![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft
File: k_6KleVSnXjnIEfU410afprVwRo.mft (raw, json)
Hash identifier: 36vmICKc4Evi/XkecQkFsi+2DhBXP0Ebm3iSbF9HZXc=
Subject key identifier: 73:AD:F8:19:8D:B8:54:9A:6D:71:5D:B8:C9:3E:1B:C9:5B:FF:26:A7
Authority key identifier: 93:FE:8A:95:E5:52:9D:78:E7:20:47:D4:E3:5D:1A:7E:9A:D5:C1:1A
Certificate issuer: /CN=93fe8a95e5529d78e72047d4e35d1a7e9ad5c11a
Certificate serial: 019049B1134636A1E8D6E5B6CB2BC150A10B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k_6KleVSnXjnIEfU410afprVwRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft
Manifest number: 0C41
Signing time: Mon 24 Jun 2024 10:00:59 +0000
Manifest this update: Mon 24 Jun 2024 10:00:59 +0000
Manifest next update: Tue 25 Jun 2024 10:00:59 +0000
Files and hashes: 1: 1IL4FQPh0sje1jXpEAbVVjA0BMs.roa (hash: cG17JIXSyEa9z1vyq9CS6QAEkgpJrLPa48WPqp8G4Y4=)
2: k_6KleVSnXjnIEfU410afprVwRo.crl (hash: 8EW+vAJvOpvn262imlBiDcbF3sJGXcjNFzOn30qOpO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/k_6KleVSnXjnIEfU410afprVwRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 09:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:49:b1:13:46:36:a1:e8:d6:e5:b6:cb:2b:c1:50:a1:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93fe8a95e5529d78e72047d4e35d1a7e9ad5c11a
Validity
Not Before: Jun 24 10:00:59 2024 GMT
Not After : Jun 25 10:00:59 2024 GMT
Subject: CN=73adf8198db8549a6d715db8c93e1bc95bff26a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:93:20:43:f0:63:6a:44:4b:29:23:90:19:64:
6b:0a:ed:7c:d6:89:d2:e1:82:48:46:fc:8e:24:6d:
8a:91:6b:52:1e:36:c5:f7:10:5e:40:66:a0:e9:02:
fe:c9:dd:6c:db:3d:15:da:20:ee:64:84:f6:89:ef:
ea:dd:ba:70:51:da:61:54:8e:79:5a:ad:49:5c:29:
bd:a1:af:bf:12:00:68:d7:68:6b:b9:3e:8b:9b:1c:
96:c4:2e:13:99:31:e4:8c:c4:e0:8e:2a:00:8a:4c:
53:6a:12:2f:05:94:84:4b:6e:27:d4:46:cc:c2:84:
37:ec:1d:d7:5b:1f:f6:ee:5a:e5:48:2d:71:d1:56:
38:2c:65:36:4d:3d:85:6c:6c:13:e9:3f:4c:a9:97:
1a:bb:51:ce:df:1a:f0:64:5a:de:5c:61:78:04:bc:
57:70:2b:5a:c9:eb:94:ad:c9:0c:d5:bc:2b:66:6a:
10:c2:7b:4a:07:62:0e:eb:49:0c:e3:91:7f:30:50:
01:0f:67:64:48:f9:1d:1c:f4:50:f1:4c:fb:a3:04:
e5:89:1e:7e:11:5f:7d:87:2c:cb:01:78:b5:44:03:
53:49:f6:64:b6:d2:e8:dc:31:96:cf:c0:11:57:54:
09:e2:26:72:22:ce:20:53:13:60:9e:9e:0b:26:5c:
88:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:AD:F8:19:8D:B8:54:9A:6D:71:5D:B8:C9:3E:1B:C9:5B:FF:26:A7
X509v3 Authority Key Identifier:
keyid:93:FE:8A:95:E5:52:9D:78:E7:20:47:D4:E3:5D:1A:7E:9A:D5:C1:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_6KleVSnXjnIEfU410afprVwRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:b5:e0:93:40:ee:c4:53:29:77:21:76:69:87:ad:c6:9b:5b:
3f:10:f6:14:d1:1a:c1:82:0e:94:fd:52:50:98:f7:e3:ad:c8:
b2:fc:2d:bc:e4:1d:16:c6:6d:c6:01:ea:53:f4:2f:af:20:bb:
17:42:5c:0d:41:db:12:1e:0b:55:24:ee:97:8f:21:02:fb:d6:
86:96:a8:9d:01:97:a6:45:d8:ac:28:cb:86:fb:69:47:c4:12:
38:7d:ce:e0:68:1c:2d:e3:56:25:bb:d5:91:e4:d9:23:72:c5:
90:20:58:45:f7:b4:25:67:b8:9d:31:c7:2c:3c:45:86:c8:f6:
10:b6:a0:2f:de:58:48:69:26:85:2d:42:61:a9:ad:23:78:05:
13:bf:2d:62:db:dd:f2:9c:76:c6:75:d0:62:9f:86:f6:59:09:
c1:5c:19:9c:cc:e6:4c:fc:91:48:54:67:1c:55:6b:38:52:ee:
44:aa:d9:0b:1f:24:37:a3:f8:76:a1:6e:ed:7e:4c:3f:92:27:
51:19:73:5e:33:48:64:88:82:bf:46:de:e1:6f:bd:48:77:be:
4a:3a:0e:d9:c8:88:39:dd:e4:53:c5:0f:f1:4e:18:38:43:39:
66:0b:0b:0a:a8:c0:8b:71:69:fc:54:17:57:19:a7:6a:f3:5d:
56:ee:70:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 11:04:00 2024 by rpki-client on console-ams.rpki-client.org