![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/e7c692-9941-4bc1-b4c2-6f8cacc12339/1/kNRNBKKqhYbulMejNTbDaBatoWM.mft
File: kNRNBKKqhYbulMejNTbDaBatoWM.mft (raw, json)
Hash identifier: tiFyRPeXnHbqhPdLtEazqz3q/+Q9GgDlowyF2KFd4kc=
Subject key identifier: 6A:20:C0:80:E5:C2:83:20:E7:B9:A6:49:0B:7D:69:3B:76:A8:99:90
Authority key identifier: 90:D4:4D:04:A2:AA:85:86:EE:94:C7:A3:35:36:C3:68:16:AD:A1:63
Certificate issuer: /CN=90d44d04a2aa8586ee94c7a33536c36816ada163
Certificate serial: 01901E58E3691D3FC1C1F71B78EA26F528BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kNRNBKKqhYbulMejNTbDaBatoWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c692-9941-4bc1-b4c2-6f8cacc12339/1/kNRNBKKqhYbulMejNTbDaBatoWM.mft
Manifest number: 11C4
Signing time: Sun 16 Jun 2024 00:01:00 +0000
Manifest this update: Sun 16 Jun 2024 00:01:00 +0000
Manifest next update: Mon 17 Jun 2024 00:01:00 +0000
Files and hashes: 1: kNRNBKKqhYbulMejNTbDaBatoWM.crl (hash: PzbCLXBea8ssk4OthJsXr5Bu/S2P4O+VIQuF6j1cbkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c692-9941-4bc1-b4c2-6f8cacc12339/1/kNRNBKKqhYbulMejNTbDaBatoWM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c692-9941-4bc1-b4c2-6f8cacc12339/1/kNRNBKKqhYbulMejNTbDaBatoWM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kNRNBKKqhYbulMejNTbDaBatoWM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1e:58:e3:69:1d:3f:c1:c1:f7:1b:78:ea:26:f5:28:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90d44d04a2aa8586ee94c7a33536c36816ada163
Validity
Not Before: Jun 16 00:01:00 2024 GMT
Not After : Jun 17 00:01:00 2024 GMT
Subject: CN=6a20c080e5c28320e7b9a6490b7d693b76a89990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d5:1a:cd:4a:5b:7e:e8:12:21:c0:6e:fe:4c:
3b:57:f1:8d:4c:3a:1a:f9:61:9b:a2:0c:d4:a1:43:
74:f3:d0:bf:e4:6b:a4:f7:fc:5a:ae:52:ca:70:e8:
a6:37:0a:70:2a:6e:ca:cb:20:f0:37:fb:21:37:b9:
93:d7:4b:35:ad:ba:b5:0d:2b:3c:6c:64:2c:f6:48:
8d:4a:eb:2e:a9:53:31:2a:9c:b7:d9:a9:f1:e4:63:
70:f3:87:18:bc:79:35:82:d1:29:be:50:30:1a:22:
ba:30:81:e0:94:f3:9c:4e:7c:13:0b:a0:44:c8:09:
57:51:5c:4d:3a:4f:9b:cd:68:60:c0:e1:e5:ef:8b:
e7:f1:25:d0:79:48:b9:ca:50:50:2a:24:f2:83:a6:
c0:0a:44:3b:8d:b0:66:9a:c1:bc:10:33:7b:98:86:
44:b7:dd:cf:b2:b3:40:44:4b:fb:a0:8a:77:2d:d7:
ce:a4:01:06:ec:0d:be:3e:5c:8d:49:ae:06:a1:ba:
a2:e4:4c:83:93:e5:2b:24:fd:37:2b:5c:9c:61:f1:
d0:47:c1:31:57:d7:59:8e:15:ee:0f:25:15:17:62:
f1:fd:66:e9:5a:a3:2b:01:4b:8b:05:eb:15:b9:6c:
64:8b:a9:ff:6d:0d:40:0d:3a:1f:c3:ff:d1:8e:15:
8d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:20:C0:80:E5:C2:83:20:E7:B9:A6:49:0B:7D:69:3B:76:A8:99:90
X509v3 Authority Key Identifier:
keyid:90:D4:4D:04:A2:AA:85:86:EE:94:C7:A3:35:36:C3:68:16:AD:A1:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kNRNBKKqhYbulMejNTbDaBatoWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c692-9941-4bc1-b4c2-6f8cacc12339/1/kNRNBKKqhYbulMejNTbDaBatoWM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c692-9941-4bc1-b4c2-6f8cacc12339/1/kNRNBKKqhYbulMejNTbDaBatoWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:e6:ee:9b:c9:b5:79:05:97:6b:10:b6:d2:e3:1b:47:ae:90:
1a:f6:e3:b7:ba:b3:bc:cd:10:49:c5:22:c0:d7:75:c7:8e:57:
c3:15:62:36:bc:3c:9b:0c:81:6e:b4:c9:db:f8:c5:59:38:1e:
5e:d4:8a:d8:77:72:3d:c3:9a:e8:82:18:c1:e5:2d:da:f3:d3:
9c:ef:4e:9e:f9:97:fb:96:dc:41:61:68:05:cc:9f:f4:08:85:
a7:11:ae:36:b5:e3:ae:18:ec:70:c3:af:22:b3:a9:a2:e2:09:
28:7d:5c:99:90:f0:07:6f:79:af:66:05:77:49:d9:65:1a:49:
f1:de:6e:b0:57:c6:66:bb:93:32:00:ac:f2:bc:80:35:d2:ec:
4f:91:f7:b3:e8:d6:39:ba:3e:7c:f1:4f:cd:97:5d:77:3f:60:
6b:ce:f0:d7:da:e7:ea:35:17:e3:24:43:8b:c0:0d:b7:eb:c8:
ff:5f:7e:46:4a:ab:e4:7d:82:b1:91:bf:be:f8:e1:83:b0:08:
aa:7a:0f:a3:ec:29:0f:10:fe:d1:0f:c5:58:25:bd:d9:64:84:
2c:ea:1d:3c:f4:4d:c1:30:31:1b:10:97:95:0f:d8:16:96:36:
9c:17:34:51:fe:a3:cd:38:0a:ca:1d:bc:66:11:d0:a0:42:bf:
9c:64:08:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:38:35 2024 by rpki-client on console-fra.rpki-client.org