![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/8f063c-119a-47a0-8b0d-6d2b2ba2a88a/1/r_8Tpn8iXDwqYGZYwjlluBkdQAg.mft
File: r_8Tpn8iXDwqYGZYwjlluBkdQAg.mft (raw, json)
Hash identifier: 3fCrG1VFv5GAz42yJKiOcP0P5dlCeor5G+FanUQeHlE=
Subject key identifier: 8B:92:6E:AA:D1:3F:E5:4F:A6:8F:84:2F:05:30:FB:AC:74:B6:04:A5
Authority key identifier: AF:FF:13:A6:7F:22:5C:3C:2A:60:66:58:C2:39:65:B8:19:1D:40:08
Certificate issuer: /CN=afff13a67f225c3c2a606658c23965b8191d4008
Certificate serial: 01901DEBD4069ECAE85D1235FD6056F53791
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_8Tpn8iXDwqYGZYwjlluBkdQAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/8f063c-119a-47a0-8b0d-6d2b2ba2a88a/1/r_8Tpn8iXDwqYGZYwjlluBkdQAg.mft
Manifest number: 07EB
Signing time: Sat 15 Jun 2024 22:01:52 +0000
Manifest this update: Sat 15 Jun 2024 22:01:52 +0000
Manifest next update: Sun 16 Jun 2024 22:01:52 +0000
Files and hashes: 1: r_8Tpn8iXDwqYGZYwjlluBkdQAg.crl (hash: ExjaY6YL/pkbJKzZ3qm4zD9xRS2l8X+CsRR6y+heEp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/8f063c-119a-47a0-8b0d-6d2b2ba2a88a/1/r_8Tpn8iXDwqYGZYwjlluBkdQAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/8f063c-119a-47a0-8b0d-6d2b2ba2a88a/1/r_8Tpn8iXDwqYGZYwjlluBkdQAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_8Tpn8iXDwqYGZYwjlluBkdQAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 22:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:eb:d4:06:9e:ca:e8:5d:12:35:fd:60:56:f5:37:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afff13a67f225c3c2a606658c23965b8191d4008
Validity
Not Before: Jun 15 22:01:52 2024 GMT
Not After : Jun 16 22:01:52 2024 GMT
Subject: CN=8b926eaad13fe54fa68f842f0530fbac74b604a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a0:3c:6d:07:96:1f:13:ea:51:a2:dc:c1:99:
47:2e:57:e8:cd:f0:31:0b:d3:1f:d0:c0:ef:ed:c9:
81:3a:c0:70:c9:95:ee:90:0f:8b:50:2f:a5:2b:06:
9d:3f:ad:39:59:c9:83:5e:b4:2a:27:40:2d:0a:88:
28:af:e3:5a:f1:1a:0b:f2:4c:25:b9:8e:7d:79:5a:
b1:bf:e2:41:94:34:8d:e3:96:58:5a:3d:7d:3b:4c:
1b:14:2f:4e:02:76:f4:0c:fd:a8:56:49:00:08:50:
ee:5a:6d:6b:d7:6d:59:10:94:a9:1d:a8:72:c1:af:
16:c6:d1:89:0c:2a:d1:66:ee:10:56:44:90:a8:4b:
20:f4:ce:f8:54:81:70:7e:d6:17:f8:1a:56:73:d7:
5e:e1:26:f4:0b:94:ae:44:ff:5d:5a:35:f6:3f:6e:
d7:9c:98:c0:d5:09:67:0f:83:47:5c:55:c1:88:97:
dc:2f:f9:83:5a:87:07:8b:43:2a:99:ef:30:3e:96:
82:00:2e:35:fb:2b:c9:67:ca:c9:cd:08:3e:5e:1a:
37:4d:c8:14:9d:80:a1:34:be:46:17:fd:47:a4:67:
14:c3:87:4e:b4:97:45:07:4d:ac:89:c9:79:d5:15:
fd:56:22:2c:cf:3f:6c:88:17:0a:90:8a:8f:d8:32:
40:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:92:6E:AA:D1:3F:E5:4F:A6:8F:84:2F:05:30:FB:AC:74:B6:04:A5
X509v3 Authority Key Identifier:
keyid:AF:FF:13:A6:7F:22:5C:3C:2A:60:66:58:C2:39:65:B8:19:1D:40:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_8Tpn8iXDwqYGZYwjlluBkdQAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8f063c-119a-47a0-8b0d-6d2b2ba2a88a/1/r_8Tpn8iXDwqYGZYwjlluBkdQAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8f063c-119a-47a0-8b0d-6d2b2ba2a88a/1/r_8Tpn8iXDwqYGZYwjlluBkdQAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:ac:a9:9e:93:31:71:b1:eb:31:14:ed:e1:0b:70:d5:19:e0:
42:85:82:41:39:8a:ec:68:f1:c3:3d:38:f6:25:9d:a5:3a:29:
d3:09:46:7f:c3:1b:23:3d:b9:b8:0a:73:84:68:51:ea:8a:37:
43:a6:b6:11:d7:3b:78:19:5b:aa:46:8a:4b:33:51:06:bd:03:
e3:b1:4a:70:0e:45:b3:c2:fb:80:ab:4a:82:bb:81:02:da:b6:
df:15:1d:00:9a:b8:8c:dc:c5:9b:0f:b7:20:ce:17:b1:68:01:
44:b1:3a:16:ed:0a:9a:3c:32:ea:24:0f:e5:c8:d7:65:12:d7:
6a:76:76:b4:6b:b6:bd:12:84:16:cf:1c:81:16:f6:ca:cb:35:
57:ed:ab:ed:9e:7d:1a:6b:65:0e:77:6d:80:a5:43:3d:65:e8:
e3:ab:73:2f:9a:87:1a:b0:98:d5:36:65:7f:02:27:41:fb:c2:
ab:79:84:d4:85:02:de:51:3d:29:e6:6b:46:f0:11:3b:af:43:
72:8a:ce:76:22:37:58:3e:a3:3f:aa:d0:45:9a:d7:cd:da:3d:
de:b8:db:4e:ba:59:76:dc:88:1e:3e:c7:34:db:09:b7:8e:95:
a0:88:f5:ef:08:e0:74:cf:e6:54:fb:67:5d:40:d9:ac:ef:e7:
ef:b5:c7:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:56:25 2024 by rpki-client on console-ams.rpki-client.org