![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.mft
File: p67mdiDZwK5j0pV4XJ2VbwY8IcM.mft (raw, json)
Hash identifier: 9H0jYaThqPubDQ/BMwsyWhYZ3sBIhaxtoZwmqM/Nwag=
Subject key identifier: C4:F6:1E:7D:D7:5C:20:36:E6:1C:BA:B4:D1:C4:AB:C4:A6:53:53:96
Authority key identifier: A7:AE:E6:76:20:D9:C0:AE:63:D2:95:78:5C:9D:95:6F:06:3C:21:C3
Certificate issuer: /CN=a7aee67620d9c0ae63d295785c9d956f063c21c3
Certificate serial: 01904942E204E11C6248497B4739C8EDB9E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p67mdiDZwK5j0pV4XJ2VbwY8IcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.mft
Manifest number: 10AB
Signing time: Mon 24 Jun 2024 08:00:38 +0000
Manifest this update: Mon 24 Jun 2024 08:00:38 +0000
Manifest next update: Tue 25 Jun 2024 08:00:38 +0000
Files and hashes: 1: XDWTmj_nnGq11LbhQoM2JOMlanI.roa (hash: e90yJhxQLIJbOhU3vHrgPUaD5mL34XVc6165cq0csC8=)
2: p67mdiDZwK5j0pV4XJ2VbwY8IcM.crl (hash: k3N09zafXcG3C2aa4yMtW1Vgu3YIeKASl8+cfO8Xwss=)
3: vKgaShSTW6Zrzu5pCM3NLLQQY7A.roa (hash: 7ZgQYnQ8NFc9yS9y4mjcBasB3PVU+om7omyPXRmvVJU=)
4: w7qjRYLQMubCHnQnX9o6vV2fBy0.roa (hash: SIdCSUPlgPHvVrmdfBPpSjoDQ8cH30uBEp5S1+VFHCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/p67mdiDZwK5j0pV4XJ2VbwY8IcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:49:42:e2:04:e1:1c:62:48:49:7b:47:39:c8:ed:b9:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7aee67620d9c0ae63d295785c9d956f063c21c3
Validity
Not Before: Jun 24 08:00:38 2024 GMT
Not After : Jun 25 08:00:38 2024 GMT
Subject: CN=c4f61e7dd75c2036e61cbab4d1c4abc4a6535396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1f:31:83:1e:84:30:b8:a2:29:c9:cc:fe:24:
24:19:b4:26:04:bd:67:ba:56:6c:aa:9e:1a:67:e8:
cc:14:69:09:19:0a:16:e9:47:70:a2:ba:bc:c6:57:
28:7a:3c:4b:6c:f3:73:2a:2b:c1:51:b5:89:bc:e9:
d0:5c:78:19:37:bb:fe:7a:87:df:9f:b7:44:45:11:
0f:65:2c:c5:84:cb:c6:24:39:d4:c6:e6:ae:ca:79:
cf:d0:a1:28:c3:95:18:f3:9c:d4:02:24:c4:89:5e:
b1:37:88:73:5b:1d:74:cc:39:5b:4b:6e:e7:3a:f2:
16:44:1f:7c:f8:67:b1:db:80:3d:fc:08:04:dd:35:
07:e6:a4:92:9c:74:41:9a:27:68:5c:8d:f3:a1:57:
5d:57:a1:d7:03:e6:a1:80:ca:b5:ea:0d:64:70:28:
fd:90:f5:39:40:98:42:3f:45:af:86:61:1b:5e:e6:
4e:ce:8c:fc:86:83:1b:01:1c:db:8c:17:e6:be:7a:
a7:c8:a9:67:25:dd:8d:43:e6:2c:fd:82:e6:37:c8:
4a:3f:33:9c:9e:50:56:df:b0:f1:ce:06:f8:4d:a5:
ac:df:c9:df:fe:5f:ae:86:29:de:e8:8c:54:b3:4d:
40:e5:02:54:fb:25:87:db:48:16:29:d2:40:6e:31:
4b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:F6:1E:7D:D7:5C:20:36:E6:1C:BA:B4:D1:C4:AB:C4:A6:53:53:96
X509v3 Authority Key Identifier:
keyid:A7:AE:E6:76:20:D9:C0:AE:63:D2:95:78:5C:9D:95:6F:06:3C:21:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p67mdiDZwK5j0pV4XJ2VbwY8IcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:6e:0b:67:5c:df:28:0e:67:97:7b:6f:89:59:3a:22:b0:e0:
83:fd:de:63:0f:03:bf:be:a2:68:be:80:8d:69:63:e4:20:20:
82:e1:90:a5:f2:0f:6c:a7:eb:7a:81:07:49:30:75:6d:1f:1c:
59:b7:bb:e6:20:f2:f3:50:4e:bc:0e:2a:d0:cc:55:a0:6a:01:
c5:1b:93:22:f3:46:38:d2:69:d2:15:9a:6c:d0:b3:71:db:93:
88:ac:83:30:47:eb:b8:e8:90:17:74:a1:02:26:30:0e:1a:a2:
e8:57:8e:7b:57:f2:17:6b:67:c6:8b:d3:ef:20:ce:9c:36:9f:
af:d8:90:a2:80:c8:4b:01:0e:2f:a1:cf:68:74:5f:2d:9f:ef:
58:91:26:1d:6e:03:a5:a6:3f:96:e9:af:73:e1:fb:30:8c:84:
e6:af:fa:80:19:33:12:76:a0:00:0a:61:b8:97:fc:77:77:26:
f8:09:3d:a7:dd:d9:a6:3d:80:53:7d:51:4c:a9:56:3a:bb:7c:
97:57:96:89:bc:c7:6c:4d:65:04:4e:79:4b:2b:33:a6:c1:6f:
fb:ba:a4:25:81:70:7b:4b:6e:d9:85:c7:3d:53:d2:22:ca:fc:
56:49:bf:59:c1:e3:91:40:f4:44:dd:69:1d:15:a2:f1:9a:99:
f9:f7:2a:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 12:13:12 2024 by rpki-client on console-ams.rpki-client.org