![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/ffcce0-3116-4cfc-8a99-8f33476a08a3/1/bks1EPAE5FTfvB8aKMRZ2RjRUTw.mft
File: bks1EPAE5FTfvB8aKMRZ2RjRUTw.mft (raw, json)
Hash identifier: ChOYM5JWuX5wYEuyKzeie9uzR3gS/6zCKZEf8IELXDA=
Subject key identifier: 04:E5:EB:73:2A:CC:75:48:A0:FD:5F:F4:7D:CE:BA:9F:26:1E:3A:5E
Authority key identifier: 6E:4B:35:10:F0:04:E4:54:DF:BC:1F:1A:28:C4:59:D9:18:D1:51:3C
Certificate issuer: /CN=6e4b3510f004e454dfbc1f1a28c459d918d1513c
Certificate serial: 0190411BEF3147A7DAA502F718A9C0AA7B4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bks1EPAE5FTfvB8aKMRZ2RjRUTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/ffcce0-3116-4cfc-8a99-8f33476a08a3/1/bks1EPAE5FTfvB8aKMRZ2RjRUTw.mft
Manifest number: 11D4
Signing time: Sat 22 Jun 2024 18:01:08 +0000
Manifest this update: Sat 22 Jun 2024 18:01:08 +0000
Manifest next update: Sun 23 Jun 2024 18:01:08 +0000
Files and hashes: 1: bks1EPAE5FTfvB8aKMRZ2RjRUTw.crl (hash: YjCR0UgJASWdp64s14vFP2JIdP/6xmwC3AOcv1ATick=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/ffcce0-3116-4cfc-8a99-8f33476a08a3/1/bks1EPAE5FTfvB8aKMRZ2RjRUTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/ffcce0-3116-4cfc-8a99-8f33476a08a3/1/bks1EPAE5FTfvB8aKMRZ2RjRUTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bks1EPAE5FTfvB8aKMRZ2RjRUTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 18:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:41:1b:ef:31:47:a7:da:a5:02:f7:18:a9:c0:aa:7b:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e4b3510f004e454dfbc1f1a28c459d918d1513c
Validity
Not Before: Jun 22 18:01:08 2024 GMT
Not After : Jun 23 18:01:08 2024 GMT
Subject: CN=04e5eb732acc7548a0fd5ff47dceba9f261e3a5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:53:f2:e7:64:61:5b:cf:f1:91:51:22:d6:ec:
1b:8d:17:6c:c2:13:0c:07:cf:88:5e:5c:eb:89:41:
15:3d:1a:19:5a:5c:fc:2e:a8:a1:86:05:16:b9:7b:
ca:9d:8f:13:ff:c3:10:72:51:86:96:82:a6:39:59:
0f:92:64:ad:23:b9:5c:3a:66:bf:dc:1e:4e:85:ab:
ed:10:ac:5f:7b:7a:ad:3c:ad:e0:97:02:04:71:d6:
76:59:9d:c8:74:36:ee:fc:33:c5:b9:86:24:ca:3e:
3f:76:f3:35:2b:98:23:27:38:55:a4:59:82:3e:41:
6d:40:8c:51:35:5b:ea:c6:1b:e8:5f:c6:9e:a5:1e:
a4:60:63:4d:38:71:a3:b4:b2:2b:7c:1c:10:f7:04:
11:1b:4a:93:31:51:e6:5f:02:52:96:32:0f:2e:fb:
f4:41:87:01:a1:9f:44:1e:8d:85:16:57:d0:0f:f6:
28:66:9b:40:9c:eb:96:f1:39:12:e4:3d:6a:05:f3:
a1:cd:8e:2d:53:93:d4:c2:81:b2:79:87:a4:da:9a:
b0:64:3a:37:29:aa:df:44:fc:98:5e:03:94:95:3c:
19:fd:be:2c:a5:3d:76:57:05:1c:ab:62:84:50:5d:
d8:44:4b:af:d7:42:7f:b7:d1:45:cb:cf:84:40:70:
49:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:E5:EB:73:2A:CC:75:48:A0:FD:5F:F4:7D:CE:BA:9F:26:1E:3A:5E
X509v3 Authority Key Identifier:
keyid:6E:4B:35:10:F0:04:E4:54:DF:BC:1F:1A:28:C4:59:D9:18:D1:51:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bks1EPAE5FTfvB8aKMRZ2RjRUTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ffcce0-3116-4cfc-8a99-8f33476a08a3/1/bks1EPAE5FTfvB8aKMRZ2RjRUTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ffcce0-3116-4cfc-8a99-8f33476a08a3/1/bks1EPAE5FTfvB8aKMRZ2RjRUTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:63:90:99:07:e5:6a:7f:02:b7:3a:44:24:cc:36:5b:ce:f3:
46:c1:68:e2:63:6f:c0:fb:02:a5:df:55:e9:79:9d:27:1f:3f:
dc:4d:dd:16:ee:17:64:73:b0:97:16:e6:2c:b0:eb:88:25:8e:
84:18:60:8b:ea:dd:dc:f2:8d:00:0e:fc:14:73:8f:3f:b6:01:
d6:95:4a:9b:e5:9d:a1:2f:77:e7:45:62:8b:06:75:39:c7:7f:
31:a7:42:86:4a:78:b4:c4:1e:ed:42:e8:20:d3:bb:2e:d0:79:
e3:a9:eb:85:7f:5c:1c:a3:a1:a8:dd:33:97:1a:f3:19:9e:91:
ca:b7:35:da:dd:19:71:03:fe:e2:5e:23:18:45:5d:e5:6b:34:
63:e4:b3:6e:52:be:86:92:95:6c:95:50:5c:64:a8:23:bd:62:
0c:15:84:26:5f:31:d9:0d:c9:35:4f:2e:dc:ce:e1:15:bd:20:
9a:aa:3c:72:74:0b:35:a5:67:20:30:84:be:c4:15:19:05:e7:
15:6c:c2:a9:c9:86:da:b3:06:96:40:1c:20:b2:d7:89:20:bd:
fe:56:40:b6:b8:68:a5:48:6b:45:8c:56:f1:ba:a2:5e:c9:94:
aa:d3:fb:13:a7:a5:4a:27:e2:c2:5b:34:00:6a:93:ec:e8:91:
b8:85:11:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:13:12 2024 by rpki-client on console-fra.rpki-client.org