![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.mft
File: CQ5ZKi4NQnoJqi3hubrwjM0U8KA.mft (raw, json)
Hash identifier: QR4MD5/SL+i+WK44CkEuHZ+d2Ve08wLLhar7Dv78tQQ=
Subject key identifier: 86:08:41:18:23:B5:E1:8F:53:0B:16:B0:83:A2:74:F3:22:9F:C8:DF
Authority key identifier: 09:0E:59:2A:2E:0D:42:7A:09:AA:2D:E1:B9:BA:F0:8C:CD:14:F0:A0
Certificate issuer: /CN=090e592a2e0d427a09aa2de1b9baf08ccd14f0a0
Certificate serial: 019040AE9C818D22043E379257E348D8E6D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.mft
Manifest number: 02C0
Signing time: Sat 22 Jun 2024 16:01:43 +0000
Manifest this update: Sat 22 Jun 2024 16:01:43 +0000
Manifest next update: Sun 23 Jun 2024 16:01:43 +0000
Files and hashes: 1: CQ5ZKi4NQnoJqi3hubrwjM0U8KA.crl (hash: MbbYnOTMbYCY7GWjHoGglk1M3048FPmZAnoscFP2/JQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 16:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:40:ae:9c:81:8d:22:04:3e:37:92:57:e3:48:d8:e6:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=090e592a2e0d427a09aa2de1b9baf08ccd14f0a0
Validity
Not Before: Jun 22 16:01:43 2024 GMT
Not After : Jun 23 16:01:43 2024 GMT
Subject: CN=8608411823b5e18f530b16b083a274f3229fc8df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:72:a9:89:81:03:25:67:fe:74:95:db:29:62:
6a:9a:0e:80:9d:a2:91:98:8c:03:8b:5f:f2:d6:fd:
12:fc:94:99:eb:32:17:b0:44:03:87:70:0b:6c:7e:
a5:e6:08:44:d6:54:13:5a:af:92:d0:bc:42:72:1e:
0c:da:72:f4:31:a5:39:83:c6:20:5e:61:da:eb:b7:
08:e8:90:f7:9e:d8:c1:7e:07:3a:96:6f:cb:eb:5e:
58:17:ea:67:ff:e6:e4:e4:88:78:ce:66:ec:67:f2:
78:b7:ba:96:41:67:e1:54:86:b4:2f:bb:39:fc:e2:
8f:2a:fc:db:c4:c4:da:47:27:dd:9e:10:e3:6f:14:
59:a2:0f:0e:70:09:1f:d6:43:44:48:2e:a9:10:1e:
67:6b:73:38:5a:45:df:49:eb:2f:ea:9d:4e:f0:2a:
0c:d4:39:bb:c0:56:e2:89:0f:f0:15:95:44:6e:5d:
78:00:45:ba:9f:67:54:8e:cb:90:97:b4:02:35:2f:
f0:5a:ae:47:19:02:a6:7b:62:52:cd:4d:53:a2:eb:
a3:bf:99:15:f5:f8:04:3b:1e:64:74:a7:15:1d:06:
a2:30:92:39:d8:dc:2f:49:7c:39:25:04:84:b1:d4:
f7:6a:c6:81:62:92:37:23:54:f0:e1:97:bb:4f:d6:
41:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:08:41:18:23:B5:E1:8F:53:0B:16:B0:83:A2:74:F3:22:9F:C8:DF
X509v3 Authority Key Identifier:
keyid:09:0E:59:2A:2E:0D:42:7A:09:AA:2D:E1:B9:BA:F0:8C:CD:14:F0:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:a8:84:0f:00:3c:62:5d:32:35:58:b1:b5:80:2b:77:43:5b:
b9:c7:21:4e:f8:7f:f2:ee:ec:92:45:b7:96:df:bf:30:08:24:
db:d1:9e:d8:25:2d:e0:81:cf:00:54:c8:8b:a5:da:0e:a6:ee:
91:95:69:c6:37:14:c1:66:ed:73:4a:3b:0e:c2:54:eb:3d:b5:
2c:c7:3c:bf:1f:74:56:be:af:b9:45:0d:00:51:d9:8a:53:bf:
7e:a9:c7:0c:e3:a5:e1:47:58:2c:f6:86:d4:57:48:7f:f8:04:
4b:eb:17:91:f7:2e:62:a9:cb:5b:ac:b7:ec:73:03:2c:09:24:
fb:25:47:fb:b2:99:1e:43:82:de:f0:21:8f:e4:ff:3f:6e:72:
4e:f9:2e:09:19:e0:8e:4c:c7:99:f2:cc:b9:f2:39:b1:95:9b:
89:bb:a3:90:82:95:58:71:84:d9:17:2d:ee:b4:0d:d0:ec:5a:
5e:30:5c:4a:3c:15:e1:7a:83:c5:68:b4:50:39:88:7d:74:9a:
3a:c5:76:90:d6:6f:50:21:dc:ba:41:2c:62:a1:ed:eb:c8:6a:
3e:36:a7:0c:2e:f4:59:4d:9e:09:b2:83:f1:91:25:22:44:5b:
f9:7f:22:ab:e9:c1:ea:d9:9b:87:b7:a3:3c:0f:11:5c:42:f0:
db:47:45:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:30:31 2024 by rpki-client on console-ams.rpki-client.org