![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e764cb-463d-41ad-a7ec-f581f681a004/1/G1WOmRP2tWzD1WD5T_E38s1vSGI.mft
File: G1WOmRP2tWzD1WD5T_E38s1vSGI.mft (raw, json)
Hash identifier: QGaKEXYAvPJNonzkd672AL8wr4VL56IaNQqmOSztL/E=
Subject key identifier: 7C:70:A5:63:14:B0:1E:10:0B:74:94:9E:46:81:9D:C9:71:F4:20:0D
Authority key identifier: 1B:55:8E:99:13:F6:B5:6C:C3:D5:60:F9:4F:F1:37:F2:CD:6F:48:62
Certificate issuer: /CN=1b558e9913f6b56cc3d560f94ff137f2cd6f4862
Certificate serial: 01901D0F0D6B1DD25B32ABE8E52AE53BC38E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G1WOmRP2tWzD1WD5T_E38s1vSGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e764cb-463d-41ad-a7ec-f581f681a004/1/G1WOmRP2tWzD1WD5T_E38s1vSGI.mft
Manifest number: 01DD
Signing time: Sat 15 Jun 2024 18:00:44 +0000
Manifest this update: Sat 15 Jun 2024 18:00:44 +0000
Manifest next update: Sun 16 Jun 2024 18:00:44 +0000
Files and hashes: 1: G1WOmRP2tWzD1WD5T_E38s1vSGI.crl (hash: hRr/4WNIiqan9GY7QXsFhMdIQy7GKU3vn5sft98tDV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e764cb-463d-41ad-a7ec-f581f681a004/1/G1WOmRP2tWzD1WD5T_E38s1vSGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/e764cb-463d-41ad-a7ec-f581f681a004/1/G1WOmRP2tWzD1WD5T_E38s1vSGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/G1WOmRP2tWzD1WD5T_E38s1vSGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 18:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:0f:0d:6b:1d:d2:5b:32:ab:e8:e5:2a:e5:3b:c3:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b558e9913f6b56cc3d560f94ff137f2cd6f4862
Validity
Not Before: Jun 15 18:00:44 2024 GMT
Not After : Jun 16 18:00:44 2024 GMT
Subject: CN=7c70a56314b01e100b74949e46819dc971f4200d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ac:65:96:76:a2:78:b5:f3:39:f6:ed:65:91:
5f:e7:6a:ac:e8:1a:42:c0:10:22:7f:7b:d8:89:0d:
42:51:8e:41:fc:7d:15:a9:a6:b9:96:eb:a5:7a:eb:
37:f2:c6:82:07:57:26:6f:82:18:de:51:c7:fb:79:
a8:a2:78:09:44:e5:87:05:34:68:a9:48:1f:54:82:
09:4e:d8:a1:5c:65:66:55:9a:ed:82:70:d8:04:48:
a5:56:bf:8d:70:7c:7a:43:58:27:4a:dd:4b:54:5d:
70:03:f5:5a:73:61:35:e4:1c:15:39:6a:97:3d:bf:
03:a8:be:24:a9:5d:8e:cd:e1:54:51:9d:95:6d:90:
97:78:6e:95:25:1b:60:75:c4:98:93:d0:4f:61:bb:
ad:2a:74:3d:73:27:ec:a4:7f:e4:1e:db:9b:17:c9:
d0:fa:45:41:a8:2c:06:3f:0f:7d:b2:56:56:85:e2:
bf:05:aa:8d:27:d4:95:c4:8a:12:81:76:5f:e6:fd:
cc:9d:ef:79:23:23:83:22:f9:9e:b2:05:31:b7:7b:
46:6b:24:9c:1c:c9:93:2b:45:a9:46:95:99:2b:5c:
4a:61:a4:b8:7f:6e:f3:30:52:e1:f9:c1:83:d2:9e:
6c:8e:84:46:be:01:97:8a:7e:0e:aa:19:dd:22:84:
d5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:70:A5:63:14:B0:1E:10:0B:74:94:9E:46:81:9D:C9:71:F4:20:0D
X509v3 Authority Key Identifier:
keyid:1B:55:8E:99:13:F6:B5:6C:C3:D5:60:F9:4F:F1:37:F2:CD:6F:48:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G1WOmRP2tWzD1WD5T_E38s1vSGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e764cb-463d-41ad-a7ec-f581f681a004/1/G1WOmRP2tWzD1WD5T_E38s1vSGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e764cb-463d-41ad-a7ec-f581f681a004/1/G1WOmRP2tWzD1WD5T_E38s1vSGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:20:b2:8d:3a:29:1c:1b:e0:de:52:50:bf:f6:a3:46:fb:d4:
d9:33:c0:ba:0a:7a:a1:51:f9:31:07:6a:2f:6f:ea:ea:1a:ae:
25:2e:a2:c7:fd:c6:3b:1b:08:68:63:c8:48:7e:c9:77:3c:c3:
5d:cb:b0:bb:b5:1b:d3:4b:a1:e5:96:97:d1:25:5b:a9:bc:68:
ea:9a:83:4e:06:68:52:2b:15:a6:0f:98:6d:6a:e3:1e:3c:b5:
c4:a7:22:44:37:3b:98:e6:d3:0a:ba:fb:fe:cd:23:d7:45:78:
ff:71:3a:34:0e:dd:16:1a:db:71:42:37:30:13:e8:45:84:ff:
45:0c:3a:58:c8:11:da:00:c0:4e:7b:35:5d:64:90:4f:08:02:
86:09:d8:cd:bc:83:e0:36:86:80:31:4e:a5:b2:54:54:53:ed:
92:97:6b:b0:69:f0:91:8a:e6:bf:3b:00:5f:c7:d9:78:cb:33:
e5:60:34:0c:38:11:7e:a3:1a:75:13:6c:fc:d4:1a:8c:57:6d:
8a:dd:7b:d6:d8:49:24:dc:0a:45:a8:dd:81:23:f3:10:32:82:
64:bd:39:6c:52:99:b3:df:86:c7:d5:62:4c:0b:1f:33:44:d7:
c9:7d:61:73:38:9f:b1:41:c8:4c:de:2c:88:b9:3e:55:ea:8b:
be:be:9b:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:03:09 2024 by rpki-client on console-fra.rpki-client.org