![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.mft
File: 2nVBcltyi1qJ87-vIPh2VWPC8_s.mft (raw, json)
Hash identifier: I3h2dqcqy/HQZ9M2phgebNjFgH0b822kp96zWddDjts=
Subject key identifier: 71:BD:54:7F:BA:CF:34:90:56:C3:22:45:45:F9:69:45:D6:1F:7B:82
Authority key identifier: DA:75:41:72:5B:72:8B:5A:89:F3:BF:AF:20:F8:76:55:63:C2:F3:FB
Certificate issuer: /CN=da7541725b728b5a89f3bfaf20f8765563c2f3fb
Certificate serial: 01901DEC1BF9943DF568B35BBD4E6A294AD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nVBcltyi1qJ87-vIPh2VWPC8_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.mft
Manifest number: 11C2
Signing time: Sat 15 Jun 2024 22:02:11 +0000
Manifest this update: Sat 15 Jun 2024 22:02:11 +0000
Manifest next update: Sun 16 Jun 2024 22:02:11 +0000
Files and hashes: 1: 2nVBcltyi1qJ87-vIPh2VWPC8_s.crl (hash: njhuNUX7mrB6sXILULk0DUSaaZvmaSkwvDfwY2buwMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/2nVBcltyi1qJ87-vIPh2VWPC8_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 22:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:ec:1b:f9:94:3d:f5:68:b3:5b:bd:4e:6a:29:4a:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da7541725b728b5a89f3bfaf20f8765563c2f3fb
Validity
Not Before: Jun 15 22:02:11 2024 GMT
Not After : Jun 16 22:02:11 2024 GMT
Subject: CN=71bd547fbacf349056c3224545f96945d61f7b82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:58:3d:47:23:25:bb:65:4b:7c:46:17:67:60:
51:31:19:24:b1:b5:8d:57:a7:c6:66:6f:09:79:56:
bb:e2:32:89:4e:8d:b3:9a:7c:ef:c9:4a:d0:72:5a:
b0:32:86:56:0e:63:0d:97:bc:0b:e9:bf:df:4a:27:
e5:e2:84:82:7f:7c:ed:cb:19:8e:53:f6:cc:b6:ab:
64:56:58:7d:20:21:e3:33:e6:8d:9f:c0:3a:4a:d1:
27:ae:b6:85:cd:d7:1a:0f:7c:c2:30:06:21:9c:1c:
ec:26:47:2d:19:4c:41:29:6b:a3:5b:0e:db:43:dd:
2d:47:4d:1f:8c:7b:69:e4:8c:1e:c9:ca:4a:91:b5:
13:a7:2a:6c:94:92:d4:e7:53:9a:01:94:fc:e5:7f:
ba:14:95:6d:56:13:28:c0:da:44:39:e8:5c:bc:4c:
f2:95:4f:87:bb:08:89:86:59:a9:16:4c:bf:b0:92:
bd:ca:64:aa:12:3c:c2:1d:39:b1:dd:30:0d:77:3b:
fa:00:ed:5e:f4:5b:ff:a3:02:08:82:a8:c0:43:9c:
d9:99:2e:30:4d:5f:c7:ec:fa:b6:63:08:50:9e:32:
82:e7:f3:48:e1:72:d7:59:f4:ad:04:08:6a:4f:17:
19:d4:df:91:60:cf:e1:c5:60:dc:64:84:98:b4:56:
c5:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:BD:54:7F:BA:CF:34:90:56:C3:22:45:45:F9:69:45:D6:1F:7B:82
X509v3 Authority Key Identifier:
keyid:DA:75:41:72:5B:72:8B:5A:89:F3:BF:AF:20:F8:76:55:63:C2:F3:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nVBcltyi1qJ87-vIPh2VWPC8_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:f1:e6:59:47:c4:df:9e:38:f3:6d:ed:b1:a1:ee:6c:47:de:
ce:be:7f:48:f5:b5:0d:84:59:c5:b4:ee:87:24:34:ef:62:38:
56:86:4a:d9:b8:48:a0:0a:73:86:86:13:94:fe:70:84:66:8d:
18:b2:ab:24:29:44:4b:24:57:4e:38:d1:c2:d8:ce:01:4d:0d:
07:75:20:1e:12:d5:e7:30:aa:11:62:2c:72:49:19:41:5f:62:
97:92:c9:9b:77:0d:38:53:17:da:6f:05:26:39:94:7a:a7:b7:
36:25:88:31:f1:c5:5e:ba:79:e6:8c:00:7b:1f:86:f2:30:99:
bc:18:d4:26:21:7f:a3:b0:43:07:e9:3c:7e:63:8f:c5:ed:b2:
e9:e4:67:17:40:a6:ad:6d:b1:94:e7:50:af:bd:11:5c:60:54:
c4:4f:30:89:13:06:7b:d5:2d:87:ac:12:65:70:51:7e:fb:ae:
4a:9c:5b:3d:af:29:e1:12:65:37:70:0c:d4:84:17:c6:a9:12:
f6:67:83:db:98:bc:87:89:5f:8e:29:69:51:84:63:d4:fd:c6:
2f:77:62:77:e8:4a:24:8d:81:2e:cc:c2:21:44:39:fc:da:aa:
38:ae:6c:10:e5:fe:1e:dc:0a:02:25:7f:51:15:02:51:be:e1:
01:85:7e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:00:26 2024 by rpki-client on console-ams.rpki-client.org