![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/4581b7-35bc-4bc8-85b3-f4596e7767a8/1/3UftWIupBpRXoqiY_HoMuXfR-B4.mft
File: 3UftWIupBpRXoqiY_HoMuXfR-B4.mft (raw, json)
Hash identifier: is/skgl4ME4OXcx9sgiKcvyhlKIrWonJhdQlAepld5M=
Subject key identifier: F2:34:F4:DB:EF:A0:C9:57:94:F6:A2:01:E2:7E:C9:85:44:85:DE:36
Authority key identifier: DD:47:ED:58:8B:A9:06:94:57:A2:A8:98:FC:7A:0C:B9:77:D1:F8:1E
Certificate issuer: /CN=dd47ed588ba9069457a2a898fc7a0cb977d1f81e
Certificate serial: 0190452FC97A10B084A1D37294DEC930C51F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3UftWIupBpRXoqiY_HoMuXfR-B4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/4581b7-35bc-4bc8-85b3-f4596e7767a8/1/3UftWIupBpRXoqiY_HoMuXfR-B4.mft
Manifest number: 11DE
Signing time: Sun 23 Jun 2024 13:01:17 +0000
Manifest this update: Sun 23 Jun 2024 13:01:17 +0000
Manifest next update: Mon 24 Jun 2024 13:01:17 +0000
Files and hashes: 1: 3UftWIupBpRXoqiY_HoMuXfR-B4.crl (hash: FTes8qYZWQlHx1fb0eZKgKuwVcAIGeW4dzeh0/DZbKo=)
2: RE7BaNwDFBQibq66dggVliVLXSo.roa (hash: 2TfLrozkW0wcGiGdvHXM0I0blxEp2fGLpUjeQfZQAPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/4581b7-35bc-4bc8-85b3-f4596e7767a8/1/3UftWIupBpRXoqiY_HoMuXfR-B4.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/4581b7-35bc-4bc8-85b3-f4596e7767a8/1/3UftWIupBpRXoqiY_HoMuXfR-B4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3UftWIupBpRXoqiY_HoMuXfR-B4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 13:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:45:2f:c9:7a:10:b0:84:a1:d3:72:94:de:c9:30:c5:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd47ed588ba9069457a2a898fc7a0cb977d1f81e
Validity
Not Before: Jun 23 13:01:17 2024 GMT
Not After : Jun 24 13:01:17 2024 GMT
Subject: CN=f234f4dbefa0c95794f6a201e27ec9854485de36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e6:16:f1:d0:88:a2:ab:ae:e8:27:67:eb:cc:
59:4a:86:64:e5:ab:bc:df:af:e9:ee:52:e2:ab:60:
93:c8:be:d6:2b:4b:c0:28:a2:08:8d:34:e5:fe:47:
22:86:d9:f1:70:8d:3c:f7:e7:d3:7a:a9:3d:69:76:
84:0b:25:90:cf:2f:30:0f:d0:88:e3:46:93:ce:61:
76:08:21:90:cc:d1:23:e4:fa:fe:54:72:e4:a6:a0:
ab:08:37:64:0c:46:7f:cf:d7:4e:db:fe:e3:88:54:
1c:a0:a2:ce:6b:5b:98:6f:31:3c:8b:0a:10:fc:92:
3a:97:7f:47:fd:0d:b4:b9:ec:cb:2c:25:32:ee:f4:
bb:2c:cc:4c:06:50:45:f5:2e:b5:84:5a:fa:05:5e:
80:73:79:2c:a0:c0:75:92:02:65:5e:a2:fc:1b:c0:
6a:4c:6d:d6:a6:e7:a2:9f:38:80:a7:2b:b1:c0:2b:
dc:12:07:fb:73:59:0d:31:39:22:bb:33:94:07:52:
4b:cf:f2:1c:d0:51:58:0a:f9:ea:84:25:a3:9b:65:
fe:9f:06:fc:cf:1d:ba:e8:23:35:6f:a7:47:a5:e2:
3e:59:b8:8d:00:70:87:fa:56:48:e2:dc:0b:95:19:
26:37:85:67:0d:13:15:3d:ba:df:c5:72:2f:23:13:
a0:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:34:F4:DB:EF:A0:C9:57:94:F6:A2:01:E2:7E:C9:85:44:85:DE:36
X509v3 Authority Key Identifier:
keyid:DD:47:ED:58:8B:A9:06:94:57:A2:A8:98:FC:7A:0C:B9:77:D1:F8:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3UftWIupBpRXoqiY_HoMuXfR-B4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4581b7-35bc-4bc8-85b3-f4596e7767a8/1/3UftWIupBpRXoqiY_HoMuXfR-B4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4581b7-35bc-4bc8-85b3-f4596e7767a8/1/3UftWIupBpRXoqiY_HoMuXfR-B4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:bd:ca:51:ac:dd:a7:cf:9f:34:21:27:96:7c:1d:6f:e3:0e:
b4:df:92:80:8a:85:ee:f2:36:ab:46:31:3c:bf:ea:79:0e:45:
a5:8f:fd:dc:6b:e3:f7:8a:61:b1:c7:4e:84:3c:42:f2:70:26:
43:94:7a:ea:ba:a9:f5:2b:38:41:16:61:1c:71:68:b0:b7:ca:
48:95:c7:62:75:e8:d6:d3:a3:d5:10:64:6e:b3:04:81:77:7b:
6f:c7:14:9a:f0:90:38:a0:e4:ac:11:f0:d9:be:8e:18:16:f8:
49:53:35:93:05:65:fb:bf:87:c6:00:cf:d9:34:9d:11:41:35:
3e:64:af:ab:31:63:0e:4a:53:05:ca:63:7f:26:d3:39:a0:bd:
01:2a:8d:17:10:ec:07:de:ff:1e:44:a0:4f:21:3c:78:2c:ba:
e1:94:29:6e:b3:75:2e:ec:f4:88:16:0b:59:06:b5:09:db:dd:
5f:62:be:a5:12:55:52:dc:ea:c3:78:b5:82:b7:d9:96:c2:44:
fd:85:9e:00:d3:5a:e6:b5:e7:02:e0:7d:ee:2c:fd:1a:d3:20:
8d:bd:0b:9b:17:97:8b:6e:f1:cc:8f:c7:2c:cd:1b:86:52:c7:
16:6a:b7:af:5c:33:66:84:61:2a:5c:2a:15:63:8c:40:46:d4:
70:f8:c4:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:22:58 2024 by rpki-client on console-fra.rpki-client.org