![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft
File: XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft (raw, json)
Hash identifier: 4+bS62fl6noymUPCfbe7alUMfPDEUjjZlVzBd0sWNps=
Subject key identifier: 05:E0:41:DB:11:97:F0:79:68:BB:D0:2B:17:19:31:B2:C6:8A:F1:97
Authority key identifier: 5D:F5:ED:04:0E:FE:2E:58:17:54:DE:B5:C3:CD:82:D9:9D:FE:E8:D9
Certificate issuer: /CN=5df5ed040efe2e581754deb5c3cd82d99dfee8d9
Certificate serial: 01901E8FA29F734026B0C4D4FEA498F56225
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfXtBA7-LlgXVN61w82C2Z3-6Nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft
Manifest number: 11C8
Signing time: Sun 16 Jun 2024 01:00:48 +0000
Manifest this update: Sun 16 Jun 2024 01:00:48 +0000
Manifest next update: Mon 17 Jun 2024 01:00:48 +0000
Files and hashes: 1: XfXtBA7-LlgXVN61w82C2Z3-6Nk.crl (hash: BWNiwUUXuS+F0kIDvqGtsEhweu2VgSADiG0Y34wXvcU=)
2: pFbiqH-AVSDrlPibCAm8Tx_RqxA.roa (hash: vFuC/8HQDnoiduSFW3F9UL5SoiQWkcbKC8xi6F6oli4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XfXtBA7-LlgXVN61w82C2Z3-6Nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1e:8f:a2:9f:73:40:26:b0:c4:d4:fe:a4:98:f5:62:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5df5ed040efe2e581754deb5c3cd82d99dfee8d9
Validity
Not Before: Jun 16 01:00:48 2024 GMT
Not After : Jun 17 01:00:48 2024 GMT
Subject: CN=05e041db1197f07968bbd02b171931b2c68af197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4f:13:fb:0d:cf:53:26:c5:14:0c:9a:16:da:
c8:54:a2:c1:b3:fe:08:1b:5f:66:a9:c5:20:2f:d3:
f9:87:9e:70:12:68:70:04:b6:47:c1:02:54:78:8c:
e8:21:02:7b:a6:59:e9:47:ef:0e:74:6d:f1:9b:29:
16:0c:5a:99:a1:98:94:0a:8d:4a:d0:7a:cc:f9:10:
f5:08:88:69:52:13:28:a4:5d:35:b2:b2:25:11:41:
2b:78:75:88:76:cd:0f:f5:32:c8:51:09:a7:63:f1:
9d:68:6f:ea:78:13:f4:3b:c9:e2:22:99:f8:8c:c4:
57:42:44:06:2d:b0:53:55:d9:21:61:68:08:0c:f4:
c4:60:34:1b:de:13:78:8b:aa:9e:60:ac:9d:b1:5f:
63:15:65:28:e6:86:da:e5:60:30:e7:50:51:90:42:
72:97:0e:a9:8b:35:43:d8:44:37:33:0d:1b:11:a3:
4a:43:bb:a5:28:46:b5:ad:a9:8c:49:fe:f7:b3:09:
da:0c:c5:cb:e6:08:2c:18:c8:d4:5f:7b:03:34:90:
71:82:5a:c7:37:8f:9a:6b:73:0a:25:1c:60:54:1c:
75:2a:5d:60:2d:a4:14:66:ca:73:90:22:fb:31:24:
fb:8c:3a:88:c6:0f:27:00:41:8a:6d:3b:a1:e7:a7:
36:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:E0:41:DB:11:97:F0:79:68:BB:D0:2B:17:19:31:B2:C6:8A:F1:97
X509v3 Authority Key Identifier:
keyid:5D:F5:ED:04:0E:FE:2E:58:17:54:DE:B5:C3:CD:82:D9:9D:FE:E8:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfXtBA7-LlgXVN61w82C2Z3-6Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:e0:68:a9:a0:c8:f0:ff:a0:78:c7:bc:75:d9:bf:33:de:e3:
27:31:6f:cd:ec:74:77:72:a0:19:66:43:58:31:76:7f:cc:48:
50:52:fa:76:3d:56:b9:e6:81:32:c6:8a:10:28:fb:e9:e6:ee:
e8:9e:ad:89:f7:e4:4f:54:eb:7c:c4:53:63:82:da:62:bc:01:
20:c0:41:1f:94:ec:bc:bd:c8:8b:b5:f3:e8:a3:1c:4e:98:0c:
83:9d:93:68:51:71:9c:67:60:0d:35:0f:b8:92:61:e9:f6:3c:
85:c1:a0:86:83:38:37:da:49:95:18:de:29:a0:9a:46:dc:48:
c7:76:af:f8:1a:70:85:8d:04:6e:62:4b:5f:47:26:77:73:33:
bb:af:47:32:dc:97:ab:71:05:fd:65:ae:34:4c:1c:9c:e7:32:
19:80:f9:e1:e1:59:82:21:82:61:b1:d5:9e:73:b7:b0:6d:39:
71:2a:38:4d:bc:2f:0d:3d:16:2b:59:a6:d3:a1:a5:e1:2d:e8:
94:7a:54:fd:32:2b:85:2f:d9:dc:22:10:4b:62:4b:e6:95:b2:
75:a6:bb:2d:d7:a4:e0:96:7f:04:c0:8d:28:e9:b0:0a:a1:18:
df:d9:d1:74:21:1b:bc:9b:fe:77:8e:5a:e1:28:0b:38:f0:b0:
33:fb:7f:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:00:16 2024 by rpki-client on console-ams.rpki-client.org