![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/06ab3c-7f1b-4062-8792-262557c74d4c/1/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.mft
File: ulgnVXJDSJO5y9FOSt5wiSnkZ_g.mft (raw, json)
Hash identifier: ONfwPEtPczWC+txD8SGb31J/D90X11Il4ZrvBzAKbdY=
Subject key identifier: 78:76:42:75:04:B4:57:BD:A8:E5:3A:D4:F5:56:5D:6C:C2:BD:5F:85
Authority key identifier: BA:58:27:55:72:43:48:93:B9:CB:D1:4E:4A:DE:70:89:29:E4:67:F8
Certificate issuer: /CN=ba58275572434893b9cbd14e4ade708929e467f8
Certificate serial: 0190448C2D05346F73D1D9E26397B2C0B2EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/06ab3c-7f1b-4062-8792-262557c74d4c/1/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.mft
Manifest number: 0DB5
Signing time: Sun 23 Jun 2024 10:02:35 +0000
Manifest this update: Sun 23 Jun 2024 10:02:35 +0000
Manifest next update: Mon 24 Jun 2024 10:02:35 +0000
Files and hashes: 1: ulgnVXJDSJO5y9FOSt5wiSnkZ_g.crl (hash: GuQpKoJhlu8bbtu1jNAbdHmfb6Z0Czgw8gTd7mOzAOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/06ab3c-7f1b-4062-8792-262557c74d4c/1/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/06ab3c-7f1b-4062-8792-262557c74d4c/1/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 10:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:44:8c:2d:05:34:6f:73:d1:d9:e2:63:97:b2:c0:b2:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba58275572434893b9cbd14e4ade708929e467f8
Validity
Not Before: Jun 23 10:02:35 2024 GMT
Not After : Jun 24 10:02:35 2024 GMT
Subject: CN=7876427504b457bda8e53ad4f5565d6cc2bd5f85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:01:6f:62:ea:00:5b:a1:cf:4c:88:6d:21:87:
0c:28:4f:64:c6:40:1b:db:a1:ae:6d:62:1e:ce:fe:
32:0b:fc:ad:09:84:11:e3:5a:f2:6e:c2:4d:f3:45:
92:e1:99:4a:49:dc:8a:0f:24:71:83:ff:4b:df:87:
da:47:d1:65:26:f5:82:e4:8c:a2:c3:a6:30:cb:ee:
d7:cf:44:2f:dd:90:05:09:19:e2:01:c5:4c:21:df:
d7:11:af:21:1e:9b:2d:a6:57:b0:61:a0:ca:95:f1:
7f:db:1e:34:a6:5a:88:38:2c:4e:6d:84:28:1a:04:
97:70:5c:a2:42:07:84:1c:0f:43:08:44:15:06:b9:
2e:b2:df:d5:84:c4:7a:71:0a:c8:ff:7c:44:cd:a3:
09:7f:24:cb:62:ea:7d:87:58:b0:8f:6e:bd:03:c9:
60:17:b8:81:07:75:70:b9:cf:b6:11:bc:c5:db:b1:
db:21:0e:4e:e3:c5:1a:d9:33:30:43:d6:ce:b6:cf:
7d:d6:4c:d0:10:8c:17:23:ef:40:5e:b6:8a:d5:86:
a7:db:f4:cd:cf:e1:58:f1:fb:d0:a8:20:38:28:be:
b5:c9:c4:f8:c1:34:c5:39:4d:b7:22:23:69:ba:f3:
0a:a4:d9:41:c6:be:fe:d4:36:a6:75:43:84:f9:60:
b9:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:76:42:75:04:B4:57:BD:A8:E5:3A:D4:F5:56:5D:6C:C2:BD:5F:85
X509v3 Authority Key Identifier:
keyid:BA:58:27:55:72:43:48:93:B9:CB:D1:4E:4A:DE:70:89:29:E4:67:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/06ab3c-7f1b-4062-8792-262557c74d4c/1/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/06ab3c-7f1b-4062-8792-262557c74d4c/1/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:b1:9f:57:02:8a:7e:3b:de:b2:2f:6d:1e:af:76:e0:2a:c8:
36:e1:2f:d9:5e:14:5b:ce:41:37:1b:a0:28:43:81:9a:79:c8:
5f:b0:a3:bf:d3:1c:d7:73:d8:ab:7e:98:8c:77:fa:ef:48:2a:
02:a2:d7:1d:67:03:c9:c0:b4:12:bd:dd:1e:a8:f1:f7:1c:d7:
31:20:67:06:a7:fc:f2:af:8f:32:ea:77:99:d2:32:e9:29:b7:
81:26:65:91:67:4c:71:d3:1c:c5:eb:33:70:46:a4:a5:77:d4:
af:2f:18:63:d4:8b:83:0e:70:60:3a:46:11:c9:04:54:54:7c:
5d:8f:31:0c:13:59:b6:80:ab:95:7e:f0:27:39:06:28:e2:81:
bf:00:b8:e3:ad:e8:fc:87:bb:6d:7b:8a:22:cd:7a:4f:bf:40:
cd:72:c7:b0:20:e0:2c:94:52:cd:bc:e7:4f:f9:61:98:e2:3e:
05:ec:71:73:6f:eb:c8:7d:d5:26:a3:dd:0b:04:f2:44:87:7e:
18:e5:77:ce:93:9f:bc:ad:64:a5:c7:46:ea:18:72:02:cc:63:
a3:93:68:a9:7a:a5:7a:55:f7:29:45:ae:80:d5:3b:4c:17:51:
d0:67:61:fa:8c:06:4b:10:05:ab:78:62:e6:ee:a6:5f:91:e7:
35:b1:44:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:43:54 2024 by rpki-client on console-ams.rpki-client.org