![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/ffbf18-aa03-434c-8bbd-141450f10a85/1/u2L-a389NkMyvNbg2veSJsz4CeI.mft
File: u2L-a389NkMyvNbg2veSJsz4CeI.mft (raw, json)
Hash identifier: R0Ez29lqgpWE4uN4Siz9niqlIVaGZg7iClqn7mWQIeM=
Subject key identifier: 2C:DD:F9:93:F6:A6:54:74:C6:15:4B:C6:9E:AF:BE:C1:10:5B:32:64
Authority key identifier: BB:62:FE:6B:7F:3D:36:43:32:BC:D6:E0:DA:F7:92:26:CC:F8:09:E2
Certificate issuer: /CN=bb62fe6b7f3d364332bcd6e0daf79226ccf809e2
Certificate serial: 0190448C8C0001FBAAA00D53E98118224C02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u2L-a389NkMyvNbg2veSJsz4CeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/ffbf18-aa03-434c-8bbd-141450f10a85/1/u2L-a389NkMyvNbg2veSJsz4CeI.mft
Manifest number: 0C33
Signing time: Sun 23 Jun 2024 10:02:59 +0000
Manifest this update: Sun 23 Jun 2024 10:02:59 +0000
Manifest next update: Mon 24 Jun 2024 10:02:59 +0000
Files and hashes: 1: GhJPedVhNXBWi24dCzz_8rK0hk0.roa (hash: mdJpypEYe5AAUb7SATMLtGb5TsWj+8+NH+pRF814jD8=)
2: u2L-a389NkMyvNbg2veSJsz4CeI.crl (hash: ZlLjfPccEI/InRRqursmVByO7jX586+tbETAWEr7teE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/ffbf18-aa03-434c-8bbd-141450f10a85/1/u2L-a389NkMyvNbg2veSJsz4CeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/ffbf18-aa03-434c-8bbd-141450f10a85/1/u2L-a389NkMyvNbg2veSJsz4CeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/u2L-a389NkMyvNbg2veSJsz4CeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 10:02:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:44:8c:8c:00:01:fb:aa:a0:0d:53:e9:81:18:22:4c:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb62fe6b7f3d364332bcd6e0daf79226ccf809e2
Validity
Not Before: Jun 23 10:02:59 2024 GMT
Not After : Jun 24 10:02:59 2024 GMT
Subject: CN=2cddf993f6a65474c6154bc69eafbec1105b3264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:47:d9:56:cd:e2:bc:f5:c8:a3:1e:9e:cd:3b:
6c:6c:53:a8:7b:06:88:c0:d2:15:bd:f3:59:eb:01:
dd:de:d8:2d:8e:77:b4:b0:7d:19:e1:ff:4f:f3:ed:
30:8d:b9:40:89:5f:22:48:5d:ed:99:a7:08:a9:4e:
97:96:74:3b:eb:62:0e:e9:41:40:b8:8c:d2:ca:9a:
7c:7d:d7:8d:c1:59:cc:17:74:1a:77:45:d9:bd:ea:
74:89:86:b1:cb:5b:33:14:66:2f:c2:b4:0b:ba:8d:
5b:42:fa:0f:ef:a1:aa:1c:92:15:7b:21:42:51:1c:
c4:3b:ce:f9:a1:63:ce:ef:8e:6f:17:cd:8e:36:58:
42:a2:cf:6b:76:fd:dc:72:d3:36:a9:c7:ef:59:34:
39:6c:f8:e4:af:5a:6d:96:f3:b8:b3:ae:0e:60:a7:
1f:c5:0b:e1:3c:38:32:2b:4c:cc:44:6c:f6:fd:a9:
4a:17:00:8d:dd:55:2c:be:af:18:5e:20:6c:94:95:
90:42:84:da:25:af:24:b9:51:a8:6e:26:d4:5a:2e:
0e:31:53:af:9d:3c:d1:8c:41:39:05:5f:85:f9:a6:
54:6e:ed:bc:3d:e8:d6:82:b4:9c:87:33:13:b5:d4:
79:a2:d7:07:50:dd:63:7f:d8:c8:7c:37:a8:e0:c8:
41:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:DD:F9:93:F6:A6:54:74:C6:15:4B:C6:9E:AF:BE:C1:10:5B:32:64
X509v3 Authority Key Identifier:
keyid:BB:62:FE:6B:7F:3D:36:43:32:BC:D6:E0:DA:F7:92:26:CC:F8:09:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u2L-a389NkMyvNbg2veSJsz4CeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ffbf18-aa03-434c-8bbd-141450f10a85/1/u2L-a389NkMyvNbg2veSJsz4CeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ffbf18-aa03-434c-8bbd-141450f10a85/1/u2L-a389NkMyvNbg2veSJsz4CeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:94:33:f8:be:3b:be:4c:61:e6:0e:84:66:c6:2f:da:cb:82:
20:ec:69:d3:a2:4f:3b:54:3f:26:4a:54:ff:1e:b3:1d:ad:4a:
e5:1f:97:96:52:c1:51:a7:eb:be:ee:f2:eb:36:97:6c:50:dd:
64:c8:32:48:0c:ae:99:c4:cc:ef:a8:d2:ed:d8:c2:10:90:01:
27:7f:07:e5:5f:54:d4:60:53:78:d8:5e:43:1d:a9:84:95:77:
1a:02:4e:f8:b9:ab:f6:f6:2e:42:d8:62:af:e4:86:90:6d:82:
ad:03:80:8c:fd:eb:54:79:72:5c:7a:fa:a0:f1:79:f3:af:70:
93:40:d7:4e:6d:17:00:25:be:87:74:53:28:d5:4f:3f:4b:31:
cc:b1:eb:10:97:19:af:9b:f7:45:94:c6:5a:dc:9a:77:c3:9d:
5a:f7:56:05:51:9a:3c:ca:15:3d:a0:94:d7:ba:2d:14:a3:1e:
2b:70:f4:ba:bb:e5:89:08:bf:c0:47:a8:f4:94:b0:ee:26:ef:
6f:75:93:38:a4:4c:be:73:92:65:6a:fd:39:fa:f6:6c:bb:bf:
5a:52:45:7d:81:06:cc:89:27:47:5e:1f:66:f1:99:17:d9:a7:
14:84:d1:8a:6a:96:03:7c:f5:42:0f:e4:f7:e5:fc:d3:6a:e7:
9f:e5:11:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 17:55:07 2024 by rpki-client on console-ams.rpki-client.org