![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/9d0c21-69ef-40bf-8611-0f2c3967da9c/1/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.mft
File: Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.mft (raw, json)
Hash identifier: Rh6EEEYM5zUFdYRJNFN48IASDwtZJ3fWn9H/zjQVnMc=
Subject key identifier: B9:57:A9:68:48:2F:46:74:44:F4:8B:2D:98:A0:F5:0D:22:C4:9D:67
Authority key identifier: 67:F6:49:FF:6C:7B:97:58:F4:20:B1:ED:CE:07:A4:ED:37:38:37:C0
Certificate issuer: /CN=67f649ff6c7b9758f420b1edce07a4ed373837c0
Certificate serial: 0190411BA84AEA4B60875376132EED409096
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/9d0c21-69ef-40bf-8611-0f2c3967da9c/1/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.mft
Manifest number: 11D8
Signing time: Sat 22 Jun 2024 18:00:49 +0000
Manifest this update: Sat 22 Jun 2024 18:00:49 +0000
Manifest next update: Sun 23 Jun 2024 18:00:49 +0000
Files and hashes: 1: Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.crl (hash: Y4ERlFrV65WD8ABpqHkX04zGZ4KhWz2GuxUqxie3j9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/9d0c21-69ef-40bf-8611-0f2c3967da9c/1/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/9d0c21-69ef-40bf-8611-0f2c3967da9c/1/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 18:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:41:1b:a8:4a:ea:4b:60:87:53:76:13:2e:ed:40:90:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f649ff6c7b9758f420b1edce07a4ed373837c0
Validity
Not Before: Jun 22 18:00:49 2024 GMT
Not After : Jun 23 18:00:49 2024 GMT
Subject: CN=b957a968482f467444f48b2d98a0f50d22c49d67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:30:af:5a:63:ab:26:67:3c:48:70:c6:4f:47:
97:c8:32:43:2a:b1:cc:1a:ae:e4:36:7b:f3:92:80:
17:3e:82:d7:d8:2a:c8:1c:87:84:08:31:9a:ee:a0:
a4:9c:70:f1:72:02:4f:d3:19:b0:c3:61:93:3a:9b:
c6:ff:f8:4b:4b:0f:80:6f:a7:de:0b:be:c1:01:a7:
2f:9e:05:06:e1:96:a2:48:5a:27:d3:5e:df:0f:49:
78:35:64:41:53:a8:f8:b8:cc:8c:7d:e6:be:e9:02:
1c:ff:52:25:ea:27:39:79:f6:70:ca:83:0e:8d:70:
6e:36:93:5d:0e:0f:bc:cf:a4:79:56:40:f5:35:a8:
0f:7f:8a:ea:b8:1b:02:e7:7e:ba:94:a2:48:b0:43:
f3:a4:96:56:0a:a0:34:71:92:43:75:2a:cc:94:a8:
18:47:61:39:38:96:1f:ce:56:0b:cf:17:34:aa:3a:
4e:b0:1d:45:f2:95:b3:31:bc:72:29:96:35:89:49:
00:03:72:be:e2:1d:89:86:a9:05:0e:8d:04:00:ac:
98:0b:69:cf:91:2e:c4:dc:d1:ed:0b:96:fd:af:49:
28:bb:0f:23:a8:8e:6e:6b:2e:2e:ea:ad:06:67:88:
bd:27:65:fa:73:9f:73:c9:70:d3:f1:11:19:b7:f2:
39:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:57:A9:68:48:2F:46:74:44:F4:8B:2D:98:A0:F5:0D:22:C4:9D:67
X509v3 Authority Key Identifier:
keyid:67:F6:49:FF:6C:7B:97:58:F4:20:B1:ED:CE:07:A4:ED:37:38:37:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9d0c21-69ef-40bf-8611-0f2c3967da9c/1/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9d0c21-69ef-40bf-8611-0f2c3967da9c/1/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:38:cf:b0:d6:94:19:e6:be:df:af:f7:88:c7:d2:cd:99:71:
73:21:e4:0b:35:37:32:f2:1e:a6:b2:f3:71:6b:37:42:c0:20:
48:33:a3:cf:31:c6:56:69:18:9d:c5:31:7c:62:dd:c5:bf:74:
f2:a8:00:19:b3:53:3e:af:04:da:e1:0e:ae:18:84:e3:22:76:
41:03:7e:6e:66:7a:e9:3a:38:e8:e2:34:1f:d5:88:81:a1:b8:
31:4d:81:1a:48:ec:78:5a:59:84:ab:20:bd:7c:f6:d9:96:bb:
e3:b8:79:76:69:da:82:a6:27:07:11:b3:6d:b7:31:42:6c:60:
76:4a:07:d5:13:52:4a:95:64:71:b2:71:8f:c9:b9:6c:b3:d1:
65:d3:0d:7d:48:a9:5d:8e:3e:14:15:f0:f3:da:e6:ff:32:e4:
97:e6:53:24:b1:82:f6:41:40:ae:09:d3:cb:e0:b8:a7:bd:4a:
11:6f:f7:9c:1d:3b:01:d1:fe:a4:4b:ff:66:32:2b:b9:7f:ca:
64:6f:c7:e5:3b:be:48:cb:62:1e:a9:dd:7b:97:b8:2c:5e:e9:
5a:6d:13:02:67:71:ea:7d:a4:66:f7:42:8c:63:45:57:68:e0:
32:26:4e:02:30:20:dd:6d:9e:93:1b:6a:65:92:8a:65:b9:0f:
f0:f7:32:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:43:53 2024 by rpki-client on console-ams.rpki-client.org