![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft
File: iPNC3REnxnrxEWqx-ZfifLTIhOg.mft (raw, json)
Hash identifier: kc9moZ2FAx7zdRAo6J+N3uD/OSYRdNLmhpK/5ZKvfQ0=
Subject key identifier: 7F:60:2E:55:39:53:06:C4:D4:21:75:BF:93:69:B3:43:B3:6E:13:98
Authority key identifier: 88:F3:42:DD:11:27:C6:7A:F1:11:6A:B1:F9:97:E2:7C:B4:C8:84:E8
Certificate issuer: /CN=88f342dd1127c67af1116ab1f997e27cb4c884e8
Certificate serial: 01901DEC33C34B7B2E41DFEA3217DE4A4793
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPNC3REnxnrxEWqx-ZfifLTIhOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft
Manifest number: 11C6
Signing time: Sat 15 Jun 2024 22:02:17 +0000
Manifest this update: Sat 15 Jun 2024 22:02:17 +0000
Manifest next update: Sun 16 Jun 2024 22:02:17 +0000
Files and hashes: 1: iPNC3REnxnrxEWqx-ZfifLTIhOg.crl (hash: 9Mg0gv8jXrLuGIMrnOn9e+UVQyvFjvj3wSDcF9IidIw=)
2: xWz79t6A7nNBlz18f_XTjGjlem4.roa (hash: 09ITprOCkmAUezK4IAMhLZ/Y0pwiFpYAM61TTE3IhJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iPNC3REnxnrxEWqx-ZfifLTIhOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:ec:33:c3:4b:7b:2e:41:df:ea:32:17:de:4a:47:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88f342dd1127c67af1116ab1f997e27cb4c884e8
Validity
Not Before: Jun 15 22:02:17 2024 GMT
Not After : Jun 16 22:02:17 2024 GMT
Subject: CN=7f602e55395306c4d42175bf9369b343b36e1398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:07:32:d3:10:14:f5:4e:86:c2:55:bd:b2:3a:
74:39:30:02:d9:cc:6b:f1:dc:5b:f8:4a:de:83:5d:
70:0c:b2:63:13:32:36:0b:57:27:05:5a:3e:bb:45:
aa:76:ec:b1:f5:da:b9:d9:65:43:23:ac:c4:49:a8:
75:2d:69:1e:14:ed:11:70:14:db:ea:d3:72:55:76:
6f:51:be:3c:db:3b:82:4e:91:38:37:cf:25:8b:58:
41:ac:04:76:5b:7e:c8:d0:d2:c9:93:a0:f0:07:8b:
25:c4:60:fd:ff:dc:9a:31:8c:f3:73:a2:5b:28:e0:
24:e9:43:3d:eb:6f:e3:dc:a2:6d:54:86:ce:09:4c:
9d:9c:59:dd:5e:d5:3e:b6:93:cd:b0:e1:3f:46:22:
4b:6b:4a:c2:65:af:72:05:97:13:57:83:08:11:72:
8f:98:17:f6:ea:bd:6a:05:95:f5:c9:b2:e0:7a:f7:
d4:aa:3a:96:aa:71:1b:62:4f:f7:d7:73:b6:ba:d8:
94:59:a6:64:74:d2:61:39:8b:82:cb:f4:27:c3:bb:
36:0c:72:49:db:96:67:02:93:e9:e1:1a:fc:72:83:
68:6c:ae:76:5f:8b:34:2c:21:25:96:24:d7:ed:3a:
5d:11:70:1f:50:04:98:6e:2d:59:b5:35:fd:38:45:
f7:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:60:2E:55:39:53:06:C4:D4:21:75:BF:93:69:B3:43:B3:6E:13:98
X509v3 Authority Key Identifier:
keyid:88:F3:42:DD:11:27:C6:7A:F1:11:6A:B1:F9:97:E2:7C:B4:C8:84:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPNC3REnxnrxEWqx-ZfifLTIhOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:3a:9e:5d:ab:48:49:aa:f8:be:49:1c:d8:39:11:ad:ed:e7:
3c:68:f9:0d:d1:d6:4b:c2:ec:74:f6:f8:59:aa:b7:18:19:bd:
35:6c:6f:9b:5a:67:2b:37:ca:f5:db:b2:83:ad:f0:5d:08:85:
a0:c1:14:1d:30:06:15:8e:72:92:b1:b4:37:4c:96:65:aa:4d:
cc:8e:de:88:14:1a:c7:43:33:d0:1c:18:de:0b:ab:09:9d:7b:
52:ec:d6:24:09:88:39:a3:d1:58:97:54:dd:c2:2b:85:fc:b1:
be:03:79:6b:5a:ad:5c:cc:0e:26:11:da:03:e6:d9:f8:65:f4:
06:c2:81:8f:cf:10:0a:02:bd:a3:be:93:3a:6a:0b:47:90:b3:
62:62:8e:f4:87:32:26:6e:8b:51:e6:1c:fa:b1:46:c9:63:55:
62:b2:0e:50:d1:9e:fd:d9:76:89:f2:fc:b3:28:02:6a:2f:63:
68:e8:d3:b0:11:d7:6c:35:e1:12:8d:ed:3b:c1:67:cb:73:07:
fb:22:22:d3:82:45:2a:30:f2:3a:6d:21:c1:11:f5:90:c6:f4:
71:7a:f9:de:db:65:f2:8e:e3:70:8a:ec:11:d6:ea:a1:0b:ac:
c5:dc:f7:85:5e:f7:d7:6d:d4:1e:c1:b7:59:59:44:8f:c4:af:
11:50:f1:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:33:13 2024 by rpki-client on console-ams.rpki-client.org