![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/LdWWwep-y7G-F3f8DTjtBspA6r4.mft
File: LdWWwep-y7G-F3f8DTjtBspA6r4.mft (raw, json)
Hash identifier: SEWtyA5ZnmlUp3zHkHWOzowv8lmjIWd5j4fMtVSF08Y=
Subject key identifier: 44:52:3B:4F:F2:40:9A:F5:48:36:25:CF:21:81:E7:6C:BE:7A:F7:EC
Authority key identifier: 2D:D5:96:C1:EA:7E:CB:B1:BE:17:77:FC:0D:38:ED:06:CA:40:EA:BE
Certificate issuer: /CN=2dd596c1ea7ecbb1be1777fc0d38ed06ca40eabe
Certificate serial: 019041C0AAD8293200DBF32F7929FA0C885D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LdWWwep-y7G-F3f8DTjtBspA6r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/LdWWwep-y7G-F3f8DTjtBspA6r4.mft
Manifest number: 0B95
Signing time: Sat 22 Jun 2024 21:01:03 +0000
Manifest this update: Sat 22 Jun 2024 21:01:03 +0000
Manifest next update: Sun 23 Jun 2024 21:01:03 +0000
Files and hashes: 1: G6Ff4DEAtX5S5AVfb5yKr2ks65Q.roa (hash: fWysrt4P3+WEbMG4FqpjAfA6RnhaLKCEPe2TaoVc/ek=)
2: LdWWwep-y7G-F3f8DTjtBspA6r4.crl (hash: 4bEBIJvISG+q9EGOpoWbWr8ZisEiyfxqOZD6fLuvok4=)
3: d6qJL2e6GhWheL3pQLHktbiT_t0.roa (hash: S8jtpon3AzveFcImakBk6u8fH44XPkQDFwYlgkXEvOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/LdWWwep-y7G-F3f8DTjtBspA6r4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/LdWWwep-y7G-F3f8DTjtBspA6r4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LdWWwep-y7G-F3f8DTjtBspA6r4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:41:c0:aa:d8:29:32:00:db:f3:2f:79:29:fa:0c:88:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dd596c1ea7ecbb1be1777fc0d38ed06ca40eabe
Validity
Not Before: Jun 22 21:01:03 2024 GMT
Not After : Jun 23 21:01:03 2024 GMT
Subject: CN=44523b4ff2409af5483625cf2181e76cbe7af7ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1a:c8:1a:35:2e:a8:6a:b2:0f:1f:ec:9f:e4:
1f:9f:06:07:22:f8:ab:bf:8a:3b:48:9d:97:15:84:
3f:98:89:15:8d:bc:92:09:a4:bc:b0:e7:8b:7c:97:
76:b1:36:2d:18:16:93:87:07:83:3d:e8:ae:dc:8f:
3b:21:b6:d8:b6:72:66:bf:4a:ae:03:25:f9:ca:e7:
ef:28:ba:e0:e4:3e:b8:3a:59:2f:ec:4d:2a:0b:98:
5f:15:a9:b9:a3:51:8b:3a:ab:ea:8f:bc:e9:54:d8:
1e:ce:f8:ba:26:08:90:7a:44:a2:0e:da:9d:8b:fc:
37:40:32:b5:de:bb:ba:01:d4:bd:cf:74:3f:80:14:
c8:c8:80:46:9c:29:1d:1d:51:04:82:f1:01:c6:2c:
39:22:99:4c:9c:92:41:2e:bd:03:f9:1f:4d:98:85:
f1:c5:49:84:d2:88:28:f4:07:bf:2f:7e:7a:27:61:
d2:fd:28:33:4d:74:cc:63:07:8f:42:f2:b9:cd:5f:
64:fc:01:a8:a0:ce:2b:bc:ab:8d:39:80:a9:f5:05:
ef:f7:10:37:c2:52:b4:59:f8:65:51:80:2e:02:da:
e6:e8:f0:0f:4f:f1:af:ab:38:69:00:d6:a1:07:13:
59:a0:4e:aa:b6:39:b1:53:89:a6:58:4d:8f:27:ec:
86:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:52:3B:4F:F2:40:9A:F5:48:36:25:CF:21:81:E7:6C:BE:7A:F7:EC
X509v3 Authority Key Identifier:
keyid:2D:D5:96:C1:EA:7E:CB:B1:BE:17:77:FC:0D:38:ED:06:CA:40:EA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LdWWwep-y7G-F3f8DTjtBspA6r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/LdWWwep-y7G-F3f8DTjtBspA6r4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/LdWWwep-y7G-F3f8DTjtBspA6r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:8b:f5:67:54:2e:fb:77:70:11:87:00:a6:9e:29:fb:e6:b8:
24:8f:dc:16:11:d8:8d:b2:64:86:97:64:95:76:f4:2b:1a:fa:
ce:66:8b:29:df:9b:7d:b3:74:f8:5d:4d:35:fd:35:67:60:c0:
2e:12:33:90:36:22:d0:4d:45:e4:44:c1:ad:c1:f1:75:20:76:
da:fd:f4:3c:bd:82:19:09:fd:1b:fd:78:3f:24:b2:ca:a0:3f:
8e:09:9f:7e:d1:dd:eb:30:13:e7:fd:91:be:7b:53:eb:e2:f4:
f1:b7:01:9e:77:16:6d:2c:b6:f1:d6:0d:e5:dd:77:ed:7e:b7:
0e:e3:3f:a9:82:66:99:c6:8f:4d:41:2f:e7:e8:00:12:9c:df:
ee:62:d1:e1:75:ce:a0:ce:f0:46:5c:0b:c8:93:b5:f2:70:72:
1e:b2:51:3f:19:97:7d:6a:5f:52:35:51:7f:28:66:a7:0f:cc:
05:6c:25:ad:7f:27:15:34:58:fc:ca:c6:78:a2:c9:30:dd:29:
04:91:27:b4:b7:bf:23:fa:d8:f8:49:00:23:89:66:31:a4:f2:
9d:3f:65:4b:6a:5f:0d:12:59:f8:f8:f4:49:a5:74:3b:4e:5b:
ae:da:a6:bd:8e:67:f7:43:8c:e5:91:da:95:c8:03:71:a7:75:
88:a5:f5:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:14:41 2024 by rpki-client on console-fra.rpki-client.org