![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.mft
File: 1-y1mYW_2l9UXaIaOijUhua3M7m0.mft (raw, json)
Hash identifier: owdObJgGjqd9thhxmo8zOmZI9QWGEG+TUrQvizQZmSA=
Subject key identifier: D5:A8:31:D0:8B:99:48:33:61:AD:D5:72:57:57:39:BB:DD:8B:1B:6F
Authority key identifier: FB:2D:66:61:6F:F6:97:D5:17:68:86:8E:8A:35:21:B9:AD:CC:EE:6D
Certificate issuer: /CN=fb2d66616ff697d51768868e8a3521b9adccee6d
Certificate serial: 019044F85D8870F728148E48926FF487077A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-y1mYW_2l9UXaIaOijUhua3M7m0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.mft
Manifest number: 0128
Signing time: Sun 23 Jun 2024 12:00:45 +0000
Manifest this update: Sun 23 Jun 2024 12:00:45 +0000
Manifest next update: Mon 24 Jun 2024 12:00:45 +0000
Files and hashes: 1: 1-y1mYW_2l9UXaIaOijUhua3M7m0.crl (hash: bzpudX7/NZ97b2J4mL3YHbw4zhyD75inY7TMz0vWuTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-y1mYW_2l9UXaIaOijUhua3M7m0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 12:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:44:f8:5d:88:70:f7:28:14:8e:48:92:6f:f4:87:07:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb2d66616ff697d51768868e8a3521b9adccee6d
Validity
Not Before: Jun 23 12:00:45 2024 GMT
Not After : Jun 24 12:00:45 2024 GMT
Subject: CN=d5a831d08b99483361add572575739bbdd8b1b6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e0:dd:1f:f5:ae:12:31:01:d1:94:b1:c7:de:
a2:ee:c9:f1:c1:d3:4b:16:e8:b9:90:c3:86:8f:3f:
4d:a7:49:46:62:9c:dd:dc:bd:8d:8a:e2:d2:ca:82:
1b:25:e5:e6:24:a3:c1:8e:ca:5f:37:60:5e:27:dd:
6e:0d:29:01:1c:df:28:74:da:21:09:9b:0f:05:b7:
20:20:90:0a:73:aa:50:ae:16:e6:a8:c1:95:30:15:
da:a7:4d:3a:da:7d:7b:78:ce:75:fc:27:34:a8:45:
09:57:62:b1:02:77:3a:c0:c0:d7:80:9f:8e:75:b3:
21:03:a4:7c:b9:f9:af:1f:cf:5c:f9:c3:55:5a:93:
51:82:41:96:b2:7f:27:29:76:da:74:3a:c9:2d:15:
72:1b:10:ab:db:c1:3a:37:51:e9:26:ca:e8:c0:86:
f9:f6:fe:54:19:9b:ff:4a:ce:74:e7:0d:df:66:17:
cd:65:8a:14:88:9f:00:ae:82:10:66:30:d3:04:92:
c3:dd:5c:4c:b4:eb:a9:e2:ad:db:be:11:28:5d:4a:
2b:e1:3a:ba:72:60:c6:a6:e3:a1:87:55:98:ef:9e:
94:64:84:a2:6f:6d:7b:7e:e6:5b:fc:a8:9b:2d:0d:
fa:cb:c6:c4:f9:aa:e8:22:2d:bf:09:a9:4a:14:c3:
30:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:A8:31:D0:8B:99:48:33:61:AD:D5:72:57:57:39:BB:DD:8B:1B:6F
X509v3 Authority Key Identifier:
keyid:FB:2D:66:61:6F:F6:97:D5:17:68:86:8E:8A:35:21:B9:AD:CC:EE:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-y1mYW_2l9UXaIaOijUhua3M7m0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:7d:08:05:2e:78:2d:bb:79:1a:69:78:60:42:ef:42:82:b3:
e2:08:8d:fe:12:df:a8:58:17:23:cb:2f:86:f5:1b:44:57:0f:
53:21:f9:3f:2b:18:5f:9a:f8:d7:23:be:6e:e0:01:85:de:5f:
57:da:65:56:42:4e:06:fa:bf:0c:f7:ab:7b:54:38:54:16:85:
c2:98:b3:08:ac:15:2c:18:07:2e:9f:87:c1:a3:ef:d1:c8:b3:
c5:0d:38:a0:e8:83:25:59:c9:5e:9f:2f:b2:9f:43:ea:56:3f:
39:3b:52:3a:95:c3:be:a7:62:f6:9f:d6:5d:f2:53:f4:4f:3f:
20:15:76:b2:49:5b:35:28:f2:38:65:0f:57:24:b2:1d:dc:8c:
2f:4d:e1:7e:16:4d:5e:43:b1:7f:db:95:f2:7a:e8:fa:df:d2:
25:34:50:60:30:19:24:36:08:93:d1:fa:ad:00:7d:d1:c0:42:
c8:36:69:d5:e2:bc:7c:54:8f:d2:0c:de:7c:9e:db:fd:69:e0:
5b:84:c5:c8:9e:5e:61:06:9f:49:22:fd:02:07:b9:89:e8:51:
71:f8:94:e3:71:f9:92:1f:7d:ae:da:97:8f:13:18:3f:f7:8a:
65:b7:0c:51:e4:bd:c3:1c:b0:c8:62:34:3a:fd:80:90:9d:1a:
9c:c5:52:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 17:39:23 2024 by rpki-client on console-ams.rpki-client.org