![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/b8605a-2136-4389-a405-ea606570946a/1/zmdqMChOFLAsxt2qA053VAbkYaY.mft
File: zmdqMChOFLAsxt2qA053VAbkYaY.mft (raw, json)
Hash identifier: Ru/8uHD7E2qfsYnc9eDfWMmX2P4G6QHRhGvLzWpbmIY=
Subject key identifier: B3:B2:7D:F9:EF:27:40:43:2C:91:B1:41:02:9F:09:FB:5D:F4:FB:43
Authority key identifier: CE:67:6A:30:28:4E:14:B0:2C:C6:DD:AA:03:4E:77:54:06:E4:61:A6
Certificate issuer: /CN=ce676a30284e14b02cc6ddaa034e775406e461a6
Certificate serial: 019040B02E35D75201B9D511E37FE7753019
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zmdqMChOFLAsxt2qA053VAbkYaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/b8605a-2136-4389-a405-ea606570946a/1/zmdqMChOFLAsxt2qA053VAbkYaY.mft
Manifest number: 0570
Signing time: Sat 22 Jun 2024 16:03:26 +0000
Manifest this update: Sat 22 Jun 2024 16:03:26 +0000
Manifest next update: Sun 23 Jun 2024 16:03:26 +0000
Files and hashes: 1: GIIn6gB4WGyrYi8kevc6logItv8.roa (hash: eSiKQ5MZghqoynGvXHrSXL8lZ1c2qiggIYyLtEJ6EOs=)
2: zmdqMChOFLAsxt2qA053VAbkYaY.crl (hash: 9CExoV1a4vkGmh94hSmQifU6bYehxFRdEknNOMIDRwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/b8605a-2136-4389-a405-ea606570946a/1/zmdqMChOFLAsxt2qA053VAbkYaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/b8605a-2136-4389-a405-ea606570946a/1/zmdqMChOFLAsxt2qA053VAbkYaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zmdqMChOFLAsxt2qA053VAbkYaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 16:03:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:40:b0:2e:35:d7:52:01:b9:d5:11:e3:7f:e7:75:30:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce676a30284e14b02cc6ddaa034e775406e461a6
Validity
Not Before: Jun 22 16:03:26 2024 GMT
Not After : Jun 23 16:03:26 2024 GMT
Subject: CN=b3b27df9ef2740432c91b141029f09fb5df4fb43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:67:62:f2:3b:c0:c6:bb:99:54:ab:02:1b:a2:
ef:02:d0:fd:3c:72:37:b4:7f:84:17:d7:9a:8b:f8:
e6:d0:bc:1e:f3:8f:ea:94:cb:71:b4:fd:ac:ac:2d:
d2:eb:a8:99:56:3c:f1:b3:b4:95:33:39:13:89:a7:
ef:2c:5b:cb:72:e7:c7:9c:36:dd:10:98:28:7c:2a:
2a:af:bb:38:fc:b6:82:fa:f2:dc:eb:fd:f9:87:5c:
4c:cf:53:fc:ab:1e:57:c9:ba:66:47:26:8a:de:c3:
15:ce:75:97:4b:56:42:02:61:b6:51:4a:9d:cb:3b:
06:53:57:3e:ec:95:a3:fc:87:f0:20:7c:42:e5:85:
09:3b:8a:0e:f8:db:c7:9c:e3:2d:8d:1a:b6:e1:14:
d9:3f:fe:5a:15:50:3b:e5:f8:16:d7:8b:ba:49:46:
c3:f0:60:56:a7:83:c8:53:52:ce:10:1b:29:17:d5:
09:71:d5:2e:62:c4:ee:ca:8e:54:8f:21:41:e0:07:
de:59:99:25:21:1a:35:35:60:8a:1c:72:16:e6:53:
f5:ad:c4:d3:7b:cc:4c:28:5d:8c:06:00:0a:e1:d0:
af:73:b1:12:d3:a2:e1:b3:5b:77:d0:36:82:8b:01:
ad:02:79:ac:4f:ee:8f:3b:60:e5:4f:d8:ce:4b:fc:
2f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:B2:7D:F9:EF:27:40:43:2C:91:B1:41:02:9F:09:FB:5D:F4:FB:43
X509v3 Authority Key Identifier:
keyid:CE:67:6A:30:28:4E:14:B0:2C:C6:DD:AA:03:4E:77:54:06:E4:61:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zmdqMChOFLAsxt2qA053VAbkYaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b8605a-2136-4389-a405-ea606570946a/1/zmdqMChOFLAsxt2qA053VAbkYaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b8605a-2136-4389-a405-ea606570946a/1/zmdqMChOFLAsxt2qA053VAbkYaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:8c:b6:67:31:2b:26:8c:ed:24:f5:21:b3:9b:5d:fd:06:56:
bc:d3:27:f4:38:9d:76:cd:44:09:2e:c2:d7:97:ee:c7:d6:a9:
0f:47:ea:c4:4e:86:a3:43:b7:f4:9b:1a:3a:1c:92:07:5e:42:
ee:4e:6d:92:c2:24:08:58:dc:60:27:90:a4:86:52:19:9b:99:
65:84:5d:ce:be:85:3f:f2:83:72:76:b6:82:a6:f8:a7:e9:95:
6e:4e:f1:d9:ba:43:1b:92:cb:a4:a2:fa:ec:c4:74:06:65:ac:
c9:8f:9b:6a:28:2f:8d:4f:81:82:15:b0:30:74:59:d4:0c:e7:
aa:c5:5c:f2:ac:b0:15:5f:ee:a0:03:db:ee:43:09:c3:31:d0:
1b:0f:d4:3b:e0:6c:f2:25:79:6e:a4:be:40:dd:06:34:8c:7f:
63:44:25:f9:7f:f1:c5:c2:76:2e:3a:78:14:76:fc:81:c8:e0:
1c:85:d0:ac:a9:32:e7:46:12:ad:3e:07:e6:10:05:f3:cd:46:
b6:6e:aa:59:1d:aa:de:de:f9:fd:db:f2:15:2b:97:61:ef:a8:
9f:e8:12:e5:7e:2e:78:bc:f4:32:08:08:86:07:d4:4c:94:e4:
e4:7a:ef:43:67:3c:c0:0c:64:28:db:da:f1:06:e7:f0:25:c2:
bf:46:52:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:39:31 2024 by rpki-client on console-fra.rpki-client.org