![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/eecca5-c339-4918-a0a8-f61ec85d0f57/1/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.mft
File: NtjBpzsVlRCdJgZ7QpH3HcHbmVc.mft (raw, json)
Hash identifier: pmaIQF9Yvl6zKRmTpTRRnojDSqzvJ0/rm8l+0dVh1Rk=
Subject key identifier: 3D:66:06:D7:43:85:A1:80:B1:3A:57:D2:D7:94:EC:99:EE:84:74:7E
Authority key identifier: 36:D8:C1:A7:3B:15:95:10:9D:26:06:7B:42:91:F7:1D:C1:DB:99:57
Certificate issuer: /CN=36d8c1a73b1595109d26067b4291f71dc1db9957
Certificate serial: 01901EC7110E5FCE4AEB853EA42804A68470
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/eecca5-c339-4918-a0a8-f61ec85d0f57/1/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.mft
Manifest number: 0BD2
Signing time: Sun 16 Jun 2024 02:01:20 +0000
Manifest this update: Sun 16 Jun 2024 02:01:20 +0000
Manifest next update: Mon 17 Jun 2024 02:01:20 +0000
Files and hashes: 1: NtjBpzsVlRCdJgZ7QpH3HcHbmVc.crl (hash: V8rPuTu9OTvVg7nLQ33eotihMJXt9iyvAZr9euskQaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/eecca5-c339-4918-a0a8-f61ec85d0f57/1/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/eecca5-c339-4918-a0a8-f61ec85d0f57/1/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1e:c7:11:0e:5f:ce:4a:eb:85:3e:a4:28:04:a6:84:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36d8c1a73b1595109d26067b4291f71dc1db9957
Validity
Not Before: Jun 16 02:01:20 2024 GMT
Not After : Jun 17 02:01:20 2024 GMT
Subject: CN=3d6606d74385a180b13a57d2d794ec99ee84747e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cb:7e:4e:a6:93:8c:d5:da:cf:1a:34:98:78:
25:5a:00:59:da:f2:16:74:f1:46:55:20:82:bb:bf:
fc:f7:8c:f6:42:03:e8:55:1d:e1:a0:50:dd:bb:2e:
65:94:f5:6e:da:1c:71:ef:35:2c:4d:69:39:82:1c:
79:3a:76:4b:45:49:14:63:21:c7:60:54:6b:28:ff:
22:b0:ec:d5:dc:ef:92:4c:44:50:0f:8e:7e:1e:1c:
e0:64:b8:c9:0c:79:04:73:57:38:28:2d:42:a1:95:
c6:bf:66:61:17:6f:c1:57:b0:41:f5:7a:10:7f:43:
df:c0:46:ef:f6:0d:c1:d0:61:6e:6a:6a:59:c9:da:
97:e0:2f:bc:d9:64:cf:36:0a:30:8e:a5:db:61:42:
a1:e2:e2:b1:c2:17:88:72:04:70:33:59:02:f3:a9:
d2:5f:ae:7d:7f:2e:c0:72:0b:10:4f:54:5d:c7:a2:
8b:9c:a6:2c:c8:a2:df:f9:4c:43:ba:52:3f:68:5b:
e0:1f:8a:ee:85:ec:74:9f:d2:93:23:88:5f:12:aa:
0d:ba:b1:49:6c:1a:a1:bf:c6:4b:2f:e0:f1:d7:7a:
5e:4b:ef:f1:a8:7a:6f:1d:2c:66:1c:06:d5:c7:16:
fd:de:11:e2:cf:e9:e7:e5:1f:12:4e:0e:cb:01:41:
02:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:66:06:D7:43:85:A1:80:B1:3A:57:D2:D7:94:EC:99:EE:84:74:7E
X509v3 Authority Key Identifier:
keyid:36:D8:C1:A7:3B:15:95:10:9D:26:06:7B:42:91:F7:1D:C1:DB:99:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/eecca5-c339-4918-a0a8-f61ec85d0f57/1/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/eecca5-c339-4918-a0a8-f61ec85d0f57/1/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:ae:bb:23:68:4b:94:29:50:fa:1e:ab:db:0e:f8:b4:6b:97:
73:6a:52:94:af:0f:78:ec:6c:a6:e8:ad:40:71:da:a0:10:1f:
73:ed:d4:75:bf:af:d9:63:12:c5:7e:be:d4:6b:0f:fe:65:e6:
7d:8f:ce:ed:d2:dd:03:f2:71:0f:a0:83:20:43:c4:98:58:4e:
e7:b2:39:53:04:f8:c8:7a:49:71:47:6b:dd:83:f5:a6:86:a5:
67:cc:91:8e:9d:a1:a7:48:00:55:db:fa:86:a1:b3:10:2d:48:
a4:5b:a5:3e:91:e3:88:ed:d1:10:24:5d:01:26:4c:55:a1:95:
2d:9a:de:12:57:a5:a2:ea:f5:48:68:91:b5:d8:99:9c:d0:5e:
f9:41:b6:16:69:d4:da:40:b1:74:56:8e:66:25:2d:fd:62:e1:
5d:35:c2:ec:27:6c:fe:e9:44:2a:d4:ab:77:04:7c:d5:b2:7e:
a0:28:a2:70:56:a7:fb:8d:61:8c:bb:ad:55:a6:9d:51:41:d0:
98:21:cb:3e:b4:42:99:64:9f:c1:19:47:5e:58:15:61:29:01:
6d:b5:95:a8:6a:cf:71:d2:3e:8f:05:14:13:05:98:32:63:df:
0f:11:ec:0c:18:71:25:96:93:dd:39:f3:31:de:1b:a8:3a:85:
2d:20:22:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:00:39 2024 by rpki-client on console-fra.rpki-client.org