![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/2f0fc7-1098-4253-a2aa-ceec3360d817/1/3JXMdjEwknpvvB6y_XRD-s-hGh8.mft
File: 3JXMdjEwknpvvB6y_XRD-s-hGh8.mft (raw, json)
Hash identifier: MYJ5Kgt+wRMt2h6YLDnb6D4RY6pE0Y4ts+IRCL2bm1o=
Subject key identifier: 54:4F:01:39:AF:B2:90:5E:C8:9F:C0:07:7C:2A:69:11:FE:30:7B:C4
Authority key identifier: DC:95:CC:76:31:30:92:7A:6F:BC:1E:B2:FD:74:43:FA:CF:A1:1A:1F
Certificate issuer: /CN=dc95cc763130927a6fbc1eb2fd7443facfa11a1f
Certificate serial: 01904943002F0358489897AE1C4A76246EFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JXMdjEwknpvvB6y_XRD-s-hGh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/2f0fc7-1098-4253-a2aa-ceec3360d817/1/3JXMdjEwknpvvB6y_XRD-s-hGh8.mft
Manifest number: 7E
Signing time: Mon 24 Jun 2024 08:00:45 +0000
Manifest this update: Mon 24 Jun 2024 08:00:45 +0000
Manifest next update: Tue 25 Jun 2024 08:00:45 +0000
Files and hashes: 1: 3JXMdjEwknpvvB6y_XRD-s-hGh8.crl (hash: 6ubKe4ob4hqL19mobWoD+/78ZTAzAfa4PfzAP+qj0fA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/2f0fc7-1098-4253-a2aa-ceec3360d817/1/3JXMdjEwknpvvB6y_XRD-s-hGh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/2f0fc7-1098-4253-a2aa-ceec3360d817/1/3JXMdjEwknpvvB6y_XRD-s-hGh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3JXMdjEwknpvvB6y_XRD-s-hGh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:49:43:00:2f:03:58:48:98:97:ae:1c:4a:76:24:6e:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc95cc763130927a6fbc1eb2fd7443facfa11a1f
Validity
Not Before: Jun 24 08:00:45 2024 GMT
Not After : Jun 25 08:00:45 2024 GMT
Subject: CN=544f0139afb2905ec89fc0077c2a6911fe307bc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a4:3e:54:29:0e:ae:b1:00:4f:e6:72:87:41:
b3:a6:33:b8:3e:34:95:aa:f1:36:f0:65:03:67:58:
a9:c0:35:04:13:44:9c:3b:ab:81:28:04:c9:02:69:
d1:c7:09:26:4a:3b:43:0e:01:c3:59:a5:f4:80:cd:
52:9c:e6:4c:e2:e2:68:c1:4d:02:1d:8a:d7:42:47:
6b:d0:df:f2:0d:0f:a6:23:8f:04:05:72:6e:28:de:
d4:a0:c6:b2:6e:fe:74:64:2a:3f:0e:6f:01:bc:d6:
76:50:eb:25:e0:5e:5c:05:66:38:13:f5:c4:43:a8:
eb:8c:df:f7:69:9e:3f:b2:57:6a:36:07:21:1b:9c:
41:13:c6:f9:ff:42:8b:0d:0f:db:ff:a5:d7:3d:b9:
f3:98:8b:70:b1:e2:ba:c4:e2:55:65:d2:c3:1f:5b:
51:0d:58:85:65:3a:d5:ea:91:f0:8e:d4:e9:d6:50:
5a:bc:1d:26:b5:8a:bb:86:21:3d:23:7b:f4:81:e6:
23:44:cc:68:06:8b:b4:18:05:1f:df:68:26:13:5c:
96:6e:6e:0b:b4:08:48:69:80:1f:86:c7:5f:98:32:
b1:27:8e:ba:a0:02:ca:a5:57:3f:7c:a7:fa:8b:a2:
1f:b8:24:f1:84:7d:04:7e:f9:43:f5:e0:c0:b9:4f:
62:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:4F:01:39:AF:B2:90:5E:C8:9F:C0:07:7C:2A:69:11:FE:30:7B:C4
X509v3 Authority Key Identifier:
keyid:DC:95:CC:76:31:30:92:7A:6F:BC:1E:B2:FD:74:43:FA:CF:A1:1A:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JXMdjEwknpvvB6y_XRD-s-hGh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2f0fc7-1098-4253-a2aa-ceec3360d817/1/3JXMdjEwknpvvB6y_XRD-s-hGh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2f0fc7-1098-4253-a2aa-ceec3360d817/1/3JXMdjEwknpvvB6y_XRD-s-hGh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:e7:1d:76:00:b1:8e:87:d5:12:d7:0a:df:92:88:8d:c4:68:
64:c6:b6:a6:57:3f:13:21:93:ed:13:d2:05:df:48:69:b1:7f:
77:45:e1:ce:8b:b8:5f:80:06:22:44:f3:45:bb:60:b2:0f:71:
fa:8b:95:5f:86:41:90:4d:71:d5:02:c8:62:de:9b:3d:44:c5:
cf:5d:2e:0f:0c:ff:ea:80:1a:cf:fd:8b:5a:d9:0e:ad:73:9a:
77:c4:a0:9a:9c:70:e9:1b:a8:07:e2:62:db:3d:63:5e:4f:ff:
56:61:74:30:22:93:6f:b5:3d:3f:54:ab:9a:0a:ab:84:44:f2:
43:7b:4c:de:af:1c:16:1a:41:e3:02:ae:de:88:b3:51:5e:f3:
1a:89:20:cc:db:85:aa:b9:77:26:41:c4:3e:22:91:12:73:69:
1c:b0:0e:6b:04:aa:62:4c:81:28:db:82:5c:c0:1e:51:59:6d:
f9:d0:5f:8d:f5:d6:52:e1:1a:dd:89:79:c3:8c:54:c1:8b:16:
ee:56:2f:96:af:a2:09:1b:48:02:43:52:0e:5d:c3:5b:a8:98:
e0:58:76:83:23:ec:2e:6f:d5:d5:18:e4:a0:f3:0c:22:e0:6b:
ac:09:d0:30:c2:c4:17:7d:e7:7b:98:03:5e:39:ca:dc:6d:cb:
05:c4:b5:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 11:04:21 2024 by rpki-client on console-ams.rpki-client.org