![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft
File: tOiC9xca9tzczJzXn5jexnV_4Yk.mft (raw, json)
Hash identifier: Al2NrXRTdBWLUPhJT6R61MDKw0DJlljQ485GAyb5yW0=
Subject key identifier: 4A:23:0B:8D:00:69:6B:F4:7D:83:94:84:2A:30:ED:DB:90:CB:5D:BF
Authority key identifier: B4:E8:82:F7:17:1A:F6:DC:DC:CC:9C:D7:9F:98:DE:C6:75:7F:E1:89
Certificate issuer: /CN=b4e882f7171af6dcdccc9cd79f98dec6757fe189
Certificate serial: 01904566220F485EE8C68F0D4B35CF69DF12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOiC9xca9tzczJzXn5jexnV_4Yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft
Manifest number: 11D8
Signing time: Sun 23 Jun 2024 14:00:39 +0000
Manifest this update: Sun 23 Jun 2024 14:00:39 +0000
Manifest next update: Mon 24 Jun 2024 14:00:39 +0000
Files and hashes: 1: X-yUds0raYvMDiXf2mdMuIqhC-k.roa (hash: vZWbCCGOlPwp0UrD6VjjJ1rsH2e2JDL2ni+7691v3B4=)
2: tOiC9xca9tzczJzXn5jexnV_4Yk.crl (hash: uC1kYnMtFqn5t4usetBWw2738ifzUUZBJKJMzA0Ca+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tOiC9xca9tzczJzXn5jexnV_4Yk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 14:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:45:66:22:0f:48:5e:e8:c6:8f:0d:4b:35:cf:69:df:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4e882f7171af6dcdccc9cd79f98dec6757fe189
Validity
Not Before: Jun 23 14:00:39 2024 GMT
Not After : Jun 24 14:00:39 2024 GMT
Subject: CN=4a230b8d00696bf47d8394842a30eddb90cb5dbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:04:b9:92:57:11:ca:d0:2f:8a:8b:9f:dd:75:
44:f6:f0:0a:a1:34:fd:e8:7a:79:0a:24:4e:f7:5a:
21:40:b9:cd:f4:c9:9e:8a:13:a6:17:ce:f1:2c:85:
1d:1d:0d:7b:d9:05:fc:2a:fe:71:65:f7:ef:2c:6b:
7c:59:85:1f:3c:d9:b5:db:4e:58:d5:e2:3a:89:63:
e4:bc:c4:c3:93:27:b4:84:79:34:0d:99:66:e0:70:
4c:a4:c2:1a:5b:57:af:e8:c8:46:0a:a0:54:c4:a2:
e5:46:80:c3:d2:ec:e6:68:1c:ed:1a:02:6a:80:9d:
bb:8b:3f:e4:8e:96:f6:82:99:93:59:35:6d:6d:8b:
b0:85:16:5a:13:4b:5a:5d:ae:5a:7c:64:3b:1e:ad:
3c:f4:5a:8b:87:83:93:ad:a8:1d:70:68:f2:35:ef:
62:5c:a2:66:6a:ac:d4:27:87:3c:71:c0:08:b2:04:
30:f7:7c:51:c0:3e:a3:56:03:75:af:5f:ea:78:e6:
6e:0c:6a:8e:67:85:b9:dd:3c:1f:bd:95:d5:d5:2e:
2d:46:5d:13:e4:37:ff:e5:25:71:25:58:18:25:fc:
fc:e5:1d:d4:c8:d5:a2:2f:ad:47:d1:59:59:13:b0:
b5:db:1c:f7:bb:14:a7:8e:ae:42:35:90:73:89:a2:
25:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:23:0B:8D:00:69:6B:F4:7D:83:94:84:2A:30:ED:DB:90:CB:5D:BF
X509v3 Authority Key Identifier:
keyid:B4:E8:82:F7:17:1A:F6:DC:DC:CC:9C:D7:9F:98:DE:C6:75:7F:E1:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOiC9xca9tzczJzXn5jexnV_4Yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:80:44:bf:d2:0c:db:0c:d3:be:d4:04:18:63:52:24:00:b5:
3a:5b:30:38:95:3d:d7:12:9e:7b:cc:1d:c5:d9:35:69:a7:c1:
de:ca:c4:c2:b2:fe:30:9c:a2:a3:bc:72:42:c4:47:56:fa:c8:
b1:a8:be:a5:0c:97:88:29:3c:3e:7e:40:a3:0a:5e:62:d3:c1:
2e:e4:60:b2:19:df:ab:19:61:ba:b3:ea:99:17:b9:a4:fc:8c:
ee:f7:76:10:73:a2:59:8e:a1:16:21:61:ba:8c:ad:32:58:fe:
f7:b5:dc:7d:d7:34:b9:aa:cb:50:70:fe:41:8c:e5:66:92:6d:
53:70:ec:d2:a5:88:c9:33:15:c3:d3:25:51:67:0e:5c:0c:dc:
58:0e:1e:76:bc:25:54:a3:7a:1c:c8:59:c5:c6:68:e1:87:60:
3c:7a:72:c0:32:67:6f:bb:4d:7d:4f:d2:c3:6a:9b:cc:fe:cb:
12:f9:d3:91:99:77:0c:e4:70:be:53:fe:fb:20:31:34:5d:4f:
02:fe:08:32:10:6b:5f:90:48:dc:28:73:0e:03:07:29:aa:9f:
2a:65:4a:5b:d3:27:98:89:01:c7:ac:7b:2b:42:80:2d:a1:75:
0a:92:16:c1:7b:2b:51:78:ac:6d:95:d0:97:e0:00:db:67:92:
f2:58:89:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 17:47:52 2024 by rpki-client on console-ams.rpki-client.org