![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.mft
File: hA6dA48bwAXzsJxdyoIK2BCUiz4.mft (raw, json)
Hash identifier: F2GmgESL9EStf0bJw6i03pokhpMQ6A7GLZr/a9RuW5c=
Subject key identifier: 43:B7:C7:16:38:02:E5:6D:19:9A:B6:DC:05:9C:67:AD:42:D2:D7:93
Authority key identifier: 84:0E:9D:03:8F:1B:C0:05:F3:B0:9C:5D:CA:82:0A:D8:10:94:8B:3E
Certificate issuer: /CN=840e9d038f1bc005f3b09c5dca820ad810948b3e
Certificate serial: 01901F34D8E2A7D47F7ABD9CD5F00F76CED9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hA6dA48bwAXzsJxdyoIK2BCUiz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.mft
Manifest number: 1195
Signing time: Sun 16 Jun 2024 04:01:15 +0000
Manifest this update: Sun 16 Jun 2024 04:01:15 +0000
Manifest next update: Mon 17 Jun 2024 04:01:15 +0000
Files and hashes: 1: cZ1U3KVI3FmDVNwyu0VE8FUehmQ.roa (hash: eKBBNnsalQEcZYUUZLrsVLG/GIDZJ0S0NSFkhiLb3cI=)
2: hA6dA48bwAXzsJxdyoIK2BCUiz4.crl (hash: /IVXgiRQ/GXQjy2zpJ9b5GW38lxpEUV+BJ3N05tVmIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hA6dA48bwAXzsJxdyoIK2BCUiz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1f:34:d8:e2:a7:d4:7f:7a:bd:9c:d5:f0:0f:76:ce:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=840e9d038f1bc005f3b09c5dca820ad810948b3e
Validity
Not Before: Jun 16 04:01:15 2024 GMT
Not After : Jun 17 04:01:15 2024 GMT
Subject: CN=43b7c7163802e56d199ab6dc059c67ad42d2d793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:6f:82:73:92:c4:7b:32:39:eb:00:1f:dd:32:
44:83:e9:bd:79:1c:a5:56:7c:e9:52:46:d2:3f:ec:
06:0d:e7:06:d0:13:8a:f5:45:0f:93:92:50:84:f7:
e5:b1:7f:e0:21:95:01:0e:eb:bd:85:f5:55:2c:f4:
c1:12:0c:09:6a:86:4b:46:0a:24:6f:d2:a5:a5:cb:
24:b6:a7:d6:ae:27:3f:40:54:b8:2f:2c:20:76:48:
48:57:72:e5:62:5b:f1:1d:76:8f:f9:41:f8:c1:9c:
5c:6b:1a:8a:71:c6:69:73:b5:92:20:4a:81:33:5f:
41:d6:8a:27:91:bb:52:d3:ca:9a:82:85:5c:b4:23:
73:32:aa:e7:cf:58:e7:a5:cc:44:3f:51:98:9c:d2:
c7:9d:71:df:ed:20:37:e5:79:01:8a:86:d4:cc:c0:
32:26:c6:60:f1:a1:e4:cb:ba:40:f7:2d:76:0e:d5:
65:a2:84:6d:1c:7f:f7:29:ec:9a:6c:04:ef:85:a1:
50:6d:6b:a0:c9:ea:4d:fd:4f:13:1b:86:5f:28:0e:
1a:fc:6d:31:c6:7e:5e:41:d4:98:0c:98:9f:cb:85:
95:f8:4b:c6:3b:1e:fd:d2:5c:48:75:3a:a3:8e:d1:
1a:48:a4:90:8c:93:b9:c1:2b:37:79:2c:ac:df:d1:
bb:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:B7:C7:16:38:02:E5:6D:19:9A:B6:DC:05:9C:67:AD:42:D2:D7:93
X509v3 Authority Key Identifier:
keyid:84:0E:9D:03:8F:1B:C0:05:F3:B0:9C:5D:CA:82:0A:D8:10:94:8B:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hA6dA48bwAXzsJxdyoIK2BCUiz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:fb:7f:04:67:8f:4a:19:f5:21:da:3f:c5:ee:11:ff:9c:38:
d7:c8:ff:65:e7:3e:88:82:8a:1a:e4:49:93:03:c9:c4:2d:49:
41:d0:66:99:f0:c3:e5:29:23:c2:44:92:a7:38:3b:db:58:de:
5d:f3:e5:b9:97:1a:b3:f1:c6:fe:5a:5d:c0:60:20:39:91:d5:
41:e8:8c:f2:d0:53:41:b1:89:61:e7:17:ef:69:54:e4:bb:af:
b5:a3:a7:6d:6a:3c:35:4b:29:30:30:40:df:40:07:4f:1d:d8:
c8:ba:72:34:03:40:96:85:d2:6c:38:08:8b:d8:ab:6f:61:d3:
e3:67:a1:2e:13:04:4b:72:ed:d9:64:6a:89:90:ec:50:5d:b8:
4a:bb:c9:36:72:88:c3:df:39:cd:20:b9:89:c6:51:fa:db:ea:
64:f4:11:7a:c2:1c:67:79:41:b0:13:15:54:0c:05:39:c3:b3:
c4:0d:92:6f:01:16:16:78:38:78:45:55:8f:b2:df:14:91:ce:
7a:0b:97:91:68:dc:09:f7:6a:04:05:fe:48:9b:d6:d0:81:2d:
13:b6:2e:73:8d:98:88:6b:1b:39:fe:77:77:77:56:fe:13:8e:
0d:af:9c:86:5b:dc:87:11:a6:ef:a6:f8:89:65:7b:8f:52:e8:
7a:1b:e5:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 06:29:50 2024 by rpki-client on console-ams.rpki-client.org