![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2228c5-daae-4a1c-9421-5dfa79747989/1/ZBFazXx9oLfAq5j8ecGbdLVUTbs.mft
File: ZBFazXx9oLfAq5j8ecGbdLVUTbs.mft (raw, json)
Hash identifier: SUxKVY8X7YVk1s6vj5NoL1p0xxYmI8xWIy2bKav8njU=
Subject key identifier: 1D:F0:85:53:BB:38:46:39:F0:1A:8E:67:2C:0E:C7:A4:A4:AC:8C:17
Authority key identifier: 64:11:5A:CD:7C:7D:A0:B7:C0:AB:98:FC:79:C1:9B:74:B5:54:4D:BB
Certificate issuer: /CN=64115acd7c7da0b7c0ab98fc79c19b74b5544dbb
Certificate serial: 01901DEC1A076254E68CBF49DE5604C66BAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBFazXx9oLfAq5j8ecGbdLVUTbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2228c5-daae-4a1c-9421-5dfa79747989/1/ZBFazXx9oLfAq5j8ecGbdLVUTbs.mft
Manifest number: 0A93
Signing time: Sat 15 Jun 2024 22:02:10 +0000
Manifest this update: Sat 15 Jun 2024 22:02:10 +0000
Manifest next update: Sun 16 Jun 2024 22:02:10 +0000
Files and hashes: 1: ZBFazXx9oLfAq5j8ecGbdLVUTbs.crl (hash: ggsi1jre+4IJ8jPLW+TZmMUcqhRTb6bWPxEGLtlbefc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/2228c5-daae-4a1c-9421-5dfa79747989/1/ZBFazXx9oLfAq5j8ecGbdLVUTbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/2228c5-daae-4a1c-9421-5dfa79747989/1/ZBFazXx9oLfAq5j8ecGbdLVUTbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZBFazXx9oLfAq5j8ecGbdLVUTbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 22:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:ec:1a:07:62:54:e6:8c:bf:49:de:56:04:c6:6b:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64115acd7c7da0b7c0ab98fc79c19b74b5544dbb
Validity
Not Before: Jun 15 22:02:10 2024 GMT
Not After : Jun 16 22:02:10 2024 GMT
Subject: CN=1df08553bb384639f01a8e672c0ec7a4a4ac8c17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:87:fa:f2:5f:a3:87:bf:de:24:be:fe:45:b0:
b6:e6:11:dc:c0:65:0b:4c:08:a4:05:14:3b:b4:34:
e7:9e:0d:d8:15:25:27:fa:fc:1a:52:39:87:0a:b8:
b8:0d:49:f7:e2:c6:ef:99:ec:95:a2:1e:d5:6f:e1:
21:b5:e0:25:8a:1e:37:a7:99:6d:e2:91:e0:c0:74:
f6:ee:ef:cd:ff:f5:43:1a:84:69:80:98:74:78:85:
b1:90:82:c7:61:a1:80:e4:69:b0:77:50:a8:84:58:
fe:40:37:10:86:80:ae:7e:41:09:f2:3c:12:88:26:
fe:b9:70:95:43:07:a5:9c:f8:b5:77:98:8d:7d:74:
1b:cd:53:0b:10:23:12:6d:36:2a:13:12:a1:c4:dc:
e9:d3:71:f1:4d:52:21:ba:19:07:a5:aa:64:58:ca:
53:a8:6f:6f:82:72:fa:f3:9c:ea:80:e5:9c:14:d6:
61:29:e2:7f:84:63:63:19:c9:74:8a:34:a4:e0:5e:
b2:bf:01:76:fe:2d:be:93:c3:e3:e3:19:48:f7:53:
f3:21:f2:af:c8:76:eb:4f:78:f2:ed:9d:47:09:7b:
03:02:61:e8:a1:df:74:5d:71:0e:c8:71:b2:99:ab:
19:a2:2d:7f:a7:3f:4b:ac:01:e7:1d:62:1f:87:54:
82:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:F0:85:53:BB:38:46:39:F0:1A:8E:67:2C:0E:C7:A4:A4:AC:8C:17
X509v3 Authority Key Identifier:
keyid:64:11:5A:CD:7C:7D:A0:B7:C0:AB:98:FC:79:C1:9B:74:B5:54:4D:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBFazXx9oLfAq5j8ecGbdLVUTbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2228c5-daae-4a1c-9421-5dfa79747989/1/ZBFazXx9oLfAq5j8ecGbdLVUTbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2228c5-daae-4a1c-9421-5dfa79747989/1/ZBFazXx9oLfAq5j8ecGbdLVUTbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:be:d7:ee:e5:af:67:5f:21:4a:93:6b:74:78:17:d8:cb:29:
be:55:05:40:5d:65:63:ad:75:73:e4:4f:db:4e:e6:52:cd:43:
9c:96:f6:2e:24:be:77:0c:51:47:8a:6e:79:d3:6a:77:7f:b9:
e9:dd:1e:e9:13:fa:6e:62:e1:36:59:2f:9f:3e:56:f6:8b:3f:
6a:bf:73:02:f0:f2:eb:16:79:82:10:78:97:8f:15:9c:8c:7a:
f6:bb:4f:27:05:84:28:37:e1:11:e3:1f:67:6b:04:86:a0:fd:
bf:91:61:d3:a6:62:ab:ed:4e:ea:82:c4:ee:b5:53:c6:b8:ca:
76:54:0d:04:a0:03:b6:f5:05:b2:0e:f1:fb:b5:41:d8:e3:a7:
fa:e5:14:b8:fe:44:d8:89:e7:8e:72:21:77:10:80:48:b6:42:
e4:c8:87:43:0a:ed:bb:cc:a2:51:3c:58:c9:47:05:9a:7a:c4:
53:b4:7a:d8:51:fb:d8:3f:8c:3b:b3:9a:3b:02:b7:e6:3d:c8:
7d:99:c1:eb:17:2d:dd:6a:25:91:7c:5b:02:a4:2c:6e:6e:42:
3e:07:b5:38:cb:5a:65:d9:2e:4b:53:b9:ef:4a:b0:fa:3c:c1:
66:e0:3e:73:79:d3:aa:b4:1b:3b:fd:f9:02:6c:59:0c:9c:52:
2f:46:3b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:11:06 2024 by rpki-client on console-fra.rpki-client.org