![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/69121c-ae31-4b8b-bec5-0d4da5b50e7c/1/LMO6aVVgj4zLE3VEc8CRfbP76RE.mft
File: LMO6aVVgj4zLE3VEc8CRfbP76RE.mft (raw, json)
Hash identifier: JpRgZhzJ06MeCH/f5AiKo7aeo4z6byBlL01u5RxBE1c=
Subject key identifier: FD:77:C2:E8:0A:99:5C:31:BF:45:77:0C:6B:9A:98:08:DB:BD:66:D2
Authority key identifier: 2C:C3:BA:69:55:60:8F:8C:CB:13:75:44:73:C0:91:7D:B3:FB:E9:11
Certificate issuer: /CN=2cc3ba6955608f8ccb13754473c0917db3fbe911
Certificate serial: 01904942FC04BF970F533F8F6650530CCB9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LMO6aVVgj4zLE3VEc8CRfbP76RE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/69121c-ae31-4b8b-bec5-0d4da5b50e7c/1/LMO6aVVgj4zLE3VEc8CRfbP76RE.mft
Manifest number: 0CFE
Signing time: Mon 24 Jun 2024 08:00:44 +0000
Manifest this update: Mon 24 Jun 2024 08:00:44 +0000
Manifest next update: Tue 25 Jun 2024 08:00:44 +0000
Files and hashes: 1: LMO6aVVgj4zLE3VEc8CRfbP76RE.crl (hash: dUfN366VTsnDUbIRbIzHqOMAnKiLzI2d3oYKEzBPN7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/69121c-ae31-4b8b-bec5-0d4da5b50e7c/1/LMO6aVVgj4zLE3VEc8CRfbP76RE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/69121c-ae31-4b8b-bec5-0d4da5b50e7c/1/LMO6aVVgj4zLE3VEc8CRfbP76RE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LMO6aVVgj4zLE3VEc8CRfbP76RE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:49:42:fc:04:bf:97:0f:53:3f:8f:66:50:53:0c:cb:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cc3ba6955608f8ccb13754473c0917db3fbe911
Validity
Not Before: Jun 24 08:00:44 2024 GMT
Not After : Jun 25 08:00:44 2024 GMT
Subject: CN=fd77c2e80a995c31bf45770c6b9a9808dbbd66d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:cf:46:05:67:1f:c0:10:b2:a1:f6:f4:cc:14:
b7:b8:6d:95:42:e6:c4:0d:fe:7a:08:54:2c:02:80:
7f:8a:de:02:fc:88:dd:08:be:f1:af:61:73:b3:76:
25:80:b3:45:1f:6e:a2:58:aa:36:dc:2f:3f:c0:4e:
77:af:d9:01:20:93:c0:95:98:04:bb:25:54:42:91:
cd:8d:e0:2c:f4:9b:52:7c:0d:68:5d:79:7c:4c:08:
e0:14:77:6c:01:ba:e9:aa:82:2d:6d:4d:55:a3:4f:
bb:9c:71:69:82:03:dc:f0:25:1a:a1:cc:2a:f0:87:
a2:25:cb:93:b9:a2:0f:f9:4a:89:bb:09:bf:bc:ba:
bf:3e:0b:3d:f2:f8:47:3d:d0:62:4a:b2:f5:9c:b0:
cb:be:2c:3b:63:bf:40:39:cd:99:8a:d6:e1:ca:27:
93:3d:6c:b9:8d:7d:63:37:7e:10:0d:7e:43:83:f4:
84:46:90:93:4a:e1:be:9f:ec:c8:0e:fa:a5:97:ed:
c1:13:9c:1b:b3:d2:c2:20:56:0b:27:38:71:2f:90:
6c:d5:71:67:83:18:ca:0a:d7:e0:48:4f:b3:8b:0e:
69:ff:65:b9:20:40:4b:0a:d7:31:cb:7b:45:4f:cc:
cd:40:c7:9f:0a:93:01:23:64:3f:a1:63:aa:20:4f:
2d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:77:C2:E8:0A:99:5C:31:BF:45:77:0C:6B:9A:98:08:DB:BD:66:D2
X509v3 Authority Key Identifier:
keyid:2C:C3:BA:69:55:60:8F:8C:CB:13:75:44:73:C0:91:7D:B3:FB:E9:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LMO6aVVgj4zLE3VEc8CRfbP76RE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/69121c-ae31-4b8b-bec5-0d4da5b50e7c/1/LMO6aVVgj4zLE3VEc8CRfbP76RE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/69121c-ae31-4b8b-bec5-0d4da5b50e7c/1/LMO6aVVgj4zLE3VEc8CRfbP76RE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:01:90:b2:61:50:90:36:bd:f0:64:83:9d:71:b3:47:c5:bc:
78:de:04:3c:b6:d6:37:7e:c4:bc:cf:e6:85:17:f4:1d:2b:94:
74:73:00:09:d7:e6:0b:94:a3:ee:0e:c7:b4:c1:13:8d:ba:38:
70:5c:ee:48:56:cb:9b:23:b1:94:a5:9e:5e:57:a0:2e:5c:3f:
cb:ef:26:83:38:79:a9:42:5a:c3:b9:e3:ea:af:78:76:f3:e1:
53:12:98:e0:1e:92:38:b7:3f:b7:f4:09:76:c8:d3:93:43:d9:
12:f7:ef:fb:d3:b5:46:c7:3c:a1:a0:30:0b:83:56:88:a6:b5:
99:b5:51:ed:42:c4:a6:d8:7f:ea:19:59:08:5b:d5:42:0e:11:
fa:5a:56:cb:e2:67:eb:d5:0a:45:f6:13:df:c3:4d:a0:c6:d6:
18:07:36:69:d6:5b:4d:e7:01:2f:40:00:ed:5f:57:37:4a:a4:
55:8d:b6:47:1b:09:68:2b:8d:47:0a:cd:62:41:9b:e9:c5:f2:
3c:95:f6:58:72:45:3c:6b:c4:bc:57:6a:dc:7c:27:02:51:56:
00:3c:33:ce:2e:1d:04:27:fd:69:0d:08:40:08:9f:94:1d:29:
9c:11:e7:e0:4b:c7:f2:a1:14:9e:aa:88:a1:f2:e5:bd:b0:8e:
c7:07:7b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 10:15:26 2024 by rpki-client on console-fra.rpki-client.org