![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/8e23e5-db28-45ed-b67f-2add5e797c75/1/zdpbTOlfoL32BUFp53rvyCZd28Q.mft
File: zdpbTOlfoL32BUFp53rvyCZd28Q.mft (raw, json)
Hash identifier: YFFlKiUCpVt+N5nTKkv/RdFrP6jEs/d8CllXw0e0SAM=
Subject key identifier: 09:D9:81:DA:C8:94:23:69:D2:EE:25:56:F9:A6:37:C5:EC:50:52:60
Authority key identifier: CD:DA:5B:4C:E9:5F:A0:BD:F6:05:41:69:E7:7A:EF:C8:26:5D:DB:C4
Certificate issuer: /CN=cdda5b4ce95fa0bdf6054169e77aefc8265ddbc4
Certificate serial: 01901DEBDCF877600A59E369C3554452FE66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zdpbTOlfoL32BUFp53rvyCZd28Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/8e23e5-db28-45ed-b67f-2add5e797c75/1/zdpbTOlfoL32BUFp53rvyCZd28Q.mft
Manifest number: 1158
Signing time: Sat 15 Jun 2024 22:01:54 +0000
Manifest this update: Sat 15 Jun 2024 22:01:54 +0000
Manifest next update: Sun 16 Jun 2024 22:01:54 +0000
Files and hashes: 1: BpRW5-nU2XhwOPNkldEihh6Ukfo.roa (hash: tJ0LsYc2NoliPgi0BmFdZjcsFCGQMmoU6heIuSDFiAc=)
2: zdpbTOlfoL32BUFp53rvyCZd28Q.crl (hash: 8mUkgkhCNB4JJuPMX6t4s1RjAAhXQp6E+jUnwCOwE/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/8e23e5-db28-45ed-b67f-2add5e797c75/1/zdpbTOlfoL32BUFp53rvyCZd28Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/8e23e5-db28-45ed-b67f-2add5e797c75/1/zdpbTOlfoL32BUFp53rvyCZd28Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/zdpbTOlfoL32BUFp53rvyCZd28Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 22:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:eb:dc:f8:77:60:0a:59:e3:69:c3:55:44:52:fe:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdda5b4ce95fa0bdf6054169e77aefc8265ddbc4
Validity
Not Before: Jun 15 22:01:54 2024 GMT
Not After : Jun 16 22:01:54 2024 GMT
Subject: CN=09d981dac8942369d2ee2556f9a637c5ec505260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:27:09:63:1e:bf:6d:2f:bc:6a:4b:66:00:da:
28:d7:b0:14:d1:82:58:5d:44:c5:f4:b1:35:65:26:
75:69:c3:0f:85:b6:5f:74:b6:a4:e0:28:3f:09:78:
2b:3c:97:3c:a9:27:cc:48:87:24:36:19:20:72:b1:
96:7c:7d:2a:a9:60:f7:31:fc:5f:b4:11:a7:3c:e2:
93:e0:ad:de:c0:80:0e:4b:ff:56:29:86:aa:5b:48:
ca:5d:7f:26:49:f7:47:a3:02:2a:b0:c7:4c:c1:68:
49:5f:f2:eb:01:d8:9e:36:4e:d5:ae:ff:e8:c0:2a:
8f:92:6c:12:35:d0:be:c2:3a:6c:5b:dd:f9:14:cd:
15:fc:38:87:ed:fd:5b:7a:3a:b7:75:36:33:e0:10:
32:b7:9a:a5:b5:e3:81:9e:6a:91:ad:0d:f4:46:e9:
64:87:34:51:cb:f9:96:cf:b3:c1:44:57:d3:47:f8:
ec:de:80:c7:69:19:eb:db:8e:79:10:d3:1f:c7:5d:
56:8f:bc:b0:fa:43:a8:e1:9a:2d:af:e5:0b:41:49:
79:b5:b1:30:14:37:48:aa:2f:df:46:83:8a:7e:ff:
23:38:3f:96:67:df:af:88:91:af:43:eb:5e:79:d4:
f7:b5:f5:64:89:28:1b:ee:91:d7:1f:65:e5:37:02:
ac:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:D9:81:DA:C8:94:23:69:D2:EE:25:56:F9:A6:37:C5:EC:50:52:60
X509v3 Authority Key Identifier:
keyid:CD:DA:5B:4C:E9:5F:A0:BD:F6:05:41:69:E7:7A:EF:C8:26:5D:DB:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zdpbTOlfoL32BUFp53rvyCZd28Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/8e23e5-db28-45ed-b67f-2add5e797c75/1/zdpbTOlfoL32BUFp53rvyCZd28Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/8e23e5-db28-45ed-b67f-2add5e797c75/1/zdpbTOlfoL32BUFp53rvyCZd28Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:33:f1:29:0d:9c:94:cd:44:21:06:c3:53:e2:aa:3e:01:b0:
a6:ef:5c:8d:47:59:82:2d:a8:97:1b:f1:ec:78:da:7a:0c:08:
94:db:a3:d9:aa:3a:c8:5c:8f:5d:03:c4:f1:95:bf:3e:f8:af:
06:ab:44:05:fa:48:c5:01:0a:ee:18:9a:82:88:6e:57:37:35:
ac:ae:63:bc:57:0f:b8:12:92:6b:42:ed:cf:86:55:ef:b0:ca:
13:7f:77:51:0f:55:4c:5f:25:8a:fa:25:74:8a:35:08:f2:5a:
6d:5e:82:8f:4c:fd:7a:91:e9:ca:66:66:bc:99:4e:51:54:12:
d6:a2:a6:b3:02:41:10:e6:66:2e:ba:2d:87:ca:7b:43:c2:b4:
df:01:f8:9d:e0:b5:99:42:f7:8e:57:ff:d6:76:9c:3c:46:7f:
6e:e5:7e:a5:6b:6e:e6:da:59:d3:0b:7b:c5:f6:ac:0f:30:3d:
a7:39:b1:95:7c:76:69:09:a6:48:41:e8:e7:de:e2:0f:5c:4b:
c5:9d:ea:f6:4b:14:5a:77:63:bb:2e:70:8f:9c:53:78:89:30:
44:d3:c5:5f:0f:8f:8a:b9:09:cf:78:5d:43:d2:08:84:6d:e2:
f1:19:a0:6f:cb:d6:42:3c:c3:8e:bf:e1:1f:54:08:ca:8c:b2:
bc:73:22:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:13:43 2024 by rpki-client on console-ams.rpki-client.org