![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/8f96d1-9278-4b63-8288-f77c32ff19f7/1/UFAmkoRndw0cL6fOupihjDjWVW0.mft
File: UFAmkoRndw0cL6fOupihjDjWVW0.mft (raw, json)
Hash identifier: S+Lo+4f7dZYQVHPhu+bkLvFjqksIW1q1t7iFrr2EJdc=
Subject key identifier: EA:DC:41:D6:45:34:7F:C5:E4:00:E8:69:1F:7A:F9:D3:8D:C9:A7:76
Authority key identifier: 50:50:26:92:84:67:77:0D:1C:2F:A7:CE:BA:98:A1:8C:38:D6:55:6D
Certificate issuer: /CN=505026928467770d1c2fa7ceba98a18c38d6556d
Certificate serial: 0190497A1A2C9B8BB35195B986FFAD0B14A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFAmkoRndw0cL6fOupihjDjWVW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/8f96d1-9278-4b63-8288-f77c32ff19f7/1/UFAmkoRndw0cL6fOupihjDjWVW0.mft
Manifest number: 0690
Signing time: Mon 24 Jun 2024 09:00:57 +0000
Manifest this update: Mon 24 Jun 2024 09:00:57 +0000
Manifest next update: Tue 25 Jun 2024 09:00:57 +0000
Files and hashes: 1: UFAmkoRndw0cL6fOupihjDjWVW0.crl (hash: eXkWZetO+YH6WTK2rbZtTJIhGxt6+WIPBqQtusAS9BA=)
2: yw2JkSPKCSYd3eCiKgknHiJdpBY.roa (hash: scIWHoPB9Ul3jAAphjEomk0+6hn0k7M1Z++42d+t8DU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/8f96d1-9278-4b63-8288-f77c32ff19f7/1/UFAmkoRndw0cL6fOupihjDjWVW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/8f96d1-9278-4b63-8288-f77c32ff19f7/1/UFAmkoRndw0cL6fOupihjDjWVW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFAmkoRndw0cL6fOupihjDjWVW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 09:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:49:7a:1a:2c:9b:8b:b3:51:95:b9:86:ff:ad:0b:14:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505026928467770d1c2fa7ceba98a18c38d6556d
Validity
Not Before: Jun 24 09:00:57 2024 GMT
Not After : Jun 25 09:00:57 2024 GMT
Subject: CN=eadc41d645347fc5e400e8691f7af9d38dc9a776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:67:e9:4b:a1:3f:37:5b:75:1e:de:f5:82:ab:
f3:fd:a5:d0:9d:42:71:ff:5e:19:8a:93:60:fd:10:
bb:e9:24:ff:56:1a:a8:36:3a:31:a4:0a:67:82:57:
c4:fc:fc:92:a6:06:75:f1:74:3d:05:b0:4b:16:a3:
17:8c:e2:f5:0f:63:96:5c:1d:83:9f:da:4c:14:68:
c2:5f:da:87:5d:1a:27:62:0a:1d:15:76:93:1c:48:
2f:ce:03:c7:3d:f1:79:b2:6c:96:65:b9:43:96:6b:
6f:cb:f2:48:80:14:c7:7a:de:7c:68:c6:9b:ff:49:
26:2c:60:f3:95:17:75:43:e8:8c:c1:4a:6c:8e:b4:
d6:3f:13:fb:de:e7:4d:04:9d:80:80:3f:8a:ce:f7:
bc:7e:2c:0d:16:f4:4f:a5:80:eb:ec:33:86:1c:2c:
d9:66:41:ed:d8:b6:24:1c:45:92:b2:d4:58:f2:1c:
cf:09:cf:5e:65:43:ef:1b:a0:ad:52:81:fe:2e:3c:
03:1e:95:5a:df:3f:11:cb:d6:c4:da:49:4c:8e:00:
f2:9d:3d:44:f2:da:ca:03:d6:d2:87:84:d7:7d:aa:
23:f8:6d:90:49:37:88:14:d0:58:72:e0:ac:ed:72:
19:e4:5b:55:11:60:6e:81:d4:6b:ed:c8:f2:13:61:
62:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:DC:41:D6:45:34:7F:C5:E4:00:E8:69:1F:7A:F9:D3:8D:C9:A7:76
X509v3 Authority Key Identifier:
keyid:50:50:26:92:84:67:77:0D:1C:2F:A7:CE:BA:98:A1:8C:38:D6:55:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFAmkoRndw0cL6fOupihjDjWVW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8f96d1-9278-4b63-8288-f77c32ff19f7/1/UFAmkoRndw0cL6fOupihjDjWVW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8f96d1-9278-4b63-8288-f77c32ff19f7/1/UFAmkoRndw0cL6fOupihjDjWVW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:3a:8a:9b:6c:49:85:f6:b0:86:5e:51:5c:f5:dc:a2:d3:12:
3d:8e:d9:9b:a3:03:74:77:f5:25:40:01:6c:85:c5:86:9a:70:
73:f5:19:5e:9a:a8:6e:4f:cb:67:8b:b7:a5:a6:6e:69:74:6a:
b2:87:f4:6d:0c:a7:d9:73:47:9a:81:7b:02:c7:90:f3:6b:f7:
96:34:bd:e6:c7:33:f9:97:0c:2b:9b:c9:75:1b:15:68:30:2a:
a9:b2:90:9e:f8:11:31:b0:81:e0:61:42:4b:37:b9:84:da:59:
0a:21:6a:c9:a5:e0:f5:1d:73:33:78:d5:f1:95:80:d2:4b:cb:
28:b1:4e:1c:e5:3a:1b:0e:f5:27:74:e1:47:03:52:37:a6:2e:
92:c6:3a:22:8f:93:d2:d1:a0:9d:96:d2:1b:53:df:bd:3d:ae:
72:18:06:e6:29:8c:26:0e:f8:a0:56:b7:f9:22:74:87:2b:f7:
81:e0:c9:f0:5f:51:19:a9:6e:9f:49:3f:33:3b:1f:f4:d9:0a:
65:80:5f:8f:79:20:73:b3:1d:6e:aa:76:fd:c7:50:57:79:81:
0a:d2:3d:f5:9b:5b:58:e3:05:a8:56:42:e2:bf:5a:c1:fd:cb:
6c:1e:aa:40:26:27:51:14:67:a1:e2:c1:cb:14:04:90:f5:b9:
fe:9d:76:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 11:54:35 2024 by rpki-client on console-fra.rpki-client.org