![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/d05a2e-c281-4dab-8373-a1779904b1c5/1/slLdonImonXj55s3TI8mPNLY7NE.mft
File: slLdonImonXj55s3TI8mPNLY7NE.mft (raw, json)
Hash identifier: Du+VZ7KniQ0KuXg2aVBNMnc3NeSmC92mQgfSXLWAgu0=
Subject key identifier: 09:6B:93:0F:A9:67:21:72:B3:85:AC:74:F7:A7:C6:5D:4E:C5:96:8C
Authority key identifier: B2:52:DD:A2:72:26:A2:75:E3:E7:9B:37:4C:8F:26:3C:D2:D8:EC:D1
Certificate issuer: /CN=b252dda27226a275e3e79b374c8f263cd2d8ecd1
Certificate serial: 019044F862685A93B0DFBA8AB2499B9D186C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/slLdonImonXj55s3TI8mPNLY7NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/d05a2e-c281-4dab-8373-a1779904b1c5/1/slLdonImonXj55s3TI8mPNLY7NE.mft
Manifest number: 11DD
Signing time: Sun 23 Jun 2024 12:00:47 +0000
Manifest this update: Sun 23 Jun 2024 12:00:47 +0000
Manifest next update: Mon 24 Jun 2024 12:00:47 +0000
Files and hashes: 1: 1_WrkjzON8sJnRIXyrgg0Ed23lE.roa (hash: lksEtWAkBRRjAuMJ/mSrhb/aUNjT3Zd72D7CSu1d+L8=)
2: slLdonImonXj55s3TI8mPNLY7NE.crl (hash: DrK/Sv+GKjTa+7y9CKZL+jZfsV1jUIjl+WHrFe3jdEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/d05a2e-c281-4dab-8373-a1779904b1c5/1/slLdonImonXj55s3TI8mPNLY7NE.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/d05a2e-c281-4dab-8373-a1779904b1c5/1/slLdonImonXj55s3TI8mPNLY7NE.mft
rsync://rpki.ripe.net/repository/DEFAULT/slLdonImonXj55s3TI8mPNLY7NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 12:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:44:f8:62:68:5a:93:b0:df:ba:8a:b2:49:9b:9d:18:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b252dda27226a275e3e79b374c8f263cd2d8ecd1
Validity
Not Before: Jun 23 12:00:47 2024 GMT
Not After : Jun 24 12:00:47 2024 GMT
Subject: CN=096b930fa9672172b385ac74f7a7c65d4ec5968c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:be:8e:85:04:39:c1:1c:3a:f9:20:ce:0e:ac:
5d:77:17:c7:63:e2:15:67:db:af:be:85:79:f2:5f:
4d:df:69:d2:e2:06:69:bd:e1:b0:3f:3c:57:f1:6b:
57:60:9c:55:a1:fd:81:95:9a:22:82:b6:8d:aa:c2:
5f:bb:4a:b8:31:f5:64:56:e8:57:10:40:c9:4e:7d:
de:06:dd:4c:1c:f7:50:db:84:47:73:7f:bc:98:40:
4c:ac:e5:a1:e1:f4:a3:ab:9e:d1:3f:f6:9a:fd:44:
57:97:46:9e:f5:2f:5a:7a:47:12:f3:8f:b4:b6:19:
7f:f8:3d:3f:ac:6f:46:a9:30:be:cd:d2:d9:a6:fc:
59:4b:42:05:01:1c:c3:54:40:6d:4e:06:f7:25:64:
e2:43:6e:bb:13:86:47:9e:62:5a:a9:63:fc:97:ad:
42:01:39:00:7d:f1:69:91:0b:d7:55:08:c7:43:d8:
96:d7:3d:5f:1b:3e:d3:02:db:67:75:a4:2c:71:60:
e8:88:49:ee:54:99:25:1d:cf:91:ce:1f:07:88:5a:
fa:99:ab:d2:f4:bb:df:e5:ee:63:18:29:83:51:03:
78:bd:94:b7:a6:6e:c8:a2:f5:48:b9:71:24:4f:12:
e7:7a:1d:93:c4:36:b4:0f:9e:5b:3e:a2:ef:3c:ad:
32:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:6B:93:0F:A9:67:21:72:B3:85:AC:74:F7:A7:C6:5D:4E:C5:96:8C
X509v3 Authority Key Identifier:
keyid:B2:52:DD:A2:72:26:A2:75:E3:E7:9B:37:4C:8F:26:3C:D2:D8:EC:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/slLdonImonXj55s3TI8mPNLY7NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d05a2e-c281-4dab-8373-a1779904b1c5/1/slLdonImonXj55s3TI8mPNLY7NE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d05a2e-c281-4dab-8373-a1779904b1c5/1/slLdonImonXj55s3TI8mPNLY7NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:c8:c9:da:ea:fd:05:fd:4c:85:09:96:d3:b8:22:bd:8f:db:
33:ff:8f:98:56:80:69:64:40:94:ab:7a:97:a6:ba:8f:da:7a:
b5:16:55:89:13:54:96:39:4d:01:50:d1:4f:78:2d:2c:03:c3:
da:40:5f:d1:14:34:cf:1c:69:91:6e:1f:b8:2e:0c:ba:cb:1e:
02:6b:d9:76:f9:1b:98:2f:a4:2f:27:db:7e:96:84:27:dc:59:
7d:4f:38:b2:f6:c8:ca:bc:1c:f3:dd:5a:73:21:74:6e:d6:67:
0d:2a:c0:14:05:61:22:e0:3e:b2:58:e5:c7:04:f8:f9:59:d5:
74:40:c2:8c:09:d9:e3:f0:d2:0a:08:bd:d4:92:42:2b:aa:c5:
9b:89:8e:c7:08:b9:8b:d2:fb:4f:fe:58:6e:6d:3c:99:28:0e:
4d:a3:bc:fc:22:26:2d:3e:04:29:0f:a7:fa:21:d1:8d:9a:5e:
9d:bf:84:55:bc:16:6a:53:68:0b:70:f3:77:77:51:61:bb:d6:
6b:9c:bf:4d:7a:bb:68:c4:3e:cf:90:da:a3:c9:2e:3c:ab:38:
de:d6:97:46:c4:bc:b7:ec:d5:2c:d5:fa:56:b9:87:8b:c8:9d:
c5:49:12:4f:b5:99:80:c3:99:da:9d:8b:5c:70:3e:25:0a:72:
8d:73:34:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:29:37 2024 by rpki-client on console-fra.rpki-client.org