![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/8819e2-c4e3-4bce-a61c-305d41d53a65/1/uFsMinWJOk-OHvDZpNQUeNizMng.mft
File: uFsMinWJOk-OHvDZpNQUeNizMng.mft (raw, json)
Hash identifier: cqmJ53xCzfoS5WK+cQoM1NFGUPzuGAUEOIiYFSdZXnU=
Subject key identifier: 9A:E2:61:4E:47:F8:48:94:32:E3:A6:79:2B:14:94:50:37:24:A9:18
Authority key identifier: B8:5B:0C:8A:75:89:3A:4F:8E:1E:F0:D9:A4:D4:14:78:D8:B3:32:78
Certificate issuer: /CN=b85b0c8a75893a4f8e1ef0d9a4d41478d8b33278
Certificate serial: 0190452FD33C2D350945DC492F3871B6A1A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFsMinWJOk-OHvDZpNQUeNizMng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/8819e2-c4e3-4bce-a61c-305d41d53a65/1/uFsMinWJOk-OHvDZpNQUeNizMng.mft
Manifest number: 1130
Signing time: Sun 23 Jun 2024 13:01:20 +0000
Manifest this update: Sun 23 Jun 2024 13:01:20 +0000
Manifest next update: Mon 24 Jun 2024 13:01:20 +0000
Files and hashes: 1: JV2k_KyZFj6EIOU_1LTqH7G3lZA.roa (hash: 9B70SyyKn90M2W+GLxXdB4/6s5sk5U9IxN4hiBR7V/M=)
2: JcPrcT4tqTyAPynZbpIVWr8ZKNk.roa (hash: HR9uUUH+ZsDQZwJ/hrsjZnZRZxi0iQYKtabFfu0hgMI=)
3: uFsMinWJOk-OHvDZpNQUeNizMng.crl (hash: eCAwlNirkHJHLgutsyzABiNjUekTeCpCraPwWicGunk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/8819e2-c4e3-4bce-a61c-305d41d53a65/1/uFsMinWJOk-OHvDZpNQUeNizMng.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/8819e2-c4e3-4bce-a61c-305d41d53a65/1/uFsMinWJOk-OHvDZpNQUeNizMng.mft
rsync://rpki.ripe.net/repository/DEFAULT/uFsMinWJOk-OHvDZpNQUeNizMng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 13:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:45:2f:d3:3c:2d:35:09:45:dc:49:2f:38:71:b6:a1:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b85b0c8a75893a4f8e1ef0d9a4d41478d8b33278
Validity
Not Before: Jun 23 13:01:20 2024 GMT
Not After : Jun 24 13:01:20 2024 GMT
Subject: CN=9ae2614e47f8489432e3a6792b1494503724a918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:43:85:b5:61:33:4d:23:4d:17:77:41:b7:d6:
c3:af:b3:18:22:49:85:12:0b:c8:14:05:cf:bd:a9:
73:bd:3b:77:54:67:35:43:f7:2f:b6:fe:ec:7b:11:
1c:cd:f9:56:5a:17:fc:ad:3b:99:f3:3b:f7:5b:31:
a0:42:c5:ac:45:fa:76:e6:48:71:02:53:81:8b:8a:
c1:0c:3a:a3:27:86:0c:ff:99:f9:bb:f6:ee:6e:55:
2f:61:c1:11:58:18:42:40:03:22:d1:13:fc:e0:1b:
83:4f:a8:8c:91:54:27:5a:e9:24:72:9f:e6:e7:63:
9c:d2:34:a8:f1:0a:27:46:83:6d:25:05:75:37:9e:
19:f9:56:4c:65:76:09:d4:21:eb:79:67:f7:93:f2:
3a:ba:4f:04:90:8a:92:86:b8:f3:41:92:ca:9d:93:
ad:7b:19:dc:50:89:b8:9f:3a:bf:ed:3a:f4:c0:ec:
d7:2a:1f:45:82:0f:c0:b8:c6:81:f8:95:53:50:38:
3f:0c:47:7e:33:49:e3:f8:fc:bd:22:5a:44:f7:4d:
19:16:0a:00:83:87:d2:b5:d5:d4:b9:ad:1d:7a:9d:
06:5f:30:d9:d3:65:31:bd:ee:c0:be:20:33:b8:3b:
d7:f5:70:54:32:eb:5a:c1:0b:12:a5:4f:48:e6:e7:
1b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:E2:61:4E:47:F8:48:94:32:E3:A6:79:2B:14:94:50:37:24:A9:18
X509v3 Authority Key Identifier:
keyid:B8:5B:0C:8A:75:89:3A:4F:8E:1E:F0:D9:A4:D4:14:78:D8:B3:32:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFsMinWJOk-OHvDZpNQUeNizMng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/8819e2-c4e3-4bce-a61c-305d41d53a65/1/uFsMinWJOk-OHvDZpNQUeNizMng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/8819e2-c4e3-4bce-a61c-305d41d53a65/1/uFsMinWJOk-OHvDZpNQUeNizMng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:96:02:3a:07:f8:4c:d2:22:6e:c3:12:33:60:f5:ef:48:c0:
e7:9f:d4:e5:a7:e9:a0:f3:19:0d:f0:b4:0d:fa:57:4d:d3:44:
60:03:b5:38:00:a3:8f:12:66:18:50:fb:52:1b:66:60:a9:d5:
2d:fe:18:49:3d:26:c9:bb:e6:35:07:02:43:aa:91:fa:c6:c5:
dd:57:31:e6:9d:f1:ef:06:06:31:7a:bf:3c:b3:e7:db:dc:86:
eb:29:c8:5c:23:a1:e4:54:77:3c:ce:7c:ec:ae:7f:7a:37:4a:
7f:31:41:45:b8:1d:9b:4d:4d:da:c3:7f:94:6a:7a:7c:94:62:
72:a6:2b:b8:74:98:e7:6f:4c:8f:5f:99:e3:bc:5a:b0:5a:b0:
ac:32:87:af:c5:79:6a:be:6c:88:d5:62:2b:63:02:f7:fc:b4:
39:74:d1:ac:47:d9:55:15:76:d8:9b:49:99:45:dc:a4:69:82:
d8:61:e6:e2:17:71:10:db:69:9f:a0:8d:b5:84:96:b2:4e:c9:
77:d5:ad:77:f4:72:3e:60:3a:ce:83:0d:80:b4:9f:13:1c:d9:
17:1e:d1:bb:6d:03:67:1d:cc:30:cb:5d:d1:54:b7:7b:c7:9a:
35:23:a3:53:fe:aa:7c:cf:2c:85:90:7a:50:30:be:ad:c0:d2:
57:54:a2:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 16:52:28 2024 by rpki-client on console-fra.rpki-client.org