![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft
File: 1lRDbtMkK925b98TmhJT3rmG39A.mft (raw, json)
Hash identifier: oYiz5Fkex/fISc7a6DL5/HHVZKZHuAKU3P+hqbLoxkQ=
Subject key identifier: 1B:74:B0:D9:96:A2:C3:BF:72:D8:1E:2A:02:2E:BD:61:2D:8E:B4:4D
Authority key identifier: D6:54:43:6E:D3:24:2B:DD:B9:6F:DF:13:9A:12:53:DE:B9:86:DF:D0
Certificate issuer: /CN=d654436ed3242bddb96fdf139a1253deb986dfd0
Certificate serial: 01901DEC439B66EE0213168E2EB23758444B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1lRDbtMkK925b98TmhJT3rmG39A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft
Manifest number: 11C3
Signing time: Sat 15 Jun 2024 22:02:21 +0000
Manifest this update: Sat 15 Jun 2024 22:02:21 +0000
Manifest next update: Sun 16 Jun 2024 22:02:21 +0000
Files and hashes: 1: 1lRDbtMkK925b98TmhJT3rmG39A.crl (hash: DGK5hQh1Afoc08cvTtooIELCJKoHmCsjge0U68QyJ0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1lRDbtMkK925b98TmhJT3rmG39A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 22:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:ec:43:9b:66:ee:02:13:16:8e:2e:b2:37:58:44:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d654436ed3242bddb96fdf139a1253deb986dfd0
Validity
Not Before: Jun 15 22:02:21 2024 GMT
Not After : Jun 16 22:02:21 2024 GMT
Subject: CN=1b74b0d996a2c3bf72d81e2a022ebd612d8eb44d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:98:c2:8a:ef:79:65:e1:c5:b4:52:b4:c0:7b:
87:2b:ad:89:2b:77:59:24:65:1a:f7:a3:36:a1:dc:
cd:cf:68:30:ee:63:54:a0:04:55:69:db:bb:a1:03:
96:f8:5d:8f:26:0c:a2:cb:6b:be:43:be:1f:86:15:
99:ca:37:01:9f:fe:4e:ca:65:fb:71:ae:a5:8b:fa:
57:8e:15:ea:f7:62:f6:17:23:ec:50:87:1f:6f:c3:
81:eb:c1:d1:b9:a4:68:77:1f:11:d7:e3:e3:34:18:
48:e6:df:9d:4a:b6:c0:99:e7:78:d1:78:33:f7:92:
26:3f:37:d8:14:24:f1:78:af:f8:fa:80:e3:78:3c:
7e:4d:47:54:5d:f9:1e:52:20:cd:9a:e3:ef:54:dc:
a1:3e:1a:d9:cd:c5:c5:26:88:58:d8:b1:a1:9e:de:
1a:57:4c:27:5f:12:8e:ca:97:bf:8c:51:43:44:56:
65:ed:fe:65:fa:5d:9f:99:66:59:fb:01:fc:a3:d8:
fd:72:53:f3:d7:ac:2e:a3:3f:23:25:74:e2:85:64:
6c:88:6e:0f:b8:33:47:de:8c:3f:cc:19:43:65:97:
ec:a7:8d:b3:ce:de:d0:d8:c1:48:64:61:ee:47:52:
3a:75:28:af:7d:21:a3:f7:c0:5b:8c:00:89:4e:66:
2f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:74:B0:D9:96:A2:C3:BF:72:D8:1E:2A:02:2E:BD:61:2D:8E:B4:4D
X509v3 Authority Key Identifier:
keyid:D6:54:43:6E:D3:24:2B:DD:B9:6F:DF:13:9A:12:53:DE:B9:86:DF:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1lRDbtMkK925b98TmhJT3rmG39A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:4e:90:f3:d7:1d:24:c6:79:d0:3f:3c:2e:d9:46:76:ec:ed:
a4:bc:bf:58:42:77:31:7c:f4:85:25:ae:47:ca:93:20:2a:46:
df:9f:5a:44:49:95:65:77:65:8f:f3:74:46:83:ac:3d:59:0e:
1f:e0:d0:a6:2a:68:75:f8:18:c6:f7:f1:29:ce:fb:c1:aa:7c:
27:75:36:2f:fe:42:6c:af:90:70:11:85:93:0e:6d:1a:c2:f7:
3b:da:a7:3c:df:55:de:15:66:05:d4:0d:40:3e:15:2b:76:ed:
3b:6a:62:bb:20:61:00:e8:5e:be:af:3b:8e:0a:68:de:59:4e:
aa:21:76:2c:a5:ab:33:0d:f3:58:94:56:0d:be:58:74:5d:ea:
ff:5b:7c:d9:4f:39:28:34:d2:2e:3a:03:e3:84:91:4d:05:69:
9a:12:d1:a2:04:10:8b:c8:9a:13:ba:bd:6a:16:1a:e7:04:0c:
91:5b:fe:16:7f:b9:74:57:07:75:91:a2:02:9f:0b:e5:65:05:
b3:f0:dc:73:44:51:4f:71:82:2e:d8:fe:e1:89:c2:a9:39:6a:
0f:be:64:38:e3:9c:cb:48:e3:07:3b:06:6e:05:a5:71:2f:b7:
2c:76:63:c5:7d:b8:fb:a0:f8:e3:f2:78:4f:32:b3:16:4f:5d:
4c:49:eb:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:01:47 2024 by rpki-client on console-ams.rpki-client.org