![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/235331-df4d-4725-8bee-6535c33cbf02/1/AxQ6N5XzoKyX3-1cg_SN70bVnLE.mft
File: AxQ6N5XzoKyX3-1cg_SN70bVnLE.mft (raw, json)
Hash identifier: M8Ye5nJP5Q0md2ebi0A/KkCV2BwPVa2/MFWqsBluE6k=
Subject key identifier: B4:8B:37:78:5E:AA:AA:68:98:B9:01:BA:34:A6:80:D8:2A:91:7D:70
Authority key identifier: 03:14:3A:37:95:F3:A0:AC:97:DF:ED:5C:83:F4:8D:EF:46:D5:9C:B1
Certificate issuer: /CN=03143a3795f3a0ac97dfed5c83f48def46d59cb1
Certificate serial: 01901DEB4F9A20CADB8CB971BDA22E6466C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AxQ6N5XzoKyX3-1cg_SN70bVnLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/235331-df4d-4725-8bee-6535c33cbf02/1/AxQ6N5XzoKyX3-1cg_SN70bVnLE.mft
Manifest number: 0147
Signing time: Sat 15 Jun 2024 22:01:18 +0000
Manifest this update: Sat 15 Jun 2024 22:01:18 +0000
Manifest next update: Sun 16 Jun 2024 22:01:18 +0000
Files and hashes: 1: AxQ6N5XzoKyX3-1cg_SN70bVnLE.crl (hash: SFyozbgMSy67Wikii+JDwmkcq/VNGBenH5VwBLu8lcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/235331-df4d-4725-8bee-6535c33cbf02/1/AxQ6N5XzoKyX3-1cg_SN70bVnLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/235331-df4d-4725-8bee-6535c33cbf02/1/AxQ6N5XzoKyX3-1cg_SN70bVnLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AxQ6N5XzoKyX3-1cg_SN70bVnLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 22:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:eb:4f:9a:20:ca:db:8c:b9:71:bd:a2:2e:64:66:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03143a3795f3a0ac97dfed5c83f48def46d59cb1
Validity
Not Before: Jun 15 22:01:18 2024 GMT
Not After : Jun 16 22:01:18 2024 GMT
Subject: CN=b48b37785eaaaa6898b901ba34a680d82a917d70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:ba:8a:d1:51:86:21:37:81:41:51:9f:56:7e:
16:40:0c:75:17:de:3d:23:65:b0:4f:16:b0:32:2f:
28:d2:d5:02:17:67:cf:fb:cb:1d:6c:89:57:7e:47:
8d:2e:c1:2e:5f:d7:8d:3c:7e:59:c4:f0:e3:5a:5f:
3b:9c:a7:d9:dc:af:6c:ac:da:7b:40:51:f8:b7:e6:
6a:b3:c9:36:a0:3d:02:f9:a1:0d:26:6a:e8:74:53:
b1:be:49:88:74:92:3c:86:20:86:ce:18:4c:2f:cc:
9b:eb:c3:27:92:02:1c:b0:dd:64:ff:7a:19:95:16:
85:05:3b:b1:28:74:6a:0f:d4:e5:84:94:4f:05:be:
15:b3:bb:68:c4:61:6f:8f:f9:de:d2:33:b0:19:4e:
e3:e4:fb:23:76:76:4e:09:e7:7b:5f:99:53:37:0d:
d6:72:9d:87:26:b5:da:f6:3a:c2:60:18:9c:d2:8b:
fa:d9:b5:b9:eb:e2:f7:e7:19:4b:52:60:82:e9:4a:
9c:fd:53:e5:60:fa:fb:3f:a5:70:e9:31:9a:61:bf:
fc:fa:0a:66:b7:53:3b:2a:53:db:77:8f:8d:d6:3d:
29:92:fc:2a:89:56:98:bd:86:b9:57:72:06:11:e5:
67:b3:11:cf:7b:aa:3b:00:8c:b7:bd:e3:68:c3:c1:
c9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:8B:37:78:5E:AA:AA:68:98:B9:01:BA:34:A6:80:D8:2A:91:7D:70
X509v3 Authority Key Identifier:
keyid:03:14:3A:37:95:F3:A0:AC:97:DF:ED:5C:83:F4:8D:EF:46:D5:9C:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AxQ6N5XzoKyX3-1cg_SN70bVnLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/235331-df4d-4725-8bee-6535c33cbf02/1/AxQ6N5XzoKyX3-1cg_SN70bVnLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/235331-df4d-4725-8bee-6535c33cbf02/1/AxQ6N5XzoKyX3-1cg_SN70bVnLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:fa:73:5b:81:73:88:25:0e:f6:01:c0:db:8c:7c:2d:a6:81:
b1:9c:ad:5a:62:5f:b1:75:ff:04:4c:98:57:19:fa:82:48:76:
25:94:90:e1:db:a6:30:2d:af:78:39:27:a5:0c:8c:2d:d1:cd:
cf:9b:73:9d:80:39:58:3d:ec:33:e2:46:bd:03:93:ec:00:21:
6f:b0:e4:26:03:61:6f:a1:12:b9:b4:ba:da:40:b8:a0:21:59:
e3:87:d2:d1:29:08:29:cd:98:c1:0e:5c:a3:68:00:0c:72:60:
fe:88:f3:3c:88:8d:d5:de:21:d1:2d:03:0b:39:24:b2:a3:3e:
4c:90:7c:ac:58:db:56:a4:0b:24:5d:b4:4f:7b:dc:3e:f8:20:
25:15:d6:24:aa:25:19:87:d1:95:ae:52:0e:c1:f6:38:8e:8c:
6f:e3:4e:85:7c:5e:9a:db:83:50:b5:04:bc:0f:7d:58:af:be:
f6:68:96:13:8e:8c:da:1c:1b:f9:fc:45:e9:70:b8:13:cf:2b:
7d:41:a3:c6:11:88:ab:ce:17:c3:64:66:5d:60:ef:b8:ae:2b:
0f:43:34:a2:09:44:41:05:21:53:b9:fe:64:3c:1f:ce:ce:97:
75:99:77:e9:fb:03:77:da:17:94:77:5d:71:d2:6a:8b:79:7c:
47:f0:83:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:40:51 2024 by rpki-client on console-fra.rpki-client.org