![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.mft
File: 3OVg8OyFDainwPjW84JRAtTeSs4.mft (raw, json)
Hash identifier: 3MMpARnTBgqNHC5Eook3mEyxy5+flUXJ0h1IwxP8znw=
Subject key identifier: A7:C8:E8:37:F8:7F:9E:4F:78:E2:92:79:9D:CE:C0:CF:F2:6E:AF:5B
Authority key identifier: DC:E5:60:F0:EC:85:0D:A8:A7:C0:F8:D6:F3:82:51:02:D4:DE:4A:CE
Certificate issuer: /CN=dce560f0ec850da8a7c0f8d6f3825102d4de4ace
Certificate serial: 01901DEB8C4B81D6E3E5C53B686C0F8CA3FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OVg8OyFDainwPjW84JRAtTeSs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.mft
Manifest number: 11C6
Signing time: Sat 15 Jun 2024 22:01:34 +0000
Manifest this update: Sat 15 Jun 2024 22:01:34 +0000
Manifest next update: Sun 16 Jun 2024 22:01:34 +0000
Files and hashes: 1: 3OVg8OyFDainwPjW84JRAtTeSs4.crl (hash: kOxA0exSwIvQJJj7tP2FdicS0Eya1w4Lr21ZGozVI2E=)
2: qFml8DUiLOYSpc35VCsPyfgK3G0.roa (hash: tpKPY4d14p0c2/l+5FxC0Rzd4m4G9QxcBpfkzmlm+AY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3OVg8OyFDainwPjW84JRAtTeSs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 22:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:eb:8c:4b:81:d6:e3:e5:c5:3b:68:6c:0f:8c:a3:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce560f0ec850da8a7c0f8d6f3825102d4de4ace
Validity
Not Before: Jun 15 22:01:34 2024 GMT
Not After : Jun 16 22:01:34 2024 GMT
Subject: CN=a7c8e837f87f9e4f78e292799dcec0cff26eaf5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:21:11:35:54:b9:a0:e6:44:1d:84:24:d4:40:
2d:f0:ff:8e:03:19:3c:fd:11:fc:50:4e:d9:4b:a2:
50:33:73:71:96:17:15:07:bb:e0:e6:f6:9b:da:45:
62:e2:d6:3b:33:74:82:34:a2:99:d3:7e:b6:ed:6c:
a1:10:66:7e:2e:a9:16:57:22:83:e3:fd:2b:42:ba:
e2:96:88:49:ef:b1:17:ff:a6:f8:82:0a:a4:c6:34:
bc:64:b6:a6:03:ad:15:6f:10:27:1f:16:a6:58:f8:
27:04:d9:f5:33:bc:8b:07:02:05:54:a0:ba:76:a5:
cd:25:11:ff:36:95:3c:22:9c:06:db:02:9d:3d:3f:
80:b4:2d:ec:35:8e:4f:bd:e7:22:74:ea:34:df:ab:
83:6f:b9:ab:fd:a2:3a:30:f9:91:c0:68:97:db:43:
01:f2:97:2c:e2:0c:0e:a1:a0:41:48:c0:bc:32:c8:
7d:ae:e6:7a:02:b8:92:7b:24:c7:e7:89:85:74:8d:
7a:2a:f0:25:1c:67:69:11:cf:49:3b:1e:7b:a3:f3:
b3:d2:d1:e5:30:87:c2:2f:58:da:81:10:af:7b:54:
c0:ac:d4:7e:5c:c9:ca:82:e1:09:6c:32:f2:05:f3:
e9:36:e6:84:0d:ad:69:3a:3a:af:2d:26:b8:fe:c5:
27:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:C8:E8:37:F8:7F:9E:4F:78:E2:92:79:9D:CE:C0:CF:F2:6E:AF:5B
X509v3 Authority Key Identifier:
keyid:DC:E5:60:F0:EC:85:0D:A8:A7:C0:F8:D6:F3:82:51:02:D4:DE:4A:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OVg8OyFDainwPjW84JRAtTeSs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:b6:66:39:57:2d:ba:7f:37:09:01:d6:e6:0f:2f:b1:57:88:
92:c2:81:0a:ca:e4:23:49:ab:a9:d9:1b:70:cd:88:59:a4:a4:
05:5e:5f:84:0f:07:07:54:c5:b6:8c:43:4d:fb:28:af:72:b2:
de:30:6b:66:32:fb:38:be:59:d4:37:15:b0:9f:eb:7a:18:f5:
29:f9:46:74:82:a6:31:51:04:a8:81:4a:b6:b4:a8:12:9d:38:
b9:fb:f8:a4:08:5f:9b:4f:52:2f:82:20:89:7b:75:0e:6f:dc:
ae:f3:31:94:d1:73:fb:ba:f7:90:ce:6e:a4:8e:b2:27:13:63:
41:65:51:cd:ac:f5:1c:6a:b1:b3:7c:7f:4f:77:9f:45:d2:3e:
c3:9b:6c:7d:55:70:72:5e:8b:03:35:95:28:c6:bf:83:e3:32:
5f:c5:eb:05:c8:02:97:af:81:98:de:a7:0f:2a:68:10:84:68:
47:1b:68:89:b0:eb:2f:f5:5b:7f:29:5f:97:b6:c1:2e:37:75:
99:5a:db:08:af:4c:60:3c:1a:da:78:c0:a3:d5:f9:5c:66:b4:
fe:13:b1:21:eb:c9:89:1e:64:6a:e6:3b:86:e0:c0:bd:42:b3:
91:39:45:27:7a:22:f7:17:90:1a:e4:5a:ba:2b:a9:33:71:97:
3b:83:29:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:36:13 2024 by rpki-client on console-fra.rpki-client.org