![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/54ff92-221e-4a16-8aef-194e0c651d73/1/mfCyyNezyhPFnFM3LyXiAsharcU.mft
File: mfCyyNezyhPFnFM3LyXiAsharcU.mft (raw, json)
Hash identifier: urd9Z9WH35mmJRgmpTO7RzKqtrR2wWCBhEKzFyPOQPM=
Subject key identifier: E0:6C:45:20:C2:7F:84:B8:BD:51:F7:61:BD:F5:D6:5B:BA:03:EA:32
Authority key identifier: 99:F0:B2:C8:D7:B3:CA:13:C5:9C:53:37:2F:25:E2:02:C8:5A:AD:C5
Certificate issuer: /CN=99f0b2c8d7b3ca13c59c53372f25e202c85aadc5
Certificate serial: 019037E1EDEEC70B79E3D649BED0DE44D75E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mfCyyNezyhPFnFM3LyXiAsharcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/54ff92-221e-4a16-8aef-194e0c651d73/1/mfCyyNezyhPFnFM3LyXiAsharcU.mft
Manifest number: 04D8
Signing time: Thu 20 Jun 2024 23:01:11 +0000
Manifest this update: Thu 20 Jun 2024 23:01:11 +0000
Manifest next update: Fri 21 Jun 2024 23:01:11 +0000
Files and hashes: 1: VX76WEc2y2FrRC6vZX6CjQUlQG0.roa (hash: ofedL2vyU4RMGZfb6sma7EixWxGJi8bAaVhL+JMuxFU=)
2: mfCyyNezyhPFnFM3LyXiAsharcU.crl (hash: GEWKMsQGhDZlUTlGXDugkmpcdpMBGQtv6l2YkPGd0cA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/54ff92-221e-4a16-8aef-194e0c651d73/1/mfCyyNezyhPFnFM3LyXiAsharcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/54ff92-221e-4a16-8aef-194e0c651d73/1/mfCyyNezyhPFnFM3LyXiAsharcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/mfCyyNezyhPFnFM3LyXiAsharcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 23:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:37:e1:ed:ee:c7:0b:79:e3:d6:49:be:d0:de:44:d7:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99f0b2c8d7b3ca13c59c53372f25e202c85aadc5
Validity
Not Before: Jun 20 23:01:11 2024 GMT
Not After : Jun 21 23:01:11 2024 GMT
Subject: CN=e06c4520c27f84b8bd51f761bdf5d65bba03ea32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:53:ae:5a:c9:44:35:e8:bd:a6:86:45:5a:2d:
f4:aa:92:10:ad:b7:c0:dd:ba:d9:92:70:c3:64:46:
e1:68:be:10:20:4a:08:c4:f0:e9:1a:d1:f6:d1:3e:
d9:8d:08:56:b6:d4:66:7b:89:8e:fc:d9:32:2e:a6:
e3:c9:64:73:ee:4b:87:d2:c7:5a:8d:8d:fe:4c:49:
4e:a9:ad:b6:2e:3b:37:37:f8:f2:4a:41:ae:4d:4d:
1a:53:0e:01:31:e1:d3:6e:d2:06:d2:8a:20:5e:29:
37:bd:f1:c0:e3:cd:92:1f:59:f7:85:a8:32:15:c4:
19:8c:7e:4f:97:6c:27:aa:68:a8:29:86:20:70:55:
df:6b:ce:0b:85:69:94:0b:55:c9:8d:85:9d:81:84:
84:7f:f3:db:21:77:80:d2:ad:c8:6b:59:fc:30:18:
48:fe:ab:ef:e7:75:0c:a7:6d:18:d8:50:01:b7:f7:
13:4d:ae:ef:27:8d:a8:27:78:e7:33:49:bd:4f:f4:
19:4e:67:10:c1:e8:01:23:ea:0d:46:b0:c9:a5:11:
5c:e7:3a:43:cc:a0:37:d4:d6:03:ab:6b:c9:61:ff:
52:9b:1d:4a:6e:3d:69:1d:34:d3:e2:b8:b2:5d:9d:
63:b4:15:c6:0d:e7:a2:08:98:7e:c2:bf:dd:48:ae:
03:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:6C:45:20:C2:7F:84:B8:BD:51:F7:61:BD:F5:D6:5B:BA:03:EA:32
X509v3 Authority Key Identifier:
keyid:99:F0:B2:C8:D7:B3:CA:13:C5:9C:53:37:2F:25:E2:02:C8:5A:AD:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfCyyNezyhPFnFM3LyXiAsharcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/54ff92-221e-4a16-8aef-194e0c651d73/1/mfCyyNezyhPFnFM3LyXiAsharcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/54ff92-221e-4a16-8aef-194e0c651d73/1/mfCyyNezyhPFnFM3LyXiAsharcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:af:c9:62:a7:ee:62:79:be:15:4b:01:f2:4e:39:ed:75:e3:
0a:ff:4f:d9:3f:47:bc:55:f7:aa:0d:6d:cf:b2:eb:1a:b8:62:
4e:0b:fb:e7:53:36:0a:5b:43:85:c2:c0:51:1c:11:d2:95:5b:
8a:d2:6a:fb:e1:84:45:24:18:62:fe:d6:34:01:2c:71:d5:5e:
a6:81:5d:7d:2e:96:3d:c8:7f:b9:99:47:20:26:97:a5:07:aa:
b7:d3:a8:e5:3e:b3:90:cc:40:32:04:9d:e8:d7:32:47:ae:58:
d6:ec:36:ff:e8:7b:81:f5:e9:da:e6:63:97:54:c7:cf:09:40:
be:c7:77:59:fe:66:8f:12:60:99:dd:d2:6e:ef:75:94:0e:0f:
be:57:c8:9b:6b:17:27:66:3f:49:68:6d:70:94:4e:c8:ac:ed:
a9:15:65:02:a4:59:02:86:b5:89:77:8a:4e:b6:68:09:11:bd:
b3:8a:d0:e4:b9:81:34:e1:bb:c7:2e:61:47:34:e0:db:22:1a:
5e:07:83:f8:17:3f:4a:96:f0:3c:e7:15:ff:07:71:44:42:67:
39:d1:84:29:5f:0f:bb:3f:00:d4:f0:7b:5a:21:cc:b9:ff:23:
7c:b8:c9:99:30:11:c7:e0:c4:22:13:1b:d9:eb:fc:df:1b:07:
f9:5a:9f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 03:31:40 2024 by rpki-client on console-fra.rpki-client.org