![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/decde3-277a-4956-bf92-f0a8123e70f9/1/YL83NiAUbm8piugtLIqDccrLexs.mft
File: YL83NiAUbm8piugtLIqDccrLexs.mft (raw, json)
Hash identifier: qnutScffmPI4P/S1JoBeoIrEW+zFTv9kUy/1O5xa/SU=
Subject key identifier: 61:A0:C3:82:A8:01:2B:10:B1:72:3F:15:10:14:71:2B:C6:36:D7:6C
Authority key identifier: 60:BF:37:36:20:14:6E:6F:29:8A:E8:2D:2C:8A:83:71:CA:CB:7B:1B
Certificate issuer: /CN=60bf373620146e6f298ae82d2c8a8371cacb7b1b
Certificate serial: 01901DEC9C9DD210159F1E502E8D075D85D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YL83NiAUbm8piugtLIqDccrLexs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/decde3-277a-4956-bf92-f0a8123e70f9/1/YL83NiAUbm8piugtLIqDccrLexs.mft
Manifest number: 11C5
Signing time: Sat 15 Jun 2024 22:02:44 +0000
Manifest this update: Sat 15 Jun 2024 22:02:44 +0000
Manifest next update: Sun 16 Jun 2024 22:02:44 +0000
Files and hashes: 1: YL83NiAUbm8piugtLIqDccrLexs.crl (hash: NBJIonOcWJFWzSko/Cl1YXtsyQHkJTndnsfY4Gt4joA=)
2: kbueeR8S6K_OPuqrGgv3vEeH5hU.roa (hash: IADKibPdM/DHOcsOdRCDzrNgtvJt7L+UVkkKe873Hwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/decde3-277a-4956-bf92-f0a8123e70f9/1/YL83NiAUbm8piugtLIqDccrLexs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/decde3-277a-4956-bf92-f0a8123e70f9/1/YL83NiAUbm8piugtLIqDccrLexs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YL83NiAUbm8piugtLIqDccrLexs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 22:02:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:ec:9c:9d:d2:10:15:9f:1e:50:2e:8d:07:5d:85:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60bf373620146e6f298ae82d2c8a8371cacb7b1b
Validity
Not Before: Jun 15 22:02:44 2024 GMT
Not After : Jun 16 22:02:44 2024 GMT
Subject: CN=61a0c382a8012b10b1723f151014712bc636d76c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:78:7d:d9:ed:c2:d5:76:72:42:97:33:21:9b:
be:4a:23:32:0a:7d:48:c8:3c:3b:3d:68:3c:01:7d:
aa:c0:36:3f:cb:29:8c:88:aa:f3:81:0f:af:5f:69:
da:3e:f9:c4:97:d4:13:5b:0b:5f:c3:e9:e8:95:78:
de:45:4b:e4:b8:1f:e2:17:af:24:b2:06:8e:92:3b:
14:b0:f4:d0:7a:ab:e1:a4:2f:fc:bc:35:09:b3:e3:
c6:63:ab:b0:c9:f7:37:4b:2c:ef:79:c8:eb:4a:a3:
2f:9c:bf:cd:7b:15:33:b1:7f:60:42:af:34:07:13:
b9:d5:9e:fc:93:d1:85:60:ad:16:94:df:6f:66:7f:
ca:d5:a5:d6:d3:80:74:c6:ac:57:f0:c5:90:be:92:
79:0d:9e:c6:17:d3:43:0e:13:4a:1f:8d:1e:87:f4:
cb:9c:2d:a6:25:e2:70:70:c6:40:c6:0e:57:ec:72:
62:78:cf:46:bd:85:e7:eb:d1:9d:61:b4:67:42:d9:
ec:c5:a8:62:40:9a:fa:03:1b:30:45:29:a6:cf:b1:
87:c0:b4:a0:1d:76:6b:37:bd:9f:cb:c8:11:42:0d:
91:96:69:08:0f:a0:03:23:d3:26:e8:37:8b:78:71:
f2:68:1c:d4:92:f8:1c:3b:9f:a0:28:19:8b:42:7d:
96:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:A0:C3:82:A8:01:2B:10:B1:72:3F:15:10:14:71:2B:C6:36:D7:6C
X509v3 Authority Key Identifier:
keyid:60:BF:37:36:20:14:6E:6F:29:8A:E8:2D:2C:8A:83:71:CA:CB:7B:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YL83NiAUbm8piugtLIqDccrLexs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/decde3-277a-4956-bf92-f0a8123e70f9/1/YL83NiAUbm8piugtLIqDccrLexs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/decde3-277a-4956-bf92-f0a8123e70f9/1/YL83NiAUbm8piugtLIqDccrLexs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:e4:48:b2:76:da:fb:26:ff:05:63:bf:78:fd:ae:37:10:ff:
bd:da:8a:5d:13:ae:c6:2d:31:e0:a2:29:50:e7:31:27:52:ca:
10:6c:ee:ce:b3:32:82:0c:1a:49:a3:07:65:7a:85:92:32:92:
72:f9:01:47:bb:1e:49:04:ef:6a:14:e9:5b:70:7c:5c:89:4f:
5c:71:3d:cf:9a:69:28:02:c5:7a:da:95:a0:5d:b3:04:d0:cc:
35:18:28:84:3d:b0:47:7b:a5:6d:24:7d:f2:f0:07:7b:b0:38:
5c:e4:2a:5d:ce:33:d2:4f:90:25:0a:14:82:88:3e:a5:80:06:
9a:d3:c6:eb:7a:38:17:d2:18:65:b3:47:0d:53:81:83:65:fe:
22:c2:35:56:df:2b:7b:a7:af:d7:eb:4d:d1:df:f9:34:d1:d4:
de:31:8b:9b:ae:c6:a2:d0:1a:0d:68:c3:ab:34:5f:ec:ff:88:
44:99:36:3f:21:01:ec:9a:02:8e:49:e2:21:4d:57:86:a4:4f:
61:b7:5a:09:a3:3d:70:29:25:9b:95:b0:27:59:ca:1b:c5:28:
0b:7a:be:34:a7:58:f0:78:fc:04:e0:e8:57:57:bf:57:71:06:
b9:5e:9e:16:ab:3f:b6:58:aa:51:05:ea:57:2b:05:70:04:1c:
e9:88:a7:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:04:51 2024 by rpki-client on console-fra.rpki-client.org