![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
File: L3oyxzesMHgHR2ppewuva5AEVo4.mft (raw, json)
Hash identifier: gFn0SPvDHq1o0/pReTEWYV1xYp+qg+Ukc9BpIM+gcLc=
Subject key identifier: 9A:27:53:A1:EC:42:2E:31:DA:93:F6:57:5C:14:C2:48:37:05:E0:B0
Authority key identifier: 2F:7A:32:C7:37:AC:30:78:07:47:6A:69:7B:0B:AF:6B:90:04:56:8E
Certificate issuer: /CN=2f7a32c737ac307807476a697b0baf6b9004568e
Certificate serial: 01906373363A1022B5289F473679A2E02014
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
Manifest number: 30
Signing time: Sat 29 Jun 2024 10:03:33 +0000
Manifest this update: Sat 29 Jun 2024 10:03:33 +0000
Manifest next update: Sun 30 Jun 2024 10:03:33 +0000
Files and hashes: 1: L3oyxzesMHgHR2ppewuva5AEVo4.crl (hash: frlOFDgHXhGHevxxA1KmHVHN9euOGkcUwxqRgzB5+rY=)
2: _BNdL1nkWsa1ge0tfXbjeDkuF-M.roa (hash: c7iF/alcqxsVdwXvuSk3TMqbNVEzBa06GjA45r5qL3g=)
3: rYcjTUP6rykQSUiUOvduk_DjAIo.roa (hash: ANV7q6qJKzFC/LymYoQWchNl/Tip0jQlaGt+8hbXUcA=)
4: wN-aWnBfOgyFoU1BJ3JZ5ktHvEU.roa (hash: J+CNTv35bAtzQQX7fD7iTBUVuqCPtQKllVQ5fl4bDaE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 30 Jun 2024 10:03:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:63:73:36:3a:10:22:b5:28:9f:47:36:79:a2:e0:20:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f7a32c737ac307807476a697b0baf6b9004568e
Validity
Not Before: Jun 29 10:03:33 2024 GMT
Not After : Jun 30 10:03:33 2024 GMT
Subject: CN=9a2753a1ec422e31da93f6575c14c2483705e0b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:dc:81:c0:ac:d5:93:8e:c7:1f:a6:ec:54:85:
a9:94:d5:93:50:dd:a5:8a:ae:88:5b:55:b8:95:a9:
cf:66:64:21:93:f1:46:8b:0a:ad:04:f5:4b:9d:b0:
84:c0:0a:fb:ef:66:e5:57:6c:03:63:72:7f:ef:ee:
b3:00:57:7f:2b:8c:c3:e9:a4:f6:3b:1b:7d:bf:86:
5b:50:3a:92:8f:9d:ed:25:18:73:dc:26:ac:eb:fe:
bc:20:3f:08:23:f2:c1:b7:56:56:46:f0:6a:d5:0d:
ce:d1:69:17:3d:e6:8c:46:0e:87:08:af:d1:66:a5:
a8:2e:c7:c8:ef:a1:ad:2a:de:04:c3:00:da:1c:e0:
96:63:a7:81:0c:d2:f2:1f:28:89:b7:87:67:9c:34:
ea:c3:dc:9f:93:bd:25:ae:19:dc:3e:eb:d2:bd:1b:
36:68:e5:ff:e2:8c:b0:d2:5a:1c:2e:e2:dd:fd:4d:
ce:d9:16:76:8c:f9:f0:29:0f:c2:7d:db:d6:99:38:
98:6c:54:9a:cc:63:46:13:e2:f1:6f:ac:e5:d4:32:
3b:36:fd:b4:64:4f:52:8a:77:d2:64:2c:7b:97:a4:
b3:cf:9e:9f:be:18:cc:3c:c0:01:1a:f9:7c:6e:eb:
67:0d:03:1b:95:12:2f:e8:19:be:a5:50:f5:32:9f:
c6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:27:53:A1:EC:42:2E:31:DA:93:F6:57:5C:14:C2:48:37:05:E0:B0
X509v3 Authority Key Identifier:
keyid:2F:7A:32:C7:37:AC:30:78:07:47:6A:69:7B:0B:AF:6B:90:04:56:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:9d:ee:b4:b5:f9:ed:84:7a:88:3e:78:39:08:f9:c1:c4:0a:
67:fd:5f:bb:af:47:74:af:2a:12:9b:f6:03:24:09:c2:d4:44:
96:2c:80:d3:bc:d6:d4:5c:d5:f2:13:21:3e:b4:21:e1:ad:7f:
c1:6a:64:00:e0:cb:0e:3a:4c:11:fd:1e:e6:8f:71:93:a5:34:
f9:66:95:66:c5:83:93:a5:f8:d9:85:46:4d:e0:35:03:b4:dc:
4c:bd:23:a0:8d:0a:b7:ee:06:be:92:54:f0:4b:77:20:1a:ec:
6f:9d:ec:13:09:1e:de:33:34:da:ea:85:e2:a5:30:24:4d:c0:
21:96:6d:b2:e8:82:ab:ef:7f:bc:bd:1d:78:c8:cb:2f:bf:7b:
21:aa:6a:2c:4c:ba:73:bc:42:bc:14:e3:65:1a:be:30:f2:cd:
f3:d2:2c:57:b9:39:8e:b8:04:1b:42:4d:05:4a:52:f8:f7:4c:
09:6c:ea:ba:f2:91:1c:1c:17:e0:6f:7c:90:a3:37:31:92:64:
9f:97:fd:94:1c:01:83:c8:7d:6f:ac:ff:a9:36:dc:45:b5:29:
3b:2e:b2:6b:46:07:be:3f:25:1f:b6:8b:0e:76:8b:46:f5:43:
94:4a:f8:88:cd:56:2c:dd:da:33:5d:f3:e0:31:bb:62:0a:43:
b1:b2:62:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 12:58:33 2024 by rpki-client on console-fra.rpki-client.org