![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/a159a5-2129-4817-851b-b84cfff2671c/1/w-n8ZGejquEeyh5P15bA8hUYrAA.mft
File: w-n8ZGejquEeyh5P15bA8hUYrAA.mft (raw, json)
Hash identifier: 23mcpyDSfM9q8EJtUfCsXozCzhSGnvLwf7pQ0yqIJ3E=
Subject key identifier: F3:0B:04:E2:A5:39:D4:E0:4D:2D:E2:BF:40:E7:54:79:AE:49:A3:DD
Authority key identifier: C3:E9:FC:64:67:A3:AA:E1:1E:CA:1E:4F:D7:96:C0:F2:15:18:AC:00
Certificate issuer: /CN=c3e9fc6467a3aae11eca1e4fd796c0f21518ac00
Certificate serial: 01901D7CD5FD08A8A48C88B7A7E2E6DB425F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w-n8ZGejquEeyh5P15bA8hUYrAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/a159a5-2129-4817-851b-b84cfff2671c/1/w-n8ZGejquEeyh5P15bA8hUYrAA.mft
Manifest number: C4
Signing time: Sat 15 Jun 2024 20:00:38 +0000
Manifest this update: Sat 15 Jun 2024 20:00:38 +0000
Manifest next update: Sun 16 Jun 2024 20:00:38 +0000
Files and hashes: 1: w-n8ZGejquEeyh5P15bA8hUYrAA.crl (hash: OXUoI7z4L5eDO9y00mweog0RTfKK/hhK58L7wY4FdUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/a159a5-2129-4817-851b-b84cfff2671c/1/w-n8ZGejquEeyh5P15bA8hUYrAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/a159a5-2129-4817-851b-b84cfff2671c/1/w-n8ZGejquEeyh5P15bA8hUYrAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/w-n8ZGejquEeyh5P15bA8hUYrAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 20:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:7c:d5:fd:08:a8:a4:8c:88:b7:a7:e2:e6:db:42:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3e9fc6467a3aae11eca1e4fd796c0f21518ac00
Validity
Not Before: Jun 15 20:00:38 2024 GMT
Not After : Jun 16 20:00:38 2024 GMT
Subject: CN=f30b04e2a539d4e04d2de2bf40e75479ae49a3dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:75:71:ee:7f:88:8d:4d:46:94:99:a6:b9:c5:
37:1d:89:81:41:59:5c:fb:d5:f8:59:ec:d3:cd:93:
48:99:5c:c1:e1:f8:8a:5c:5a:5f:2f:81:de:83:4e:
d8:c7:7d:23:6d:49:e5:62:82:55:4a:4e:8b:7f:12:
5c:c8:41:da:85:a6:6d:12:d2:4b:5a:e6:af:3e:18:
28:a2:f2:26:42:da:52:ea:4e:b6:df:e5:cc:aa:bc:
75:81:53:18:92:bc:4a:f2:03:60:fd:b8:af:43:a1:
90:0e:ee:a6:32:1d:aa:aa:c4:2b:fa:f9:7d:8a:6f:
61:eb:61:2c:0c:74:ef:a2:73:ca:22:2f:ec:6f:88:
b0:b1:f7:3a:53:1c:30:02:10:36:62:24:e8:64:32:
7f:b5:07:ce:23:3c:06:6a:3f:72:17:25:e8:00:7d:
8d:20:fd:f8:51:f4:c3:90:81:1e:a7:1f:e6:1b:c0:
27:c0:90:08:90:c2:88:83:46:d4:10:c9:b5:72:de:
cb:65:48:ae:01:f7:90:f4:76:74:9e:ea:48:96:49:
15:15:1a:23:0f:74:1b:25:9e:82:cc:f0:f1:c5:89:
c2:f3:96:e9:b4:b9:89:1d:8b:2a:2e:ca:21:0d:88:
1c:d5:71:b0:81:37:56:52:2b:02:89:7e:dc:02:49:
e8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:0B:04:E2:A5:39:D4:E0:4D:2D:E2:BF:40:E7:54:79:AE:49:A3:DD
X509v3 Authority Key Identifier:
keyid:C3:E9:FC:64:67:A3:AA:E1:1E:CA:1E:4F:D7:96:C0:F2:15:18:AC:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w-n8ZGejquEeyh5P15bA8hUYrAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a159a5-2129-4817-851b-b84cfff2671c/1/w-n8ZGejquEeyh5P15bA8hUYrAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a159a5-2129-4817-851b-b84cfff2671c/1/w-n8ZGejquEeyh5P15bA8hUYrAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:0d:e1:26:86:05:59:92:75:3a:41:30:fb:9d:ad:fb:25:c0:
fa:c3:0b:91:46:80:eb:03:60:30:4a:c9:93:fc:6d:3e:20:72:
41:6a:b9:29:be:70:18:3f:37:6f:f0:86:23:9e:52:ca:e4:04:
d7:fe:a4:28:7e:46:1f:11:6b:14:69:2f:00:2e:80:66:36:67:
f9:20:f0:86:89:86:84:3c:93:da:39:d9:47:fa:d4:48:67:82:
4e:6a:91:54:bd:76:98:27:43:00:55:a0:80:f0:d4:53:41:a6:
a4:62:4d:6e:21:07:32:de:d3:a6:fe:61:45:01:2d:ea:d3:b7:
b0:e0:7d:2e:16:bc:ac:ad:71:40:5a:fe:62:6b:32:96:fc:1b:
a9:1b:30:8f:43:3c:57:56:ff:b5:a8:bc:d6:15:5f:84:c0:ea:
9b:71:46:e7:50:e8:5c:5d:d5:c4:c1:30:09:a5:bc:40:55:d1:
e7:b6:cf:0d:dc:a7:ec:21:2a:ae:08:63:5e:bb:24:8c:33:98:
bb:b1:7e:fb:ec:fc:80:f2:f0:e2:ce:77:32:17:7a:f9:bc:bc:
1f:16:c6:aa:36:63:eb:83:b7:cc:ca:03:fe:73:3f:0d:00:7e:
27:e4:7f:50:8b:47:ab:e7:7f:86:c7:b4:09:dc:66:4e:04:ec:
0f:68:c0:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:18:40 2024 by rpki-client on console-ams.rpki-client.org