![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/8432ed-2c97-41d3-926a-6a4d04ba5898/1/4XsQ_WB62ScAbGLONWkeuqjwGLU.mft
File: 4XsQ_WB62ScAbGLONWkeuqjwGLU.mft (raw, json)
Hash identifier: zqHo/p8z3hD191iaFllXtBk7ztzUaj9x7Ed6epNxp4U=
Subject key identifier: CA:E0:CA:64:1E:6B:47:DE:46:AF:86:0C:BF:0B:1F:4E:4D:4A:4E:46
Authority key identifier: E1:7B:10:FD:60:7A:D9:27:00:6C:62:CE:35:69:1E:BA:A8:F0:18:B5
Certificate issuer: /CN=e17b10fd607ad927006c62ce35691ebaa8f018b5
Certificate serial: 01901EFDCE335AF339C9D1FEE978B6F014E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4XsQ_WB62ScAbGLONWkeuqjwGLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/8432ed-2c97-41d3-926a-6a4d04ba5898/1/4XsQ_WB62ScAbGLONWkeuqjwGLU.mft
Manifest number: 11CA
Signing time: Sun 16 Jun 2024 03:01:08 +0000
Manifest this update: Sun 16 Jun 2024 03:01:08 +0000
Manifest next update: Mon 17 Jun 2024 03:01:08 +0000
Files and hashes: 1: 4XsQ_WB62ScAbGLONWkeuqjwGLU.crl (hash: 787wsHsY5xSmKVc2IpvRdnWoBLu4lBGvPcnybwV8sT4=)
2: B-VevEOfaxehRWXl1vj3ImIHqn0.roa (hash: Ofe1YYirqemlsn1hn8PmWGsDYPkCXHyJNAtJqaHjlwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/8432ed-2c97-41d3-926a-6a4d04ba5898/1/4XsQ_WB62ScAbGLONWkeuqjwGLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/8432ed-2c97-41d3-926a-6a4d04ba5898/1/4XsQ_WB62ScAbGLONWkeuqjwGLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/4XsQ_WB62ScAbGLONWkeuqjwGLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1e:fd:ce:33:5a:f3:39:c9:d1:fe:e9:78:b6:f0:14:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e17b10fd607ad927006c62ce35691ebaa8f018b5
Validity
Not Before: Jun 16 03:01:08 2024 GMT
Not After : Jun 17 03:01:08 2024 GMT
Subject: CN=cae0ca641e6b47de46af860cbf0b1f4e4d4a4e46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:07:db:79:21:f4:d1:59:03:ad:5c:68:9d:8a:
6e:03:bd:6d:c8:b1:b2:d8:fa:7e:ca:ba:2f:8d:eb:
ed:b1:cd:33:52:cc:1f:82:83:1c:9f:5b:f7:0a:6a:
29:3a:28:60:9e:fb:c5:54:bf:d3:73:43:05:08:ed:
d4:e6:94:90:80:8f:c7:34:f6:42:31:00:86:ba:f4:
d8:b6:0a:83:28:cd:95:fe:07:8c:f8:3f:26:8f:ca:
b1:80:b6:19:f3:f0:d4:57:b4:e9:92:c8:dc:51:43:
72:e5:c2:b0:cc:e1:bf:0e:7f:7d:68:11:7a:3b:4e:
21:9f:21:74:4b:90:ca:f1:7f:81:ff:6e:72:18:c1:
fe:f5:b7:f7:58:0c:da:34:f1:6b:84:32:ad:68:d8:
a4:08:a9:08:5c:00:6b:cb:ea:07:d7:9c:e1:26:18:
5f:03:2b:2a:72:b0:51:9e:8d:69:cc:36:62:89:c0:
4a:2f:3b:d6:dd:78:67:01:fc:37:b5:3c:85:a5:ac:
94:b4:cd:fb:f3:02:7d:b4:43:1c:88:28:2c:38:8e:
31:1c:38:68:15:6f:4f:ec:44:e4:b4:e4:5c:be:8f:
f4:43:18:6c:e6:82:23:a3:51:15:04:70:ad:3c:81:
aa:db:a3:e3:96:69:4c:1f:76:9e:c8:e0:a7:35:45:
5a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:E0:CA:64:1E:6B:47:DE:46:AF:86:0C:BF:0B:1F:4E:4D:4A:4E:46
X509v3 Authority Key Identifier:
keyid:E1:7B:10:FD:60:7A:D9:27:00:6C:62:CE:35:69:1E:BA:A8:F0:18:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4XsQ_WB62ScAbGLONWkeuqjwGLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8432ed-2c97-41d3-926a-6a4d04ba5898/1/4XsQ_WB62ScAbGLONWkeuqjwGLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8432ed-2c97-41d3-926a-6a4d04ba5898/1/4XsQ_WB62ScAbGLONWkeuqjwGLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:f9:dd:bf:8a:91:2e:c4:96:d3:e9:c7:48:04:c4:36:a3:7b:
64:b1:a1:91:1c:7f:fe:9a:1c:cc:7b:87:96:96:61:74:e8:0b:
ef:36:2f:85:bc:47:dc:4f:0f:9c:bd:64:be:bd:05:44:b2:4b:
95:b7:80:04:3a:c8:1f:6c:21:ac:6b:bb:4f:b0:a6:49:29:e2:
fd:fe:f4:80:23:0f:17:71:9f:da:fe:70:d3:c7:7e:39:a0:2c:
b5:4f:91:4b:0d:ed:75:a2:94:9a:5a:9b:f4:4f:47:81:84:84:
24:2f:a4:6e:c4:8a:cb:8d:ad:af:45:f2:42:1c:0a:0f:b2:8b:
9c:7c:d7:cc:4a:ae:93:71:4a:a6:c6:49:51:a1:bb:4c:a8:5d:
a5:0d:ba:16:4a:48:cf:86:b3:f0:71:49:a9:0b:8d:32:b2:d8:
b9:39:ab:01:96:7c:d5:a7:45:a0:67:cf:94:9b:f9:b2:9f:09:
3a:9a:13:1d:a3:17:d7:4c:74:e6:7c:5a:58:f0:58:f4:c6:2b:
91:79:7d:3f:a5:a5:67:8c:3c:11:2c:49:a6:be:f7:50:7b:50:
ae:4d:b9:b4:fc:10:b4:bd:9c:11:ac:21:c0:98:4a:60:69:d0:
15:c9:06:99:62:09:b5:bd:66:a9:21:8c:63:91:79:7a:7e:01:
41:fd:95:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:49:33 2024 by rpki-client on console-fra.rpki-client.org