![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/9c5dab-e01e-4546-8c38-ff86146f8cc8/1/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.mft
File: ArqdsmdPc0Vl8JUzk_ClaWHKV8g.mft (raw, json)
Hash identifier: Q/QoiVEIyVkb6u0wIL5ac7/WKD7ID24YpOCPrZihY70=
Subject key identifier: 8D:3A:2E:EE:BB:1D:BB:46:09:E3:9F:19:88:EC:68:F9:71:38:FB:46
Authority key identifier: 02:BA:9D:B2:67:4F:73:45:65:F0:95:33:93:F0:A5:69:61:CA:57:C8
Certificate issuer: /CN=02ba9db2674f734565f0953393f0a56961ca57c8
Certificate serial: 01903404BB7ACF86F466EB268A503D6B5E5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/9c5dab-e01e-4546-8c38-ff86146f8cc8/1/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.mft
Manifest number: 0AAA
Signing time: Thu 20 Jun 2024 05:00:43 +0000
Manifest this update: Thu 20 Jun 2024 05:00:43 +0000
Manifest next update: Fri 21 Jun 2024 05:00:43 +0000
Files and hashes: 1: ArqdsmdPc0Vl8JUzk_ClaWHKV8g.crl (hash: gowjsp6mphxEkQ8RW+p/SKEihhle4Br7AeTaRmZjihU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/9c5dab-e01e-4546-8c38-ff86146f8cc8/1/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/9c5dab-e01e-4546-8c38-ff86146f8cc8/1/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:34:04:bb:7a:cf:86:f4:66:eb:26:8a:50:3d:6b:5e:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02ba9db2674f734565f0953393f0a56961ca57c8
Validity
Not Before: Jun 20 05:00:43 2024 GMT
Not After : Jun 21 05:00:43 2024 GMT
Subject: CN=8d3a2eeebb1dbb4609e39f1988ec68f97138fb46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:22:72:f3:e5:64:be:45:84:9c:1b:06:73:b5:
17:d0:f0:0d:22:af:cd:e9:e7:84:ad:70:61:06:91:
56:44:ef:a4:b6:69:08:cb:d5:91:b0:f6:a6:bf:22:
20:1d:2a:ca:a0:55:e0:b8:ec:79:29:1d:9d:b3:f3:
0f:9f:f1:2b:55:5b:9e:30:cc:e8:33:41:eb:48:15:
13:44:9c:c9:00:db:6c:53:d8:f0:04:50:37:5d:bf:
59:b7:79:08:ac:8d:04:2b:65:c0:4d:6d:5a:27:b7:
b6:ba:a8:91:93:9f:78:95:79:90:04:c6:08:dd:aa:
06:4d:fa:ae:be:30:7a:ab:08:d9:80:7d:b9:26:85:
f8:ab:3a:aa:79:49:1b:5f:83:0e:4e:8d:50:60:85:
dc:97:e5:b2:2c:85:b4:ea:cb:5e:cf:2d:26:55:a2:
2a:52:f5:40:26:e3:fa:40:db:fb:fe:bb:b6:7d:f8:
43:53:c0:74:7e:d9:79:12:a7:ec:50:65:cf:e6:7e:
c7:5c:52:17:b1:02:48:2d:be:3c:44:72:b2:a5:4d:
c0:e6:42:f3:e0:62:36:9f:38:f6:ce:13:66:4b:2e:
23:c1:74:b2:e8:2d:30:35:35:01:37:83:3b:6e:96:
34:09:f6:c5:9a:c9:81:47:e5:67:51:25:61:a3:02:
8f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:3A:2E:EE:BB:1D:BB:46:09:E3:9F:19:88:EC:68:F9:71:38:FB:46
X509v3 Authority Key Identifier:
keyid:02:BA:9D:B2:67:4F:73:45:65:F0:95:33:93:F0:A5:69:61:CA:57:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9c5dab-e01e-4546-8c38-ff86146f8cc8/1/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9c5dab-e01e-4546-8c38-ff86146f8cc8/1/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:01:e3:15:ec:a9:b0:7f:c8:78:20:81:d5:1f:2f:48:57:7b:
5f:8b:5f:4d:53:39:35:5c:a6:56:dd:42:cc:53:1d:a8:74:c0:
ae:cc:9e:4d:1c:e2:fa:ac:ee:7a:68:84:39:92:b6:93:c5:63:
59:e2:5f:fd:2f:61:25:d0:e4:c9:03:c4:8e:0b:f8:be:6b:46:
26:52:b9:05:b2:de:89:3e:64:76:bf:ee:13:3a:95:83:14:4b:
6d:c8:43:2c:53:91:f8:12:8b:f1:f9:d3:f3:94:da:e7:60:e3:
59:27:76:41:f8:ad:b8:e1:f9:dd:bd:a0:2b:58:46:88:b2:9f:
97:b6:71:fd:10:f8:f1:81:2c:83:95:81:06:a4:cb:82:1f:7b:
ee:fb:a3:96:3a:04:48:49:2d:ff:f6:c5:87:5b:e2:10:bc:f3:
80:66:cc:50:79:dd:bf:a4:a5:65:db:7f:fd:58:4e:3c:cc:ec:
d8:0a:7b:6b:b3:84:ca:5d:06:ed:5e:88:54:4c:02:3d:76:71:
b6:72:6a:8a:46:eb:25:2b:9c:64:0b:65:8c:dd:73:2a:c1:ad:
19:a0:f7:69:e8:e3:39:c8:01:12:e8:ce:20:d0:92:42:e6:9a:
cc:10:8c:5d:e7:a0:e5:e4:c7:9b:65:7c:08:ff:f3:d5:9b:b9:
23:60:47:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 15:11:40 2024 by rpki-client on console-ams.rpki-client.org