![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.mft
File: 9LXIjF7ZSvHJnVAboClfQENyUcQ.mft (raw, json)
Hash identifier: 57PwtA2DWYs4QcTxIDziSyteRphgf7YSfsWuqpvKuec=
Subject key identifier: E2:11:78:68:4B:CD:53:88:69:02:8A:52:82:CA:FF:06:33:DD:8C:C4
Authority key identifier: F4:B5:C8:8C:5E:D9:4A:F1:C9:9D:50:1B:A0:29:5F:40:43:72:51:C4
Certificate issuer: /CN=f4b5c88c5ed94af1c99d501ba0295f40437251c4
Certificate serial: 01901E58B0EBB16E8217AEAAF03771A2AAA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LXIjF7ZSvHJnVAboClfQENyUcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.mft
Manifest number: 10DC
Signing time: Sun 16 Jun 2024 00:00:47 +0000
Manifest this update: Sun 16 Jun 2024 00:00:47 +0000
Manifest next update: Mon 17 Jun 2024 00:00:47 +0000
Files and hashes: 1: 9LXIjF7ZSvHJnVAboClfQENyUcQ.crl (hash: i3EYsc5jPGSIz84e+YO0XQA/lreDtSlrFP3IJILzr8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9LXIjF7ZSvHJnVAboClfQENyUcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1e:58:b0:eb:b1:6e:82:17:ae:aa:f0:37:71:a2:aa:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b5c88c5ed94af1c99d501ba0295f40437251c4
Validity
Not Before: Jun 16 00:00:47 2024 GMT
Not After : Jun 17 00:00:47 2024 GMT
Subject: CN=e21178684bcd538869028a5282caff0633dd8cc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:11:43:b5:ef:70:bf:18:53:f4:17:2a:c8:15:
30:51:f2:ab:e1:7c:a7:6f:a6:c4:2d:d5:c0:90:9a:
fc:af:7a:6c:55:82:bd:b8:b9:4d:a8:e7:05:e9:23:
1b:83:20:af:f9:2c:d2:d8:54:d3:fb:23:fb:33:ed:
18:44:fb:d3:e0:48:e9:35:06:90:7e:c1:7b:31:7c:
5f:c3:f3:5c:49:7e:c7:a4:d2:23:7e:4e:68:5a:a7:
0c:c2:36:6d:74:22:50:bf:92:08:20:99:e3:72:dc:
04:47:bd:e1:0e:d6:2b:5e:36:8c:c2:db:2f:9e:43:
5f:e8:c8:a2:2b:b3:6b:75:43:55:aa:5a:c2:b2:77:
fe:4e:dd:28:a4:c2:43:4c:37:8b:5e:69:bb:39:82:
b6:e6:b4:93:66:33:f4:ad:64:15:bc:24:94:47:97:
00:83:86:91:b9:53:05:d9:9f:b9:4f:19:80:b5:04:
5f:f4:b5:5d:cd:2d:d1:af:49:34:b8:e2:ed:ad:29:
cb:2e:d4:f4:26:30:a4:e5:98:21:0e:a9:52:88:af:
ac:2c:de:91:f3:f5:2d:11:6a:7f:08:09:dc:75:29:
e2:0d:c8:e3:dc:51:aa:a3:bf:21:71:07:0f:7d:ce:
3a:bf:e7:c0:ea:af:b5:4e:cf:11:8a:b7:fb:ed:96:
f8:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:11:78:68:4B:CD:53:88:69:02:8A:52:82:CA:FF:06:33:DD:8C:C4
X509v3 Authority Key Identifier:
keyid:F4:B5:C8:8C:5E:D9:4A:F1:C9:9D:50:1B:A0:29:5F:40:43:72:51:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LXIjF7ZSvHJnVAboClfQENyUcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:4a:02:94:b0:48:dd:10:7e:fa:6b:32:20:06:1e:72:12:b3:
9b:d1:f6:ba:9a:47:ea:fb:05:e0:48:36:9d:fd:bd:d5:b9:fc:
af:eb:ec:c0:6d:44:15:59:f9:3b:dd:66:29:30:8e:41:a0:aa:
e9:da:b4:f7:92:fd:aa:e6:b1:7a:cf:3b:10:b1:94:d4:e8:64:
63:31:0d:2e:9f:c1:b6:5f:9e:77:5f:a9:f4:39:f7:b7:e5:08:
0e:53:4a:29:b2:a6:82:4e:b6:f6:12:e5:73:6e:a7:2c:f8:97:
df:19:db:0f:10:e4:b2:43:6f:cd:f0:41:98:28:3e:a8:fc:83:
a1:91:73:c3:b6:ce:b9:19:ff:5d:5a:50:b3:78:26:1d:8b:23:
fb:d5:3a:f5:48:e3:b4:06:5d:47:08:36:eb:38:4e:f9:a3:53:
2b:45:73:b2:0c:bc:a8:f8:75:be:dc:ba:00:f5:7a:15:03:94:
9c:8c:3e:ce:ea:74:f3:2f:e4:d6:1a:f8:ee:f9:44:7d:e6:17:
c8:90:22:4d:b8:3e:e7:32:bc:9c:48:b9:a8:1e:ac:27:8e:52:
29:89:6d:0b:0a:a0:cf:bc:ca:7e:6a:87:f1:09:d4:12:c9:3a:
b2:78:5a:70:51:ad:e4:32:39:fb:05:e9:cb:19:e0:10:25:49:
b4:79:52:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:39:54 2024 by rpki-client on console-ams.rpki-client.org