![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/a88a77-1e2c-4f04-8b8f-b0d296520d32/1/G2njMjeIqhYaYpcgauPnsZqf_GE.mft
File: G2njMjeIqhYaYpcgauPnsZqf_GE.mft (raw, json)
Hash identifier: EmcsTwgXHLvVipCgpRwNxYrDjyaqJyiya4lmwNKDQHw=
Subject key identifier: 24:AF:7F:0C:B6:9C:98:A7:5F:E3:68:CA:E1:8A:E6:CA:48:94:74:8B
Authority key identifier: 1B:69:E3:32:37:88:AA:16:1A:62:97:20:6A:E3:E7:B1:9A:9F:FC:61
Certificate issuer: /CN=1b69e3323788aa161a6297206ae3e7b19a9ffc61
Certificate serial: 01901F34B883BB8EEF1A55E3FAC95556BED8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2njMjeIqhYaYpcgauPnsZqf_GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/a88a77-1e2c-4f04-8b8f-b0d296520d32/1/G2njMjeIqhYaYpcgauPnsZqf_GE.mft
Manifest number: 11C3
Signing time: Sun 16 Jun 2024 04:01:07 +0000
Manifest this update: Sun 16 Jun 2024 04:01:07 +0000
Manifest next update: Mon 17 Jun 2024 04:01:07 +0000
Files and hashes: 1: G2njMjeIqhYaYpcgauPnsZqf_GE.crl (hash: lzJ6C4u+1GDHhFVMN0gTiOoG6Zd5GDDKHJ+BncM+7NY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/a88a77-1e2c-4f04-8b8f-b0d296520d32/1/G2njMjeIqhYaYpcgauPnsZqf_GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/a88a77-1e2c-4f04-8b8f-b0d296520d32/1/G2njMjeIqhYaYpcgauPnsZqf_GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/G2njMjeIqhYaYpcgauPnsZqf_GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1f:34:b8:83:bb:8e:ef:1a:55:e3:fa:c9:55:56:be:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b69e3323788aa161a6297206ae3e7b19a9ffc61
Validity
Not Before: Jun 16 04:01:07 2024 GMT
Not After : Jun 17 04:01:07 2024 GMT
Subject: CN=24af7f0cb69c98a75fe368cae18ae6ca4894748b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bb:4f:48:c2:92:2d:45:62:b5:15:b1:b2:af:
ed:9b:d0:19:da:08:ec:10:d7:76:b1:9b:6b:93:6a:
08:45:61:ec:d1:7c:9e:2c:ea:e1:2e:e4:bb:63:0e:
53:86:bb:80:5f:6c:10:ba:4e:b8:08:99:cc:f0:07:
99:68:d0:94:34:9e:3e:1d:3b:97:57:fc:32:c4:27:
94:29:8b:4a:99:e0:7f:05:1e:33:5b:de:ab:a5:8f:
f1:6f:10:77:d0:33:91:1b:43:08:98:a1:f0:fb:2d:
c8:d7:58:46:d1:65:35:d2:ea:40:f3:3a:7c:63:76:
13:76:ed:59:02:86:ca:8d:82:8f:5d:79:f8:89:95:
f2:a3:16:2d:b2:e3:e9:fc:a9:7f:5f:cf:f8:64:2a:
13:ae:f8:12:5a:4f:79:3a:88:35:63:b3:7c:f4:96:
ce:6b:20:cd:d1:70:6a:83:2c:ab:99:8d:43:22:59:
7d:81:bf:99:c2:34:c6:5d:ec:61:eb:d6:f4:4a:f6:
f7:bb:f8:16:78:e8:2c:77:87:6b:1a:aa:b1:2b:32:
5d:b9:73:f6:fc:90:b8:86:76:48:3b:db:cf:9b:6e:
cc:1e:ab:b1:63:c8:d0:4f:4f:8a:e3:32:e4:c3:2e:
7d:b0:54:c0:65:24:d0:2f:4c:a7:1c:bc:7e:ef:ad:
b4:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:AF:7F:0C:B6:9C:98:A7:5F:E3:68:CA:E1:8A:E6:CA:48:94:74:8B
X509v3 Authority Key Identifier:
keyid:1B:69:E3:32:37:88:AA:16:1A:62:97:20:6A:E3:E7:B1:9A:9F:FC:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2njMjeIqhYaYpcgauPnsZqf_GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a88a77-1e2c-4f04-8b8f-b0d296520d32/1/G2njMjeIqhYaYpcgauPnsZqf_GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a88a77-1e2c-4f04-8b8f-b0d296520d32/1/G2njMjeIqhYaYpcgauPnsZqf_GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:68:a2:79:23:4b:29:4e:d2:b7:6c:3a:4f:74:c4:ec:be:9e:
0c:66:25:29:0f:9a:28:92:73:46:34:fd:67:e9:03:d0:45:b8:
ba:dd:ed:ca:f7:7e:8e:3f:1c:60:34:18:30:9c:09:05:ec:0a:
c5:77:26:20:7b:0e:49:e1:6d:7f:34:17:b0:85:1b:4f:f3:0c:
b8:6a:23:0b:8d:d8:e7:f2:fc:c0:b6:81:c0:97:82:bb:83:50:
0a:74:f9:94:d0:7a:4c:0c:97:97:47:7e:7b:b6:1e:39:f3:d3:
bf:10:8f:6f:f0:5a:0b:a5:56:47:18:67:25:e0:80:4b:5d:34:
9c:24:a7:1f:1f:35:cc:4c:cc:cb:88:33:ba:73:9a:6e:c3:c4:
60:d5:7e:3d:65:6c:99:a4:f8:58:4b:2a:74:f6:c1:b8:6e:17:
8a:8c:11:6a:3b:5e:98:fd:9c:00:4f:6c:17:99:81:ee:4e:f7:
fe:7d:53:8f:90:c1:a5:3a:78:42:2b:1d:01:ad:b6:a2:57:4c:
97:e6:50:f0:6e:1a:fd:df:85:ea:f6:3f:a1:8e:94:31:6a:f3:
1d:97:67:cc:a7:dd:f5:ec:ff:fb:08:cd:af:d2:57:a3:05:79:
aa:da:b2:71:60:a8:8f:e5:38:da:34:7b:b9:b0:63:a8:37:4d:
9d:5e:85:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 06:38:02 2024 by rpki-client on console-ams.rpki-client.org