![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.mft
File: 1-U8vLiG8mNDGGywUwO4BnTMerlg.mft (raw, json)
Hash identifier: gLU9ZsS/3D0s1WGHft89SYfbYjd04bIBunGeQ9VqaA0=
Subject key identifier: C0:BA:4C:B5:6D:33:3E:48:33:5E:BC:46:D9:C4:0B:8F:9F:69:D0:98
Authority key identifier: F9:4F:2F:2E:21:BC:98:D0:C6:1B:2C:14:C0:EE:01:9D:33:1E:AE:58
Certificate issuer: /CN=f94f2f2e21bc98d0c61b2c14c0ee019d331eae58
Certificate serial: 01901DEC8B246F703669C8B7AAACB11CD994
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-U8vLiG8mNDGGywUwO4BnTMerlg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.mft
Manifest number: 11C7
Signing time: Sat 15 Jun 2024 22:02:39 +0000
Manifest this update: Sat 15 Jun 2024 22:02:39 +0000
Manifest next update: Sun 16 Jun 2024 22:02:39 +0000
Files and hashes: 1: 1-U8vLiG8mNDGGywUwO4BnTMerlg.crl (hash: kwhZW9/l0Uwqi7wRxs4mOEWoTUocoAj54RARNXNQz0E=)
2: g-Hf0dYSPXRhEg3IlBB6c4bDNzM.roa (hash: 6n1LnisbFYxB1TAjgxigzaB0pUB4Gvh3wYbPsApesGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-U8vLiG8mNDGGywUwO4BnTMerlg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 22:02:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:ec:8b:24:6f:70:36:69:c8:b7:aa:ac:b1:1c:d9:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f94f2f2e21bc98d0c61b2c14c0ee019d331eae58
Validity
Not Before: Jun 15 22:02:39 2024 GMT
Not After : Jun 16 22:02:39 2024 GMT
Subject: CN=c0ba4cb56d333e48335ebc46d9c40b8f9f69d098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:55:6a:a9:a8:76:2c:84:96:f6:73:0b:68:95:
bb:c8:27:f6:1b:26:ec:f3:06:97:d7:47:de:4c:d4:
d9:73:e1:b6:03:39:bc:73:30:51:cb:47:c7:e5:31:
58:dd:35:ae:21:2d:9d:05:ca:f8:22:7e:bd:06:85:
56:00:ea:88:46:73:15:d7:11:9b:2b:85:15:b4:f9:
f1:01:2b:97:68:c1:eb:98:91:09:27:07:63:61:29:
df:50:2a:30:5c:54:9a:7c:b8:cd:91:c4:a6:0c:42:
f8:7d:bb:df:ec:48:e8:84:67:ef:f5:b0:85:38:2e:
7e:7b:59:57:5a:ad:09:a0:6c:c7:a1:c5:8b:fe:93:
f2:ba:6e:e0:b6:c3:66:f7:a6:2d:8f:50:7c:d7:06:
14:1b:60:eb:47:8b:3c:55:a1:6c:f8:c4:09:29:c4:
d6:f2:8e:2d:42:2a:fc:2d:8f:05:f4:20:44:a4:9e:
cb:f0:11:3a:5e:54:9d:f4:e4:d9:9a:0b:a2:29:ee:
be:fc:da:c1:04:33:c3:3c:ce:63:d7:cb:f7:bd:63:
16:30:70:f2:66:7e:d0:39:04:a3:a3:d8:63:15:21:
36:39:b6:98:37:2a:82:39:a5:ac:94:32:c8:2e:9c:
73:73:60:1d:81:05:71:37:60:21:ea:43:4c:40:2f:
db:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:BA:4C:B5:6D:33:3E:48:33:5E:BC:46:D9:C4:0B:8F:9F:69:D0:98
X509v3 Authority Key Identifier:
keyid:F9:4F:2F:2E:21:BC:98:D0:C6:1B:2C:14:C0:EE:01:9D:33:1E:AE:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-U8vLiG8mNDGGywUwO4BnTMerlg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:1e:20:56:68:3c:a5:17:75:7b:71:98:3e:50:d4:b6:1f:6d:
a3:84:8f:d4:0e:e0:22:dc:12:6c:31:d7:ee:f9:47:42:f9:51:
5d:80:a8:f0:4c:81:c6:03:da:ea:7f:22:c6:a8:e1:2e:11:76:
f6:67:61:19:c9:dc:95:c3:45:a2:85:d2:a0:28:f1:8f:70:e8:
c6:b2:36:75:de:74:2e:23:e4:5f:24:1d:60:01:8d:1c:72:f9:
f5:4a:51:d9:5d:c3:4f:d5:37:6c:d9:f7:92:0a:82:87:63:80:
56:30:2b:f3:e1:c3:4f:9a:a7:cc:20:b2:a7:88:c3:96:79:76:
2c:b2:5f:cd:8e:70:2f:0a:95:dd:e1:d3:39:7b:24:20:8b:2c:
3a:5f:d9:58:14:ea:68:16:a7:3e:9e:24:80:1f:0e:fd:91:0b:
68:44:16:e7:10:87:73:7e:e4:b0:d3:49:18:f2:3f:ac:41:af:
15:b9:06:54:39:ec:df:04:dc:63:99:7f:6c:6f:37:ac:1a:28:
c8:a0:63:64:f4:4c:e3:5d:1a:c3:f8:6b:9e:d3:54:3e:ef:5a:
b0:60:2d:35:e2:06:0e:b9:53:99:1b:97:d9:0e:26:1f:6f:8d:
f8:fc:d4:af:4b:d3:67:0d:3b:21:ff:56:b1:fd:97:99:47:d3:
d9:90:8a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:02:50 2024 by rpki-client on console-fra.rpki-client.org