901E59512D5AC86B48F872212C8EB7526C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-FvmcTjXzrt2Bs3k53ow8TpHBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/6a053e-5c3f-437b-8977-1ba830a7cc5c/1/m-FvmcTjXzrt2Bs3k53ow8TpHBw.mft
Manifest number: 1047
Signing time: Sun 16 Jun 2024 00:01:28 +0000
Manifest this update: Sun 16 Jun 2024 00:01:28 +0000
Manifest next update: Mon 17 Jun 2024 00:01:28 +0000
Files and hashes: 1: m-FvmcTjXzrt2Bs3k53ow8TpHBw.crl (hash: mE5SuBqnGVyK+jqhOBNP4LFvTNTLga+mcf6YdnNmACE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/6a053e-5c3f-437b-8977-1ba830a7cc5c/1/m-FvmcTjXzrt2Bs3k53ow8TpHBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/6a053e-5c3f-437b-8977-1ba830a7cc5c/1/m-FvmcTjXzrt2Bs3k53ow8TpHBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/m-FvmcTjXzrt2Bs3k53ow8TpHBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1e:59:51:2d:5a:c8:6b:48:f8:72:21:2c:8e:b7:52:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9be16f99c4e35f3aedd81b37939de8c3c4e91c1c
Validity
Not Before: Jun 16 00:01:28 2024 GMT
Not After : Jun 17 00:01:28 2024 GMT
Subject: CN=e2e643b613812543955dba810b1f090d40bd3ce8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c0:04:61:51:37:89:a7:af:88:75:25:e7:b4:
f8:b8:a2:29:c2:8f:61:5b:d2:f8:73:6e:a7:2a:9e:
3e:fa:85:ab:57:10:40:aa:1f:b5:b0:b9:89:74:00:
80:e0:84:77:55:06:97:88:3f:fb:93:a3:74:54:86:
37:f8:be:b9:cf:b4:93:6b:80:f9:3c:31:82:98:17:
d5:ef:7e:d4:06:56:af:2b:e3:02:20:f8:89:ac:27:
02:d5:57:42:09:97:37:28:77:e5:8e:98:df:6c:af:
ea:6e:ce:98:2b:a7:1c:6e:14:60:19:39:d9:db:0c:
cf:39:56:66:ac:0c:eb:38:8a:64:1e:42:ae:c1:ba:
98:0e:a9:8f:ec:d2:b8:33:c1:c0:0f:e6:00:80:15:
01:3a:a5:d2:0b:e5:d7:ba:41:8d:e1:5b:55:f5:1b:
35:95:e1:5f:cf:38:f3:e4:cd:5d:e6:f4:8b:2e:3f:
50:78:f5:c3:f1:b4:b0:e4:26:71:28:5a:fd:dc:c8:
1e:a3:cc:94:8e:0d:e3:09:26:eb:c4:f5:19:58:6f:
d4:5f:cc:d2:7e:7b:20:38:20:fc:ee:7a:20:7c:18:
da:6a:78:22:67:d7:ea:81:f6:97:05:0b:15:97:51:
e2:5c:f1:0c:f0:7a:18:0d:32:86:db:a5:7a:58:a9:
2f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:E6:43:B6:13:81:25:43:95:5D:BA:81:0B:1F:09:0D:40:BD:3C:E8
X509v3 Authority Key Identifier:
keyid:9B:E1:6F:99:C4:E3:5F:3A:ED:D8:1B:37:93:9D:E8:C3:C4:E9:1C:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-FvmcTjXzrt2Bs3k53ow8TpHBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/6a053e-5c3f-437b-8977-1ba830a7cc5c/1/m-FvmcTjXzrt2Bs3k53ow8TpHBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/6a053e-5c3f-437b-8977-1ba830a7cc5c/1/m-FvmcTjXzrt2Bs3k53ow8TpHBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:86:ac:b1:3d:d3:09:f5:62:9c:d6:7c:6b:00:60:ec:38:e1:
01:45:12:ae:da:36:6b:df:3e:c9:40:ab:2e:9f:a6:80:78:da:
a3:cc:ea:69:bb:cf:bf:7c:02:99:a9:34:1b:ea:cb:b9:eb:20:
d6:d6:b7:69:96:63:2d:19:3a:ce:42:7b:82:55:83:e0:1a:13:
24:88:5c:c3:a6:43:85:43:70:a4:8e:c4:64:b2:2c:94:95:d9:
a2:35:d3:d5:2a:46:74:0c:ee:11:12:da:19:2c:30:ae:25:50:
cf:05:a8:96:35:4d:60:84:17:88:bf:8a:ee:14:19:54:58:79:
45:8c:b8:f1:5b:c7:af:51:46:fe:bc:c0:44:42:98:41:30:76:
14:68:d5:af:7f:fd:96:95:1d:24:f1:00:12:f4:c0:7c:f5:24:
01:b6:88:d1:2b:78:a8:2a:2e:7d:17:93:0e:e4:ea:a8:3d:3c:
55:8f:79:7f:35:23:41:63:eb:90:cd:2f:9f:33:c5:ec:7a:0f:
2c:5a:ef:9e:4f:5f:11:db:85:e8:9a:8b:9e:d2:e4:7c:7c:d9:
98:34:a8:07:0b:35:05:6a:c5:e5:17:27:d2:36:ff:6b:c8:77:
3b:46:2f:05:45:e0:ca:53:47:e4:da:0c:b6:59:31:76:ae:d3:
d2:2c:d6:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:39:52 2024 by rpki-client on console-ams.rpki-client.org