![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft
File: 7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft (raw, json)
Hash identifier: xG3PCeKZHCLK0XtdxAWbY0ao0+zL3fOCeFJ0QHWT2K0=
Subject key identifier: 0B:38:F8:F9:31:2A:61:81:2A:36:FF:75:60:87:F5:A6:73:EA:BF:7F
Authority key identifier: EC:7F:4A:33:87:DB:83:8C:DA:83:7A:B9:2A:6C:E8:F6:FF:C3:C9:90
Certificate issuer: /CN=ec7f4a3387db838cda837ab92a6ce8f6ffc3c990
Certificate serial: 01901E59222440D9108F9FAC26A3FACFE178
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7H9KM4fbg4zag3q5Kmzo9v_DyZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft
Manifest number: 11C3
Signing time: Sun 16 Jun 2024 00:01:16 +0000
Manifest this update: Sun 16 Jun 2024 00:01:16 +0000
Manifest next update: Mon 17 Jun 2024 00:01:16 +0000
Files and hashes: 1: 7H9KM4fbg4zag3q5Kmzo9v_DyZA.crl (hash: XH2apUnU2EyRzyznKSEDVXvOk/4SSfR/MBfzqxWRyxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7H9KM4fbg4zag3q5Kmzo9v_DyZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 19:09:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1e:59:22:24:40:d9:10:8f:9f:ac:26:a3:fa:cf:e1:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec7f4a3387db838cda837ab92a6ce8f6ffc3c990
Validity
Not Before: Jun 16 00:01:16 2024 GMT
Not After : Jun 17 00:01:16 2024 GMT
Subject: CN=0b38f8f9312a61812a36ff756087f5a673eabf7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e4:a0:0b:dd:4f:14:43:63:5b:ef:2d:11:a8:
6b:de:5c:af:74:1a:03:b7:03:d5:ee:03:6c:2e:d9:
c0:f3:89:ac:d7:a6:9e:db:57:be:1d:2e:bd:68:ef:
8d:db:22:ca:35:b2:cf:dc:3e:ba:41:4c:22:8d:e5:
4c:73:db:2b:c4:95:d6:2f:71:a5:ac:08:c1:58:86:
34:28:02:38:f6:11:52:e4:a9:8c:d0:ba:1d:42:34:
c9:88:ad:2a:73:d2:67:6a:32:3e:01:77:a4:c4:ee:
fa:f8:a1:1e:cf:51:6b:0c:ba:23:f9:77:9f:e5:ec:
be:fe:88:c5:5f:13:32:32:25:74:aa:e1:73:92:04:
a4:a5:38:d0:25:e6:d0:fd:5a:74:03:e9:6d:15:86:
50:10:68:a6:e4:4a:92:14:79:89:00:e8:83:b1:37:
06:4e:5e:e8:07:f6:89:c9:48:d9:9f:37:f3:b1:22:
55:0a:1f:66:8a:fd:6c:4c:ef:69:3a:0f:13:e3:a4:
8e:a1:c5:29:15:7b:35:3d:45:a9:d0:d7:5f:19:f1:
c1:06:22:f5:4f:8c:1b:fe:fd:05:00:d0:5c:f4:8e:
63:c0:82:33:72:63:d9:e0:56:7a:71:91:aa:48:c4:
3a:7e:32:5e:3a:3d:f3:98:70:e4:cf:95:31:8b:ab:
ef:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:38:F8:F9:31:2A:61:81:2A:36:FF:75:60:87:F5:A6:73:EA:BF:7F
X509v3 Authority Key Identifier:
keyid:EC:7F:4A:33:87:DB:83:8C:DA:83:7A:B9:2A:6C:E8:F6:FF:C3:C9:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7H9KM4fbg4zag3q5Kmzo9v_DyZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:8d:2e:7e:cb:94:c3:66:19:cc:70:9f:7f:32:ae:cf:a4:26:
68:6a:5b:f3:5b:3d:4d:74:d6:b6:7a:88:db:a0:03:c1:fe:ee:
49:a0:88:97:c5:93:60:bf:e9:33:06:fd:fc:0d:97:54:9d:a6:
5f:a1:87:41:cd:16:c4:da:63:e8:50:a2:ba:e9:70:05:a0:cb:
07:e7:7b:ae:10:a6:2e:6e:44:b0:04:df:40:44:a2:7c:54:05:
d7:96:a4:41:03:d3:04:97:dd:64:b8:81:bf:9a:67:22:be:e6:
e5:5d:48:8b:47:5b:f1:68:fd:19:81:d0:48:2f:b2:79:a3:49:
fd:9c:a1:bb:2b:a6:a9:7f:6b:a7:6b:95:c4:7b:da:04:98:50:
ec:38:33:53:e4:b2:d3:75:d6:f8:66:39:1b:54:88:40:b7:bd:
bf:0b:c1:a8:b1:5a:56:5c:b9:79:2d:cc:e9:79:5f:d6:d3:ed:
95:a2:16:45:17:16:15:15:ee:9c:61:23:be:17:19:0f:95:f3:
08:21:9b:8d:ce:cf:d5:05:15:ee:9d:fd:4f:18:bd:6c:6a:9b:
97:ed:7a:f4:bc:16:49:3c:e6:1c:d7:fe:da:85:b8:92:1b:83:
22:a1:b2:3c:da:65:d3:db:a2:c5:3f:44:fd:9f:b7:0f:7b:f3:
af:3b:d7:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 01:05:14 2024 by rpki-client on console-fra.rpki-client.org