![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/900385-d852-4ff3-a2a2-62df93bc64dc/1/aWoG5FR9oBpci177cQQOXt0Qnuc.mft
File: aWoG5FR9oBpci177cQQOXt0Qnuc.mft (raw, json)
Hash identifier: xtMxuikndT6Ah9puRftM5/PXe6lg11OEJL6aMbnyDI0=
Subject key identifier: A3:32:C5:BD:01:52:A1:AD:8F:23:C0:80:4F:2D:97:CB:83:F2:B7:E7
Authority key identifier: 69:6A:06:E4:54:7D:A0:1A:5C:8B:5E:FB:71:04:0E:5E:DD:10:9E:E7
Certificate issuer: /CN=696a06e4547da01a5c8b5efb71040e5edd109ee7
Certificate serial: 0190448C840D11B81B005D4BB7126CEF8FED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWoG5FR9oBpci177cQQOXt0Qnuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/900385-d852-4ff3-a2a2-62df93bc64dc/1/aWoG5FR9oBpci177cQQOXt0Qnuc.mft
Manifest number: 0C50
Signing time: Sun 23 Jun 2024 10:02:57 +0000
Manifest this update: Sun 23 Jun 2024 10:02:57 +0000
Manifest next update: Mon 24 Jun 2024 10:02:57 +0000
Files and hashes: 1: aWoG5FR9oBpci177cQQOXt0Qnuc.crl (hash: hKRs9f3+SEo5NMRmYXp5+wcnM6zy9lmdN69j934btik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/900385-d852-4ff3-a2a2-62df93bc64dc/1/aWoG5FR9oBpci177cQQOXt0Qnuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/900385-d852-4ff3-a2a2-62df93bc64dc/1/aWoG5FR9oBpci177cQQOXt0Qnuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWoG5FR9oBpci177cQQOXt0Qnuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 10:02:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:44:8c:84:0d:11:b8:1b:00:5d:4b:b7:12:6c:ef:8f:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=696a06e4547da01a5c8b5efb71040e5edd109ee7
Validity
Not Before: Jun 23 10:02:57 2024 GMT
Not After : Jun 24 10:02:57 2024 GMT
Subject: CN=a332c5bd0152a1ad8f23c0804f2d97cb83f2b7e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:31:6f:ae:5f:88:18:96:77:c6:3a:33:c3:93:
0c:ec:46:65:f9:a7:d1:01:52:61:7e:92:33:49:ac:
8d:64:78:39:dc:37:0b:57:0a:52:63:1e:77:81:9c:
e9:d6:3b:3e:ee:d6:26:2f:fc:dd:f8:f4:ee:63:9b:
2b:de:29:e9:b5:3b:46:39:da:12:32:01:7a:ea:23:
08:0d:fe:10:2e:53:80:71:42:de:03:0f:cc:8e:4b:
dd:2b:65:84:3d:45:4d:85:9a:9e:7d:7c:ef:c7:47:
bc:0c:06:5f:3c:ec:67:14:7b:bd:c8:a1:8f:c0:3f:
ce:e4:8d:f9:ea:be:2b:8d:b0:84:23:d6:c6:c5:45:
c4:2e:f6:23:b0:4a:e7:4e:a3:bd:d5:b1:09:bf:b9:
b3:90:47:01:e0:2a:3c:bf:1f:b5:50:fa:a3:71:fd:
c2:ba:d0:17:38:62:d5:28:24:99:16:fe:04:65:68:
32:79:07:4a:ae:14:0d:f9:84:c2:f3:93:f9:b3:d8:
73:44:13:71:9f:8a:bc:37:bd:6e:ba:3e:66:b3:cf:
85:92:58:24:53:b5:cd:d6:89:cf:e1:b8:41:cb:b9:
1c:16:79:10:27:86:1d:0c:55:14:64:13:d7:69:d2:
20:b7:14:e4:6e:6a:4b:c1:dd:c4:36:bb:3b:04:84:
b5:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:32:C5:BD:01:52:A1:AD:8F:23:C0:80:4F:2D:97:CB:83:F2:B7:E7
X509v3 Authority Key Identifier:
keyid:69:6A:06:E4:54:7D:A0:1A:5C:8B:5E:FB:71:04:0E:5E:DD:10:9E:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWoG5FR9oBpci177cQQOXt0Qnuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/900385-d852-4ff3-a2a2-62df93bc64dc/1/aWoG5FR9oBpci177cQQOXt0Qnuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/900385-d852-4ff3-a2a2-62df93bc64dc/1/aWoG5FR9oBpci177cQQOXt0Qnuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:5e:65:47:4b:1c:32:b0:05:fb:8c:71:89:b6:0c:b4:6c:34:
b6:c7:f3:09:ef:bf:1b:0c:ae:55:47:14:af:a2:39:1d:6b:2e:
72:24:dc:4c:9e:e3:62:0a:b2:10:a8:e9:ee:e8:f8:cc:a3:fd:
5b:36:34:88:bc:58:18:c9:06:af:f2:e8:0c:57:2c:ec:88:f0:
6a:30:1d:d7:d1:0f:df:92:61:64:fe:cd:e7:ba:73:7a:6b:cd:
6a:c6:c6:37:7e:b1:ee:49:96:cb:25:82:70:bf:7c:17:61:6e:
f0:95:ce:24:cc:b9:33:55:24:d0:70:d5:b8:fd:4e:f6:e8:bd:
40:48:95:18:8b:fe:8b:24:d7:5e:a9:79:1f:e6:79:81:a1:d9:
de:f4:80:45:0e:b8:e3:32:8e:e0:ec:20:93:3f:78:15:19:ca:
21:32:0c:f7:18:20:d7:a0:f1:b1:b4:b8:25:41:d7:bd:63:c8:
99:56:6c:6e:68:bc:47:02:1d:a6:89:c6:4d:a6:ee:2f:52:5f:
40:78:f0:fa:34:97:e1:5d:a4:c7:42:a0:97:1e:e9:22:56:6e:
09:6a:78:d0:3b:f6:b2:00:27:23:06:5a:ea:3c:6b:96:fb:9e:
72:5c:a2:bb:0b:b7:5c:73:aa:97:d0:db:3a:43:36:2f:7d:dd:
5a:7e:3d:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 16:51:29 2024 by rpki-client on console-fra.rpki-client.org