![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/82af7c-8606-4f9b-a052-4f3bea9fb95c/1/NJYux3ZGK3bmOugVW7J7nYx-f94.mft
File: NJYux3ZGK3bmOugVW7J7nYx-f94.mft (raw, json)
Hash identifier: 4u6ueixfXITeWLnIcQWW16V8mb9B66igOAW1K9CBOPg=
Subject key identifier: 9A:A2:B3:AC:3D:83:8F:6F:7B:13:9B:EF:AD:3E:F8:6D:C4:DF:EE:E8
Authority key identifier: 34:96:2E:C7:76:46:2B:76:E6:3A:E8:15:5B:B2:7B:9D:8C:7E:7F:DE
Certificate issuer: /CN=34962ec776462b76e63ae8155bb27b9d8c7e7fde
Certificate serial: 01901B20BF6EAED6C0EEE62C67DE5E762DD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJYux3ZGK3bmOugVW7J7nYx-f94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/82af7c-8606-4f9b-a052-4f3bea9fb95c/1/NJYux3ZGK3bmOugVW7J7nYx-f94.mft
Manifest number: 0B33
Signing time: Sat 15 Jun 2024 09:00:49 +0000
Manifest this update: Sat 15 Jun 2024 09:00:49 +0000
Manifest next update: Sun 16 Jun 2024 09:00:49 +0000
Files and hashes: 1: Feep44lGWE1AZ9xIVX7k5KsGrfQ.roa (hash: ovq8cw8SYMVV4NI/OS4RfLZRb/R6DAEIg+f23788WqE=)
2: NJYux3ZGK3bmOugVW7J7nYx-f94.crl (hash: tl63ufND7cpMu61rD4SXMxlCwOn6aMCh9dFhrwRpe5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/82af7c-8606-4f9b-a052-4f3bea9fb95c/1/NJYux3ZGK3bmOugVW7J7nYx-f94.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/82af7c-8606-4f9b-a052-4f3bea9fb95c/1/NJYux3ZGK3bmOugVW7J7nYx-f94.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJYux3ZGK3bmOugVW7J7nYx-f94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1b:20:bf:6e:ae:d6:c0:ee:e6:2c:67:de:5e:76:2d:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34962ec776462b76e63ae8155bb27b9d8c7e7fde
Validity
Not Before: Jun 15 09:00:49 2024 GMT
Not After : Jun 16 09:00:49 2024 GMT
Subject: CN=9aa2b3ac3d838f6f7b139befad3ef86dc4dfeee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a2:40:d2:1c:48:6f:bc:da:5e:82:51:02:0d:
92:ed:b6:51:0f:de:bc:bc:a8:13:08:98:86:56:9b:
b0:e3:bc:2b:c3:86:f5:29:85:f4:97:e4:f1:d8:d6:
a2:b8:d7:05:c0:00:2f:7e:33:5a:54:b9:d7:27:75:
24:ee:58:06:fc:41:57:f5:98:a5:47:ad:cf:1c:5f:
1f:fb:58:63:ed:de:7f:cb:2f:68:3b:f5:78:61:06:
a6:6f:fc:5e:90:4c:5f:60:dd:29:a6:93:14:be:43:
cc:5e:90:7e:11:c4:eb:9c:ff:21:d9:9b:ac:95:a4:
0d:fb:b4:4b:2b:a9:90:a6:d5:0d:7d:9b:69:08:b9:
80:0d:1a:30:40:44:3c:31:de:b6:67:74:9c:3d:aa:
65:14:1d:20:82:ea:c1:e5:07:4d:b6:8c:05:4b:ea:
06:cd:5f:9f:76:a7:72:76:f9:1b:cf:da:0a:bb:4e:
80:0f:ef:08:63:d9:79:42:f3:93:a0:0b:f8:9f:cb:
2f:1f:b1:79:7d:90:68:38:ac:76:9b:fd:d4:85:f7:
51:91:97:82:da:75:a1:38:a9:eb:49:3e:88:33:7e:
43:56:ad:73:09:62:ee:7f:9e:22:69:0a:82:f0:78:
14:11:e4:06:13:6f:88:b2:77:51:3c:52:0f:6a:36:
f2:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:A2:B3:AC:3D:83:8F:6F:7B:13:9B:EF:AD:3E:F8:6D:C4:DF:EE:E8
X509v3 Authority Key Identifier:
keyid:34:96:2E:C7:76:46:2B:76:E6:3A:E8:15:5B:B2:7B:9D:8C:7E:7F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJYux3ZGK3bmOugVW7J7nYx-f94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/82af7c-8606-4f9b-a052-4f3bea9fb95c/1/NJYux3ZGK3bmOugVW7J7nYx-f94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/82af7c-8606-4f9b-a052-4f3bea9fb95c/1/NJYux3ZGK3bmOugVW7J7nYx-f94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:5e:8f:0f:8f:d8:2a:f9:e7:27:45:63:55:4f:84:94:db:c3:
3c:da:d1:67:ad:0d:d0:ad:e3:a7:1f:1e:c1:b5:b3:a8:b2:a5:
cb:51:dd:f4:15:54:68:59:61:b3:41:fc:54:e6:2c:fc:54:c8:
79:f9:ef:1e:bd:76:37:c9:82:3a:b1:52:dc:67:ad:e8:69:a5:
99:37:e7:96:dc:57:4b:f6:de:2f:ce:8f:13:76:69:cd:fc:ca:
8a:83:a3:4d:eb:43:e6:2f:7c:34:bf:13:5e:d6:ec:8e:ee:18:
c7:90:90:66:69:f9:76:51:b6:b4:5a:8f:f0:7d:67:08:a9:fb:
69:f8:e4:f7:9b:33:2a:b8:c4:51:21:c6:44:b2:fb:5c:a9:9f:
87:ef:dc:54:f6:f0:89:27:ed:b8:59:ef:b9:66:45:0c:18:47:
8b:2f:35:8d:df:ff:fd:59:37:bb:b0:74:5a:90:d3:0b:c1:dc:
60:02:c1:40:dd:27:e9:1f:6a:8d:e4:79:4d:a4:64:b0:d0:6c:
93:06:13:e7:bb:57:71:78:82:ac:74:cd:83:e1:a3:97:11:80:
4d:67:9e:20:eb:c5:2f:02:25:f9:ae:b3:bd:9a:b2:03:fd:1f:
6f:71:39:91:d0:b3:60:b4:aa:28:3f:70:88:13:1d:c7:ab:3f:
e6:85:f7:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 14:29:11 2024 by rpki-client on console-ams.rpki-client.org