![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/Upvm9FzWQYii0KNkSnL06EKmOmk.mft
File: Upvm9FzWQYii0KNkSnL06EKmOmk.mft (raw, json)
Hash identifier: qCWu496P8JZdQEiW+1vHVYAjG25bNdKUqQnGiHIJc1Y=
Subject key identifier: 88:C1:9C:60:54:86:BE:90:52:BE:38:5D:C1:5D:E6:E3:F4:BF:7F:0D
Authority key identifier: 52:9B:E6:F4:5C:D6:41:88:A2:D0:A3:64:4A:72:F4:E8:42:A6:3A:69
Certificate issuer: /CN=529be6f45cd64188a2d0a3644a72f4e842a63a69
Certificate serial: 01901E593E6DD51AEB3B0CCC7158749E4A7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Upvm9FzWQYii0KNkSnL06EKmOmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/Upvm9FzWQYii0KNkSnL06EKmOmk.mft
Manifest number: 75
Signing time: Sun 16 Jun 2024 00:01:23 +0000
Manifest this update: Sun 16 Jun 2024 00:01:23 +0000
Manifest next update: Mon 17 Jun 2024 00:01:23 +0000
Files and hashes: 1: Upvm9FzWQYii0KNkSnL06EKmOmk.crl (hash: pMwuUXfNl5fnwYMwQxxnLhNlXnoFqEQET/gTIJE2h/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/Upvm9FzWQYii0KNkSnL06EKmOmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/Upvm9FzWQYii0KNkSnL06EKmOmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Upvm9FzWQYii0KNkSnL06EKmOmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1e:59:3e:6d:d5:1a:eb:3b:0c:cc:71:58:74:9e:4a:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529be6f45cd64188a2d0a3644a72f4e842a63a69
Validity
Not Before: Jun 16 00:01:23 2024 GMT
Not After : Jun 17 00:01:23 2024 GMT
Subject: CN=88c19c605486be9052be385dc15de6e3f4bf7f0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:24:84:71:f1:86:8f:28:81:d1:8d:aa:36:1e:
64:65:90:41:36:6e:c5:3c:8a:d6:cf:12:e0:ba:b8:
ce:10:d3:91:f0:e2:50:65:bf:91:ef:d9:b8:ce:55:
01:4e:62:c1:c9:dc:5c:db:c9:36:86:9b:1b:c1:e2:
82:17:83:7d:85:ac:fc:d9:3d:74:47:8b:9c:6a:89:
d6:ad:a9:5f:21:cb:db:64:51:03:14:d7:ef:da:e7:
81:79:aa:9b:40:28:0f:08:04:2e:56:c1:ab:0a:ba:
42:a7:8c:63:a6:7e:e8:dd:30:e6:94:f2:a1:5c:d6:
9c:f8:a2:6c:cc:25:d5:74:8b:1f:19:ea:44:97:78:
ff:1e:ad:2d:3e:1e:ff:0f:84:2f:01:c9:d3:fc:3d:
bb:e2:f6:a7:94:67:c2:b7:44:51:7f:d8:c3:b1:a8:
75:b0:d6:f9:e6:ce:d6:8a:49:8e:e7:ac:44:fb:59:
c2:fa:47:fb:4d:80:2e:97:71:5f:65:29:ea:89:46:
6e:9e:3d:b5:6a:69:20:a4:f4:04:e9:80:c9:28:ee:
d9:28:28:d3:c7:f9:cc:52:df:89:ef:52:f2:06:49:
02:4d:0b:46:ea:fd:ae:b0:a2:2f:51:49:c1:f3:05:
a8:ad:4d:de:88:03:cb:12:51:dd:0c:f8:0a:15:f1:
f4:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:C1:9C:60:54:86:BE:90:52:BE:38:5D:C1:5D:E6:E3:F4:BF:7F:0D
X509v3 Authority Key Identifier:
keyid:52:9B:E6:F4:5C:D6:41:88:A2:D0:A3:64:4A:72:F4:E8:42:A6:3A:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Upvm9FzWQYii0KNkSnL06EKmOmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/Upvm9FzWQYii0KNkSnL06EKmOmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/Upvm9FzWQYii0KNkSnL06EKmOmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:2b:36:17:db:25:a8:2a:3f:1d:99:b4:61:ab:fa:24:72:e9:
7b:47:08:ca:7c:28:15:ca:40:5f:1a:63:51:fb:a8:27:3c:da:
8f:e1:99:b6:71:38:05:4b:f6:69:0d:3a:d7:1e:54:29:45:3c:
f7:b2:85:40:c1:1d:39:d2:24:1f:8b:b7:1e:fb:52:ed:24:df:
ed:df:b6:62:88:f5:a3:d0:2b:a5:97:d6:b7:d1:07:a6:7e:cc:
46:1a:1f:33:16:5c:7f:30:dd:2f:84:ef:43:b3:83:1c:e4:37:
5a:2e:96:1b:bf:67:db:1b:45:7c:13:c6:ab:2a:91:f4:5d:b9:
ef:81:47:78:8c:cb:d3:eb:b8:90:4a:82:b0:d7:32:18:f1:13:
47:f1:66:f7:5e:3a:f6:0b:be:93:30:aa:43:f9:4f:4d:24:d3:
2a:b7:d1:c6:13:ce:9b:ba:d0:50:08:fb:56:0f:ee:8e:8b:47:
05:d7:f3:a0:d1:f6:0e:9a:58:15:e2:2a:f0:19:a9:ee:53:0e:
f0:53:43:cd:4a:7c:39:db:70:55:23:b4:f2:7a:54:0b:0e:11:
97:97:65:b9:28:dd:68:da:c5:f2:cf:41:77:d3:5e:8e:2e:65:
c6:33:0f:e2:ff:79:ae:dd:a9:0b:ed:65:38:ab:c3:fe:05:45:
56:f5:2a:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:44:52 2024 by rpki-client on console-fra.rpki-client.org