![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/89b3d1-7de3-4c63-a077-82c1b65bed40/1/925jlSS9okW5LbTLvKVr06ekrgw.mft
File: 925jlSS9okW5LbTLvKVr06ekrgw.mft (raw, json)
Hash identifier: MVVjFQkXW0rk0WdKoWa2m4aPKrn3wpOSqUyJ3AMEhlE=
Subject key identifier: 77:F4:0C:8F:D0:BC:7F:5B:92:2F:5D:4C:CC:E2:1A:D3:28:BF:6D:56
Authority key identifier: F7:6E:63:95:24:BD:A2:45:B9:2D:B4:CB:BC:A5:6B:D3:A7:A4:AE:0C
Certificate issuer: /CN=f76e639524bda245b92db4cbbca56bd3a7a4ae0c
Certificate serial: 01901E58FF73C65331D6FEE4CB14441E5DFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/925jlSS9okW5LbTLvKVr06ekrgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/89b3d1-7de3-4c63-a077-82c1b65bed40/1/925jlSS9okW5LbTLvKVr06ekrgw.mft
Manifest number: 020D
Signing time: Sun 16 Jun 2024 00:01:07 +0000
Manifest this update: Sun 16 Jun 2024 00:01:07 +0000
Manifest next update: Mon 17 Jun 2024 00:01:07 +0000
Files and hashes: 1: 8dny7u5gUz1Q11qFQNW4vNRdILY.roa (hash: DlDoMPutjlcMxl3gPP/fwyEvZjtLqrc0ErTlaArGTKE=)
2: 925jlSS9okW5LbTLvKVr06ekrgw.crl (hash: /eIK2uEhbj2azG/zjyr2Pbbi/tmoQdRXPWLv+p/OSZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/89b3d1-7de3-4c63-a077-82c1b65bed40/1/925jlSS9okW5LbTLvKVr06ekrgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/89b3d1-7de3-4c63-a077-82c1b65bed40/1/925jlSS9okW5LbTLvKVr06ekrgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/925jlSS9okW5LbTLvKVr06ekrgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1e:58:ff:73:c6:53:31:d6:fe:e4:cb:14:44:1e:5d:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f76e639524bda245b92db4cbbca56bd3a7a4ae0c
Validity
Not Before: Jun 16 00:01:07 2024 GMT
Not After : Jun 17 00:01:07 2024 GMT
Subject: CN=77f40c8fd0bc7f5b922f5d4ccce21ad328bf6d56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a4:c1:b1:44:73:36:a3:46:e8:62:1b:56:78:
c0:ba:1a:34:83:d4:8b:2f:28:12:ef:b9:3d:19:81:
38:1c:7e:6e:ba:41:32:67:7a:b0:56:00:78:66:7c:
36:18:68:e3:73:ae:5d:aa:e0:14:f8:5d:f6:12:88:
5c:0b:17:70:0a:bd:68:3f:5c:00:f2:44:f3:0f:7a:
a4:6f:1b:94:5c:1c:fb:26:3f:e3:ee:d0:5a:37:6f:
45:69:12:65:1f:7f:88:1f:49:d4:1a:ea:30:d0:55:
bb:70:2f:e5:98:92:60:ed:c3:8e:cb:1c:ce:36:8b:
a5:3f:4d:e0:dd:2f:64:fe:30:19:68:04:38:7b:ca:
bc:91:d0:ef:30:e8:d7:d5:70:1d:0e:82:ff:de:86:
9f:ad:e0:c8:74:25:26:df:4b:dc:cd:49:96:04:6a:
ab:4f:82:c5:5b:a3:a3:2a:3a:74:e9:fd:a4:3e:ae:
03:f2:70:63:db:68:03:fa:dc:d2:98:eb:8b:54:05:
17:ad:b2:62:6f:34:a2:0f:17:c7:66:ce:4c:3b:9f:
bd:22:7d:ad:86:41:b2:9e:bc:aa:7b:5d:30:0c:39:
05:8b:5c:49:d1:b4:30:a3:30:4b:0d:aa:b8:76:2c:
70:0f:a0:1b:7c:1a:c9:7f:fd:09:15:b2:f9:c7:c9:
a4:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:F4:0C:8F:D0:BC:7F:5B:92:2F:5D:4C:CC:E2:1A:D3:28:BF:6D:56
X509v3 Authority Key Identifier:
keyid:F7:6E:63:95:24:BD:A2:45:B9:2D:B4:CB:BC:A5:6B:D3:A7:A4:AE:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/925jlSS9okW5LbTLvKVr06ekrgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/89b3d1-7de3-4c63-a077-82c1b65bed40/1/925jlSS9okW5LbTLvKVr06ekrgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/89b3d1-7de3-4c63-a077-82c1b65bed40/1/925jlSS9okW5LbTLvKVr06ekrgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:6c:22:e0:df:45:05:d3:7e:f3:38:98:79:45:26:a9:cf:42:
74:02:c0:0f:ed:02:3f:ea:c4:c1:2c:12:a5:88:a9:c7:41:fa:
93:ce:fa:22:d4:ce:32:04:1b:05:1b:30:e1:ca:08:12:ec:6d:
e3:66:4c:9c:79:80:9c:b5:a8:de:e3:8f:dc:de:44:bc:77:ca:
37:29:7c:6e:bb:2a:09:c6:3e:98:4b:d0:42:04:5b:51:91:f9:
54:ad:3c:ba:5c:cb:2f:77:96:d6:04:2b:91:7c:83:c2:a8:40:
64:db:8f:8c:94:cc:04:df:a1:eb:1d:1e:9a:13:5b:80:4e:db:
9a:eb:22:44:4a:ee:db:86:7a:5c:c7:2b:1d:5c:21:b1:fe:de:
e6:36:a0:9b:5f:b4:b2:39:f6:47:2f:4e:c0:ce:8f:65:9a:c7:
6f:0c:a5:43:41:e4:38:a8:d6:b4:71:7d:db:11:37:6c:bc:fa:
e1:33:49:a6:ea:27:fe:40:da:30:10:6d:d5:87:26:1a:e0:36:
e3:1e:e7:2f:b0:b0:6c:6e:db:28:bc:be:30:e4:f3:00:b7:13:
93:e8:c8:4c:ce:9d:ee:52:1d:d1:2b:c4:b4:a2:c0:71:91:20:
fc:b1:4a:40:25:4e:b8:73:bd:e7:e3:8d:83:f5:f1:8d:75:bf:
ae:2c:e2:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:58:33 2024 by rpki-client on console-ams.rpki-client.org