![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/ad90a5-896a-452e-ac7d-04ccc80d1876/1/S6TRDarjyS2n0u6XO3SMsflJIuk.mft
File: S6TRDarjyS2n0u6XO3SMsflJIuk.mft (raw, json)
Hash identifier: gG9E6jJa3xiEEiPRMguI+j4O+/Rl9QL7vhmWuCH2Q2Q=
Subject key identifier: 17:E2:AB:8D:81:FE:BD:13:30:55:C1:48:31:CF:BD:75:AE:C7:23:A7
Authority key identifier: 4B:A4:D1:0D:AA:E3:C9:2D:A7:D2:EE:97:3B:74:8C:B1:F9:49:22:E9
Certificate issuer: /CN=4ba4d10daae3c92da7d2ee973b748cb1f94922e9
Certificate serial: 01901DECC66A9A80A8FBA2CBBB23557BA5BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S6TRDarjyS2n0u6XO3SMsflJIuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/ad90a5-896a-452e-ac7d-04ccc80d1876/1/S6TRDarjyS2n0u6XO3SMsflJIuk.mft
Manifest number: 056A
Signing time: Sat 15 Jun 2024 22:02:54 +0000
Manifest this update: Sat 15 Jun 2024 22:02:54 +0000
Manifest next update: Sun 16 Jun 2024 22:02:54 +0000
Files and hashes: 1: S6TRDarjyS2n0u6XO3SMsflJIuk.crl (hash: 1DPPEHda2BWKKTsFin+NNB23jmrnAJbfAyrtTITVVvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/ad90a5-896a-452e-ac7d-04ccc80d1876/1/S6TRDarjyS2n0u6XO3SMsflJIuk.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/ad90a5-896a-452e-ac7d-04ccc80d1876/1/S6TRDarjyS2n0u6XO3SMsflJIuk.mft
rsync://rpki.ripe.net/repository/DEFAULT/S6TRDarjyS2n0u6XO3SMsflJIuk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:ec:c6:6a:9a:80:a8:fb:a2:cb:bb:23:55:7b:a5:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ba4d10daae3c92da7d2ee973b748cb1f94922e9
Validity
Not Before: Jun 15 22:02:54 2024 GMT
Not After : Jun 16 22:02:54 2024 GMT
Subject: CN=17e2ab8d81febd133055c14831cfbd75aec723a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:bc:93:12:9e:87:4d:c8:47:9b:ef:2c:05:db:
b5:a0:7a:0c:62:3f:4d:eb:6f:05:84:4b:6f:1e:83:
38:8d:94:4d:a3:23:2a:b6:f8:42:5a:2a:a8:1f:b1:
01:42:72:c4:80:1c:bb:6e:b6:de:56:73:3f:08:e9:
52:97:a0:77:3f:2c:c5:16:01:86:be:63:e6:e8:a0:
c2:68:07:6d:4d:8a:eb:5a:d2:2b:f7:06:9d:5f:c9:
50:34:c7:a7:72:cc:1a:f4:2a:57:14:88:37:2a:a3:
ea:37:46:59:3e:71:bc:77:e1:64:f4:6b:22:e0:96:
ef:b6:8b:5c:43:12:3e:67:51:b9:65:33:35:2b:54:
77:d9:65:ef:14:a2:44:db:98:cd:19:99:66:60:70:
40:03:20:bb:16:a4:62:3f:34:1a:a8:06:6d:04:be:
17:17:90:df:03:dd:51:14:8b:60:8d:15:0e:9e:a4:
47:81:49:49:8c:67:58:52:05:a6:ae:fa:92:3b:10:
63:72:ac:bc:df:f5:d0:fd:37:aa:5d:22:f8:26:09:
52:04:0d:c9:cc:48:c9:9a:f5:b7:dd:5c:7d:06:4a:
23:d6:0d:1e:cc:f7:84:71:7d:68:22:46:5e:5e:c0:
a0:88:ea:da:b9:ef:57:78:3b:d8:8c:62:10:c3:76:
71:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:E2:AB:8D:81:FE:BD:13:30:55:C1:48:31:CF:BD:75:AE:C7:23:A7
X509v3 Authority Key Identifier:
keyid:4B:A4:D1:0D:AA:E3:C9:2D:A7:D2:EE:97:3B:74:8C:B1:F9:49:22:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6TRDarjyS2n0u6XO3SMsflJIuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ad90a5-896a-452e-ac7d-04ccc80d1876/1/S6TRDarjyS2n0u6XO3SMsflJIuk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ad90a5-896a-452e-ac7d-04ccc80d1876/1/S6TRDarjyS2n0u6XO3SMsflJIuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:60:fb:8e:63:18:43:07:f6:5e:d4:8d:92:66:54:29:56:a4:
71:44:38:2f:41:5f:2b:49:bc:89:32:c2:f1:d3:85:c1:c0:c6:
76:b4:35:2a:b8:fc:c6:c7:c7:a9:58:88:ba:f8:f4:cd:90:d8:
c2:59:f7:7a:78:13:d6:47:56:e1:e1:76:b8:ae:18:77:a7:ba:
f3:32:44:2a:74:80:d6:31:d0:78:a1:02:2b:a6:c7:fd:d9:90:
a5:48:12:44:1d:1d:32:94:f7:5b:0e:13:ee:dc:7d:8d:33:9e:
f4:69:a5:52:e7:e7:92:b1:cf:d8:13:1d:6c:9b:cb:bb:d4:18:
f6:39:4c:78:34:1e:0f:d5:d5:9b:4b:86:28:91:5b:5d:44:0b:
3b:7e:c5:f0:d0:37:c0:4e:01:b2:ac:bf:36:16:06:c9:f2:e9:
8c:eb:f1:a1:e3:9e:ae:9a:de:da:e8:c8:c5:99:76:b5:a0:6e:
af:3d:03:b0:cb:ae:18:1b:ca:9d:01:e8:00:70:c6:e9:cd:4c:
a3:95:44:69:3b:4c:05:46:2b:a2:85:54:72:7c:6b:d0:a0:2b:
21:c2:7e:de:1c:2e:32:20:54:ce:ec:4e:ad:ea:2e:3f:1d:f6:
58:88:bb:01:00:82:ac:0b:4f:09:f0:d9:93:33:35:08:e0:25:
37:5c:7f:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:43:03 2024 by rpki-client on console-ams.rpki-client.org