![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/6326c6-7578-47ec-827d-847d805f38d0/1/0XSpf-m-DvYs3ln0GppfCZGCkUc.mft
File: 0XSpf-m-DvYs3ln0GppfCZGCkUc.mft (raw, json)
Hash identifier: F4FhRLfUN74wqvEZFSUR4b8oLY29wwHXbRmBxNCUZjI=
Subject key identifier: E5:47:30:10:36:3C:FE:41:16:7B:08:ED:B5:19:5A:DD:18:5B:10:64
Authority key identifier: D1:74:A9:7F:E9:BE:0E:F6:2C:DE:59:F4:1A:9A:5F:09:91:82:91:47
Certificate issuer: /CN=d174a97fe9be0ef62cde59f41a9a5f0991829147
Certificate serial: 01901D46273C9DD1D63246102CABBC48FEF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0XSpf-m-DvYs3ln0GppfCZGCkUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/6326c6-7578-47ec-827d-847d805f38d0/1/0XSpf-m-DvYs3ln0GppfCZGCkUc.mft
Manifest number: 0DB1
Signing time: Sat 15 Jun 2024 19:00:55 +0000
Manifest this update: Sat 15 Jun 2024 19:00:55 +0000
Manifest next update: Sun 16 Jun 2024 19:00:55 +0000
Files and hashes: 1: 0XSpf-m-DvYs3ln0GppfCZGCkUc.crl (hash: sb9b+ixoqeYXUVwfa0kwmB1NxyiSbsYp2sscfK0VBUk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/6326c6-7578-47ec-827d-847d805f38d0/1/0XSpf-m-DvYs3ln0GppfCZGCkUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/6326c6-7578-47ec-827d-847d805f38d0/1/0XSpf-m-DvYs3ln0GppfCZGCkUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0XSpf-m-DvYs3ln0GppfCZGCkUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:46:27:3c:9d:d1:d6:32:46:10:2c:ab:bc:48:fe:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d174a97fe9be0ef62cde59f41a9a5f0991829147
Validity
Not Before: Jun 15 19:00:55 2024 GMT
Not After : Jun 16 19:00:55 2024 GMT
Subject: CN=e5473010363cfe41167b08edb5195add185b1064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c0:73:20:34:98:af:fb:44:19:7b:07:9d:18:
0b:39:56:a2:69:32:e5:8b:a3:73:d9:1e:ed:f0:f2:
39:bc:8e:5d:00:a8:b1:f7:aa:a6:8b:7a:2d:8b:ac:
f1:c0:4c:43:4b:fc:58:7b:72:71:89:62:e4:e6:55:
06:96:aa:96:92:c9:2a:55:5c:6e:3b:8f:f4:fd:63:
9b:1e:21:b0:4e:e6:07:99:05:c8:62:c1:84:2e:06:
9b:77:55:57:49:a1:31:46:48:79:6e:11:df:22:e3:
07:9c:97:e0:d2:95:cb:c4:4a:18:4f:40:6c:b7:86:
89:c5:0e:be:4a:ea:0e:21:40:8c:ca:82:e6:9c:fd:
b3:42:de:41:e8:06:4b:8a:da:c5:83:04:96:ed:23:
03:16:d3:c9:50:b2:f6:3b:f1:e5:26:82:34:17:6a:
08:c1:45:06:26:ab:b2:90:c3:38:58:ac:86:92:d7:
b9:b6:95:64:cc:e1:fb:93:be:dc:dd:f4:b7:e5:8b:
59:0c:10:de:47:0c:ef:77:69:0e:60:99:ae:b0:78:
a2:27:5c:26:1e:b0:0a:13:3d:d5:0f:f9:99:63:a2:
be:67:b2:c8:74:a5:59:56:13:c8:60:b8:7c:3b:d0:
0a:b6:9c:34:56:23:3e:88:a8:ca:c9:95:ec:5b:96:
3d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:47:30:10:36:3C:FE:41:16:7B:08:ED:B5:19:5A:DD:18:5B:10:64
X509v3 Authority Key Identifier:
keyid:D1:74:A9:7F:E9:BE:0E:F6:2C:DE:59:F4:1A:9A:5F:09:91:82:91:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0XSpf-m-DvYs3ln0GppfCZGCkUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/6326c6-7578-47ec-827d-847d805f38d0/1/0XSpf-m-DvYs3ln0GppfCZGCkUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/6326c6-7578-47ec-827d-847d805f38d0/1/0XSpf-m-DvYs3ln0GppfCZGCkUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:bb:48:35:a8:5c:28:60:f0:1b:8a:41:bd:48:6f:cc:2d:b4:
88:df:14:df:93:85:99:21:3c:eb:15:52:48:ae:9d:f6:f5:ef:
40:20:7b:a9:7d:53:f4:0f:1e:59:13:14:77:a3:c9:ae:05:2c:
a6:37:d2:4b:91:55:91:70:6b:b3:75:b5:ea:30:69:37:d0:46:
cc:bd:fa:2c:a4:1d:ec:cb:dc:09:58:0a:c5:58:ef:5e:e4:e7:
32:64:52:66:f2:a5:ce:88:3e:40:0c:2a:63:12:2b:9a:f4:77:
55:3a:44:4e:a7:0c:a7:31:e5:80:84:5e:8f:54:eb:66:a0:50:
db:7f:e0:2a:14:da:a9:23:32:5b:ca:af:f3:9f:82:64:ed:31:
b9:4e:c2:08:2e:92:76:af:47:68:e8:70:cc:89:f9:c0:b5:5b:
52:4f:5f:6f:35:b1:26:ff:67:1f:a2:0c:36:d1:49:3f:bb:c9:
bb:34:f2:64:54:84:56:be:fc:36:0b:77:e9:29:14:a2:1e:81:
b7:e9:5c:60:70:9f:6d:bc:cb:26:49:68:0c:f4:30:89:e7:17:
f5:60:af:40:b5:e4:ca:c4:b8:69:47:64:5f:84:5d:31:06:0d:
ad:c0:94:e0:13:c8:c9:05:45:0b:02:0d:50:8c:0f:ae:1f:22:
24:fe:f1:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 19:47:05 2024 by rpki-client on console-fra.rpki-client.org