![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/0157c9-3488-4fb8-9b4f-9909ee2f33b2/1/hYYCc-snGSK59-yPSlkQFjVtcys.mft
File: hYYCc-snGSK59-yPSlkQFjVtcys.mft (raw, json)
Hash identifier: pD8KrgZWdFHxTP+IliwJBQjye7Wa7Nucgdro621iqzU=
Subject key identifier: 33:CA:54:72:A6:04:6D:B9:D7:B2:EB:5C:22:2D:76:BC:6D:9C:62:16
Authority key identifier: 85:86:02:73:EB:27:19:22:B9:F7:EC:8F:4A:59:10:16:35:6D:73:2B
Certificate issuer: /CN=85860273eb271922b9f7ec8f4a591016356d732b
Certificate serial: 019033CE29E2A30A0C1092A153745CB87B88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hYYCc-snGSK59-yPSlkQFjVtcys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/0157c9-3488-4fb8-9b4f-9909ee2f33b2/1/hYYCc-snGSK59-yPSlkQFjVtcys.mft
Manifest number: 06F0
Signing time: Thu 20 Jun 2024 04:01:07 +0000
Manifest this update: Thu 20 Jun 2024 04:01:07 +0000
Manifest next update: Fri 21 Jun 2024 04:01:07 +0000
Files and hashes: 1: TAiV4HRSbX6Td08KR8YBWiSR88k.roa (hash: UcIjV88/i/TPp8EcSf/UKuGEWlQfN9coItc/DpDHkxY=)
2: hYYCc-snGSK59-yPSlkQFjVtcys.crl (hash: vjXWfjPQK1k5CXq6QhF7Jgd9SvywJG4mk5hl+0fwJSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/0157c9-3488-4fb8-9b4f-9909ee2f33b2/1/hYYCc-snGSK59-yPSlkQFjVtcys.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/0157c9-3488-4fb8-9b4f-9909ee2f33b2/1/hYYCc-snGSK59-yPSlkQFjVtcys.mft
rsync://rpki.ripe.net/repository/DEFAULT/hYYCc-snGSK59-yPSlkQFjVtcys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 03:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:33:ce:29:e2:a3:0a:0c:10:92:a1:53:74:5c:b8:7b:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85860273eb271922b9f7ec8f4a591016356d732b
Validity
Not Before: Jun 20 04:01:07 2024 GMT
Not After : Jun 21 04:01:07 2024 GMT
Subject: CN=33ca5472a6046db9d7b2eb5c222d76bc6d9c6216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:43:c4:be:0f:10:8e:bd:8e:63:b4:c0:57:05:
5c:64:ce:72:4a:51:2f:62:bd:5a:e9:bd:9b:a5:49:
ed:33:36:5d:9b:7a:f5:9b:62:07:cd:76:21:68:8f:
a1:85:61:3b:85:38:39:ee:a1:42:c6:5e:fd:94:5f:
4e:57:40:a1:c2:e3:b5:91:ea:f8:0b:9a:90:46:ae:
13:8d:c8:05:d2:17:0c:6d:41:cd:93:fe:ff:42:d7:
cd:8a:ed:68:aa:68:77:61:75:e3:69:91:07:38:7d:
72:58:92:31:3b:5c:1d:91:57:1e:ab:51:e4:d4:67:
91:84:42:d8:20:6e:3b:2b:4c:17:3d:cc:3f:71:b4:
ba:1f:7d:01:2e:64:7a:b1:4e:59:05:ed:ce:66:0b:
f7:34:67:4f:ee:de:85:a5:bc:50:fd:af:26:25:e1:
c8:f2:4e:09:76:10:b1:2e:94:76:2b:09:4b:de:fa:
84:a2:90:0f:17:ae:35:d5:be:c9:07:21:81:ff:ee:
e9:5e:b4:b6:38:13:67:d0:65:1f:2e:af:69:7e:56:
62:0a:1e:35:d8:a5:82:6b:b4:8b:1a:0f:e1:5d:4a:
0d:02:8c:20:99:56:a6:cd:97:d8:b1:8e:71:2b:ac:
a4:c7:c4:5a:5f:a8:fd:33:aa:94:77:05:d6:2a:c7:
13:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:CA:54:72:A6:04:6D:B9:D7:B2:EB:5C:22:2D:76:BC:6D:9C:62:16
X509v3 Authority Key Identifier:
keyid:85:86:02:73:EB:27:19:22:B9:F7:EC:8F:4A:59:10:16:35:6D:73:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hYYCc-snGSK59-yPSlkQFjVtcys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0157c9-3488-4fb8-9b4f-9909ee2f33b2/1/hYYCc-snGSK59-yPSlkQFjVtcys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0157c9-3488-4fb8-9b4f-9909ee2f33b2/1/hYYCc-snGSK59-yPSlkQFjVtcys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:d3:cd:91:93:a5:72:4c:93:61:31:4d:37:6d:0c:a4:68:2c:
38:cd:fe:f6:2b:5c:22:8f:8a:85:dd:26:a0:7b:9f:d1:12:7f:
1d:22:53:09:be:bb:41:96:ad:b4:54:38:06:2a:1b:5e:77:e3:
a0:13:16:f9:ee:e6:85:37:63:b1:7a:93:a4:9b:f8:82:68:dd:
30:a3:0e:67:be:6d:2b:2f:af:a8:6e:08:73:98:e5:cd:58:60:
ef:2b:ff:ce:c1:64:11:56:d3:5e:d2:2f:4c:9b:6f:99:f6:fa:
17:a1:b6:75:6f:c2:30:ae:ab:63:e7:f5:c5:b0:a6:d0:5a:62:
4e:3c:3a:5e:c5:89:c0:85:17:55:11:fa:bb:ed:07:5f:72:4a:
71:a1:36:06:60:c4:dd:6f:02:c7:73:71:c8:b1:43:dd:36:25:
73:93:04:12:02:aa:5f:87:29:4d:73:60:95:8f:89:49:ac:31:
50:70:be:b6:71:99:f7:6a:32:79:48:52:bd:28:b7:80:75:f3:
31:42:9e:d0:e6:0d:e6:25:b8:4a:0a:df:8a:98:4d:fa:9f:f8:
54:bf:0c:93:39:b5:56:b2:47:59:68:26:18:78:65:ee:42:fe:
23:8d:01:d7:e6:b2:c4:ed:c2:c5:2d:1d:42:19:37:ea:44:5b:
af:2b:c8:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 11:16:22 2024 by rpki-client on console-fra.rpki-client.org