![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4942f6-f58c-4eef-918b-f2d9f0e7a697/1/XfqvthoMdKBJ2WvN5Zy5QsyNVXk.mft
File: XfqvthoMdKBJ2WvN5Zy5QsyNVXk.mft (raw, json)
Hash identifier: /SvWAuxv/X2fHcwl4SvEePd97Hr6f/60x6bFEj4s9gA=
Subject key identifier: 41:D2:C8:52:89:CA:4A:C3:DA:A5:07:7E:A7:4D:31:EB:27:07:40:B7
Authority key identifier: 5D:FA:AF:B6:1A:0C:74:A0:49:D9:6B:CD:E5:9C:B9:42:CC:8D:55:79
Certificate issuer: /CN=5dfaafb61a0c74a049d96bcde59cb942cc8d5579
Certificate serial: 01901DEC6914BD9D50E234994951EF2EB1A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfqvthoMdKBJ2WvN5Zy5QsyNVXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/4942f6-f58c-4eef-918b-f2d9f0e7a697/1/XfqvthoMdKBJ2WvN5Zy5QsyNVXk.mft
Manifest number: 11C2
Signing time: Sat 15 Jun 2024 22:02:30 +0000
Manifest this update: Sat 15 Jun 2024 22:02:30 +0000
Manifest next update: Sun 16 Jun 2024 22:02:30 +0000
Files and hashes: 1: XfqvthoMdKBJ2WvN5Zy5QsyNVXk.crl (hash: uwGAQR3XTamJGnHr1uUzQEdUEYsmEOUc+yWsfjSDDaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/4942f6-f58c-4eef-918b-f2d9f0e7a697/1/XfqvthoMdKBJ2WvN5Zy5QsyNVXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/4942f6-f58c-4eef-918b-f2d9f0e7a697/1/XfqvthoMdKBJ2WvN5Zy5QsyNVXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XfqvthoMdKBJ2WvN5Zy5QsyNVXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 22:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:ec:69:14:bd:9d:50:e2:34:99:49:51:ef:2e:b1:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dfaafb61a0c74a049d96bcde59cb942cc8d5579
Validity
Not Before: Jun 15 22:02:30 2024 GMT
Not After : Jun 16 22:02:30 2024 GMT
Subject: CN=41d2c85289ca4ac3daa5077ea74d31eb270740b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ef:fb:15:b5:20:2e:f8:72:17:e9:0d:fb:99:
fd:df:40:4b:9c:11:05:d5:7c:1f:6c:87:76:c5:a3:
d5:59:e8:bd:38:97:66:21:a5:99:58:b1:35:e9:24:
ac:47:06:c8:98:9f:70:f9:e0:40:db:47:a1:9d:32:
a9:1f:79:0d:6b:cd:a4:0b:49:18:94:3b:6b:07:77:
3d:85:26:7f:d8:d9:b2:a4:bb:e4:f7:67:91:3c:72:
97:6d:1a:ec:14:af:4e:66:80:e0:89:c4:40:f4:f4:
20:2c:14:54:09:ba:0a:bb:16:46:92:33:fa:6c:b3:
4c:60:06:87:a8:86:0a:97:70:75:b2:90:43:bd:1f:
1c:ad:22:89:b4:23:02:dc:ca:e6:49:b5:4c:52:96:
5e:06:57:b9:b6:e8:d8:95:ef:c2:f4:c2:b3:28:bf:
a7:40:45:22:2b:2c:f5:87:92:d8:67:dd:9b:ad:a2:
34:b9:ba:1d:ac:0d:25:ef:7f:ab:64:9a:06:f2:aa:
0d:c4:07:0d:41:53:ac:77:4d:92:54:70:10:38:2f:
31:0f:56:ac:8f:00:04:07:0f:56:94:36:d8:3d:4c:
7f:1a:53:2b:70:36:24:5a:82:66:1d:88:1e:54:95:
bb:a1:fe:30:55:ff:75:1e:75:73:e5:99:b4:9a:c5:
5a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:D2:C8:52:89:CA:4A:C3:DA:A5:07:7E:A7:4D:31:EB:27:07:40:B7
X509v3 Authority Key Identifier:
keyid:5D:FA:AF:B6:1A:0C:74:A0:49:D9:6B:CD:E5:9C:B9:42:CC:8D:55:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfqvthoMdKBJ2WvN5Zy5QsyNVXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4942f6-f58c-4eef-918b-f2d9f0e7a697/1/XfqvthoMdKBJ2WvN5Zy5QsyNVXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4942f6-f58c-4eef-918b-f2d9f0e7a697/1/XfqvthoMdKBJ2WvN5Zy5QsyNVXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:46:30:3c:c6:4f:70:ae:4d:d6:7c:7c:eb:3c:24:fe:62:ff:
bb:25:d4:68:d4:a1:5e:b7:64:17:ff:c0:88:00:1e:f1:34:93:
46:5b:da:4e:4a:7a:9e:d1:cc:9f:46:c5:46:4e:b4:0f:1c:2d:
e0:ba:d1:e5:9d:08:42:49:04:73:0a:f5:34:cf:c2:43:08:40:
fe:b2:8d:8b:62:34:20:8c:57:5c:db:9b:7a:a5:ea:87:f9:41:
a9:1a:cb:36:c7:e5:1e:37:e8:37:3a:ed:57:60:2c:0c:be:45:
76:21:ca:b0:ea:b4:f1:3f:22:b1:bc:84:68:87:56:6f:c1:42:
a3:c9:5f:3e:9e:d6:be:a9:b1:56:a3:77:c3:6a:f8:29:7f:e7:
b6:97:a7:74:8f:79:de:63:4f:0e:12:7b:8d:c4:fb:ee:4b:a0:
59:2c:16:47:40:b7:69:9a:c0:57:24:70:4d:bd:25:31:6f:b5:
48:e1:bc:b8:c5:c4:3b:4e:81:c7:ae:49:42:7e:7b:71:e2:b2:
f7:5a:f5:e3:59:be:bb:1c:1e:65:13:f0:11:42:6c:ed:3e:41:
c2:21:19:41:fa:2c:69:5c:09:a1:44:1e:1d:d5:56:f4:e1:3b:
1a:79:60:e1:0d:c1:63:9f:28:51:a3:65:2b:bb:8b:8b:db:44:
ac:98:86:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:17:08 2024 by rpki-client on console-ams.rpki-client.org