![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.mft
File: krWsiPLNsUk0gwwawJal73MJjxI.mft (raw, json)
Hash identifier: JTQVMbSokgMmfdTLBsuuPzlsXgtWGm5R3lNJI1grtSU=
Subject key identifier: 8B:73:CB:23:78:21:AC:45:EB:93:00:2E:14:C1:D5:75:05:94:1E:38
Authority key identifier: 92:B5:AC:88:F2:CD:B1:49:34:83:0C:1A:C0:96:A5:EF:73:09:8F:12
Certificate issuer: /CN=92b5ac88f2cdb14934830c1ac096a5ef73098f12
Certificate serial: 01903AE3BDCE78264714C7BA62ABE86B68B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/krWsiPLNsUk0gwwawJal73MJjxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.mft
Manifest number: 10FA
Signing time: Fri 21 Jun 2024 13:02:02 +0000
Manifest this update: Fri 21 Jun 2024 13:02:02 +0000
Manifest next update: Sat 22 Jun 2024 13:02:02 +0000
Files and hashes: 1: krWsiPLNsUk0gwwawJal73MJjxI.crl (hash: IuothJTcK+/yElTpeEQfwcTMQTuGOdKI9py61AlucuA=)
2: x1lKQAvVTSFT9Zyej6T8l-x4eSo.roa (hash: lPeOCpE6NstprESc4Xt27oX0w2jCeX9RGYDPWgnLzl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/krWsiPLNsUk0gwwawJal73MJjxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Jun 2024 09:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:3a:e3:bd:ce:78:26:47:14:c7:ba:62:ab:e8:6b:68:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92b5ac88f2cdb14934830c1ac096a5ef73098f12
Validity
Not Before: Jun 21 13:02:02 2024 GMT
Not After : Jun 22 13:02:02 2024 GMT
Subject: CN=8b73cb237821ac45eb93002e14c1d57505941e38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d3:91:0a:03:0f:87:9f:98:c6:b7:4f:e7:75:
bb:f1:fa:bc:dd:41:bc:56:ec:b3:4a:92:34:f5:3a:
5d:44:b0:d5:59:37:83:70:64:af:9d:3f:fe:f7:15:
7b:ee:7d:84:03:c6:11:be:6a:31:c5:db:ae:0e:4b:
d5:41:72:e0:91:5f:bb:bb:13:ea:39:88:1e:2d:55:
2c:fe:06:7f:cf:4d:2c:7e:a9:c9:1f:ea:50:39:b8:
a4:0c:d6:98:c6:f1:57:49:b0:bb:3a:6e:e2:ff:29:
fd:26:3a:17:1e:5b:86:8a:a9:78:d0:45:b5:89:fe:
39:a8:3f:cf:14:ef:9d:ad:33:54:8c:bf:26:cc:ff:
04:5b:92:6f:d4:04:35:b1:c1:b9:57:25:7a:96:0f:
60:01:63:60:00:69:e8:68:a5:c0:fa:25:57:e9:d5:
01:31:9e:20:56:67:7f:f7:7e:04:9d:8c:86:90:76:
72:4a:46:96:59:e0:8e:ba:02:82:30:78:c3:49:da:
14:b6:b9:ab:c3:92:0b:5c:8e:f6:c8:23:ab:15:ec:
ca:11:05:dd:7b:ce:92:d8:ee:42:69:99:0e:8f:0a:
5c:3f:28:11:40:8e:f7:51:3a:b2:92:80:b2:25:92:
9f:80:0f:05:60:bd:f6:35:ea:18:68:66:dc:78:ac:
a7:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:73:CB:23:78:21:AC:45:EB:93:00:2E:14:C1:D5:75:05:94:1E:38
X509v3 Authority Key Identifier:
keyid:92:B5:AC:88:F2:CD:B1:49:34:83:0C:1A:C0:96:A5:EF:73:09:8F:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/krWsiPLNsUk0gwwawJal73MJjxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:0f:70:92:75:93:b7:79:16:57:9a:06:ae:88:e6:a1:e1:05:
bf:8d:06:2a:d5:1b:b9:fb:de:74:ed:13:6f:66:c1:cd:0a:67:
20:45:7d:c5:a5:4c:5f:36:3f:51:28:3b:89:47:e0:28:a0:04:
b3:2c:2c:42:93:4e:8a:1a:38:c3:dc:b8:71:71:aa:80:dd:c8:
f7:2f:b8:ca:41:7c:00:62:cf:43:37:a7:9c:f5:af:b6:39:ba:
d8:4b:95:b0:ab:46:5c:79:3e:93:0c:39:b0:ed:59:da:43:29:
36:28:e7:cc:32:4c:4a:ce:59:b7:ff:3c:ec:a6:b0:e0:5a:39:
d6:08:41:f1:51:77:e1:20:45:6e:2b:a1:cf:2c:73:b1:c6:54:
3c:d6:00:7d:14:ee:51:1a:b9:36:30:af:22:57:d2:90:96:57:
61:fe:f9:55:11:13:4f:18:77:62:7e:ed:88:92:be:b0:51:95:
4a:5f:c3:01:d3:5f:2a:e8:8b:59:6e:36:76:3b:cf:d5:e6:17:
b0:7a:b2:c7:86:fc:ca:c1:15:f5:0c:e9:8d:cd:34:a5:38:94:
e9:f5:bc:97:81:0b:97:06:19:35:66:64:6f:00:b4:ee:b7:26:
01:2f:5b:57:53:d6:13:b6:d1:ff:1b:d2:6c:4c:e1:4e:e7:5f:
f1:2f:c8:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 17:27:40 2024 by rpki-client on console-fra.rpki-client.org