![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/59c063-27dc-44ce-a60f-b149eb705dcc/1/aY1Hvt-EiaoC09tG-YtPeiZLSAo.mft
File: aY1Hvt-EiaoC09tG-YtPeiZLSAo.mft (raw, json)
Hash identifier: D5uSg1NegbnJqKc3QizD+g1wf2w0heGq80liwwX7Nsc=
Subject key identifier: 12:EE:7C:E7:5E:0B:53:87:4B:1C:78:A0:82:4D:00:B2:76:53:66:03
Authority key identifier: 69:8D:47:BE:DF:84:89:AA:02:D3:DB:46:F9:8B:4F:7A:26:4B:48:0A
Certificate issuer: /CN=698d47bedf8489aa02d3db46f98b4f7a264b480a
Certificate serial: 01904189F31EF6AB9F50794F6664404B5F36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aY1Hvt-EiaoC09tG-YtPeiZLSAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/59c063-27dc-44ce-a60f-b149eb705dcc/1/aY1Hvt-EiaoC09tG-YtPeiZLSAo.mft
Manifest number: 1167
Signing time: Sat 22 Jun 2024 20:01:17 +0000
Manifest this update: Sat 22 Jun 2024 20:01:17 +0000
Manifest next update: Sun 23 Jun 2024 20:01:17 +0000
Files and hashes: 1: aY1Hvt-EiaoC09tG-YtPeiZLSAo.crl (hash: L2gqBqLeGPSPJGqd9LEhBDtkU0a4G52Bez+9VetPeUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/59c063-27dc-44ce-a60f-b149eb705dcc/1/aY1Hvt-EiaoC09tG-YtPeiZLSAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/59c063-27dc-44ce-a60f-b149eb705dcc/1/aY1Hvt-EiaoC09tG-YtPeiZLSAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/aY1Hvt-EiaoC09tG-YtPeiZLSAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 20:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:41:89:f3:1e:f6:ab:9f:50:79:4f:66:64:40:4b:5f:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=698d47bedf8489aa02d3db46f98b4f7a264b480a
Validity
Not Before: Jun 22 20:01:17 2024 GMT
Not After : Jun 23 20:01:17 2024 GMT
Subject: CN=12ee7ce75e0b53874b1c78a0824d00b276536603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:44:a3:99:ef:1b:14:22:6d:08:3f:65:52:65:
d3:7a:14:df:0c:0e:49:08:47:8e:60:ac:9f:11:b1:
20:58:b5:82:72:96:11:a3:8d:45:40:f9:5e:d3:c7:
87:0d:d5:ca:f7:58:f4:18:c3:73:7f:cd:9d:c7:bc:
bb:70:f4:e5:0b:2a:61:4d:6c:64:e4:0f:64:66:f4:
38:60:34:d5:00:f8:ed:58:72:4d:af:56:0d:d5:9e:
b5:69:bb:6f:d1:8e:45:be:53:4f:73:14:2d:fc:19:
e8:05:20:6f:dc:17:53:a2:d9:71:29:f1:65:3e:17:
e0:d4:e9:a6:2a:05:1f:c5:da:4f:04:09:e0:c6:7c:
9b:06:bb:06:19:47:b1:ac:ba:da:32:ee:94:d0:14:
a3:65:0c:0f:6c:0e:fa:79:a6:41:bb:2d:24:a7:99:
ce:08:99:6b:ac:34:15:98:2f:19:b1:86:f0:7b:a9:
07:0a:99:53:9a:64:f0:38:58:0f:3c:dd:07:34:06:
55:b6:4d:7d:82:71:65:f7:8a:2b:42:97:3a:f1:60:
e5:1c:be:e8:4d:a5:b0:48:28:33:6f:8a:28:bf:f0:
a7:c1:82:18:6f:a2:bb:44:b0:20:e9:b4:7b:ee:2c:
d5:7e:34:28:f0:6f:74:f0:01:18:65:79:b9:f0:b5:
e7:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:EE:7C:E7:5E:0B:53:87:4B:1C:78:A0:82:4D:00:B2:76:53:66:03
X509v3 Authority Key Identifier:
keyid:69:8D:47:BE:DF:84:89:AA:02:D3:DB:46:F9:8B:4F:7A:26:4B:48:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aY1Hvt-EiaoC09tG-YtPeiZLSAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/59c063-27dc-44ce-a60f-b149eb705dcc/1/aY1Hvt-EiaoC09tG-YtPeiZLSAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/59c063-27dc-44ce-a60f-b149eb705dcc/1/aY1Hvt-EiaoC09tG-YtPeiZLSAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:e1:b8:17:13:fd:d6:69:20:57:eb:ea:93:33:02:e9:c2:3d:
fc:8d:fc:c5:d3:56:35:f8:bb:e5:3d:f7:d4:8f:3d:f3:b6:5a:
84:51:3e:92:12:00:71:17:09:04:75:80:fa:15:3a:0b:b7:db:
83:f0:39:ab:73:34:7b:06:3d:b0:84:6a:8d:a1:71:2d:ef:75:
66:f0:fe:d3:41:74:cb:e2:77:13:82:95:51:bc:cb:40:f4:db:
0c:7a:95:52:b2:9a:1e:62:48:d0:0c:20:29:ed:b5:58:83:16:
89:d8:fc:f3:e7:bd:5b:12:52:e1:b0:9d:d5:47:5d:48:12:10:
28:f5:86:47:47:83:77:f1:09:d1:ee:9c:ec:6e:4b:6a:e0:65:
20:6b:97:f6:85:92:9d:59:b6:95:33:b8:b3:0a:13:57:ff:d3:
d4:fc:c8:25:4c:1d:b8:8f:dd:d6:5b:c9:c6:0d:a2:a9:af:87:
ca:81:a3:13:46:15:d5:9d:5d:a7:14:63:8f:c6:af:8a:40:22:
f6:b4:e5:d4:0c:fc:19:a6:10:3a:96:55:6a:a8:16:e7:d9:c3:
91:b5:da:7f:b7:4a:91:13:3f:d4:56:95:c8:3d:9c:91:69:ba:
b5:f5:ca:99:d8:33:22:78:10:7c:c0:2f:18:b0:f5:2d:bd:60:
fb:10:6a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:37:53 2024 by rpki-client on console-ams.rpki-client.org