![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/e24544-9533-4d86-a279-6fbfcec4f505/1/Ftmm_lJPhujQhO3I1kpg361S3xM.mft
File: Ftmm_lJPhujQhO3I1kpg361S3xM.mft (raw, json)
Hash identifier: 95uE49zziBPyYR1CD9RJqO9CyY/hJlR/wgGNSl8tneY=
Subject key identifier: 4F:85:B5:5D:99:87:38:F2:16:D8:C3:59:AA:18:9B:9B:06:2F:8A:20
Authority key identifier: 16:D9:A6:FE:52:4F:86:E8:D0:84:ED:C8:D6:4A:60:DF:AD:52:DF:13
Certificate issuer: /CN=16d9a6fe524f86e8d084edc8d64a60dfad52df13
Certificate serial: 01901BFDC696F7B82C30101BCD31E85C2AEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ftmm_lJPhujQhO3I1kpg361S3xM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/e24544-9533-4d86-a279-6fbfcec4f505/1/Ftmm_lJPhujQhO3I1kpg361S3xM.mft
Manifest number: 013A
Signing time: Sat 15 Jun 2024 13:02:14 +0000
Manifest this update: Sat 15 Jun 2024 13:02:14 +0000
Manifest next update: Sun 16 Jun 2024 13:02:14 +0000
Files and hashes: 1: Ftmm_lJPhujQhO3I1kpg361S3xM.crl (hash: tl5bKTyGghnHlo5QE6FUnDPfP6077vxZvSVzKgoykpo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/e24544-9533-4d86-a279-6fbfcec4f505/1/Ftmm_lJPhujQhO3I1kpg361S3xM.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/e24544-9533-4d86-a279-6fbfcec4f505/1/Ftmm_lJPhujQhO3I1kpg361S3xM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ftmm_lJPhujQhO3I1kpg361S3xM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1b:fd:c6:96:f7:b8:2c:30:10:1b:cd:31:e8:5c:2a:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16d9a6fe524f86e8d084edc8d64a60dfad52df13
Validity
Not Before: Jun 15 13:02:14 2024 GMT
Not After : Jun 16 13:02:14 2024 GMT
Subject: CN=4f85b55d998738f216d8c359aa189b9b062f8a20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:46:07:7c:70:38:28:0e:b2:44:5c:72:3e:92:
af:eb:e8:d4:79:e3:93:06:b0:b9:1d:6a:c8:3b:48:
e0:be:62:53:59:3e:9e:90:05:81:5c:be:98:97:1c:
35:cc:e9:7b:50:0c:82:d7:81:26:d9:90:d0:04:c9:
c0:ef:ac:61:78:a5:a1:a3:3d:b2:79:06:c5:8f:82:
95:e2:e0:c5:56:74:6e:99:02:e7:5f:4d:9c:11:34:
51:33:8a:06:e2:49:cc:4d:a8:f0:63:3b:61:24:81:
1d:98:97:7e:5a:c7:c3:d7:bd:73:0f:cc:93:e1:d0:
ed:11:ae:ab:b6:6b:ac:54:9d:33:e5:c8:ca:03:a9:
02:48:0a:17:57:78:a9:62:25:41:c9:2f:6a:bf:3f:
34:23:e1:64:fd:63:04:71:af:d3:db:93:15:ac:a4:
e8:74:21:16:6a:1d:48:7d:83:91:c5:ae:a4:7d:38:
84:81:5e:85:b4:20:37:a1:61:a1:e9:12:46:a6:a7:
e7:34:f4:fd:fa:d7:75:fb:13:74:bd:87:19:21:9c:
e3:43:17:f0:00:da:17:54:05:0c:c8:66:04:a6:69:
6b:ce:0a:31:2f:37:30:eb:3a:bc:83:56:d3:d7:26:
81:3b:20:df:fb:15:ea:5c:ce:8a:02:3b:5a:f2:4a:
1f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:85:B5:5D:99:87:38:F2:16:D8:C3:59:AA:18:9B:9B:06:2F:8A:20
X509v3 Authority Key Identifier:
keyid:16:D9:A6:FE:52:4F:86:E8:D0:84:ED:C8:D6:4A:60:DF:AD:52:DF:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ftmm_lJPhujQhO3I1kpg361S3xM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/e24544-9533-4d86-a279-6fbfcec4f505/1/Ftmm_lJPhujQhO3I1kpg361S3xM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/e24544-9533-4d86-a279-6fbfcec4f505/1/Ftmm_lJPhujQhO3I1kpg361S3xM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:fb:9d:34:31:b5:7b:27:ee:fb:16:86:1e:8e:83:e9:11:25:
bd:09:ef:ba:2f:2a:22:c3:0c:64:2d:cd:e4:ae:10:b7:0c:a4:
ac:b4:a0:1f:e0:24:18:35:74:0f:b1:f9:3c:6b:47:38:48:92:
bd:3b:53:59:e4:29:73:a0:40:35:a7:91:bc:59:ed:a1:a9:0a:
53:cb:ba:90:a9:60:95:cb:bf:14:98:45:cb:57:7c:8b:2c:90:
da:8e:be:22:ea:a4:64:6c:8e:77:58:56:81:ed:a8:c4:ba:d8:
d5:4a:09:97:e1:b6:e4:48:aa:27:a3:09:7e:6b:13:7d:5f:af:
f4:75:f6:76:43:10:d8:7f:79:6d:18:cf:9e:de:f2:ed:1e:f0:
f2:8d:65:8b:fb:e7:6c:31:e3:c9:1f:5d:21:17:28:ea:e4:c9:
e3:4b:16:3b:3f:3c:88:a3:a4:f2:f4:67:da:94:e5:2e:8f:04:
b2:96:4c:ac:89:34:4a:10:af:24:b9:da:64:61:12:c7:0f:8c:
d7:3c:67:66:ca:2b:85:be:15:4e:f7:f4:bd:f9:46:3c:bb:4c:
8b:62:2a:07:2f:a6:2a:06:c2:a3:d3:a0:23:18:5d:76:fd:5b:
66:78:e8:40:3b:cc:1a:5e:82:fb:64:48:4f:42:40:f4:9d:5d:
85:84:b5:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 14:35:00 2024 by rpki-client on console-fra.rpki-client.org