![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/698ecb-539a-47e7-ac2a-762b4698f107/1/3zabhxi9Zo6HLIj3DyliLfPJgqQ.mft
File: 3zabhxi9Zo6HLIj3DyliLfPJgqQ.mft (raw, json)
Hash identifier: 1zTkBvrbcRjG6GX98issrbObveunuyRZXcy+gO+B1vs=
Subject key identifier: BD:43:5D:62:EF:E4:0F:8A:18:B8:A5:12:E6:4E:D2:66:7D:8D:57:2D
Authority key identifier: DF:36:9B:87:18:BD:66:8E:87:2C:88:F7:0F:29:62:2D:F3:C9:82:A4
Certificate issuer: /CN=df369b8718bd668e872c88f70f29622df3c982a4
Certificate serial: 01901EC712F12ACE86B956454AF689547DB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3zabhxi9Zo6HLIj3DyliLfPJgqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/698ecb-539a-47e7-ac2a-762b4698f107/1/3zabhxi9Zo6HLIj3DyliLfPJgqQ.mft
Manifest number: 0F12
Signing time: Sun 16 Jun 2024 02:01:21 +0000
Manifest this update: Sun 16 Jun 2024 02:01:21 +0000
Manifest next update: Mon 17 Jun 2024 02:01:21 +0000
Files and hashes: 1: 3zabhxi9Zo6HLIj3DyliLfPJgqQ.crl (hash: oLM2LXdPC+jTCxFRvgmWjmDKQX/NQKUUf/gT5D/5Tig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/698ecb-539a-47e7-ac2a-762b4698f107/1/3zabhxi9Zo6HLIj3DyliLfPJgqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/698ecb-539a-47e7-ac2a-762b4698f107/1/3zabhxi9Zo6HLIj3DyliLfPJgqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3zabhxi9Zo6HLIj3DyliLfPJgqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1e:c7:12:f1:2a:ce:86:b9:56:45:4a:f6:89:54:7d:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df369b8718bd668e872c88f70f29622df3c982a4
Validity
Not Before: Jun 16 02:01:21 2024 GMT
Not After : Jun 17 02:01:21 2024 GMT
Subject: CN=bd435d62efe40f8a18b8a512e64ed2667d8d572d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0f:ee:3f:65:da:d4:43:f1:6f:51:0f:ec:d7:
e3:e1:b0:0f:1d:69:4e:e4:0d:3b:5c:c9:3e:48:2f:
94:e0:0f:b8:7d:e6:23:c6:06:d2:df:72:a7:dd:55:
60:c1:82:3e:4d:d7:25:cc:af:6b:3a:17:6b:79:aa:
ea:8e:3b:91:b2:72:36:e8:8b:6c:c4:f8:98:d8:a3:
69:da:6b:15:84:61:59:a3:12:93:45:92:0f:78:1f:
f0:66:0b:5a:5a:0c:0c:c8:d1:09:45:45:ce:96:0d:
09:9e:d0:df:8f:04:68:9d:68:dd:ce:16:4b:09:9e:
b1:16:31:71:11:9f:bb:bf:71:1c:09:f4:27:ee:c6:
3b:05:e5:3a:70:30:4d:6e:21:5e:cd:47:37:04:01:
7b:14:6f:8c:76:27:b0:0a:25:12:a3:08:56:08:27:
0c:a4:1c:4a:f0:ca:a7:f1:a7:98:33:69:b2:4f:b3:
0c:b1:ab:30:71:51:74:fd:13:f1:20:b4:ef:29:e5:
75:ac:73:af:aa:02:ea:77:90:f4:c4:37:8f:e9:ff:
01:52:86:b7:2d:7d:89:34:e7:70:35:9e:aa:ff:b2:
55:7f:7b:0c:2f:00:0f:93:2e:85:9d:0b:e4:19:c9:
b1:8b:71:71:97:b4:d1:00:17:09:e0:71:46:21:e1:
c5:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:43:5D:62:EF:E4:0F:8A:18:B8:A5:12:E6:4E:D2:66:7D:8D:57:2D
X509v3 Authority Key Identifier:
keyid:DF:36:9B:87:18:BD:66:8E:87:2C:88:F7:0F:29:62:2D:F3:C9:82:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3zabhxi9Zo6HLIj3DyliLfPJgqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/698ecb-539a-47e7-ac2a-762b4698f107/1/3zabhxi9Zo6HLIj3DyliLfPJgqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/698ecb-539a-47e7-ac2a-762b4698f107/1/3zabhxi9Zo6HLIj3DyliLfPJgqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:68:85:ee:4d:3f:88:6e:34:66:f6:ad:55:65:c0:79:4c:2e:
57:a8:f4:b8:6c:7b:74:e0:58:0c:7f:3d:c3:15:85:69:52:72:
2a:96:16:e8:bb:f9:d4:2e:1a:35:bf:eb:05:70:71:dd:4e:7f:
db:be:87:a4:c9:a3:85:40:e4:7d:10:6c:ae:ac:c1:f3:f5:75:
c1:90:be:cf:4f:cb:3a:0e:98:a2:67:39:6a:0d:f3:2e:fb:4c:
78:3b:1d:60:a3:53:7d:b0:e9:3c:8d:7c:74:92:1c:64:db:41:
e0:4c:3c:03:9e:2f:18:07:f0:1c:a3:ac:21:09:86:de:f3:86:
5a:33:3f:40:4a:95:2a:52:e6:a1:8b:d5:12:81:29:84:09:a3:
ee:70:e3:81:8e:33:55:be:60:a2:ee:44:19:10:76:cd:bd:87:
e8:2e:31:59:53:e4:de:0f:8f:63:7e:f7:37:9e:f1:63:c0:2d:
90:3a:22:36:8d:e9:ec:66:6d:00:43:af:21:cc:ab:0f:51:07:
bf:09:0f:6d:c6:ee:3b:7d:88:cc:de:fe:f6:3e:99:96:b3:f2:
d4:63:d6:00:f1:20:f8:ec:3f:40:92:eb:e2:85:e5:46:b9:ea:
12:6e:6e:c5:38:cc:37:3f:22:6d:e5:24:00:b3:74:81:dd:85:
38:6f:5c:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:50:21 2024 by rpki-client on console-fra.rpki-client.org