![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/7bd8f3-4753-42cd-8ff3-6333186589a9/1/lg5oyDibCdw0VGSkAK8nZWjn-Wo.mft
File: lg5oyDibCdw0VGSkAK8nZWjn-Wo.mft (raw, json)
Hash identifier: Ni7ul1u7eovnaUI74cs0MneYRAikU2Ks5xlynDev8kE=
Subject key identifier: 04:B4:88:4E:7F:B4:F5:B0:AB:86:B7:97:9F:DF:56:08:E6:37:80:2F
Authority key identifier: 96:0E:68:C8:38:9B:09:DC:34:54:64:A4:00:AF:27:65:68:E7:F9:6A
Certificate issuer: /CN=960e68c8389b09dc345464a400af276568e7f96a
Certificate serial: 01901E902B1E0EB4B36ED5068CDE4C5FF735
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lg5oyDibCdw0VGSkAK8nZWjn-Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/7bd8f3-4753-42cd-8ff3-6333186589a9/1/lg5oyDibCdw0VGSkAK8nZWjn-Wo.mft
Manifest number: 0A48
Signing time: Sun 16 Jun 2024 01:01:22 +0000
Manifest this update: Sun 16 Jun 2024 01:01:22 +0000
Manifest next update: Mon 17 Jun 2024 01:01:22 +0000
Files and hashes: 1: lg5oyDibCdw0VGSkAK8nZWjn-Wo.crl (hash: nQptrN2/m4tCMBtUc0jTHT+HkUaKsC3DLtBSzp0Y05w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/7bd8f3-4753-42cd-8ff3-6333186589a9/1/lg5oyDibCdw0VGSkAK8nZWjn-Wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/7bd8f3-4753-42cd-8ff3-6333186589a9/1/lg5oyDibCdw0VGSkAK8nZWjn-Wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/lg5oyDibCdw0VGSkAK8nZWjn-Wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1e:90:2b:1e:0e:b4:b3:6e:d5:06:8c:de:4c:5f:f7:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=960e68c8389b09dc345464a400af276568e7f96a
Validity
Not Before: Jun 16 01:01:22 2024 GMT
Not After : Jun 17 01:01:22 2024 GMT
Subject: CN=04b4884e7fb4f5b0ab86b7979fdf5608e637802f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:11:93:62:c9:6e:63:38:98:ea:41:80:85:49:
ee:9a:80:a8:1c:a5:3a:d0:8b:64:fc:57:f7:cf:c4:
c5:29:ca:4b:96:66:5e:91:98:e1:a0:32:53:e3:46:
2d:e2:7e:e4:34:4a:14:65:ed:5f:8e:c7:9b:5e:0e:
26:eb:31:2a:ac:dd:87:85:cf:5d:d8:ea:61:9b:dc:
9f:36:86:71:be:5a:8b:69:f8:3b:9e:c7:8f:6f:bd:
05:fb:40:b3:3a:18:02:b6:e5:1d:9d:39:71:15:b0:
39:92:47:5f:85:ec:f8:58:86:fc:2d:81:e3:3f:f3:
48:ee:e9:b6:af:36:dc:f4:f3:e5:96:a1:a5:62:ce:
88:53:ab:9a:be:49:2c:e8:98:64:dc:6d:e0:2f:64:
df:e8:de:27:93:91:cd:70:23:5b:25:ca:12:6c:11:
94:07:9c:93:41:97:4d:76:fe:02:44:05:fb:67:ab:
3c:3f:13:96:71:62:ec:21:c1:6f:f6:25:f4:0a:68:
31:c5:39:33:0f:53:ef:fd:1f:f2:60:cb:c1:d1:73:
78:1d:92:e6:35:15:00:5d:9f:d5:6f:69:dc:42:21:
77:41:3c:d1:fb:c1:61:bf:39:02:2f:60:f7:b0:03:
df:c7:9d:d1:51:c1:65:b2:c2:84:af:8f:0f:fb:fb:
e9:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:B4:88:4E:7F:B4:F5:B0:AB:86:B7:97:9F:DF:56:08:E6:37:80:2F
X509v3 Authority Key Identifier:
keyid:96:0E:68:C8:38:9B:09:DC:34:54:64:A4:00:AF:27:65:68:E7:F9:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lg5oyDibCdw0VGSkAK8nZWjn-Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7bd8f3-4753-42cd-8ff3-6333186589a9/1/lg5oyDibCdw0VGSkAK8nZWjn-Wo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7bd8f3-4753-42cd-8ff3-6333186589a9/1/lg5oyDibCdw0VGSkAK8nZWjn-Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:bd:92:f8:ad:f7:f3:a6:f9:b5:9e:f9:a1:ea:f7:ab:7d:51:
d3:42:9c:e4:b7:e9:5b:23:86:bd:bb:48:92:ad:23:6f:87:31:
25:e2:45:96:03:c3:24:ac:7a:8d:9c:38:85:b4:1f:b8:50:29:
4d:c6:63:29:97:21:e6:54:c8:22:3a:84:bd:2d:95:8e:6a:ce:
d8:fe:83:0c:a2:aa:8b:67:1e:3c:d7:60:76:07:68:e3:8a:02:
d5:de:ac:35:f1:83:18:fd:cb:f4:57:af:4b:a3:bb:d4:d2:91:
c1:69:26:5a:6f:7e:fc:4c:b7:da:4e:1a:7b:1b:b1:20:f8:c4:
e1:dd:0d:13:2d:d6:ba:82:70:f1:46:5b:50:2f:ed:11:ec:80:
2d:0d:66:13:1f:27:db:dc:e0:2e:7e:bf:12:6d:d3:50:5e:e9:
58:18:e7:47:4c:e9:02:db:93:6b:9e:82:be:be:83:a2:7e:55:
f6:2c:8f:71:de:00:45:1d:90:23:c9:25:8a:8c:9e:85:56:1e:
3b:4c:8a:56:42:cd:f6:e8:de:10:bd:7c:1b:92:5f:85:6b:42:
71:95:15:96:2a:56:1d:6b:1c:fe:8c:30:93:97:18:97:ad:f2:
61:3e:3d:04:16:6c:93:67:56:b5:36:f7:52:1d:c4:e5:35:f8:
d3:9d:1e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:49:43 2024 by rpki-client on console-ams.rpki-client.org