![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/02a8d6-9158-4aeb-a750-78753a104226/1/jHFLbLK61OdjmoqicQKPWqG8asI.mft
File: jHFLbLK61OdjmoqicQKPWqG8asI.mft (raw, json)
Hash identifier: PIe1uNAZzJs7PRxXNdQ8svZgpZJFuhLHSqJhxM4sUv4=
Subject key identifier: 0A:1C:D3:7F:C4:55:83:A1:6B:36:76:6D:82:25:72:BE:22:22:65:32
Authority key identifier: 8C:71:4B:6C:B2:BA:D4:E7:63:9A:8A:A2:71:02:8F:5A:A1:BC:6A:C2
Certificate issuer: /CN=8c714b6cb2bad4e7639a8aa271028f5aa1bc6ac2
Certificate serial: 01901D460107D1855102687165B330826FDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jHFLbLK61OdjmoqicQKPWqG8asI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/02a8d6-9158-4aeb-a750-78753a104226/1/jHFLbLK61OdjmoqicQKPWqG8asI.mft
Manifest number: 0175
Signing time: Sat 15 Jun 2024 19:00:45 +0000
Manifest this update: Sat 15 Jun 2024 19:00:45 +0000
Manifest next update: Sun 16 Jun 2024 19:00:45 +0000
Files and hashes: 1: jHFLbLK61OdjmoqicQKPWqG8asI.crl (hash: M5/9ibMjdnEfA1zV7Sfn4Sp+1RzW+FXo73mjrcqD0AA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/02a8d6-9158-4aeb-a750-78753a104226/1/jHFLbLK61OdjmoqicQKPWqG8asI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/02a8d6-9158-4aeb-a750-78753a104226/1/jHFLbLK61OdjmoqicQKPWqG8asI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jHFLbLK61OdjmoqicQKPWqG8asI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:46:01:07:d1:85:51:02:68:71:65:b3:30:82:6f:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c714b6cb2bad4e7639a8aa271028f5aa1bc6ac2
Validity
Not Before: Jun 15 19:00:45 2024 GMT
Not After : Jun 16 19:00:45 2024 GMT
Subject: CN=0a1cd37fc45583a16b36766d822572be22226532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:8b:31:ae:f1:00:a9:5f:06:dd:d2:69:1c:ac:
a1:b3:63:2c:ae:18:d8:91:c3:86:fd:25:8b:52:9d:
32:4b:a2:80:dd:18:91:20:7f:2f:dc:ad:b1:5c:99:
87:f2:09:07:b0:b5:42:93:ab:23:03:32:26:18:f3:
be:fe:8b:d7:83:cf:f1:ca:06:d8:3e:78:d7:f7:c2:
d9:be:1f:7d:02:99:dd:39:f6:34:df:ef:8e:23:b4:
c2:b8:c5:85:1a:9a:5e:73:1d:7f:b4:54:7d:07:aa:
9e:9a:d0:ee:71:e0:79:e9:d6:8c:36:95:b8:e2:49:
a8:3b:15:68:f7:4e:a1:05:be:1a:21:cf:fc:c4:40:
ae:eb:99:9d:4a:05:e4:38:63:e7:53:7c:a7:09:9a:
65:63:0d:d5:4a:57:83:ba:7a:bc:72:15:85:8e:e9:
65:b4:a2:d7:61:34:3f:d1:dc:ad:9f:2b:24:0b:54:
3c:fc:8e:c6:e0:5b:43:5f:4f:21:2c:21:c1:66:d4:
9d:60:04:2b:b3:0b:9c:2b:51:2e:d6:5e:67:fe:da:
16:14:0e:77:26:3d:0d:a0:49:08:46:a3:bb:2d:cf:
8a:2d:76:d7:d5:00:e5:ee:c5:d0:5d:38:01:ec:e3:
0b:e1:26:1a:70:40:df:8a:63:5a:b9:fb:72:09:35:
b1:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:1C:D3:7F:C4:55:83:A1:6B:36:76:6D:82:25:72:BE:22:22:65:32
X509v3 Authority Key Identifier:
keyid:8C:71:4B:6C:B2:BA:D4:E7:63:9A:8A:A2:71:02:8F:5A:A1:BC:6A:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jHFLbLK61OdjmoqicQKPWqG8asI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/02a8d6-9158-4aeb-a750-78753a104226/1/jHFLbLK61OdjmoqicQKPWqG8asI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/02a8d6-9158-4aeb-a750-78753a104226/1/jHFLbLK61OdjmoqicQKPWqG8asI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:5c:76:c1:35:da:0e:8d:9a:b5:a0:89:2b:84:16:91:b3:bd:
08:ba:9f:5e:89:c4:7e:a6:8f:0a:4e:f5:8a:64:f3:f4:b4:e6:
a9:0f:aa:b1:46:71:c8:b1:4c:bd:d4:2a:81:b7:97:eb:ca:43:
2c:93:c4:ed:da:3c:57:4d:ff:57:6d:db:a4:45:7f:95:ea:57:
38:38:1a:05:c9:b4:b3:1b:d2:74:a9:08:76:ac:0d:e3:aa:fc:
67:fa:5e:74:5a:52:03:36:82:cd:f0:15:5e:f6:8a:39:41:37:
67:9d:50:c4:30:9c:bf:e3:38:c5:a5:e0:7e:6e:96:a9:40:7d:
45:b4:dd:2b:35:ba:a3:56:a2:25:f7:76:a1:29:57:af:21:26:
e2:ee:a3:24:f7:41:b9:81:1a:cd:2e:97:3f:7f:ae:37:61:d0:
bb:d9:44:83:8b:86:01:35:c3:5e:d2:fe:b9:61:a8:cb:ff:5c:
4b:d0:ce:75:e7:2b:71:b9:4c:7e:9a:c8:cf:30:18:dd:cc:fb:
5e:f8:af:8b:74:73:76:f1:46:93:26:61:8a:3e:1a:d1:da:42:
65:86:67:7f:c7:03:20:7f:ba:68:db:89:49:57:c4:2f:2f:c5:
ce:59:75:2e:d4:33:76:f2:82:28:aa:7a:10:44:ab:a7:3d:04:
51:c0:63:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 21:26:17 2024 by rpki-client on console-ams.rpki-client.org