![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/f58cf3-6909-458a-a51a-5914f9d3378b/1/UTIqxJAgylfHTzsUi8BBAsq63IM.mft
File: UTIqxJAgylfHTzsUi8BBAsq63IM.mft (raw, json)
Hash identifier: wE/4AmC4e6sH9GtEFd1dR3d2s6sKErkSw1t1vSZZCNE=
Subject key identifier: 70:6B:A0:89:57:E5:5D:AD:2F:BC:18:FC:3A:E6:31:A7:B9:DD:67:FD
Authority key identifier: 51:32:2A:C4:90:20:CA:57:C7:4F:3B:14:8B:C0:41:02:CA:BA:DC:83
Certificate issuer: /CN=51322ac49020ca57c74f3b148bc04102cabadc83
Certificate serial: 01901F34FED87DBDD0006817B800D9AA81AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UTIqxJAgylfHTzsUi8BBAsq63IM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/f58cf3-6909-458a-a51a-5914f9d3378b/1/UTIqxJAgylfHTzsUi8BBAsq63IM.mft
Manifest number: 0CA2
Signing time: Sun 16 Jun 2024 04:01:25 +0000
Manifest this update: Sun 16 Jun 2024 04:01:25 +0000
Manifest next update: Mon 17 Jun 2024 04:01:25 +0000
Files and hashes: 1: UTIqxJAgylfHTzsUi8BBAsq63IM.crl (hash: 1ZJtWxI4vzCGLK3Q4s5MLAFL2Rccso/JSKb6F3HPZs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/f58cf3-6909-458a-a51a-5914f9d3378b/1/UTIqxJAgylfHTzsUi8BBAsq63IM.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/f58cf3-6909-458a-a51a-5914f9d3378b/1/UTIqxJAgylfHTzsUi8BBAsq63IM.mft
rsync://rpki.ripe.net/repository/DEFAULT/UTIqxJAgylfHTzsUi8BBAsq63IM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1f:34:fe:d8:7d:bd:d0:00:68:17:b8:00:d9:aa:81:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51322ac49020ca57c74f3b148bc04102cabadc83
Validity
Not Before: Jun 16 04:01:25 2024 GMT
Not After : Jun 17 04:01:25 2024 GMT
Subject: CN=706ba08957e55dad2fbc18fc3ae631a7b9dd67fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:99:61:0d:aa:00:82:22:32:a2:72:37:4f:7e:
64:9a:02:3c:47:8d:ba:97:f1:fd:a0:54:c6:e0:5d:
09:6c:11:95:ae:81:5d:ff:be:15:73:e8:60:a7:5e:
26:4e:86:f6:fc:87:34:06:f0:7f:5d:62:5b:1e:5a:
09:71:70:d5:cd:95:d1:33:a7:cd:a7:78:1b:fb:30:
6f:f3:df:d6:21:76:7b:1e:26:11:7d:a4:59:d7:a1:
3e:f6:ee:2e:59:65:c5:e1:e2:75:09:d7:c1:b5:14:
5c:ec:93:8e:7f:fd:a3:a2:32:1d:49:57:d3:86:0b:
a3:76:bb:e2:52:8c:39:07:69:65:fd:ba:fb:a6:9e:
32:8a:99:a8:72:56:39:39:37:15:78:53:14:c3:19:
c1:39:1b:00:e9:0a:94:c1:c4:e4:6b:01:8f:32:77:
4a:fb:21:ec:0e:ab:1a:34:b9:a3:61:60:a6:2e:12:
07:2e:31:3a:b5:be:2f:3a:56:ec:18:a3:55:5c:15:
55:71:66:d5:3b:14:7b:01:fb:c5:37:39:b7:eb:bb:
96:16:a0:5e:d9:d6:74:af:e7:93:03:90:01:aa:a0:
a8:60:45:30:d0:a7:a5:11:5e:28:77:45:d2:1c:92:
f7:7a:ef:90:25:d0:23:4a:5b:b8:0a:7e:ed:4d:69:
2c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:6B:A0:89:57:E5:5D:AD:2F:BC:18:FC:3A:E6:31:A7:B9:DD:67:FD
X509v3 Authority Key Identifier:
keyid:51:32:2A:C4:90:20:CA:57:C7:4F:3B:14:8B:C0:41:02:CA:BA:DC:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UTIqxJAgylfHTzsUi8BBAsq63IM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f58cf3-6909-458a-a51a-5914f9d3378b/1/UTIqxJAgylfHTzsUi8BBAsq63IM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f58cf3-6909-458a-a51a-5914f9d3378b/1/UTIqxJAgylfHTzsUi8BBAsq63IM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:8b:fb:3a:81:3b:7b:06:2f:57:83:d5:18:b0:58:63:8a:f8:
c4:9d:d2:47:64:3b:8d:5c:44:c3:ac:45:5c:46:89:75:d6:66:
d0:31:bc:2a:86:a6:d4:ce:a3:3e:87:0c:fa:8c:c1:7a:75:cd:
86:b3:f3:ad:a6:0d:89:34:62:03:9e:19:a4:f0:b7:ac:fd:84:
f9:7d:72:d6:42:51:1c:56:89:32:08:52:bc:9b:9a:ef:7e:e2:
d9:d0:49:e1:ba:0d:85:d9:b8:83:9a:8a:4b:5b:5c:b2:83:6b:
f6:33:94:53:1b:45:c6:54:09:16:8e:9b:86:37:ae:ed:2b:22:
3c:80:14:5a:38:71:74:8d:62:1b:64:3f:76:e8:5e:18:aa:5d:
d3:b8:81:77:f4:fa:79:b2:bd:b9:9f:13:ab:a1:f0:6f:95:9f:
8f:6e:d2:d0:20:c4:70:7e:9c:41:68:53:65:58:2a:51:62:c1:
cc:34:d9:56:e9:1b:3d:89:5f:4f:b4:e3:6b:ce:67:12:21:72:
ca:a7:ee:87:76:93:a6:85:fb:77:85:72:51:72:1a:92:72:1c:
33:ba:b5:bc:41:ef:44:cf:c9:4f:2b:d0:9b:43:ed:d3:01:83:
b5:ee:51:4e:b3:e0:27:15:ad:ed:c3:dd:3c:dd:37:a2:86:66:
d1:cf:30:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 06:32:40 2024 by rpki-client on console-ams.rpki-client.org