![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/c7a7f5-e3a2-493b-a8bd-7bdb672e0c54/1/ZLkPNFJfgAJep3y2GOdRmYKrhZI.mft
File: ZLkPNFJfgAJep3y2GOdRmYKrhZI.mft (raw, json)
Hash identifier: y42WKqEvfTu6xbwUROVeA5yCMU3N40fOSgpuitddAGc=
Subject key identifier: 3F:DD:32:7E:97:E1:CA:A5:B3:D9:E9:7F:CA:B0:2D:24:E5:29:76:70
Authority key identifier: 64:B9:0F:34:52:5F:80:02:5E:A7:7C:B6:18:E7:51:99:82:AB:85:92
Certificate issuer: /CN=64b90f34525f80025ea77cb618e7519982ab8592
Certificate serial: 01901DEC98492D9FAD48BFF33AB9BA1157DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZLkPNFJfgAJep3y2GOdRmYKrhZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/c7a7f5-e3a2-493b-a8bd-7bdb672e0c54/1/ZLkPNFJfgAJep3y2GOdRmYKrhZI.mft
Manifest number: 11C4
Signing time: Sat 15 Jun 2024 22:02:42 +0000
Manifest this update: Sat 15 Jun 2024 22:02:42 +0000
Manifest next update: Sun 16 Jun 2024 22:02:42 +0000
Files and hashes: 1: ZLkPNFJfgAJep3y2GOdRmYKrhZI.crl (hash: lRZjEXJGP2hcgFa8LgW1BjX4ow5ZdheLW5+5QCmQv1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/c7a7f5-e3a2-493b-a8bd-7bdb672e0c54/1/ZLkPNFJfgAJep3y2GOdRmYKrhZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/c7a7f5-e3a2-493b-a8bd-7bdb672e0c54/1/ZLkPNFJfgAJep3y2GOdRmYKrhZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZLkPNFJfgAJep3y2GOdRmYKrhZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 22:02:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:ec:98:49:2d:9f:ad:48:bf:f3:3a:b9:ba:11:57:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64b90f34525f80025ea77cb618e7519982ab8592
Validity
Not Before: Jun 15 22:02:42 2024 GMT
Not After : Jun 16 22:02:42 2024 GMT
Subject: CN=3fdd327e97e1caa5b3d9e97fcab02d24e5297670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c4:fc:02:0d:c9:f1:68:bf:2e:0c:49:56:f1:
d6:3f:e9:dd:2a:c5:42:55:f3:b8:79:32:2a:47:52:
e9:7a:bb:e6:72:bd:4f:2b:df:b9:79:c3:00:42:78:
d5:20:eb:02:58:97:79:2a:7b:61:f0:b8:c6:7f:36:
3c:46:c1:40:ca:58:83:1b:1b:6e:61:a3:f5:15:59:
c9:c5:26:66:ef:c7:e6:79:99:36:d9:74:49:14:cb:
f9:44:2d:a8:99:e2:8b:38:c7:af:4f:81:bb:f0:ec:
2e:39:98:92:64:da:fe:d0:99:0a:a3:e0:e4:ce:8e:
bf:94:dc:58:0a:c8:16:8c:60:df:14:d9:fb:0b:8f:
80:19:a9:05:80:d5:40:8d:45:d9:ed:78:5d:29:c1:
e7:47:96:7c:46:74:9d:00:f1:7f:cc:6d:12:c3:62:
03:4b:8a:37:b2:b5:61:0a:25:4d:7d:2f:25:c7:ce:
ea:9e:ad:9b:ef:d5:9f:c3:87:b9:29:a6:b0:71:28:
ce:88:d4:bb:d1:58:b2:6c:92:a0:43:60:a5:59:ae:
b6:11:f9:0d:b4:d6:78:48:e7:be:ed:36:7c:d2:0a:
3c:67:05:1f:cd:67:20:c5:e1:5e:a9:72:f4:a7:a2:
ef:88:19:01:6c:a2:4f:72:40:ac:dc:45:cd:19:29:
34:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:DD:32:7E:97:E1:CA:A5:B3:D9:E9:7F:CA:B0:2D:24:E5:29:76:70
X509v3 Authority Key Identifier:
keyid:64:B9:0F:34:52:5F:80:02:5E:A7:7C:B6:18:E7:51:99:82:AB:85:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZLkPNFJfgAJep3y2GOdRmYKrhZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c7a7f5-e3a2-493b-a8bd-7bdb672e0c54/1/ZLkPNFJfgAJep3y2GOdRmYKrhZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c7a7f5-e3a2-493b-a8bd-7bdb672e0c54/1/ZLkPNFJfgAJep3y2GOdRmYKrhZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:e4:f0:56:17:42:b6:1b:1b:53:7f:8e:d0:19:23:72:32:ca:
1c:97:b4:00:1e:0a:ec:20:ed:e6:2e:7f:74:12:af:b3:e6:80:
4d:c6:1f:4d:60:2e:ac:8c:26:c0:c2:8d:28:e0:6e:4a:16:dc:
1a:29:42:43:dc:29:aa:6a:36:f8:69:96:7e:db:2f:f3:ce:e9:
b2:a2:cd:02:5b:47:49:10:ae:bc:2c:f2:a0:39:87:49:29:ef:
0a:6f:5a:b8:9b:c2:f2:4f:d9:1e:db:c3:bb:26:62:fc:41:81:
66:ac:0e:dc:57:68:dd:d8:d9:15:5c:59:2d:1b:d5:3d:1b:38:
b4:fc:68:12:1f:01:09:9c:4a:f5:09:40:47:1b:63:d3:8e:b4:
6b:da:7d:43:72:6e:84:d8:f2:39:ec:6b:3f:fc:d7:fa:21:18:
8f:76:44:68:6b:dd:7a:4d:f1:57:ba:51:0f:e3:26:51:fe:12:
e6:5e:3e:ff:86:66:e4:bc:ae:6f:6a:a3:bb:dd:39:11:42:61:
df:ad:e4:7f:1a:da:d7:75:58:bc:b5:61:7f:86:1a:b2:51:9c:
20:38:3c:b0:dc:d3:e7:c7:bd:a2:47:12:de:b9:31:cf:bc:9b:
0a:0f:d2:6e:28:76:7c:2a:78:9f:9d:37:a8:c5:90:f4:f9:c8:
d1:8c:71:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:53:41 2024 by rpki-client on console-ams.rpki-client.org