![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/NuoqvtiQjzJ_huKwrxXUgxBJzqo.mft
File: NuoqvtiQjzJ_huKwrxXUgxBJzqo.mft (raw, json)
Hash identifier: Ajkqc8leBFsEpsuYtQ4pzoi1dHggYevQtFFlGRad818=
Subject key identifier: 97:E5:8B:22:0F:11:23:AC:DE:F6:EE:E7:0C:38:6C:C6:13:95:28:59
Authority key identifier: 36:EA:2A:BE:D8:90:8F:32:7F:86:E2:B0:AF:15:D4:83:10:49:CE:AA
Certificate issuer: /CN=36ea2abed8908f327f86e2b0af15d4831049ceaa
Certificate serial: 01901DECBC05D81DC2AF41DC2D87A5838023
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NuoqvtiQjzJ_huKwrxXUgxBJzqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/NuoqvtiQjzJ_huKwrxXUgxBJzqo.mft
Manifest number: 11C4
Signing time: Sat 15 Jun 2024 22:02:52 +0000
Manifest this update: Sat 15 Jun 2024 22:02:52 +0000
Manifest next update: Sun 16 Jun 2024 22:02:52 +0000
Files and hashes: 1: NuoqvtiQjzJ_huKwrxXUgxBJzqo.crl (hash: wc00S8qIPGRhKF179wQKVkQ7H2s6hSHtZosBc0p2pAI=)
2: YqkpZDVrandNeXMUSjAZ91gKobo.roa (hash: 6KHX4dbge+PGC39OFbr1qxDLnX420dNH4CLgmnrPdvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/NuoqvtiQjzJ_huKwrxXUgxBJzqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/NuoqvtiQjzJ_huKwrxXUgxBJzqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/NuoqvtiQjzJ_huKwrxXUgxBJzqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 22:02:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:ec:bc:05:d8:1d:c2:af:41:dc:2d:87:a5:83:80:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36ea2abed8908f327f86e2b0af15d4831049ceaa
Validity
Not Before: Jun 15 22:02:52 2024 GMT
Not After : Jun 16 22:02:52 2024 GMT
Subject: CN=97e58b220f1123acdef6eee70c386cc613952859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1e:24:54:78:3a:09:4d:fe:4c:3e:7e:5b:10:
46:ce:81:e0:0a:ba:ef:bd:06:c4:72:d6:0e:16:7e:
47:5e:fd:7d:d1:a1:d0:84:d9:28:87:55:e6:34:64:
cf:d2:9b:06:8b:fb:ed:63:12:3e:8e:e5:c4:ee:bc:
1e:fc:ca:e2:c0:4e:69:ab:4f:b9:51:28:81:02:0f:
d5:67:15:da:f5:0a:10:a9:c3:2d:05:fd:e0:11:e5:
eb:70:2e:a0:2a:fe:2c:4c:d8:49:51:13:f7:50:ad:
08:ed:ed:2d:67:ba:04:2a:98:bf:af:47:65:a6:9a:
c9:69:af:f1:df:98:a0:d7:fb:f1:96:5d:03:a1:9f:
e9:ca:3b:3a:26:ad:26:f2:8c:67:c9:c2:d3:36:b0:
a7:68:c8:37:d5:a4:eb:6b:35:4d:b3:8d:6a:5d:c4:
7a:37:cf:5b:7b:30:df:2b:88:8c:d8:3a:49:95:67:
2e:f6:83:6f:a5:3d:67:73:e3:32:e7:3d:94:86:58:
f4:a0:46:29:7e:4a:10:73:b6:07:96:02:73:20:8b:
87:06:6a:fb:8b:6e:a9:6d:d1:9c:6f:78:4e:79:e1:
fe:25:aa:a6:2b:0f:a2:b6:91:76:14:56:e2:9c:f8:
3f:63:9a:82:6b:9d:5e:c9:2b:1c:b0:a4:25:1a:ea:
e4:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:E5:8B:22:0F:11:23:AC:DE:F6:EE:E7:0C:38:6C:C6:13:95:28:59
X509v3 Authority Key Identifier:
keyid:36:EA:2A:BE:D8:90:8F:32:7F:86:E2:B0:AF:15:D4:83:10:49:CE:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NuoqvtiQjzJ_huKwrxXUgxBJzqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/NuoqvtiQjzJ_huKwrxXUgxBJzqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/NuoqvtiQjzJ_huKwrxXUgxBJzqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:9a:62:5b:88:c5:64:ec:8d:f6:18:48:ec:3d:ec:0b:e5:eb:
db:66:76:58:2d:bc:1a:25:03:09:a7:e3:e4:e8:4a:22:16:56:
2d:0e:f2:18:ad:e4:cc:ae:03:1f:be:82:61:1b:00:a5:0a:1d:
3f:64:f8:97:c0:96:60:55:31:13:2e:55:1a:8b:b9:d0:b6:14:
5f:f2:98:35:59:3b:7d:5a:46:ef:49:ac:be:2a:32:90:01:b1:
89:41:57:ca:f2:05:d8:77:8c:27:91:39:cc:ea:e0:74:e0:f4:
ad:d8:41:69:88:70:a2:03:d8:15:a7:d5:b9:6c:9e:a1:35:f3:
6b:f3:df:c6:d2:7a:94:33:de:74:20:49:0b:fd:d0:3c:32:46:
76:0e:92:be:c1:8d:7c:2b:72:56:85:66:85:11:f7:17:7a:e4:
af:82:0e:7d:02:b5:2d:41:e5:1f:be:68:62:be:75:54:31:91:
03:18:8b:ea:c8:64:c7:7b:03:2b:9c:52:56:ba:27:b7:8a:e5:
78:bd:19:d2:bb:2e:08:f5:f0:8c:68:65:53:a7:b8:ad:99:2b:
b2:b1:f0:e6:51:b8:26:51:45:ac:32:36:ba:13:f8:b7:f0:3d:
89:e9:de:32:71:b6:2f:2d:eb:af:71:65:9a:eb:e5:fc:cf:41:
16:cb:16:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:15:54 2024 by rpki-client on console-ams.rpki-client.org