![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.mft
File: ClMYxYv1unQySyXQN0BN2N2p_yQ.mft (raw, json)
Hash identifier: jI7A7ysc8/EopVi02jHEMo4HhHH7OopgZGPdCaSWR6Q=
Subject key identifier: 21:3E:72:B2:E4:67:AD:C1:DF:61:27:C5:5E:EB:65:E9:CE:0E:2E:B6
Authority key identifier: 0A:53:18:C5:8B:F5:BA:74:32:4B:25:D0:37:40:4D:D8:DD:A9:FF:24
Certificate issuer: /CN=0a5318c58bf5ba74324b25d037404dd8dda9ff24
Certificate serial: 01904189BBE9EDF4F4F3AAE946DE2DB751FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ClMYxYv1unQySyXQN0BN2N2p_yQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.mft
Manifest number: 11D7
Signing time: Sat 22 Jun 2024 20:01:03 +0000
Manifest this update: Sat 22 Jun 2024 20:01:03 +0000
Manifest next update: Sun 23 Jun 2024 20:01:03 +0000
Files and hashes: 1: ClMYxYv1unQySyXQN0BN2N2p_yQ.crl (hash: yqb7cWovSSyee2N0BLiU2YnpCrjhhNrKhmANvOvI1LI=)
2: TUlcCVfUnR68umxuc3psaln0sew.roa (hash: WjGNi7YNMa1yfY1701my4d244cKgwam/ySc7XvdmELM=)
3: bjduufRWiVJU-BJkuGgLpNtaxaQ.roa (hash: i9jU62to6dGfLF1XYnuILci4L4yHXpF8FrM9zyCngG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ClMYxYv1unQySyXQN0BN2N2p_yQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 20:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:41:89:bb:e9:ed:f4:f4:f3:aa:e9:46:de:2d:b7:51:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a5318c58bf5ba74324b25d037404dd8dda9ff24
Validity
Not Before: Jun 22 20:01:03 2024 GMT
Not After : Jun 23 20:01:03 2024 GMT
Subject: CN=213e72b2e467adc1df6127c55eeb65e9ce0e2eb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c2:7a:e3:85:01:67:f3:98:63:1d:d3:c4:d5:
72:b0:fe:bf:02:99:8f:c4:72:c4:a9:db:af:e2:6c:
27:57:f3:42:33:4b:9d:e6:ef:89:d3:f1:84:8c:05:
b7:b1:ed:0e:15:4f:5c:5f:7e:d6:cd:ff:07:07:47:
70:25:b0:fc:c1:42:70:9a:28:95:69:59:28:dd:6d:
eb:3a:a1:28:f2:a1:a4:b4:8c:fd:91:b5:2e:f5:d2:
bb:5d:f5:f6:a6:95:79:46:37:bc:c0:ef:b6:cc:7f:
41:99:f6:64:9c:bd:d1:f9:50:06:4a:c8:49:5d:3b:
96:8e:fd:22:8c:ac:a1:05:a4:f6:29:e0:fd:f9:b7:
dc:9f:e4:4f:11:a5:b9:25:f7:c4:04:d7:6f:cf:8f:
be:79:4a:98:62:e2:9e:87:b1:49:4d:44:42:e7:b1:
e8:94:58:32:d4:96:da:03:f3:4f:d9:ae:f4:68:29:
41:47:11:cf:ed:3d:5f:f6:88:f8:c4:5f:62:36:92:
5f:25:e0:49:9f:1e:d7:3f:d5:5b:ee:1c:79:ef:31:
b5:ff:d6:58:e4:10:68:33:6f:a5:ee:80:66:d8:cd:
fc:ba:22:b4:95:a5:88:2c:86:a5:2c:05:8b:cd:e4:
59:e4:cf:5c:2a:8d:5f:f7:bb:1c:45:1f:37:47:d0:
8e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:3E:72:B2:E4:67:AD:C1:DF:61:27:C5:5E:EB:65:E9:CE:0E:2E:B6
X509v3 Authority Key Identifier:
keyid:0A:53:18:C5:8B:F5:BA:74:32:4B:25:D0:37:40:4D:D8:DD:A9:FF:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ClMYxYv1unQySyXQN0BN2N2p_yQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:75:51:c8:1f:e5:27:e0:88:3b:a7:71:13:a0:d8:b6:4d:32:
2a:3d:09:ea:a2:2b:55:7a:b6:a7:72:a1:73:0f:73:b9:24:c5:
c6:33:a6:8c:45:7b:1f:11:56:2c:06:af:5e:32:f8:a2:e4:b1:
a6:1b:1e:30:b7:aa:75:4e:13:55:a1:43:b2:36:d1:58:22:75:
5d:11:50:04:90:0f:16:0c:c2:e8:cc:ca:4c:d8:ea:90:d3:68:
b1:e0:3c:e4:25:37:7d:bc:69:d9:db:70:01:e3:3a:41:de:cc:
55:31:d6:60:cb:25:31:e9:4d:68:4f:fb:ba:66:f1:df:e2:b7:
78:cd:14:ee:53:3b:8c:f6:7d:ed:57:ba:c4:ae:66:12:bf:2d:
bb:04:aa:af:87:9e:7e:68:e4:de:57:81:a0:cf:14:13:aa:bf:
db:29:32:e5:6e:2b:c3:05:5f:cd:86:b0:12:8f:35:34:57:4a:
b6:c0:4f:56:2b:aa:ec:05:fa:e9:00:8b:0e:f9:be:09:58:30:
13:b4:84:e7:1c:a8:1f:2a:d6:de:f7:e0:fd:f3:ed:2d:13:94:
d6:5e:e9:fb:0c:e0:29:36:52:f3:b2:26:10:90:cc:d8:b2:c7:
95:ec:ad:e0:a9:5c:ad:e3:09:7a:3e:98:86:4b:18:97:56:d5:
13:72:65:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:43:37 2024 by rpki-client on console-ams.rpki-client.org