![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/0947f2-22ca-47cb-89ad-3e50a5f01998/1/f9GKakmRDMMx3JERSuWbcYXV8w0.mft
File: f9GKakmRDMMx3JERSuWbcYXV8w0.mft (raw, json)
Hash identifier: GrhhUQx7hysfyHeloFd/st5KZnjV7fdifbX6OZ4ic+s=
Subject key identifier: 25:53:C8:4E:AA:36:15:23:50:21:3D:16:66:04:BB:CD:D6:2C:BD:CA
Authority key identifier: 7F:D1:8A:6A:49:91:0C:C3:31:DC:91:11:4A:E5:9B:71:85:D5:F3:0D
Certificate issuer: /CN=7fd18a6a49910cc331dc91114ae59b7185d5f30d
Certificate serial: 01901E8F81F9C98347E1171A468B679CC259
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f9GKakmRDMMx3JERSuWbcYXV8w0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/0947f2-22ca-47cb-89ad-3e50a5f01998/1/f9GKakmRDMMx3JERSuWbcYXV8w0.mft
Manifest number: 11C6
Signing time: Sun 16 Jun 2024 01:00:39 +0000
Manifest this update: Sun 16 Jun 2024 01:00:39 +0000
Manifest next update: Mon 17 Jun 2024 01:00:39 +0000
Files and hashes: 1: f9GKakmRDMMx3JERSuWbcYXV8w0.crl (hash: WA0VOWoFUHOzu+hn1XCDjp8SdIbgQ0FMhwFg3WqMos0=)
2: gabteveofeU_XQ1bf06jRA9fsog.roa (hash: EZFkoV6FmK0+tHNXLof/Xn/A4Ny+nefMZB4qXLc9MSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/0947f2-22ca-47cb-89ad-3e50a5f01998/1/f9GKakmRDMMx3JERSuWbcYXV8w0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/0947f2-22ca-47cb-89ad-3e50a5f01998/1/f9GKakmRDMMx3JERSuWbcYXV8w0.mft
rsync://rpki.ripe.net/repository/DEFAULT/f9GKakmRDMMx3JERSuWbcYXV8w0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1e:8f:81:f9:c9:83:47:e1:17:1a:46:8b:67:9c:c2:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fd18a6a49910cc331dc91114ae59b7185d5f30d
Validity
Not Before: Jun 16 01:00:39 2024 GMT
Not After : Jun 17 01:00:39 2024 GMT
Subject: CN=2553c84eaa36152350213d166604bbcdd62cbdca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:19:d6:2e:5f:9d:14:e7:0c:53:da:b7:f6:d8:
9f:92:94:62:2d:78:36:97:7e:de:56:12:10:e6:c5:
01:3f:ac:31:33:28:f7:99:00:be:3f:2e:73:28:f5:
d4:82:f7:36:a1:6e:c4:ca:2f:6d:af:f9:3b:e3:13:
33:8c:53:c7:77:17:db:40:77:b6:75:0f:5d:84:80:
41:b5:7d:a0:fd:76:46:f7:fa:b3:17:5c:95:a3:94:
86:0d:6d:95:72:8b:74:97:be:c5:ea:b0:91:65:08:
ea:7f:63:12:39:03:21:92:f5:90:e1:42:b1:9d:81:
a5:ab:f5:cb:ba:c2:b5:25:a5:f3:f7:b4:2d:24:01:
c5:8a:84:06:2e:10:98:47:a0:b4:d6:cd:e3:a3:2b:
c4:00:fa:fc:ef:f3:3e:c4:96:be:0b:b6:71:01:18:
36:0c:08:b4:25:03:01:98:70:98:6a:16:e9:f0:82:
13:70:bd:75:f0:c6:51:fa:a9:a8:f0:f1:f2:d2:b3:
71:52:83:3e:1d:1a:30:6e:9d:dd:5d:74:18:f0:be:
db:64:aa:40:e4:30:2d:82:55:19:ef:92:dc:20:8b:
da:07:de:46:9e:8e:3f:5a:57:12:60:1c:05:97:22:
b7:d8:8e:46:07:20:ae:17:98:83:a4:ee:de:55:6b:
0b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:53:C8:4E:AA:36:15:23:50:21:3D:16:66:04:BB:CD:D6:2C:BD:CA
X509v3 Authority Key Identifier:
keyid:7F:D1:8A:6A:49:91:0C:C3:31:DC:91:11:4A:E5:9B:71:85:D5:F3:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9GKakmRDMMx3JERSuWbcYXV8w0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0947f2-22ca-47cb-89ad-3e50a5f01998/1/f9GKakmRDMMx3JERSuWbcYXV8w0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0947f2-22ca-47cb-89ad-3e50a5f01998/1/f9GKakmRDMMx3JERSuWbcYXV8w0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:39:96:ec:20:37:78:53:28:7a:73:f1:6e:d8:14:97:53:cd:
0b:c7:93:75:66:82:19:2c:1a:97:eb:9c:8a:3c:ad:0c:b2:e7:
e3:21:67:f5:15:fb:45:8e:de:ca:70:48:7b:8a:0c:44:6c:08:
9e:8f:45:54:c5:0b:20:4f:b1:29:a7:85:05:55:09:ab:81:ce:
0d:41:48:21:8c:85:07:48:69:2f:9d:8b:43:1a:4c:bf:49:ba:
41:7f:88:f4:fc:09:9d:a1:f8:b4:3e:6a:99:29:fc:e7:ea:56:
f7:72:b9:47:46:97:47:45:2c:6f:6e:66:aa:38:ac:ce:87:24:
b0:fc:84:26:02:a0:fe:ff:07:1c:6b:06:25:38:eb:c7:f2:3d:
52:5e:2c:0a:36:03:02:d8:d1:8b:24:e7:b5:d9:7a:0d:e0:86:
63:b1:77:cb:29:d3:5c:f3:b9:8a:2b:b4:8d:d5:f0:09:0e:c0:
18:cc:01:45:d3:97:ad:13:9b:0b:4e:05:df:a5:49:9b:f0:56:
13:30:24:e5:f0:0f:19:7c:73:6f:cd:81:9d:bc:95:af:58:ce:
38:cc:7a:88:4a:20:84:05:cf:d5:fc:76:12:a8:31:c4:4f:86:
99:ff:06:6e:44:da:11:e0:87:1b:9c:df:4b:95:6d:2c:48:a1:
c2:b4:af:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:40:12 2024 by rpki-client on console-fra.rpki-client.org