![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/69e7fe-40c0-45c2-b2b1-b72d7adbfb96/1/Tle6dst9bSrsBSA89BuOZxbufqA.mft
File: Tle6dst9bSrsBSA89BuOZxbufqA.mft (raw, json)
Hash identifier: 4QPoM/jAFLDjDHm5IpaJbIfw5lF7DDeffVCaGGaKyg0=
Subject key identifier: 83:E4:D4:FB:62:16:37:6B:EE:9B:B4:A7:3C:91:B7:B3:16:83:F8:9D
Authority key identifier: 4E:57:BA:76:CB:7D:6D:2A:EC:05:20:3C:F4:1B:8E:67:16:EE:7E:A0
Certificate issuer: /CN=4e57ba76cb7d6d2aec05203cf41b8e6716ee7ea0
Certificate serial: 0190429CB2959B8A6F4B3424CF3B885DD2E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tle6dst9bSrsBSA89BuOZxbufqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/69e7fe-40c0-45c2-b2b1-b72d7adbfb96/1/Tle6dst9bSrsBSA89BuOZxbufqA.mft
Manifest number: 0AFE
Signing time: Sun 23 Jun 2024 01:01:23 +0000
Manifest this update: Sun 23 Jun 2024 01:01:23 +0000
Manifest next update: Mon 24 Jun 2024 01:01:23 +0000
Files and hashes: 1: Tle6dst9bSrsBSA89BuOZxbufqA.crl (hash: j+eMDnzeAcAsxhxXTAidfvgWDiB3pDQcHyN0ouimMNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/69e7fe-40c0-45c2-b2b1-b72d7adbfb96/1/Tle6dst9bSrsBSA89BuOZxbufqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/69e7fe-40c0-45c2-b2b1-b72d7adbfb96/1/Tle6dst9bSrsBSA89BuOZxbufqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tle6dst9bSrsBSA89BuOZxbufqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:42:9c:b2:95:9b:8a:6f:4b:34:24:cf:3b:88:5d:d2:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e57ba76cb7d6d2aec05203cf41b8e6716ee7ea0
Validity
Not Before: Jun 23 01:01:23 2024 GMT
Not After : Jun 24 01:01:23 2024 GMT
Subject: CN=83e4d4fb6216376bee9bb4a73c91b7b31683f89d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:78:68:a0:95:70:72:e1:bf:fa:fd:ca:e8:6a:
ec:8c:ae:12:74:b4:8d:a5:64:70:cc:71:87:64:ee:
93:26:de:69:b2:42:0d:49:f4:8a:c9:17:8d:2d:8f:
66:a1:7a:99:99:a6:dd:bc:9a:0f:49:8d:b7:fc:eb:
a0:f3:ef:52:d8:65:41:5b:74:96:96:39:06:a4:93:
f6:2b:bb:a1:82:0e:dc:a6:5b:ed:ec:96:4e:b0:26:
83:de:25:02:80:8f:5f:1b:72:6c:26:3c:44:f2:1b:
69:1e:6e:b2:36:99:75:7f:30:f7:6f:e4:5f:44:d3:
c8:fb:3e:9c:47:d2:19:f8:ba:35:b4:85:98:ad:6a:
3c:25:08:53:83:f1:19:8a:04:59:7e:e5:c6:23:07:
93:b2:4f:41:ff:6c:6d:0b:06:a1:67:a8:2d:8b:c3:
a1:e3:e6:2e:6e:af:22:e8:ca:d1:27:39:14:aa:e6:
14:6d:b1:69:a7:84:73:31:85:29:1f:31:ce:1c:61:
6f:a6:9b:f5:1a:4d:f3:ff:6d:f6:ef:bc:40:59:c9:
c0:9e:9b:aa:29:51:ed:9b:23:df:6b:bc:3d:0f:2f:
22:85:48:6d:ae:c1:d9:6b:44:19:82:c2:bc:dc:97:
59:62:83:d5:86:4d:42:47:aa:40:c9:a6:cf:9c:04:
3f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:E4:D4:FB:62:16:37:6B:EE:9B:B4:A7:3C:91:B7:B3:16:83:F8:9D
X509v3 Authority Key Identifier:
keyid:4E:57:BA:76:CB:7D:6D:2A:EC:05:20:3C:F4:1B:8E:67:16:EE:7E:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tle6dst9bSrsBSA89BuOZxbufqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/69e7fe-40c0-45c2-b2b1-b72d7adbfb96/1/Tle6dst9bSrsBSA89BuOZxbufqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/69e7fe-40c0-45c2-b2b1-b72d7adbfb96/1/Tle6dst9bSrsBSA89BuOZxbufqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:27:22:34:b7:17:4b:ba:ab:6d:86:a8:2d:47:d1:42:aa:4d:
7b:d0:f6:72:00:8e:80:5d:12:50:e7:71:ff:b8:a8:0f:c7:ec:
38:15:47:48:65:cf:16:fc:dd:35:38:53:b2:e8:f5:cb:7f:44:
28:44:ed:86:2d:9f:52:99:97:aa:31:0b:2e:21:a9:23:7b:4e:
14:17:73:1c:bc:ad:4c:11:16:e8:11:a7:02:21:00:68:a0:a2:
27:ac:50:9c:4d:69:dd:9d:d2:72:ee:df:60:02:a5:2d:6f:a0:
3f:62:bd:de:f0:99:2c:b7:79:f0:63:32:34:4c:53:a0:51:63:
e3:7c:8d:4a:6f:ba:9e:03:ef:f3:3e:51:c4:3c:eb:81:4d:2a:
25:2a:5a:a5:35:e3:04:6f:c6:4b:da:62:3b:f5:3a:6d:53:2e:
78:b9:6f:58:53:34:83:5a:96:0c:c6:f0:cb:2a:d5:87:d4:0e:
ca:9e:3e:1d:8a:38:29:21:7b:b5:aa:7a:46:c3:de:6b:68:b6:
c1:e9:16:26:00:f5:eb:c6:3d:9b:64:91:de:00:9f:6a:f0:ac:
0c:2a:05:f7:ca:1f:72:12:07:6c:1f:78:85:10:8a:20:d9:52:
04:6b:b1:fe:f9:fc:65:81:e4:ca:09:fc:35:16:50:a1:45:00:
ef:c4:5d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 03:14:28 2024 by rpki-client on console-fra.rpki-client.org