![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/3bae87-82eb-451f-8044-2c2f0d24f936/1/JY8HU8Azwa8JGGbQlCZFEmlspos.mft
File: JY8HU8Azwa8JGGbQlCZFEmlspos.mft (raw, json)
Hash identifier: i6JmBCxFBDbKcJtbPiMywkNY0PCOXDmmDnyKCS7KywQ=
Subject key identifier: D4:BE:A7:72:AD:3F:7C:3A:E8:CF:D2:02:60:75:E4:C4:11:83:77:D1
Authority key identifier: 25:8F:07:53:C0:33:C1:AF:09:18:66:D0:94:26:45:12:69:6C:A6:8B
Certificate issuer: /CN=258f0753c033c1af091866d094264512696ca68b
Certificate serial: 019040AF41E6F6DDDD473D776876C20C1FA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JY8HU8Azwa8JGGbQlCZFEmlspos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/3bae87-82eb-451f-8044-2c2f0d24f936/1/JY8HU8Azwa8JGGbQlCZFEmlspos.mft
Manifest number: 0522
Signing time: Sat 22 Jun 2024 16:02:25 +0000
Manifest this update: Sat 22 Jun 2024 16:02:25 +0000
Manifest next update: Sun 23 Jun 2024 16:02:25 +0000
Files and hashes: 1: JY8HU8Azwa8JGGbQlCZFEmlspos.crl (hash: DfCPUxVEpjKk14866O+XEs0tCvUl6ZWTnuKm5E97YsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/3bae87-82eb-451f-8044-2c2f0d24f936/1/JY8HU8Azwa8JGGbQlCZFEmlspos.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/3bae87-82eb-451f-8044-2c2f0d24f936/1/JY8HU8Azwa8JGGbQlCZFEmlspos.mft
rsync://rpki.ripe.net/repository/DEFAULT/JY8HU8Azwa8JGGbQlCZFEmlspos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 16:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:40:af:41:e6:f6:dd:dd:47:3d:77:68:76:c2:0c:1f:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=258f0753c033c1af091866d094264512696ca68b
Validity
Not Before: Jun 22 16:02:25 2024 GMT
Not After : Jun 23 16:02:25 2024 GMT
Subject: CN=d4bea772ad3f7c3ae8cfd2026075e4c4118377d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ff:c5:07:9c:3f:8a:a1:bf:7b:20:e2:8c:c1:
98:ed:1d:f5:9d:9b:a5:88:68:87:73:58:94:e3:e7:
4b:9c:91:a3:cc:5b:96:1a:a0:bb:82:55:81:ce:d5:
ae:b6:0c:ac:b2:ae:f3:cc:1d:37:ca:a2:c3:bb:5f:
42:66:f6:bb:fc:eb:e1:20:3e:b4:50:9e:a4:2e:25:
7f:8a:13:d5:00:6b:82:b5:67:58:30:d5:ed:f2:92:
31:72:82:a2:7a:9c:ea:8a:2c:d5:c6:bf:57:9f:24:
fd:41:9a:91:83:36:7c:c2:b0:b5:0d:bc:73:d5:2a:
02:31:14:9a:d6:00:ce:6b:84:46:83:7a:e9:51:a9:
00:b7:44:61:5c:ec:47:93:38:8a:18:2c:39:dc:fd:
e2:e0:63:64:c9:2c:98:73:e8:45:85:f1:66:2b:7d:
2b:09:ca:88:1c:e2:86:5e:12:77:5c:e8:e7:6e:71:
79:df:23:7f:50:65:3f:a8:9b:5e:d6:6b:41:fd:fb:
38:3f:8c:aa:9f:43:0b:4a:49:eb:be:13:30:7a:8a:
48:b3:35:67:a3:cc:12:5b:3d:9b:e4:54:40:1c:26:
73:dd:5e:3d:5b:04:f1:63:d1:59:dd:ce:cf:5b:d5:
84:10:d7:bc:69:9b:56:8c:7d:27:b4:7b:ed:57:bf:
8d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:BE:A7:72:AD:3F:7C:3A:E8:CF:D2:02:60:75:E4:C4:11:83:77:D1
X509v3 Authority Key Identifier:
keyid:25:8F:07:53:C0:33:C1:AF:09:18:66:D0:94:26:45:12:69:6C:A6:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JY8HU8Azwa8JGGbQlCZFEmlspos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3bae87-82eb-451f-8044-2c2f0d24f936/1/JY8HU8Azwa8JGGbQlCZFEmlspos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3bae87-82eb-451f-8044-2c2f0d24f936/1/JY8HU8Azwa8JGGbQlCZFEmlspos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:6d:b5:00:3e:63:33:4e:4e:31:32:64:6b:07:2d:b6:16:2c:
f7:1c:b7:99:a5:bf:be:05:e2:29:10:ce:7d:b7:10:fb:28:f1:
4d:d9:4e:07:7f:e9:be:e7:12:68:67:5b:63:ae:03:5c:47:37:
a4:59:88:4f:af:ab:89:e9:1a:ea:59:38:92:eb:fc:1d:8a:e0:
6c:2c:33:5c:24:49:bd:c1:ce:65:8a:8e:d8:37:f5:54:fc:de:
58:9d:5f:64:ff:bf:63:fa:2a:7f:91:08:97:7e:5a:23:6f:38:
5c:67:e4:a1:ef:e6:39:f0:47:b2:cc:3d:46:6a:09:5a:b4:9d:
ed:e0:38:81:14:c9:16:45:a7:5e:45:69:b1:47:df:b7:a1:a1:
0d:cb:63:c1:b0:69:ff:a6:65:ce:f3:50:d1:1d:24:34:9e:9d:
a1:24:91:fe:3f:26:6a:af:22:c4:3f:78:93:3e:31:73:6c:48:
95:16:a1:2e:4a:c2:dd:c9:04:16:84:59:9a:74:0c:1c:1c:42:
ae:c0:c3:69:3c:c8:16:99:53:3e:ef:8b:cc:44:91:6a:a9:1f:
ab:83:7d:97:b7:e3:db:12:e7:8d:59:9f:20:f2:55:18:08:cc:
65:f6:60:e4:8c:6d:20:77:8b:a1:4c:ba:a4:d7:4f:ff:df:88:
fe:f7:00:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 00:51:35 2024 by rpki-client on console-fra.rpki-client.org