![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.mft
File: NsyAK-a0xAEMds6OSE5N5_VUey8.mft (raw, json)
Hash identifier: U4I1jXsH/rCNOKY79uk9Lh3fcCxtnprp4FgTTtXuHeI=
Subject key identifier: 47:C8:20:05:64:2F:B0:D6:7D:4F:EF:32:9C:6E:29:B0:4C:2B:AC:51
Authority key identifier: 36:CC:80:2B:E6:B4:C4:01:0C:76:CE:8E:48:4E:4D:E7:F5:54:7B:2F
Certificate issuer: /CN=36cc802be6b4c4010c76ce8e484e4de7f5547b2f
Certificate serial: 01901DEBB92AA350B41AEE587EFFDE518578
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsyAK-a0xAEMds6OSE5N5_VUey8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.mft
Manifest number: 0807
Signing time: Sat 15 Jun 2024 22:01:45 +0000
Manifest this update: Sat 15 Jun 2024 22:01:45 +0000
Manifest next update: Sun 16 Jun 2024 22:01:45 +0000
Files and hashes: 1: NsyAK-a0xAEMds6OSE5N5_VUey8.crl (hash: 4Ld/dYayUzqzpreJc0IY/0E2wZOimaGH0rad4LtSX1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsyAK-a0xAEMds6OSE5N5_VUey8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 22:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:eb:b9:2a:a3:50:b4:1a:ee:58:7e:ff:de:51:85:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36cc802be6b4c4010c76ce8e484e4de7f5547b2f
Validity
Not Before: Jun 15 22:01:45 2024 GMT
Not After : Jun 16 22:01:45 2024 GMT
Subject: CN=47c82005642fb0d67d4fef329c6e29b04c2bac51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:78:cc:db:35:ff:94:ba:46:4f:87:dc:08:73:
87:24:df:13:ed:0b:e3:86:01:b1:69:10:b3:96:a8:
fb:19:33:18:9c:7f:77:f9:cc:b9:b3:a0:e0:bd:c5:
fe:d6:a1:83:7a:06:65:6b:89:80:2f:50:7d:83:ac:
1e:66:11:9e:2d:01:91:aa:eb:32:92:39:5a:14:b3:
3b:ad:58:d1:25:ef:fa:d4:79:d8:0c:52:39:71:5d:
84:f6:d2:5a:35:db:3f:38:22:f7:db:dd:f6:32:b8:
ee:ef:17:69:89:f9:30:9e:02:f5:51:16:c2:a5:16:
97:19:40:15:e2:d6:8f:86:04:d9:70:f9:17:b4:94:
2f:f7:4c:16:5c:b3:17:8c:1c:e2:30:22:2b:9d:db:
d8:e0:e0:1b:93:45:93:fa:ce:cd:86:5e:f4:ac:ef:
79:92:bb:6f:18:0a:da:fa:fe:43:ba:10:6a:15:f9:
c2:cb:e9:ab:8e:84:a0:70:68:99:59:b4:11:07:a2:
99:88:3a:5e:82:4a:84:0d:a6:d2:16:16:b6:22:74:
b7:fb:10:ee:65:6a:6e:40:e9:98:d7:ef:6d:d8:7c:
9f:9a:fe:69:96:fa:ba:fe:c8:9b:9c:29:25:a2:8b:
0f:10:f4:79:4b:b5:dc:2a:85:16:3f:b1:2e:a0:e1:
62:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:C8:20:05:64:2F:B0:D6:7D:4F:EF:32:9C:6E:29:B0:4C:2B:AC:51
X509v3 Authority Key Identifier:
keyid:36:CC:80:2B:E6:B4:C4:01:0C:76:CE:8E:48:4E:4D:E7:F5:54:7B:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsyAK-a0xAEMds6OSE5N5_VUey8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:c9:ed:7e:d8:23:88:6a:01:df:92:bf:9d:04:21:0d:75:9f:
53:2f:ad:3c:16:00:a0:a5:a5:26:30:30:4d:0d:75:10:90:1c:
a7:55:ec:e6:b4:c0:cb:18:3f:2e:6d:e0:0d:02:f2:46:71:9d:
46:85:d8:3c:04:e8:ca:ff:3e:80:db:5d:12:e0:8f:dd:6a:f0:
15:b6:72:b3:a1:f5:b9:67:a5:14:b7:d7:1d:7a:32:92:86:4a:
de:fb:8e:23:4e:87:8b:73:19:45:40:67:83:44:7f:84:c3:26:
b5:56:28:ec:c0:3e:94:2d:08:64:cc:65:f5:5b:4a:da:b5:22:
21:c5:3a:52:cb:e5:d1:e6:9d:2a:1d:59:98:f2:d4:f7:61:0a:
dc:e8:04:f2:29:8f:ed:5c:b9:9d:b3:20:43:95:65:95:61:fe:
ce:0a:97:b1:64:aa:83:bf:5a:0b:73:d2:25:f1:58:19:47:f1:
22:cb:15:44:98:55:8e:90:d6:84:df:31:86:06:76:5e:42:4f:
a8:f4:3a:16:47:eb:4c:13:1b:60:cf:15:17:9c:55:ef:80:40:
70:fd:e7:1c:64:6b:85:bc:ef:1a:7f:a7:12:6c:d7:7f:26:0a:
8e:6a:b3:86:6f:b5:9d:13:c8:f4:2f:43:13:47:aa:b9:8a:4a:
e5:33:9a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:44:15 2024 by rpki-client on console-fra.rpki-client.org