![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/e9c0b1-166a-4bea-bb53-13cf918f6cbc/1/HAqZUB52gfo8Z-H9PXNRKKIsYxc.mft
File: HAqZUB52gfo8Z-H9PXNRKKIsYxc.mft (raw, json)
Hash identifier: 1g8Yn15EjgK3Ey/uDpTjP08twpxAUSGI7CYXq6qWx08=
Subject key identifier: F6:33:E1:5E:7B:FF:57:BA:6A:F4:E5:6B:4B:4A:41:EA:5C:9C:E6:FD
Authority key identifier: 1C:0A:99:50:1E:76:81:FA:3C:67:E1:FD:3D:73:51:28:A2:2C:63:17
Certificate issuer: /CN=1c0a99501e7681fa3c67e1fd3d735128a22c6317
Certificate serial: 01901EC6FC7157B00BACFE1BC947C8C7E7DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAqZUB52gfo8Z-H9PXNRKKIsYxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/e9c0b1-166a-4bea-bb53-13cf918f6cbc/1/HAqZUB52gfo8Z-H9PXNRKKIsYxc.mft
Manifest number: 0206
Signing time: Sun 16 Jun 2024 02:01:15 +0000
Manifest this update: Sun 16 Jun 2024 02:01:15 +0000
Manifest next update: Mon 17 Jun 2024 02:01:15 +0000
Files and hashes: 1: HAqZUB52gfo8Z-H9PXNRKKIsYxc.crl (hash: j7Uymi31+Cou3dlRmqyqX0WAX9C/QTfRN/3IYCIZzK0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/e9c0b1-166a-4bea-bb53-13cf918f6cbc/1/HAqZUB52gfo8Z-H9PXNRKKIsYxc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/e9c0b1-166a-4bea-bb53-13cf918f6cbc/1/HAqZUB52gfo8Z-H9PXNRKKIsYxc.mft
rsync://rpki.ripe.net/repository/DEFAULT/HAqZUB52gfo8Z-H9PXNRKKIsYxc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1e:c6:fc:71:57:b0:0b:ac:fe:1b:c9:47:c8:c7:e7:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c0a99501e7681fa3c67e1fd3d735128a22c6317
Validity
Not Before: Jun 16 02:01:15 2024 GMT
Not After : Jun 17 02:01:15 2024 GMT
Subject: CN=f633e15e7bff57ba6af4e56b4b4a41ea5c9ce6fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a4:79:d1:5a:b9:76:83:6b:ee:08:05:d5:3b:
ac:24:63:0f:42:ba:82:fe:2a:f2:ec:0f:82:63:92:
d7:71:3d:07:a5:29:b6:2c:50:3f:c8:f5:fe:e0:42:
94:70:5e:ac:17:27:88:6d:73:3f:db:98:cd:a0:22:
bf:09:24:9f:b5:79:42:d3:7e:22:28:8c:3f:66:fe:
ba:76:f6:25:2d:21:45:d4:87:7d:79:35:1b:1e:ea:
7a:fe:f1:ed:3e:ae:5c:2a:3c:e3:11:d9:9c:63:4d:
df:bf:52:a8:5e:eb:dd:14:49:78:79:50:6d:05:9e:
87:c9:08:7c:1b:47:0c:63:64:4d:82:ac:f4:59:0f:
63:a3:12:91:96:64:28:0d:9a:b6:a4:36:cd:38:13:
38:b3:40:99:06:6d:86:3f:05:dd:05:2d:b3:52:8d:
fc:f8:a8:c3:2c:f7:57:3f:11:4d:28:c5:9d:1e:ef:
e7:34:e4:24:84:8e:e3:85:29:e5:e9:df:ef:68:08:
6c:cf:80:ae:6e:5e:4c:d8:15:98:b6:9a:ac:01:ec:
15:fd:b8:52:70:97:6b:2c:d7:52:6b:f6:4e:b0:c1:
19:ff:d8:cb:19:cf:a9:22:69:8f:96:8c:5c:ad:f3:
2e:56:1d:4f:d3:0a:95:a5:53:bb:fc:52:38:bf:d1:
f7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:33:E1:5E:7B:FF:57:BA:6A:F4:E5:6B:4B:4A:41:EA:5C:9C:E6:FD
X509v3 Authority Key Identifier:
keyid:1C:0A:99:50:1E:76:81:FA:3C:67:E1:FD:3D:73:51:28:A2:2C:63:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAqZUB52gfo8Z-H9PXNRKKIsYxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/e9c0b1-166a-4bea-bb53-13cf918f6cbc/1/HAqZUB52gfo8Z-H9PXNRKKIsYxc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/e9c0b1-166a-4bea-bb53-13cf918f6cbc/1/HAqZUB52gfo8Z-H9PXNRKKIsYxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:53:52:94:f0:b8:88:f0:3d:56:54:43:4a:a2:30:83:73:f0:
56:10:21:02:ef:7e:1f:a3:c0:51:75:e9:12:72:7b:2e:03:2f:
88:0b:11:26:cd:23:11:4a:ba:24:64:18:5d:a4:89:c4:23:27:
46:8b:1d:f0:cc:fc:78:9c:63:e6:32:af:c0:f7:47:cc:6d:c5:
c8:77:82:87:36:16:60:4b:4d:e3:25:cc:71:bc:18:7f:e9:cc:
f0:07:6b:40:24:eb:11:1c:64:1e:50:43:a2:e2:b6:e2:65:e6:
03:5a:4e:7f:c3:3e:99:b6:f0:41:41:b1:63:0f:65:f5:4a:1a:
4d:5b:2b:cb:47:99:a3:66:86:34:50:63:00:1f:fb:93:91:f4:
4f:55:ee:42:a3:a7:29:a9:c7:f7:2e:fa:c7:c8:1d:49:5e:c9:
b7:2b:dc:5e:09:ef:17:e5:66:d4:51:85:ac:28:04:44:a8:0c:
a5:74:9e:1e:85:ab:4b:27:3f:09:4f:c8:88:be:d0:cc:b5:de:
09:96:b7:a1:d5:e2:89:81:19:d1:30:fe:9f:34:d4:e8:d1:cf:
4b:82:8d:af:c7:59:4d:de:d3:85:40:eb:34:25:8f:b6:96:7a:
ee:a7:55:ad:e2:cc:85:07:aa:9f:74:b8:f9:74:35:32:81:bc:
1c:86:f8:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:16:47 2024 by rpki-client on console-ams.rpki-client.org