![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/3631e0-56d7-4c29-95c4-6682b07fa947/1/Mns0IMJQE3legioq5Q043B04J5M.mft
File: Mns0IMJQE3legioq5Q043B04J5M.mft (raw, json)
Hash identifier: JbBsCb6eiyqPH3Q7HFI/b8SAYabHo8e5Sw/FmPUmFQ4=
Subject key identifier: 1C:DF:6D:11:51:69:ED:D4:73:5A:B5:34:C0:96:92:BB:5D:A6:D4:AC
Authority key identifier: 32:7B:34:20:C2:50:13:79:5E:82:2A:2A:E5:0D:38:DC:1D:38:27:93
Certificate issuer: /CN=327b3420c25013795e822a2ae50d38dc1d382793
Certificate serial: 019049B0F3E84299F98C6CAE88A3640FF66C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mns0IMJQE3legioq5Q043B04J5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/3631e0-56d7-4c29-95c4-6682b07fa947/1/Mns0IMJQE3legioq5Q043B04J5M.mft
Manifest number: 11DD
Signing time: Mon 24 Jun 2024 10:00:51 +0000
Manifest this update: Mon 24 Jun 2024 10:00:51 +0000
Manifest next update: Tue 25 Jun 2024 10:00:51 +0000
Files and hashes: 1: Mns0IMJQE3legioq5Q043B04J5M.crl (hash: 9GIFYYGJ68uIlA9IXl0V3QTkazCcxRKIUnraHO+BoQ0=)
2: abO0AnlXa0JfatT8MLBDygpfHJY.roa (hash: e2ovSDXC/WbbCatunUN2NwyvbYsJQ02CWhLNp1IxiWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/3631e0-56d7-4c29-95c4-6682b07fa947/1/Mns0IMJQE3legioq5Q043B04J5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/3631e0-56d7-4c29-95c4-6682b07fa947/1/Mns0IMJQE3legioq5Q043B04J5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mns0IMJQE3legioq5Q043B04J5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 09:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:49:b0:f3:e8:42:99:f9:8c:6c:ae:88:a3:64:0f:f6:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=327b3420c25013795e822a2ae50d38dc1d382793
Validity
Not Before: Jun 24 10:00:51 2024 GMT
Not After : Jun 25 10:00:51 2024 GMT
Subject: CN=1cdf6d115169edd4735ab534c09692bb5da6d4ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:b0:28:4b:bf:95:93:96:3d:ae:41:3b:f7:f5:
34:35:0a:1a:1c:3d:b9:47:8d:90:73:f1:b4:27:c3:
24:f3:46:69:97:36:00:8d:f3:df:dd:d3:84:e4:9e:
85:33:74:fe:77:2b:e9:b0:e4:31:88:d5:32:71:20:
0c:c6:34:88:2d:87:ef:9b:1b:88:c0:e4:26:d9:23:
7c:f8:46:43:b8:7c:f0:33:6c:62:e9:4b:a3:ea:22:
23:d1:ac:89:fc:20:97:9d:de:ca:f3:e5:54:60:18:
71:8b:08:d1:5c:f5:3c:99:cf:5e:f0:e2:b5:0f:06:
2a:10:97:1f:6d:9d:08:cf:8f:fb:61:e9:16:d3:30:
eb:47:21:e9:47:e0:a8:72:9a:b2:7b:d1:e5:af:32:
1a:94:7f:f5:ac:a3:44:e3:64:37:5a:3e:03:e8:97:
f0:68:a9:30:c0:ec:74:07:28:bf:d1:db:d3:86:65:
cc:4e:59:4b:fa:b0:a2:ed:64:07:58:16:d1:bf:a9:
e3:66:f2:7c:66:28:40:38:bf:86:d6:bd:b9:54:ab:
2b:f8:52:db:01:95:2d:7a:87:f5:81:f7:d4:35:2d:
3e:04:8e:42:5d:52:17:9a:79:b1:9c:1a:eb:aa:9b:
56:fc:b0:01:d9:16:bc:ae:68:2e:28:99:d7:c4:50:
e6:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:DF:6D:11:51:69:ED:D4:73:5A:B5:34:C0:96:92:BB:5D:A6:D4:AC
X509v3 Authority Key Identifier:
keyid:32:7B:34:20:C2:50:13:79:5E:82:2A:2A:E5:0D:38:DC:1D:38:27:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mns0IMJQE3legioq5Q043B04J5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3631e0-56d7-4c29-95c4-6682b07fa947/1/Mns0IMJQE3legioq5Q043B04J5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3631e0-56d7-4c29-95c4-6682b07fa947/1/Mns0IMJQE3legioq5Q043B04J5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:5f:8e:b6:cd:f9:be:26:68:e1:08:19:c6:96:0f:e0:da:e4:
8b:92:75:4d:ff:61:eb:de:4f:c2:da:9c:17:65:18:69:ac:57:
05:74:3b:57:2b:ac:54:0e:f4:a1:40:50:1e:fa:7c:a5:ea:bb:
60:fa:93:21:c8:e9:b5:5e:3a:e6:e8:fc:f0:3b:89:3b:34:57:
fb:b8:6c:7b:de:6b:b4:c4:10:76:e3:02:6b:17:ce:49:07:96:
4f:53:f8:4c:24:8e:97:8c:51:3e:70:7f:e3:76:bd:53:b6:31:
8a:e5:5b:d5:fc:c0:1c:12:dc:85:3d:57:bd:6f:dd:3a:95:a7:
76:11:6f:e3:74:9c:24:9c:3f:2e:d9:ac:52:9a:7a:12:59:1a:
5f:ce:6b:fb:ab:42:86:eb:23:1b:45:2c:1e:84:7f:c9:6e:8e:
01:a1:ef:33:70:24:ed:bb:93:04:bb:b3:09:c6:21:bc:23:5d:
38:74:cd:cd:3e:fd:b1:a7:fa:6c:cf:d0:0e:39:eb:1f:b1:39:
69:2b:96:bc:af:b9:8d:4a:c7:73:14:7f:6a:32:99:80:5a:a9:
fe:a0:98:07:17:27:66:f9:17:bf:6e:8e:c2:e1:5a:53:f6:25:
c8:1f:7b:f5:22:67:6f:31:1e:5f:0d:7a:91:6a:b8:38:e1:dd:
78:30:9d:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 11:15:05 2024 by rpki-client on console-ams.rpki-client.org