![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/4b4d7a-ce48-47a4-a3c4-611e57da95c0/1/FMLqtqKWBQYEah2kMSdz2Y6XzVo.mft
File: FMLqtqKWBQYEah2kMSdz2Y6XzVo.mft (raw, json)
Hash identifier: 9vmSKCt18h0GsNPEXP8H/AdbJJyYWb+QL6oVfCAsKVs=
Subject key identifier: 12:51:D7:86:A4:9C:4E:F5:53:43:76:90:7A:04:88:58:CB:66:D0:27
Authority key identifier: 14:C2:EA:B6:A2:96:05:06:04:6A:1D:A4:31:27:73:D9:8E:97:CD:5A
Certificate issuer: /CN=14c2eab6a2960506046a1da4312773d98e97cd5a
Certificate serial: 01901DEC65EB08A317E42FA4B1962206C807
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FMLqtqKWBQYEah2kMSdz2Y6XzVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/4b4d7a-ce48-47a4-a3c4-611e57da95c0/1/FMLqtqKWBQYEah2kMSdz2Y6XzVo.mft
Manifest number: 0668
Signing time: Sat 15 Jun 2024 22:02:30 +0000
Manifest this update: Sat 15 Jun 2024 22:02:30 +0000
Manifest next update: Sun 16 Jun 2024 22:02:30 +0000
Files and hashes: 1: FMLqtqKWBQYEah2kMSdz2Y6XzVo.crl (hash: 7uqaQRwHFK7A1QLbkkn8hhz8tRyLkk53BHuXJXjaAo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/4b4d7a-ce48-47a4-a3c4-611e57da95c0/1/FMLqtqKWBQYEah2kMSdz2Y6XzVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/4b4d7a-ce48-47a4-a3c4-611e57da95c0/1/FMLqtqKWBQYEah2kMSdz2Y6XzVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/FMLqtqKWBQYEah2kMSdz2Y6XzVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 22:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:ec:65:eb:08:a3:17:e4:2f:a4:b1:96:22:06:c8:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14c2eab6a2960506046a1da4312773d98e97cd5a
Validity
Not Before: Jun 15 22:02:30 2024 GMT
Not After : Jun 16 22:02:30 2024 GMT
Subject: CN=1251d786a49c4ef5534376907a048858cb66d027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:af:eb:c5:7c:62:90:84:28:7e:40:3b:2b:4a:
b3:82:93:14:aa:97:4d:ae:0f:3c:64:76:2f:00:01:
b9:c3:2b:1b:66:6e:1e:4f:14:95:7f:25:e6:7f:13:
a4:c2:08:ca:87:98:a4:9e:db:45:22:dd:76:ec:3a:
4c:71:83:52:37:8e:f9:47:29:e9:81:3c:ed:33:fb:
6d:aa:ee:59:ce:59:e4:5b:2e:86:d5:82:27:02:21:
3a:84:b3:d0:04:df:d7:b6:c7:48:96:7e:da:06:91:
23:55:ca:0b:7d:93:0f:c9:71:67:0b:5e:fb:ea:0a:
7c:fa:84:b1:ed:65:b6:94:a4:73:f6:1c:fa:d8:18:
df:1a:c1:cf:d4:ae:dc:f7:32:28:90:18:8d:ff:16:
e6:f2:d9:0b:3b:2a:df:eb:4f:2c:9a:87:fd:29:05:
48:7d:88:65:b8:7e:65:dd:14:0c:65:62:7e:eb:7f:
f4:23:d2:de:3d:2f:90:33:07:40:f2:be:eb:b8:00:
17:3f:62:83:87:e6:bf:eb:ff:41:51:d8:8c:22:e2:
10:d0:77:cc:1a:3c:e0:1e:76:69:4d:d9:7f:c3:97:
d8:7a:82:e9:e1:a3:b9:d2:3f:01:72:5c:7f:b7:0d:
b4:9d:bc:f5:0e:bb:84:b9:38:af:3f:89:e5:01:46:
6b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:51:D7:86:A4:9C:4E:F5:53:43:76:90:7A:04:88:58:CB:66:D0:27
X509v3 Authority Key Identifier:
keyid:14:C2:EA:B6:A2:96:05:06:04:6A:1D:A4:31:27:73:D9:8E:97:CD:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FMLqtqKWBQYEah2kMSdz2Y6XzVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/4b4d7a-ce48-47a4-a3c4-611e57da95c0/1/FMLqtqKWBQYEah2kMSdz2Y6XzVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/4b4d7a-ce48-47a4-a3c4-611e57da95c0/1/FMLqtqKWBQYEah2kMSdz2Y6XzVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:96:42:ac:70:20:e4:f9:34:11:55:be:53:87:d5:53:44:51:
08:f9:a6:93:e5:8f:cf:c4:83:bf:0c:76:64:31:2f:aa:dc:22:
d5:68:7e:f5:87:64:b3:44:55:15:75:23:09:07:cd:89:36:15:
34:86:86:51:c6:f7:57:96:e4:ce:19:55:a9:5e:63:24:a4:1b:
00:9f:2d:3e:a5:8c:c5:37:e2:80:80:40:5b:28:92:1b:c2:2c:
ab:b5:d3:d2:d0:24:3f:60:33:84:7c:36:c7:be:0d:0d:8d:b5:
4f:94:31:bb:5d:29:a1:43:1d:84:3c:c9:e3:5d:c6:9c:a8:68:
be:fb:3b:3c:b0:21:0a:f8:5a:c5:2f:2f:c6:0f:84:38:f5:56:
6e:f4:eb:dc:5d:f3:2f:c3:8f:fc:f7:ee:e3:2e:11:f3:54:6c:
88:0d:6f:48:f7:d0:9e:59:df:e1:5a:d4:93:21:1e:82:9f:44:
4c:ce:69:da:21:08:f0:10:da:88:27:f7:50:48:1e:26:5a:e6:
86:f7:df:53:40:a2:48:5f:60:a8:08:07:c9:4a:49:e1:23:72:
9a:eb:78:47:8d:e7:3f:db:18:28:b3:61:97:57:a2:dd:7a:b5:
b5:63:16:0b:e9:f8:5c:af:18:26:20:96:1d:21:05:e5:67:ae:
5f:51:c8:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:56:24 2024 by rpki-client on console-fra.rpki-client.org