![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/985be9-9781-4fda-b7f3-0df07a908fbf/1/p2t7n3_WaUOSfGDc8SEt3AffBSM.mft
File: p2t7n3_WaUOSfGDc8SEt3AffBSM.mft (raw, json)
Hash identifier: ffE6YFqeX3ZCqHGWYx4m3AAtRdGLEsg6nNF/4OiDycI=
Subject key identifier: CB:66:BC:F7:91:B5:97:DE:C4:7C:EC:41:A2:CF:9A:D4:59:1D:57:37
Authority key identifier: A7:6B:7B:9F:7F:D6:69:43:92:7C:60:DC:F1:21:2D:DC:07:DF:05:23
Certificate issuer: /CN=a76b7b9f7fd66943927c60dcf1212ddc07df0523
Certificate serial: 0190489E1A75CD6816E14224897BAEA025B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2t7n3_WaUOSfGDc8SEt3AffBSM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/985be9-9781-4fda-b7f3-0df07a908fbf/1/p2t7n3_WaUOSfGDc8SEt3AffBSM.mft
Manifest number: 0A30
Signing time: Mon 24 Jun 2024 05:00:39 +0000
Manifest this update: Mon 24 Jun 2024 05:00:39 +0000
Manifest next update: Tue 25 Jun 2024 05:00:39 +0000
Files and hashes: 1: p2t7n3_WaUOSfGDc8SEt3AffBSM.crl (hash: dGzfiJpcl145KU96nIeCmHg7ntKUR3eWlq9A5yDtjiw=)
2: uYOMtSA-0ZVyzDuIHfDemlembZk.roa (hash: otAbd0YTdBCJXFv9VgYbH9JvTpFtFh1xaxZ6ZR6kuKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/985be9-9781-4fda-b7f3-0df07a908fbf/1/p2t7n3_WaUOSfGDc8SEt3AffBSM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/985be9-9781-4fda-b7f3-0df07a908fbf/1/p2t7n3_WaUOSfGDc8SEt3AffBSM.mft
rsync://rpki.ripe.net/repository/DEFAULT/p2t7n3_WaUOSfGDc8SEt3AffBSM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:48:9e:1a:75:cd:68:16:e1:42:24:89:7b:ae:a0:25:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a76b7b9f7fd66943927c60dcf1212ddc07df0523
Validity
Not Before: Jun 24 05:00:39 2024 GMT
Not After : Jun 25 05:00:39 2024 GMT
Subject: CN=cb66bcf791b597dec47cec41a2cf9ad4591d5737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:70:62:61:4c:8c:11:22:cf:06:1a:66:20:12:
3d:81:30:12:3c:ba:af:99:43:91:d2:68:7a:51:f7:
59:a5:f5:b6:34:3b:b5:07:c6:b2:81:a2:5e:50:ea:
44:4c:44:1f:8a:ae:26:c6:a7:f3:9e:70:10:ae:dd:
d4:3b:ed:db:62:bb:3b:f4:97:07:f3:5b:49:68:65:
4d:3f:c6:82:8e:8e:9d:27:68:ba:b6:3f:e4:ea:80:
42:8c:15:66:ae:ac:7f:c6:e1:8d:dd:4a:b5:93:a1:
c4:98:4d:0f:d0:54:b9:a5:54:d4:a6:67:b2:37:92:
e1:aa:1d:19:88:1f:b8:3c:bc:74:6f:13:06:b4:01:
8e:96:b8:a1:35:0d:94:15:5b:9e:8e:3e:ce:9a:48:
e9:ba:68:de:a2:7e:5a:1e:2b:ff:03:a6:8f:25:d5:
3b:92:73:e4:ed:84:9a:93:55:9b:54:85:5f:bc:d0:
15:25:d0:13:de:b3:b6:39:9b:bc:b3:13:c4:fb:5c:
ba:c1:0c:22:95:99:f6:a0:07:53:2d:83:67:05:fa:
17:62:23:dc:5f:d4:81:d5:dd:c2:23:4c:d1:65:0a:
26:52:66:d4:4f:3e:d2:96:21:a6:25:c3:86:7f:ea:
66:60:f6:be:e0:35:d8:8d:6b:dc:d7:1f:85:a8:5c:
9a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:66:BC:F7:91:B5:97:DE:C4:7C:EC:41:A2:CF:9A:D4:59:1D:57:37
X509v3 Authority Key Identifier:
keyid:A7:6B:7B:9F:7F:D6:69:43:92:7C:60:DC:F1:21:2D:DC:07:DF:05:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2t7n3_WaUOSfGDc8SEt3AffBSM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/985be9-9781-4fda-b7f3-0df07a908fbf/1/p2t7n3_WaUOSfGDc8SEt3AffBSM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/985be9-9781-4fda-b7f3-0df07a908fbf/1/p2t7n3_WaUOSfGDc8SEt3AffBSM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:1b:f7:f8:df:c7:73:b8:f3:2d:e5:c2:d9:00:77:f8:71:d5:
14:3f:27:72:02:7d:63:1a:13:93:28:eb:a0:c8:aa:3b:56:8c:
b9:50:ef:87:2c:31:0d:a7:50:a6:83:63:61:d9:80:74:e1:82:
fe:b6:2a:91:ca:02:3b:36:2f:c2:83:ee:ed:f4:43:20:c8:b4:
d0:2e:8a:72:ea:27:6f:a4:00:2c:bd:0d:b6:6d:5a:f8:8a:f1:
61:bd:b4:22:e0:a1:59:9a:d4:37:63:a4:71:0d:70:02:d8:23:
b8:e2:5a:01:20:54:21:e0:05:d4:85:e8:25:f1:4e:4b:5e:59:
82:45:ed:59:92:9d:34:02:05:1c:b2:72:50:04:48:f0:eb:62:
dc:62:ec:e2:30:0e:e4:99:44:0b:b5:6b:78:ff:45:6c:f2:e3:
b6:ef:e0:1c:4c:2a:59:12:85:c9:e9:95:65:d4:09:d7:23:4a:
f8:60:e4:3a:e0:23:b7:29:51:c6:b9:8d:af:25:85:84:49:80:
43:ee:60:6e:32:e1:39:44:98:d2:b0:c8:e8:e3:a6:da:3a:8a:
f0:f4:0d:a9:3b:dc:75:df:7e:dd:37:3b:ef:fe:3f:72:17:1a:
ab:48:46:71:33:f3:db:7d:99:d9:dd:e7:cc:c3:37:19:ff:91:
77:b9:d4:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 10:11:37 2024 by rpki-client on console-fra.rpki-client.org