![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/74d5f6-e641-4408-a76e-53889bdc84f5/1/t6K9aUc7So6Fp2r72OW77ptLs0s.mft
File: t6K9aUc7So6Fp2r72OW77ptLs0s.mft (raw, json)
Hash identifier: f0kGabZSEKF7r8UMI+1BbtIJV89+HYHX400UGE/Cg2w=
Subject key identifier: 7D:5A:0B:D5:01:44:E5:25:89:5C:8F:AC:ED:3B:AD:D0:DB:B2:48:0E
Authority key identifier: B7:A2:BD:69:47:3B:4A:8E:85:A7:6A:FB:D8:E5:BB:EE:9B:4B:B3:4B
Certificate issuer: /CN=b7a2bd69473b4a8e85a76afbd8e5bbee9b4bb34b
Certificate serial: 01901DEBBD04E6965602B607EDB94B3608BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6K9aUc7So6Fp2r72OW77ptLs0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/74d5f6-e641-4408-a76e-53889bdc84f5/1/t6K9aUc7So6Fp2r72OW77ptLs0s.mft
Manifest number: 0B2A
Signing time: Sat 15 Jun 2024 22:01:46 +0000
Manifest this update: Sat 15 Jun 2024 22:01:46 +0000
Manifest next update: Sun 16 Jun 2024 22:01:46 +0000
Files and hashes: 1: t6K9aUc7So6Fp2r72OW77ptLs0s.crl (hash: HyxeZNQ9yR6GfmzPTcMPZOSsVFHhGMhD+vmepL0VlD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/74d5f6-e641-4408-a76e-53889bdc84f5/1/t6K9aUc7So6Fp2r72OW77ptLs0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/74d5f6-e641-4408-a76e-53889bdc84f5/1/t6K9aUc7So6Fp2r72OW77ptLs0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/t6K9aUc7So6Fp2r72OW77ptLs0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 22:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:eb:bd:04:e6:96:56:02:b6:07:ed:b9:4b:36:08:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7a2bd69473b4a8e85a76afbd8e5bbee9b4bb34b
Validity
Not Before: Jun 15 22:01:46 2024 GMT
Not After : Jun 16 22:01:46 2024 GMT
Subject: CN=7d5a0bd50144e525895c8faced3badd0dbb2480e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:85:97:30:72:c4:61:c9:41:cc:b4:ac:f8:c3:
c8:29:5f:e6:18:da:5b:21:a3:89:76:81:ef:4a:a0:
50:66:1c:ba:5d:6a:f6:1c:34:da:80:c8:8e:92:0d:
c7:ef:cb:58:1e:85:ae:a4:83:41:4b:84:34:c9:8d:
c7:db:4f:4f:77:64:76:14:da:8a:4e:01:a0:e5:5f:
2e:6c:4d:fd:8f:11:ab:94:7e:f9:eb:43:11:ca:48:
bf:eb:fe:af:df:35:15:84:5f:14:b1:d8:4e:0b:06:
f8:9b:b5:43:7b:2d:27:e3:b3:6a:15:2f:77:fd:7c:
6a:c4:4c:4d:ed:24:98:85:19:c7:66:e1:8b:9d:1f:
9e:f6:70:a8:6d:b7:c3:50:7b:fa:56:d2:ef:0c:6d:
25:b8:53:b8:3d:21:19:22:b7:ed:54:a6:07:2c:8e:
51:17:6e:e4:78:ca:0c:f8:b0:9a:48:5b:ae:cd:97:
c6:dc:e0:c2:cd:a6:7c:36:86:a4:1d:10:4d:86:7d:
42:fa:88:2e:a9:a3:14:28:b9:d5:24:ff:72:c9:b7:
34:b4:ce:15:8d:75:45:e7:3e:56:d6:d3:51:7a:67:
ff:fd:1c:f4:f7:a9:db:ba:6d:38:cc:2a:10:56:14:
a3:e0:c9:df:d6:f5:72:e0:1d:67:ef:1d:1c:94:da:
96:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:5A:0B:D5:01:44:E5:25:89:5C:8F:AC:ED:3B:AD:D0:DB:B2:48:0E
X509v3 Authority Key Identifier:
keyid:B7:A2:BD:69:47:3B:4A:8E:85:A7:6A:FB:D8:E5:BB:EE:9B:4B:B3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6K9aUc7So6Fp2r72OW77ptLs0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/74d5f6-e641-4408-a76e-53889bdc84f5/1/t6K9aUc7So6Fp2r72OW77ptLs0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/74d5f6-e641-4408-a76e-53889bdc84f5/1/t6K9aUc7So6Fp2r72OW77ptLs0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:02:77:17:0d:55:08:b1:22:df:3b:24:72:32:c7:1e:48:82:
f1:bc:ab:0e:b0:af:29:ce:3d:ef:a7:11:4e:bf:90:a3:9b:d4:
29:22:ed:71:0a:53:ff:d9:62:66:a5:81:a0:d1:97:07:63:b7:
4a:41:c6:40:08:c8:c6:75:3b:8c:5e:77:66:2c:a9:50:48:44:
9f:fb:da:47:91:ba:cf:48:ec:7b:51:ae:60:f0:49:97:d2:c2:
19:cc:46:96:c0:e6:ab:25:88:be:60:64:53:ab:dc:59:77:88:
9d:34:16:c1:4d:6f:ef:4d:59:0d:42:09:49:3a:be:9a:37:92:
01:58:70:56:42:af:b7:39:77:0f:1b:48:62:a1:6d:29:b3:a3:
6f:37:8e:10:db:6f:11:76:de:9d:b9:e8:23:75:89:1f:8d:10:
46:92:f9:0b:3c:e7:15:32:f3:2e:d6:60:29:dd:59:33:f2:ab:
fe:7a:c4:08:fb:ce:81:f0:3a:8d:08:99:7f:0d:fb:f4:48:01:
92:20:49:f6:87:f4:b3:3b:bc:59:31:80:b7:6d:4a:1c:28:7d:
06:87:df:4d:f6:99:f7:85:e1:fc:6c:bd:8d:ac:09:52:c4:f6:
d2:71:73:ce:dd:57:90:3c:ea:53:64:9e:88:89:e2:74:5d:e8:
7c:15:84:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:01:18 2024 by rpki-client on console-fra.rpki-client.org