![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/4ac129-59e3-4331-82ee-c79c6be3e42e/1/036cbTJBKLdulycQNiNBGDxa9mQ.mft
File: 036cbTJBKLdulycQNiNBGDxa9mQ.mft (raw, json)
Hash identifier: GNpf3Sx7f3L4ra9Ku0feUL+hXStxCdXRkt/vZKyyha0=
Subject key identifier: DF:DC:83:C7:4E:B1:EF:CF:4F:50:C4:39:FF:2D:D8:32:99:E5:F8:85
Authority key identifier: D3:7E:9C:6D:32:41:28:B7:6E:97:27:10:36:23:41:18:3C:5A:F6:64
Certificate issuer: /CN=d37e9c6d324128b76e972710362341183c5af664
Certificate serial: 01901DEDA98EDD7D497DCF5091D2192A9EE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/036cbTJBKLdulycQNiNBGDxa9mQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/4ac129-59e3-4331-82ee-c79c6be3e42e/1/036cbTJBKLdulycQNiNBGDxa9mQ.mft
Manifest number: 03D2
Signing time: Sat 15 Jun 2024 22:03:53 +0000
Manifest this update: Sat 15 Jun 2024 22:03:53 +0000
Manifest next update: Sun 16 Jun 2024 22:03:53 +0000
Files and hashes: 1: 036cbTJBKLdulycQNiNBGDxa9mQ.crl (hash: QN78CK4Tdffc9tgV37uDDcFM7t+1SAqxKkmHcEWDgoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/4ac129-59e3-4331-82ee-c79c6be3e42e/1/036cbTJBKLdulycQNiNBGDxa9mQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/4ac129-59e3-4331-82ee-c79c6be3e42e/1/036cbTJBKLdulycQNiNBGDxa9mQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/036cbTJBKLdulycQNiNBGDxa9mQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 22:03:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:ed:a9:8e:dd:7d:49:7d:cf:50:91:d2:19:2a:9e:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d37e9c6d324128b76e972710362341183c5af664
Validity
Not Before: Jun 15 22:03:53 2024 GMT
Not After : Jun 16 22:03:53 2024 GMT
Subject: CN=dfdc83c74eb1efcf4f50c439ff2dd83299e5f885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:95:f0:89:c1:00:fc:42:c4:fa:d8:7b:7f:68:
bc:d1:37:72:1f:bb:64:64:cb:d2:da:f4:53:36:bd:
56:44:53:75:b2:53:38:01:a3:ab:a8:12:5b:d9:fc:
fc:c4:07:29:69:10:7f:b1:cd:43:eb:df:c7:84:9d:
c8:a0:ac:a4:5a:95:0d:6b:e5:d2:06:8a:29:5e:30:
98:b9:81:9e:01:59:32:29:bc:bb:a5:16:52:83:6d:
9d:55:61:53:61:95:1b:90:f9:4b:ce:c8:58:f2:57:
84:93:84:50:25:b2:81:4b:b1:08:98:c6:8f:78:a7:
0e:bf:60:26:fa:fb:c5:8a:eb:04:1a:a3:a8:a0:f1:
90:53:0e:a7:e5:64:8f:97:80:55:04:28:9b:d9:b0:
a7:af:5e:67:c7:57:43:ef:1b:2d:ff:88:97:db:35:
65:d0:b8:47:5f:c4:83:43:ee:4e:97:13:d8:23:2b:
52:ff:29:dc:24:01:70:6f:f8:c4:d9:be:a1:98:82:
15:24:dc:41:5f:f7:e0:c9:b2:7d:1c:d6:c7:59:af:
f0:32:dc:3d:aa:ad:b4:31:f2:a1:ff:6c:4f:8c:11:
2c:6c:a9:e8:4e:ed:bb:f0:63:31:fb:02:68:17:bb:
97:67:5c:fb:0f:76:ec:49:e4:80:cf:1c:8a:4a:1c:
df:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:DC:83:C7:4E:B1:EF:CF:4F:50:C4:39:FF:2D:D8:32:99:E5:F8:85
X509v3 Authority Key Identifier:
keyid:D3:7E:9C:6D:32:41:28:B7:6E:97:27:10:36:23:41:18:3C:5A:F6:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/036cbTJBKLdulycQNiNBGDxa9mQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/4ac129-59e3-4331-82ee-c79c6be3e42e/1/036cbTJBKLdulycQNiNBGDxa9mQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/4ac129-59e3-4331-82ee-c79c6be3e42e/1/036cbTJBKLdulycQNiNBGDxa9mQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:fe:32:13:75:e1:33:b7:4e:89:fc:4c:20:48:46:54:e0:b7:
df:4b:20:83:df:7f:85:e3:9e:36:3b:93:19:04:24:0a:88:ee:
39:81:1b:3b:09:42:b1:79:8d:1b:6b:38:b8:a7:80:f2:c6:46:
c8:3e:a1:2f:3f:f0:4c:13:11:8e:65:5e:b7:5e:23:b4:9f:b6:
02:e6:cd:57:6b:3c:69:d7:a0:c5:f4:03:bc:5d:0d:c0:b7:4b:
6a:a6:e1:5e:d3:14:ce:b2:b5:90:37:f3:aa:28:e3:e8:6a:1c:
ef:22:40:8f:98:0e:d8:56:00:8e:62:e3:d2:fa:71:66:1a:29:
80:da:54:1c:55:ac:50:ed:28:eb:96:9a:8d:a5:67:5d:2f:23:
70:30:7e:ac:9e:4e:45:1e:72:8e:9d:97:c6:ba:21:4d:90:33:
71:44:f9:ba:cd:ce:ef:b9:41:a8:bd:08:bb:c8:9b:85:a0:0f:
36:95:2a:bd:5d:b8:bd:ba:06:29:d0:85:3b:48:16:2b:a2:1c:
13:a0:78:f8:64:30:8e:35:9b:0a:c9:b0:09:e9:49:79:ad:2c:
24:03:22:d8:e6:3e:33:d0:6f:25:8f:0d:15:ad:2b:3c:04:cb:
ab:42:d6:c4:6f:1a:16:89:6c:7f:f9:5e:0e:9d:f5:a4:3e:88:
01:fe:98:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:14:35 2024 by rpki-client on console-ams.rpki-client.org