![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.mft
File: N0MfG-n9wkGQmEec3kV7v3lXF1k.mft (raw, json)
Hash identifier: brGb+1h2Hw8qMv5YRzTzBA3O9JrZNtprCDtTQ/OUIco=
Subject key identifier: 75:02:05:4E:BE:47:E6:16:CD:20:1E:ED:AF:7B:1D:11:66:3C:44:C0
Authority key identifier: 37:43:1F:1B:E9:FD:C2:41:90:98:47:9C:DE:45:7B:BF:79:57:17:59
Certificate issuer: /CN=37431f1be9fdc2419098479cde457bbf79571759
Certificate serial: 01901E5957199A5709BAC8D74C3F2149B21E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N0MfG-n9wkGQmEec3kV7v3lXF1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.mft
Manifest number: 044B
Signing time: Sun 16 Jun 2024 00:01:29 +0000
Manifest this update: Sun 16 Jun 2024 00:01:29 +0000
Manifest next update: Mon 17 Jun 2024 00:01:29 +0000
Files and hashes: 1: N0MfG-n9wkGQmEec3kV7v3lXF1k.crl (hash: RRFExoJABq86mIdFTe/gOhNorouWBtf1KZBGEX/Zd7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/N0MfG-n9wkGQmEec3kV7v3lXF1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1e:59:57:19:9a:57:09:ba:c8:d7:4c:3f:21:49:b2:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37431f1be9fdc2419098479cde457bbf79571759
Validity
Not Before: Jun 16 00:01:29 2024 GMT
Not After : Jun 17 00:01:29 2024 GMT
Subject: CN=7502054ebe47e616cd201eedaf7b1d11663c44c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:16:df:10:6c:d1:9d:14:78:d8:48:20:cf:5a:
6b:e4:87:41:ac:d8:08:77:09:aa:5d:2e:2c:48:2d:
23:8e:86:24:40:03:df:0b:2b:2d:65:07:34:14:69:
6d:4a:e0:60:e8:7e:d3:35:e9:dd:19:e4:02:2a:9e:
58:dc:d6:5f:d4:e5:bd:7a:70:73:a1:97:7d:40:c4:
34:a5:b7:37:d0:29:25:15:bc:d6:11:07:aa:54:17:
ad:3f:1b:28:43:27:49:f9:56:aa:04:2f:e4:b8:f2:
15:78:13:24:b3:0c:48:41:70:cf:c3:f9:97:fc:fe:
b3:2b:b7:2e:2a:7b:c0:a1:ea:4f:25:f0:6c:64:e0:
0f:7d:ae:f2:54:cd:42:1e:19:f7:7d:d1:1a:ee:cd:
ad:8f:22:04:cd:57:4f:ec:68:eb:6f:a4:23:d8:b8:
a1:1d:bb:7f:f4:a2:00:79:a7:c7:93:61:f8:2b:80:
70:20:34:0f:cd:c8:3b:e5:71:d9:23:46:d3:70:04:
ca:8e:aa:6a:ed:08:c8:30:8b:77:be:26:8d:f5:00:
36:b9:bf:1d:f5:cc:0a:09:15:38:46:40:44:0e:50:
96:2d:34:fa:19:6a:9a:99:d7:d6:5c:4d:95:9e:40:
ef:5c:dc:3e:a0:bc:dd:a4:bd:6e:ec:f5:6d:e2:3a:
7e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:02:05:4E:BE:47:E6:16:CD:20:1E:ED:AF:7B:1D:11:66:3C:44:C0
X509v3 Authority Key Identifier:
keyid:37:43:1F:1B:E9:FD:C2:41:90:98:47:9C:DE:45:7B:BF:79:57:17:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0MfG-n9wkGQmEec3kV7v3lXF1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:d0:5c:ce:2c:f1:91:19:09:96:73:71:fe:da:93:ac:92:1c:
72:21:12:6f:0f:a8:06:c4:14:a7:0c:27:f4:d5:b0:b4:4f:61:
09:3a:eb:b6:c2:66:b0:9f:1c:29:46:5c:4a:7a:bc:2f:7d:72:
ce:6f:34:b1:0d:39:ae:97:d3:49:07:f4:d6:66:d9:24:f5:f0:
7d:b4:ae:2f:ea:f4:4c:97:3a:04:c7:64:9b:6d:2d:0e:60:b5:
25:3e:10:15:7d:8a:21:2a:77:23:75:d9:0b:07:d6:02:ab:25:
29:87:45:a9:3d:82:45:be:c7:9b:0b:7c:e1:01:a4:fe:b1:29:
ca:24:de:e8:a4:0e:5b:3b:cc:89:e4:48:b3:f1:e9:d1:c6:9f:
41:d7:0f:d4:34:1d:bf:6e:d8:38:e7:9d:5c:c8:18:1c:a2:fd:
f8:3c:db:04:53:fe:34:e5:b2:7b:eb:d5:23:8c:ab:e8:4c:3a:
4a:a8:f4:d8:47:db:70:13:50:ac:c2:d4:91:12:e2:d9:aa:f6:
f6:7f:43:2e:95:5b:6c:0a:42:d9:eb:1e:5c:60:d4:ae:6f:f5:
de:c2:34:ed:5c:06:27:9c:28:79:f6:74:f9:da:19:05:6b:61:
71:03:f6:40:20:f6:01:0a:50:2f:3b:dc:51:81:81:ea:85:26:
f3:6e:88:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:37:44 2024 by rpki-client on console-fra.rpki-client.org