![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/a3b5b2-6638-4a4b-9b85-15cc5da07826/1/pY79EI1MWw9PmoiuU7t_7J1ZS5I.mft
File: pY79EI1MWw9PmoiuU7t_7J1ZS5I.mft (raw, json)
Hash identifier: bb2Re5XSARKxmdlw077fOpOWsq3BjRg7pljSiGRzb/s=
Subject key identifier: 9B:44:8A:BA:1D:A7:04:F8:CA:14:3E:63:C0:51:51:18:80:EB:4F:A2
Authority key identifier: A5:8E:FD:10:8D:4C:5B:0F:4F:9A:88:AE:53:BB:7F:EC:9D:59:4B:92
Certificate issuer: /CN=a58efd108d4c5b0f4f9a88ae53bb7fec9d594b92
Certificate serial: 0190448BD3FC72C256024BD8737D2D150AFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pY79EI1MWw9PmoiuU7t_7J1ZS5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/a3b5b2-6638-4a4b-9b85-15cc5da07826/1/pY79EI1MWw9PmoiuU7t_7J1ZS5I.mft
Manifest number: 0CD7
Signing time: Sun 23 Jun 2024 10:02:12 +0000
Manifest this update: Sun 23 Jun 2024 10:02:12 +0000
Manifest next update: Mon 24 Jun 2024 10:02:12 +0000
Files and hashes: 1: pY79EI1MWw9PmoiuU7t_7J1ZS5I.crl (hash: UFPE5OGTcGyq5RWBk/suJnIi7NXRumADhkYzzsAMe1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/a3b5b2-6638-4a4b-9b85-15cc5da07826/1/pY79EI1MWw9PmoiuU7t_7J1ZS5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/a3b5b2-6638-4a4b-9b85-15cc5da07826/1/pY79EI1MWw9PmoiuU7t_7J1ZS5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/pY79EI1MWw9PmoiuU7t_7J1ZS5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 10:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:44:8b:d3:fc:72:c2:56:02:4b:d8:73:7d:2d:15:0a:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a58efd108d4c5b0f4f9a88ae53bb7fec9d594b92
Validity
Not Before: Jun 23 10:02:12 2024 GMT
Not After : Jun 24 10:02:12 2024 GMT
Subject: CN=9b448aba1da704f8ca143e63c051511880eb4fa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c0:ef:2d:5f:48:59:94:ac:a8:c3:fa:a9:66:
ca:b5:91:b8:9b:67:44:1d:22:18:75:01:b1:cb:b9:
30:ef:63:b8:55:8f:fb:e8:a2:7d:5b:00:03:39:78:
6f:16:55:7d:4b:a7:1a:72:b0:9f:8f:5a:7c:a9:82:
0f:f4:6d:7a:da:eb:ea:d2:09:fb:19:a8:a4:9e:7b:
8f:a5:42:bc:ed:33:b6:52:d0:a8:1c:ba:ff:8c:b8:
22:e0:e3:c3:ea:96:b9:39:7c:a5:9d:fc:9a:fe:36:
f5:5b:e5:bd:d6:12:c1:bd:e2:b5:e5:19:2e:44:19:
ee:8b:8a:52:c6:f3:d4:47:f4:fe:c2:98:13:c7:3c:
b2:1c:78:d9:81:a5:95:c9:01:34:a2:71:41:6b:0b:
fa:cd:88:9c:c3:4e:22:3c:71:91:cd:3e:84:41:ff:
8e:7c:b9:b4:58:f3:8b:fc:31:14:df:45:07:92:95:
e8:6d:ee:f5:12:48:5b:34:ad:c2:8b:64:cb:f1:f3:
94:ca:5e:aa:ed:b0:12:6d:5f:00:7a:66:58:55:de:
c1:e0:2f:0a:e5:ea:31:0c:b3:cb:5d:42:9d:0c:b8:
56:17:53:6e:f4:89:5d:88:1a:59:0d:48:c9:38:3c:
de:30:2e:14:89:1b:f4:4d:1c:96:b2:6a:a0:3d:02:
d5:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:44:8A:BA:1D:A7:04:F8:CA:14:3E:63:C0:51:51:18:80:EB:4F:A2
X509v3 Authority Key Identifier:
keyid:A5:8E:FD:10:8D:4C:5B:0F:4F:9A:88:AE:53:BB:7F:EC:9D:59:4B:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pY79EI1MWw9PmoiuU7t_7J1ZS5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/a3b5b2-6638-4a4b-9b85-15cc5da07826/1/pY79EI1MWw9PmoiuU7t_7J1ZS5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/a3b5b2-6638-4a4b-9b85-15cc5da07826/1/pY79EI1MWw9PmoiuU7t_7J1ZS5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:2a:21:b7:a4:5d:aa:69:d7:26:21:2d:af:04:a0:4b:49:7b:
85:a3:87:61:69:d6:2b:b0:03:f7:98:b6:6a:1d:5f:11:a4:c6:
7c:43:c6:ab:c8:ea:9d:53:2e:55:8f:76:66:68:33:53:dc:ff:
af:4a:f9:1a:bb:8f:07:b6:52:11:d6:76:13:52:4b:1b:96:57:
e2:af:2b:64:3d:01:ae:b2:3b:92:eb:91:45:b7:5d:aa:4d:01:
96:bb:1d:a6:0d:81:b6:b1:1c:94:ca:bd:93:c7:17:08:3d:29:
48:92:ce:07:7a:c8:38:6f:ff:23:75:9b:32:71:d7:b8:63:71:
25:0a:f2:8e:2d:09:f8:8e:7c:b6:04:cf:9b:8d:c1:2e:26:0e:
81:1f:fc:a5:d2:9b:22:98:d0:fb:8c:3b:e4:25:92:41:f9:a0:
fb:52:64:ba:f9:93:f0:3b:d4:7b:88:fd:ab:51:51:c3:1a:66:
59:4d:f9:f7:c5:0d:95:a9:47:ae:81:54:08:ef:f0:9b:95:f6:
f0:6c:70:a1:5b:e8:56:8f:d1:b5:a0:a7:90:db:69:fb:d4:4e:
67:57:a0:a8:ca:42:a3:e8:71:98:19:3c:a6:03:7e:e1:7e:04:
d1:67:13:7d:37:74:4c:46:23:c0:de:6d:7d:51:bb:a2:40:b5:
0a:bc:0d:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 17:32:16 2024 by rpki-client on console-ams.rpki-client.org