![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/e36c3d-6013-40b4-9570-d9947af2fca7/1/YG8K7J_JH0zGBJzy2VQuvYJRWu8.mft
File: YG8K7J_JH0zGBJzy2VQuvYJRWu8.mft (raw, json)
Hash identifier: 095bB5nhS23n3fQr8KDO6OhcoP35A0MQ6yZubV78dzA=
Subject key identifier: AD:50:95:C7:7A:12:35:73:17:BE:2B:37:DF:12:59:1E:D0:7D:BB:0F
Authority key identifier: 60:6F:0A:EC:9F:C9:1F:4C:C6:04:9C:F2:D9:54:2E:BD:82:51:5A:EF
Certificate issuer: /CN=606f0aec9fc91f4cc6049cf2d9542ebd82515aef
Certificate serial: 0190452F9A47B9F4D48E044C7179B49EBC33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YG8K7J_JH0zGBJzy2VQuvYJRWu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/e36c3d-6013-40b4-9570-d9947af2fca7/1/YG8K7J_JH0zGBJzy2VQuvYJRWu8.mft
Manifest number: 11D8
Signing time: Sun 23 Jun 2024 13:01:05 +0000
Manifest this update: Sun 23 Jun 2024 13:01:05 +0000
Manifest next update: Mon 24 Jun 2024 13:01:05 +0000
Files and hashes: 1: YG8K7J_JH0zGBJzy2VQuvYJRWu8.crl (hash: XRf5N8Pkn5kn/mr27aZB8uIVmLZuYn72epk3+tTicOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/e36c3d-6013-40b4-9570-d9947af2fca7/1/YG8K7J_JH0zGBJzy2VQuvYJRWu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/e36c3d-6013-40b4-9570-d9947af2fca7/1/YG8K7J_JH0zGBJzy2VQuvYJRWu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YG8K7J_JH0zGBJzy2VQuvYJRWu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 13:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:45:2f:9a:47:b9:f4:d4:8e:04:4c:71:79:b4:9e:bc:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606f0aec9fc91f4cc6049cf2d9542ebd82515aef
Validity
Not Before: Jun 23 13:01:05 2024 GMT
Not After : Jun 24 13:01:05 2024 GMT
Subject: CN=ad5095c77a12357317be2b37df12591ed07dbb0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fc:0e:5b:57:ee:ed:ce:1c:52:d0:45:1c:1b:
ca:fe:35:bc:ea:9d:f7:63:00:c4:17:88:f9:3d:6f:
4f:3a:d3:2b:7a:56:9c:3d:66:b6:46:03:9f:92:ac:
b4:dc:57:e4:1a:0f:09:11:b0:1d:5c:8f:ee:f9:fe:
6b:4d:d4:0f:a5:bd:61:01:fd:7b:95:7f:64:93:08:
ba:f1:ca:76:0b:f5:f1:5b:98:6a:80:60:e8:a7:24:
b3:14:68:ce:44:75:37:c8:b7:8d:75:84:cc:d5:99:
30:0a:ca:3b:ae:f8:a2:fa:48:15:b0:a5:6d:3c:9f:
e7:c4:09:83:0b:cf:53:5b:b7:ea:e6:6f:cd:6a:27:
bf:11:af:27:ae:05:32:e3:d4:db:19:4c:98:83:ce:
44:d9:3a:f3:a6:2f:1c:66:c0:91:0f:94:9b:b3:be:
5b:0a:6a:94:71:7c:b3:55:44:56:6b:57:06:43:64:
6b:c8:ee:69:8a:68:13:72:f3:7b:aa:9e:6f:a8:5a:
34:9c:6b:c8:e2:26:8e:c2:d6:31:f4:9c:3c:31:b1:
b4:08:c1:8a:87:4c:ca:35:b2:f3:11:bd:96:65:ee:
3a:77:10:17:94:11:0c:59:02:cd:9e:c4:fc:74:41:
18:83:6b:2f:ac:7d:ca:6e:07:04:72:9a:a1:5f:68:
2d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:50:95:C7:7A:12:35:73:17:BE:2B:37:DF:12:59:1E:D0:7D:BB:0F
X509v3 Authority Key Identifier:
keyid:60:6F:0A:EC:9F:C9:1F:4C:C6:04:9C:F2:D9:54:2E:BD:82:51:5A:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YG8K7J_JH0zGBJzy2VQuvYJRWu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e36c3d-6013-40b4-9570-d9947af2fca7/1/YG8K7J_JH0zGBJzy2VQuvYJRWu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e36c3d-6013-40b4-9570-d9947af2fca7/1/YG8K7J_JH0zGBJzy2VQuvYJRWu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:f8:6b:d1:7a:32:85:ec:e5:52:85:30:1c:99:37:2a:04:df:
2c:96:87:61:55:e3:cd:d9:3f:dd:00:1a:3a:02:78:3a:f6:35:
d8:85:14:84:93:de:9f:1f:49:ff:58:e8:85:f6:0a:83:03:fa:
35:c1:66:71:4d:1e:1d:8c:5b:21:6b:f9:13:a7:99:fc:7f:85:
8c:d5:d4:6e:d1:b8:8a:2c:60:fb:54:4e:5b:89:10:3d:b7:dc:
ed:b2:5e:d9:c1:25:b8:c7:60:6e:58:f1:55:65:ff:3a:0b:12:
97:43:e8:e1:ff:d7:52:49:7d:3a:28:21:af:e5:96:7f:35:21:
e3:25:41:87:54:04:ee:ee:92:bb:78:8e:da:5c:7d:13:2c:1a:
b0:0c:84:cb:05:30:9e:24:f9:63:ab:cb:82:90:8e:64:85:9a:
ea:04:49:85:14:00:d5:11:86:69:43:38:c6:5b:d3:31:d2:58:
8a:72:41:14:36:c4:f2:f7:5e:92:6d:9d:23:37:77:51:23:5d:
1a:5e:d0:a7:c7:4a:9f:f3:2c:25:05:86:31:be:1c:53:a7:ad:
22:e9:a5:51:fe:f0:53:de:97:73:89:77:c4:09:bd:4a:26:0b:
db:20:59:49:f8:9d:df:28:84:06:e8:18:ae:ae:b1:1b:5b:4b:
95:f5:55:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:27:54 2024 by rpki-client on console-fra.rpki-client.org