![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.mft
File: o6_ki_2taeNcg9MTDTWJfM_F788.mft (raw, json)
Hash identifier: 9E7xw3cef4F7Bn8qqtWd0sWTEsP2US8DZF0L7IWdBEs=
Subject key identifier: F2:24:A0:DC:BA:6D:79:B3:F3:BF:DE:9A:8D:6F:61:E1:5A:DF:C5:56
Authority key identifier: A3:AF:E4:8B:FD:AD:69:E3:5C:83:D3:13:0D:35:89:7C:CF:C5:EF:CF
Certificate issuer: /CN=a3afe48bfdad69e35c83d3130d35897ccfc5efcf
Certificate serial: 0190448A91A145AC3FEC3DC1A36CF4595F21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6_ki_2taeNcg9MTDTWJfM_F788.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.mft
Manifest number: 11DA
Signing time: Sun 23 Jun 2024 10:00:50 +0000
Manifest this update: Sun 23 Jun 2024 10:00:50 +0000
Manifest next update: Mon 24 Jun 2024 10:00:50 +0000
Files and hashes: 1: fVQfFyiWl3jMN7CfZeZTd19Nfqo.roa (hash: QTwyeff7EIHQH1mrpSEI6XtcZgxkmonoEnwlTSXGEF0=)
2: o6_ki_2taeNcg9MTDTWJfM_F788.crl (hash: /LMQJldFcaGWZgUDJZtS4BfhwMr7o+rL7ztCsbavVJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6_ki_2taeNcg9MTDTWJfM_F788.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 10:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:44:8a:91:a1:45:ac:3f:ec:3d:c1:a3:6c:f4:59:5f:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3afe48bfdad69e35c83d3130d35897ccfc5efcf
Validity
Not Before: Jun 23 10:00:50 2024 GMT
Not After : Jun 24 10:00:50 2024 GMT
Subject: CN=f224a0dcba6d79b3f3bfde9a8d6f61e15adfc556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:24:a3:3b:0c:ef:ee:ee:b8:53:c4:31:50:92:
c7:a4:9e:9b:f2:b9:ec:5f:db:5b:90:43:4e:b4:0b:
51:7b:1f:48:1f:de:3b:bd:9c:05:69:8b:39:bb:67:
04:f9:16:e1:1f:e9:9a:de:c4:f4:60:f3:b6:c9:37:
a3:53:26:4f:f1:42:1c:71:31:57:9d:1a:cc:09:58:
1d:e5:a8:87:05:97:88:f1:3a:74:34:c5:c8:b7:c8:
ee:f5:ef:0f:f3:b8:37:fd:f9:ec:63:50:55:20:af:
06:87:cd:49:fc:9f:a8:73:9b:d8:f6:f3:95:3c:26:
28:54:a2:fb:88:f5:38:5e:7a:0b:c7:20:17:3e:ed:
46:ff:e8:aa:2a:90:30:42:5a:49:6a:b8:74:65:50:
70:53:06:a0:10:9a:1c:d9:2e:92:3d:bc:e9:de:00:
f7:a3:7f:c2:c7:fe:ed:95:89:fb:84:cd:99:9b:2d:
5c:da:fe:ff:90:7b:5e:ac:4e:2f:f1:5b:cb:c4:ad:
15:57:d0:f3:56:8a:3b:57:0a:33:ab:79:8c:17:50:
05:47:11:7a:ff:2d:cd:3c:1b:22:e3:65:ba:65:4e:
0a:46:9b:96:a8:95:30:19:6f:94:e1:b9:fa:b7:fd:
98:6a:90:9f:50:58:e6:33:1a:3f:68:66:d9:e4:bf:
ee:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:24:A0:DC:BA:6D:79:B3:F3:BF:DE:9A:8D:6F:61:E1:5A:DF:C5:56
X509v3 Authority Key Identifier:
keyid:A3:AF:E4:8B:FD:AD:69:E3:5C:83:D3:13:0D:35:89:7C:CF:C5:EF:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6_ki_2taeNcg9MTDTWJfM_F788.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:2e:52:4f:7e:18:9c:03:92:41:94:fd:5e:36:9e:d9:e5:23:
f5:9b:30:f2:a8:53:fc:83:5a:c3:eb:d8:fd:1f:6a:bd:5f:94:
9f:1f:a9:ce:07:57:85:8e:18:3a:5d:5a:27:12:2d:c6:f6:83:
3a:ee:4a:22:20:03:70:19:e3:2d:ac:40:ff:d3:42:85:a5:26:
63:19:db:e4:4e:ea:9b:98:14:89:9b:0e:e6:5c:b8:0f:d4:34:
b1:41:ca:2f:93:c3:ae:98:23:77:2c:79:8b:71:b9:f0:b4:94:
0a:b9:b8:a3:69:02:2e:74:c2:cf:34:65:4c:e4:7f:40:ad:34:
04:5c:3d:7a:35:34:71:4a:f0:0c:a0:65:9b:59:05:56:c0:4b:
2f:78:7a:61:89:4b:fa:5a:a5:12:a5:39:a9:e5:a3:f0:4e:65:
d0:6f:ea:56:63:68:81:15:5c:29:60:7f:1c:f0:3c:98:48:7d:
5b:f4:24:e0:a7:d5:eb:89:c4:ce:e2:db:9a:30:c4:1a:63:61:
5a:0a:b4:1b:9d:68:a5:48:6d:b2:e6:f2:82:d0:d3:11:53:c1:
c8:a9:95:bd:c0:e3:a2:11:34:ba:ca:4d:6f:db:6d:10:87:e8:
4a:3e:9b:16:15:d1:4f:32:04:b3:ad:0a:21:1e:fe:5c:40:a3:
7b:1f:cb:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 17:53:33 2024 by rpki-client on console-ams.rpki-client.org