![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/f31f24-4cf0-48ef-a978-e2c6b0d6ed96/1/Jo42omah9d-VuWprWNoRwjVNtV0.mft
File: Jo42omah9d-VuWprWNoRwjVNtV0.mft (raw, json)
Hash identifier: bEi6FDYmvTi2DBdklvvYPnYYVx4uqvlCUJA87hnrd6Y=
Subject key identifier: A3:33:10:3D:9E:FD:CB:5C:0E:C6:B5:66:06:79:83:DE:AB:5E:00:A9
Authority key identifier: 26:8E:36:A2:66:A1:F5:DF:95:B9:6A:6B:58:DA:11:C2:35:4D:B5:5D
Certificate issuer: /CN=268e36a266a1f5df95b96a6b58da11c2354db55d
Certificate serial: 01901DECCAC96F4272C5F59A7645A76A21D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jo42omah9d-VuWprWNoRwjVNtV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/f31f24-4cf0-48ef-a978-e2c6b0d6ed96/1/Jo42omah9d-VuWprWNoRwjVNtV0.mft
Manifest number: 056B
Signing time: Sat 15 Jun 2024 22:02:55 +0000
Manifest this update: Sat 15 Jun 2024 22:02:55 +0000
Manifest next update: Sun 16 Jun 2024 22:02:55 +0000
Files and hashes: 1: Jo42omah9d-VuWprWNoRwjVNtV0.crl (hash: 0h1jI13uR9X8ECdaOfcWN7QCjABUEFoQeYjeqeLInGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/f31f24-4cf0-48ef-a978-e2c6b0d6ed96/1/Jo42omah9d-VuWprWNoRwjVNtV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/f31f24-4cf0-48ef-a978-e2c6b0d6ed96/1/Jo42omah9d-VuWprWNoRwjVNtV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jo42omah9d-VuWprWNoRwjVNtV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:ec:ca:c9:6f:42:72:c5:f5:9a:76:45:a7:6a:21:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=268e36a266a1f5df95b96a6b58da11c2354db55d
Validity
Not Before: Jun 15 22:02:55 2024 GMT
Not After : Jun 16 22:02:55 2024 GMT
Subject: CN=a333103d9efdcb5c0ec6b566067983deab5e00a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:2c:3b:67:b3:98:fb:7f:17:ec:2a:5e:66:93:
19:8b:fa:83:6c:94:ed:a7:03:dd:0c:59:72:8f:16:
a4:67:53:6e:aa:6f:8a:6e:e9:7d:d2:9d:f1:d6:3f:
0d:79:36:75:f6:05:71:02:8e:56:f0:df:8f:3c:c8:
31:0f:34:23:d7:ae:d0:f0:8f:e8:35:77:45:a3:3c:
93:79:98:6b:45:0a:02:a4:c3:d3:d8:df:3c:88:62:
aa:e9:54:db:4a:1c:90:42:28:69:dc:d8:bd:14:ed:
a5:f5:9b:52:87:1f:16:6b:c7:36:e0:0a:d3:2f:98:
f7:62:62:30:34:22:1a:7c:79:dc:12:1c:d6:6b:51:
bf:bb:f3:90:d6:7d:3c:9a:2b:09:46:22:1f:d3:86:
4b:49:a2:17:9e:94:a4:56:b3:42:46:ae:14:d1:f8:
b1:ed:3d:16:12:c4:7a:42:69:21:3d:5a:3d:77:81:
af:48:7c:be:be:54:b5:fe:01:56:56:b8:25:24:f9:
f0:03:50:36:f3:6b:47:99:4a:32:0b:5d:d0:b5:32:
45:ec:eb:df:88:71:24:7d:cb:45:27:fb:52:ba:9b:
57:92:06:73:b5:3b:7f:6e:17:38:92:07:92:c1:60:
9a:61:e8:d0:11:e2:1e:71:14:09:5d:58:a4:00:45:
86:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:33:10:3D:9E:FD:CB:5C:0E:C6:B5:66:06:79:83:DE:AB:5E:00:A9
X509v3 Authority Key Identifier:
keyid:26:8E:36:A2:66:A1:F5:DF:95:B9:6A:6B:58:DA:11:C2:35:4D:B5:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jo42omah9d-VuWprWNoRwjVNtV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f31f24-4cf0-48ef-a978-e2c6b0d6ed96/1/Jo42omah9d-VuWprWNoRwjVNtV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f31f24-4cf0-48ef-a978-e2c6b0d6ed96/1/Jo42omah9d-VuWprWNoRwjVNtV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:d7:5e:a7:c2:a4:8e:4c:ea:5d:7e:2a:cf:a5:ff:82:2d:aa:
e9:97:b8:c4:cc:2a:9c:dc:e0:b1:97:98:45:0d:a6:28:df:4c:
fc:49:2e:30:69:6f:62:bd:6e:ad:87:06:54:e6:bf:b0:7e:3b:
ef:f9:a5:3c:df:ab:13:88:44:72:c1:64:c5:1b:a1:41:3c:e2:
4b:ef:35:79:b9:3f:3a:2a:86:11:64:81:d4:8d:57:1a:03:b7:
44:e7:c2:7a:89:08:e1:de:d1:a1:63:41:a7:9c:68:cd:a0:2d:
aa:89:cf:d3:a7:7e:35:c9:0e:ef:13:0c:2c:0e:e8:67:e3:88:
19:92:0c:50:a6:15:be:78:fe:ba:e8:84:37:8b:6f:be:bd:c3:
8d:cc:8c:8e:97:55:ca:bb:8e:40:de:24:d9:f6:35:af:a5:d4:
9e:97:db:7d:01:5e:0d:99:0b:c2:7a:19:77:00:af:0d:a8:43:
19:01:d2:f3:f7:c8:8a:d4:94:0b:06:24:24:5e:82:1a:23:e2:
59:34:36:eb:84:e4:3d:00:a6:f5:85:c5:23:6f:f0:73:38:bd:
22:45:05:dd:39:d8:9d:bc:a8:87:2c:bc:3b:c9:2f:86:75:aa:
1e:50:7e:a6:e2:dd:15:ae:39:aa:e5:b3:23:f4:d4:b1:4d:e7:
c2:f0:ac:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 22:51:05 2024 by rpki-client on console-fra.rpki-client.org