![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/KD3ro7EwXJpI03S6Rzab8fgn7gg.mft
File: KD3ro7EwXJpI03S6Rzab8fgn7gg.mft (raw, json)
Hash identifier: L+dkP2xBeVP4V7k/7fnN8KvZPR58A4v7qpdJbxpyyqA=
Subject key identifier: 7C:32:1C:B7:A3:E4:97:AC:77:41:7F:E9:06:91:57:BE:C9:01:05:34
Authority key identifier: 28:3D:EB:A3:B1:30:5C:9A:48:D3:74:BA:47:36:9B:F1:F8:27:EE:08
Certificate issuer: /CN=283deba3b1305c9a48d374ba47369bf1f827ee08
Certificate serial: 019045D45C36979E76919E19A3F3ABCAFCA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KD3ro7EwXJpI03S6Rzab8fgn7gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/KD3ro7EwXJpI03S6Rzab8fgn7gg.mft
Manifest number: 0528
Signing time: Sun 23 Jun 2024 16:01:03 +0000
Manifest this update: Sun 23 Jun 2024 16:01:03 +0000
Manifest next update: Mon 24 Jun 2024 16:01:03 +0000
Files and hashes: 1: KD3ro7EwXJpI03S6Rzab8fgn7gg.crl (hash: 5c+qq4rPp8x0FQXDdpP2ZND59rxuOaH5T1R+6mDVJuM=)
2: MO-t3az7j_ZvuSRLymyjSDGlgcs.roa (hash: 4SsBBS12fw8sj3HVWDIHwRatT16CXX2vDli4UqK9fFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/KD3ro7EwXJpI03S6Rzab8fgn7gg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/KD3ro7EwXJpI03S6Rzab8fgn7gg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KD3ro7EwXJpI03S6Rzab8fgn7gg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 14:49:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:45:d4:5c:36:97:9e:76:91:9e:19:a3:f3:ab:ca:fc:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=283deba3b1305c9a48d374ba47369bf1f827ee08
Validity
Not Before: Jun 23 16:01:03 2024 GMT
Not After : Jun 24 16:01:03 2024 GMT
Subject: CN=7c321cb7a3e497ac77417fe9069157bec9010534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1b:ed:a2:c2:13:32:dc:d5:55:31:40:94:9a:
36:90:71:e4:4f:ce:16:07:d4:89:c1:e4:d2:80:cd:
65:a3:27:fe:c4:36:50:0b:0b:68:5d:7d:94:50:d7:
53:4f:ef:84:8d:86:e7:cd:17:34:e3:7d:34:3b:fb:
59:c5:74:fe:51:9a:89:60:a0:27:62:61:f8:36:ee:
d6:cd:86:17:c9:ed:42:3f:1d:29:6e:99:89:5a:5e:
46:4c:06:ec:b2:8a:ef:1d:cc:e4:78:48:55:12:be:
8b:ba:78:72:2f:38:80:8a:b0:a7:97:85:bd:bd:66:
b4:e4:6f:c6:99:0d:6b:8a:ff:bf:5a:b8:de:86:75:
58:65:17:50:48:05:cb:79:65:4e:11:f5:dc:cd:79:
07:73:bb:48:e8:11:80:45:c7:dd:9c:62:ac:13:58:
36:a8:b6:21:94:16:a6:dd:19:7d:d1:9d:d4:51:0b:
35:c4:64:1c:c2:9e:23:5e:58:ed:b1:22:ac:58:6f:
4d:7d:c6:aa:5c:44:55:15:25:af:56:d6:80:76:df:
7f:7d:bb:9f:09:7b:84:be:2a:80:2e:1b:58:73:51:
86:09:a8:16:7e:2b:f9:20:90:1f:af:aa:e0:9e:f2:
ec:2d:b5:38:25:29:0c:5e:3c:5a:e9:8f:8b:b9:c4:
a6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:32:1C:B7:A3:E4:97:AC:77:41:7F:E9:06:91:57:BE:C9:01:05:34
X509v3 Authority Key Identifier:
keyid:28:3D:EB:A3:B1:30:5C:9A:48:D3:74:BA:47:36:9B:F1:F8:27:EE:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KD3ro7EwXJpI03S6Rzab8fgn7gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/KD3ro7EwXJpI03S6Rzab8fgn7gg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/KD3ro7EwXJpI03S6Rzab8fgn7gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:cd:15:c3:44:8f:3f:d5:48:3d:60:75:2f:eb:30:d6:8e:63:
40:18:cf:92:d7:26:50:41:db:bb:ae:04:d3:6a:cd:ec:50:26:
c1:29:ce:a5:31:4e:e2:b8:0d:19:24:c6:79:29:eb:bc:0e:40:
3f:82:20:ae:77:06:05:61:cf:b4:83:85:1b:28:2a:5d:36:ed:
22:ca:0c:15:ab:c0:57:28:b0:b5:78:89:6d:96:a1:1e:23:1e:
83:34:41:3c:b8:61:c3:1a:a8:aa:20:6d:1f:c4:a9:69:7e:32:
5d:36:2d:59:9e:69:e2:54:47:86:74:68:89:22:3e:23:d8:a9:
fc:3a:a6:5b:62:be:4d:28:c0:f6:d9:4a:0a:90:60:36:da:db:
d1:39:96:1d:02:c5:0e:c4:3a:a2:91:1d:31:9f:51:4e:39:d3:
65:29:23:00:bc:51:cb:f8:51:80:f6:f7:f0:08:60:ce:af:6c:
de:20:a7:02:e5:00:e1:b6:61:91:bf:77:7c:ac:ee:ab:2e:79:
cf:53:2f:97:4f:f0:5f:7e:c7:e6:bb:2c:df:33:e2:46:b9:d2:
f5:6b:cf:a2:62:f7:10:35:88:c5:0b:a6:cd:cc:ea:f0:c6:3c:
5a:4d:f2:db:57:36:e4:db:ca:20:74:3b:51:a6:4a:bb:b1:91:
25:18:c7:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 17:31:33 2024 by rpki-client on console-ams.rpki-client.org