![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/b68f6f-960d-4e33-873f-7367c0f20bc9/1/KQgdaL3eqL6_JuYYIZeFlPIjvL4.mft
File: KQgdaL3eqL6_JuYYIZeFlPIjvL4.mft (raw, json)
Hash identifier: ZJmYh8cRFwUWgFeWBQLBvWcBssESxkMCZrSYZvjWZp8=
Subject key identifier: A8:60:8B:2B:AA:1B:69:E9:96:31:2E:61:8B:5C:D5:60:2D:08:34:7D
Authority key identifier: 29:08:1D:68:BD:DE:A8:BE:BF:26:E6:18:21:97:85:94:F2:23:BC:BE
Certificate issuer: /CN=29081d68bddea8bebf26e61821978594f223bcbe
Certificate serial: 019044F846895F4D6884BC99B971EF28A7D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQgdaL3eqL6_JuYYIZeFlPIjvL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/b68f6f-960d-4e33-873f-7367c0f20bc9/1/KQgdaL3eqL6_JuYYIZeFlPIjvL4.mft
Manifest number: 03DA
Signing time: Sun 23 Jun 2024 12:00:39 +0000
Manifest this update: Sun 23 Jun 2024 12:00:39 +0000
Manifest next update: Mon 24 Jun 2024 12:00:39 +0000
Files and hashes: 1: KQgdaL3eqL6_JuYYIZeFlPIjvL4.crl (hash: aCyW+BUlgvFT8s4n0GzaYfEZBU3Dxlxe59vpMZT9ZqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/b68f6f-960d-4e33-873f-7367c0f20bc9/1/KQgdaL3eqL6_JuYYIZeFlPIjvL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/b68f6f-960d-4e33-873f-7367c0f20bc9/1/KQgdaL3eqL6_JuYYIZeFlPIjvL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQgdaL3eqL6_JuYYIZeFlPIjvL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 12:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:44:f8:46:89:5f:4d:68:84:bc:99:b9:71:ef:28:a7:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29081d68bddea8bebf26e61821978594f223bcbe
Validity
Not Before: Jun 23 12:00:39 2024 GMT
Not After : Jun 24 12:00:39 2024 GMT
Subject: CN=a8608b2baa1b69e996312e618b5cd5602d08347d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6a:90:db:66:d0:ad:95:e6:41:3a:98:04:b6:
66:f0:86:b9:4b:cc:99:01:8c:b0:60:5e:12:dd:72:
d6:98:f0:e4:68:4c:53:99:3a:f3:08:6b:8f:d1:a8:
9b:cb:51:9e:eb:4e:76:2e:4e:16:86:9e:95:02:48:
16:93:58:a1:92:3f:fe:80:27:3b:0f:78:aa:4c:6d:
da:65:02:80:76:5c:8b:00:90:29:a4:3c:42:23:a4:
89:b5:cf:9f:6c:d0:87:d5:e9:48:8e:6d:a6:52:89:
9c:20:e6:13:cd:54:3f:42:4e:a5:59:28:5d:94:8b:
d4:b9:bd:9a:cc:b0:30:6f:f6:5b:fb:a6:df:a8:62:
ab:73:e6:f3:8a:23:e9:c0:c4:28:1f:97:8f:f1:62:
2e:78:94:51:0a:0c:27:db:0a:f8:d4:87:b4:09:44:
88:58:67:63:02:69:d6:9e:10:a4:f7:1d:3f:25:e4:
c9:53:10:31:a5:01:8f:83:6a:d9:7f:38:b2:bc:ca:
4d:87:51:3a:92:48:f6:1a:0c:d0:cb:a3:fe:e1:ea:
e2:d9:85:0e:a1:51:a2:89:cc:32:95:41:72:d9:87:
81:5e:72:30:d4:6d:c0:64:c6:a7:d4:f2:a6:d8:70:
a9:80:dd:a5:64:b2:31:76:96:f8:5e:24:f5:97:d6:
f2:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:60:8B:2B:AA:1B:69:E9:96:31:2E:61:8B:5C:D5:60:2D:08:34:7D
X509v3 Authority Key Identifier:
keyid:29:08:1D:68:BD:DE:A8:BE:BF:26:E6:18:21:97:85:94:F2:23:BC:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQgdaL3eqL6_JuYYIZeFlPIjvL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/b68f6f-960d-4e33-873f-7367c0f20bc9/1/KQgdaL3eqL6_JuYYIZeFlPIjvL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/b68f6f-960d-4e33-873f-7367c0f20bc9/1/KQgdaL3eqL6_JuYYIZeFlPIjvL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:55:25:96:02:39:ad:f4:31:07:8e:4a:bd:b3:8d:5d:82:83:
01:97:dd:8c:c0:a1:4e:25:dd:79:83:29:7e:53:e4:f8:69:fd:
13:a5:c3:a4:1f:ad:d4:87:a7:42:38:7e:5b:2f:b1:3b:a6:1e:
78:27:1f:07:30:1e:7a:7b:f1:4b:7a:29:44:43:e3:0c:e4:1f:
8f:b8:7e:04:8f:8c:06:b4:03:18:59:c8:96:08:f7:28:7a:30:
dd:3c:9e:25:16:1c:45:7c:83:46:18:14:69:22:df:b1:4e:0c:
a1:06:0a:bd:39:8d:c0:f9:66:e0:f9:ea:23:97:a5:e4:ea:f6:
b7:41:d6:a3:27:bb:fb:ba:0a:b4:b9:b1:b0:a6:91:e7:b2:67:
52:b8:9c:67:27:da:ee:3c:69:27:82:1c:66:06:0d:e2:86:3b:
56:21:6a:3a:f7:67:b2:00:d9:31:e6:b8:59:71:36:00:4d:45:
e5:92:e6:5f:2a:ba:bc:9a:05:99:42:d1:ea:d7:3a:05:7a:42:
ef:0b:f7:52:c2:8b:27:fe:28:47:1f:80:30:56:cc:86:1e:c3:
f8:6f:96:2e:7b:40:0f:6a:5a:4d:da:58:49:02:76:05:7f:9e:
eb:bd:82:5c:64:29:b5:43:ba:fe:eb:3e:7b:15:17:17:ce:c7:
0e:36:a5:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:18:54 2024 by rpki-client on console-fra.rpki-client.org