![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/0319db-d1fb-4a0b-8f2d-34e181f13bc9/1/agYc8aPo-IYXhUvTtqza2KukWhw.mft
File: agYc8aPo-IYXhUvTtqza2KukWhw.mft (raw, json)
Hash identifier: /obXYIVF6r/8pPUmMtBTzdd2OL2mwiY+z7HSUcMmrYo=
Subject key identifier: 03:A6:28:BF:E7:64:2D:8F:94:B0:01:91:BD:2F:39:3D:F0:B2:CC:76
Authority key identifier: 6A:06:1C:F1:A3:E8:F8:86:17:85:4B:D3:B6:AC:DA:D8:AB:A4:5A:1C
Certificate issuer: /CN=6a061cf1a3e8f88617854bd3b6acdad8aba45a1c
Certificate serial: 019049B137B2009CC0690926F212698DD358
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/agYc8aPo-IYXhUvTtqza2KukWhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/0319db-d1fb-4a0b-8f2d-34e181f13bc9/1/agYc8aPo-IYXhUvTtqza2KukWhw.mft
Manifest number: 11DB
Signing time: Mon 24 Jun 2024 10:01:09 +0000
Manifest this update: Mon 24 Jun 2024 10:01:09 +0000
Manifest next update: Tue 25 Jun 2024 10:01:09 +0000
Files and hashes: 1: agYc8aPo-IYXhUvTtqza2KukWhw.crl (hash: TgFTsmh0D3Oa5a+WMvkBnwTEMZFZLezQwfhSaFe5CZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/0319db-d1fb-4a0b-8f2d-34e181f13bc9/1/agYc8aPo-IYXhUvTtqza2KukWhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/0319db-d1fb-4a0b-8f2d-34e181f13bc9/1/agYc8aPo-IYXhUvTtqza2KukWhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/agYc8aPo-IYXhUvTtqza2KukWhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 09:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:49:b1:37:b2:00:9c:c0:69:09:26:f2:12:69:8d:d3:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a061cf1a3e8f88617854bd3b6acdad8aba45a1c
Validity
Not Before: Jun 24 10:01:09 2024 GMT
Not After : Jun 25 10:01:09 2024 GMT
Subject: CN=03a628bfe7642d8f94b00191bd2f393df0b2cc76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a0:20:fd:76:97:5e:02:81:f4:76:a2:18:3f:
9e:1c:a9:e9:2d:c1:f8:b4:0f:4d:f9:09:96:f9:4f:
e4:c9:cf:82:76:25:37:46:ec:60:60:7b:b5:45:9a:
03:f8:f9:0a:95:76:81:1a:5f:c7:32:3c:32:f3:2a:
88:b6:c5:30:69:4e:15:1b:e0:e6:50:0f:07:db:d1:
8a:34:28:a8:1f:a4:9c:81:2b:bd:55:d2:38:da:48:
3d:0a:18:54:ff:55:93:38:e2:68:60:01:de:47:18:
c8:31:11:d0:0d:69:ec:1e:db:e3:4c:1b:a2:93:70:
f1:46:f3:2b:28:5b:65:ac:b1:af:bb:3b:9d:cb:25:
7e:ea:d3:ff:74:60:f7:8b:39:92:ea:fc:47:73:f1:
45:19:25:8e:f0:24:42:33:ed:8c:f3:d7:ba:19:b5:
43:2c:0e:80:97:d3:5f:14:0a:dc:4d:ca:47:44:db:
73:bd:f0:56:5e:64:c7:a5:76:68:87:38:a5:f3:6c:
26:f4:48:c1:52:f1:79:5c:65:5d:90:74:8f:92:e0:
2c:1e:1f:cd:29:4c:3f:b5:52:1b:5a:d9:9c:4e:27:
de:99:3a:d4:15:b3:ff:e8:3d:18:69:c6:7e:f3:5c:
ae:0d:b0:03:1c:de:93:3a:e3:09:da:1e:57:dc:c7:
d4:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:A6:28:BF:E7:64:2D:8F:94:B0:01:91:BD:2F:39:3D:F0:B2:CC:76
X509v3 Authority Key Identifier:
keyid:6A:06:1C:F1:A3:E8:F8:86:17:85:4B:D3:B6:AC:DA:D8:AB:A4:5A:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/agYc8aPo-IYXhUvTtqza2KukWhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0319db-d1fb-4a0b-8f2d-34e181f13bc9/1/agYc8aPo-IYXhUvTtqza2KukWhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0319db-d1fb-4a0b-8f2d-34e181f13bc9/1/agYc8aPo-IYXhUvTtqza2KukWhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:52:fc:80:8a:18:9f:d6:96:8c:30:a1:27:ca:67:e3:e6:d2:
3b:85:f2:a4:76:52:50:65:92:cd:96:09:55:86:f3:97:c7:c0:
c6:94:18:92:b5:d6:a4:b9:01:9c:2a:b3:ca:72:58:e0:48:d9:
11:ef:62:88:0f:d4:be:62:ed:03:47:30:d1:24:70:38:d5:c8:
36:62:9a:db:37:84:2e:fa:6a:0c:fc:67:44:38:b0:1b:8d:c0:
b8:95:45:cc:c7:57:8e:3a:f9:5a:39:0c:8c:e1:51:ec:66:ac:
df:e4:47:80:64:fa:a5:d3:14:b6:d8:a6:44:90:fb:dd:45:87:
b8:5e:fd:02:d4:87:46:78:a2:33:dc:37:d4:76:a4:45:1e:a4:
ca:28:50:cb:b1:6a:11:a1:00:f3:fc:9f:e7:a1:39:2c:f1:47:
7a:eb:06:aa:a5:0c:52:2d:0d:1d:0f:38:a4:0e:ad:c5:c7:18:
62:07:71:bf:7e:9b:a3:79:23:0d:35:6e:0b:94:bf:c9:33:73:
63:92:a9:4c:b8:1e:8d:a7:27:7a:d4:e7:53:74:9e:ef:02:d3:
f4:29:58:5c:9f:5c:e6:bf:34:d0:4b:da:3c:fd:31:9a:4f:4b:
bf:1e:0c:e2:e0:42:80:81:17:9f:2f:9a:23:a6:2d:10:bd:d1:
77:4f:89:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 12:13:26 2024 by rpki-client on console-ams.rpki-client.org