![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/4f3bbd-4a61-42c5-8b07-3cbd5257b03e/1/L42NDO68zXW2BrpJaPXHlG6NR8A.mft
File: L42NDO68zXW2BrpJaPXHlG6NR8A.mft (raw, json)
Hash identifier: Q+XAPYXbKvs4pBl1fVNEosuaEEqEJrOIAn2m+EKwh1E=
Subject key identifier: B4:C7:A0:96:FE:A6:83:1F:C8:31:F3:1A:10:8A:BA:04:A0:0D:E6:05
Authority key identifier: 2F:8D:8D:0C:EE:BC:CD:75:B6:06:BA:49:68:F5:C7:94:6E:8D:47:C0
Certificate issuer: /CN=2f8d8d0ceebccd75b606ba4968f5c7946e8d47c0
Certificate serial: 0190452F436BC44747A2A4CC4582F8C15761
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L42NDO68zXW2BrpJaPXHlG6NR8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/4f3bbd-4a61-42c5-8b07-3cbd5257b03e/1/L42NDO68zXW2BrpJaPXHlG6NR8A.mft
Manifest number: 07C7
Signing time: Sun 23 Jun 2024 13:00:43 +0000
Manifest this update: Sun 23 Jun 2024 13:00:43 +0000
Manifest next update: Mon 24 Jun 2024 13:00:43 +0000
Files and hashes: 1: 1-7v_CO99LlsGkRLKstc3AURDWiA.roa (hash: Skdl82qmh+SruBFLM4rMyGXAWRhVQMxkSNyLbiQln+E=)
2: L42NDO68zXW2BrpJaPXHlG6NR8A.crl (hash: n1VA5jr8A5AaAKDEkQJLlbybQqs9quKUsS/31YeCCWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/4f3bbd-4a61-42c5-8b07-3cbd5257b03e/1/L42NDO68zXW2BrpJaPXHlG6NR8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/4f3bbd-4a61-42c5-8b07-3cbd5257b03e/1/L42NDO68zXW2BrpJaPXHlG6NR8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/L42NDO68zXW2BrpJaPXHlG6NR8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 13:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:45:2f:43:6b:c4:47:47:a2:a4:cc:45:82:f8:c1:57:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f8d8d0ceebccd75b606ba4968f5c7946e8d47c0
Validity
Not Before: Jun 23 13:00:43 2024 GMT
Not After : Jun 24 13:00:43 2024 GMT
Subject: CN=b4c7a096fea6831fc831f31a108aba04a00de605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:6a:d0:56:ee:95:e4:ea:a3:d2:ee:f7:2f:fb:
4f:26:e2:87:a2:d6:00:bd:6f:55:2a:74:d0:f9:53:
78:f0:02:58:08:6b:95:69:41:52:05:de:84:de:92:
49:22:7f:d8:26:92:2d:55:a4:58:0a:7d:3e:41:79:
c9:17:d9:7d:de:12:11:d6:5d:76:2e:65:95:f6:3f:
66:0a:18:79:a7:4d:37:e5:51:46:04:f6:17:ed:5f:
75:f3:c9:ef:37:4d:24:eb:24:3a:41:1c:37:5d:02:
7a:08:11:e9:63:41:ab:8b:2f:b3:c8:46:83:29:d3:
fb:a7:72:7e:eb:6c:ec:95:b0:f2:bf:d2:d2:cb:f9:
52:de:e9:80:94:85:17:7b:b5:5a:d3:f8:fb:34:f8:
06:e6:40:b4:8d:d9:c6:19:31:9f:02:50:8a:cd:63:
40:12:47:5f:97:10:d4:9d:a3:4c:0d:65:53:11:b5:
ad:4f:67:2c:0a:28:0a:ec:1e:c5:d0:c8:03:53:38:
21:b6:f5:a0:b8:8b:8e:8d:20:7a:2b:9a:6e:48:6d:
ed:e8:9e:1a:ae:19:68:be:dd:7c:e2:41:59:83:8e:
04:1b:da:7c:94:91:fe:2c:b3:57:9a:ec:4d:88:f4:
cd:18:ea:df:6c:06:1b:b3:d2:3e:fe:24:0a:16:28:
d5:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:C7:A0:96:FE:A6:83:1F:C8:31:F3:1A:10:8A:BA:04:A0:0D:E6:05
X509v3 Authority Key Identifier:
keyid:2F:8D:8D:0C:EE:BC:CD:75:B6:06:BA:49:68:F5:C7:94:6E:8D:47:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L42NDO68zXW2BrpJaPXHlG6NR8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4f3bbd-4a61-42c5-8b07-3cbd5257b03e/1/L42NDO68zXW2BrpJaPXHlG6NR8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4f3bbd-4a61-42c5-8b07-3cbd5257b03e/1/L42NDO68zXW2BrpJaPXHlG6NR8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:95:27:1c:0a:8c:ab:de:43:20:00:6d:5f:4b:7a:49:62:3a:
c5:46:0a:10:b5:99:06:ee:15:20:7d:8b:48:39:45:d5:5d:31:
ee:a0:0c:a5:06:1a:9f:2c:45:f0:62:5d:a1:7c:eb:d4:fe:4f:
1a:40:40:fc:68:3e:2e:be:07:86:5f:12:4f:4c:48:68:9a:06:
7b:f3:ed:8c:13:bf:9f:94:2e:28:d9:74:95:bb:ce:9e:08:11:
db:97:87:02:84:8d:18:8c:a5:85:4a:ef:40:22:e1:4e:60:5f:
43:7b:c6:cf:17:5a:0a:c6:4b:e0:a4:6b:8d:a3:b9:ad:a4:08:
8f:f4:40:5d:50:ef:74:49:55:dd:c3:0d:c9:35:06:13:1a:85:
40:13:63:b7:d3:57:69:af:58:8b:c6:32:57:81:87:64:5c:0f:
d0:cf:0f:90:9d:37:0f:f6:a4:a8:62:d5:d9:24:33:02:0c:80:
cc:7d:29:19:d2:4b:f4:ff:c3:2e:45:49:24:4a:66:a7:f9:e5:
95:e5:57:25:4a:6d:b6:29:80:b2:1f:ca:4d:fa:e3:ba:2e:4b:
bf:9c:bc:d0:ff:97:0b:9e:91:d4:18:06:78:51:27:75:5a:d0:
f1:11:0c:9b:89:4d:c9:ce:af:03:0d:68:bc:84:2f:df:37:b6:
51:f0:ab:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:03:01 2024 by rpki-client on console-ams.rpki-client.org