![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft
File: 2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft (raw, json)
Hash identifier: /F3zZEOlXaWZFcEIevl1zPR+TTLwrYa7OQArrkZRw6c=
Subject key identifier: F9:AE:7F:03:9F:E5:D7:B4:12:52:29:FE:88:4E:73:4C:1E:62:5D:3E
Authority key identifier: DB:F5:BC:B9:1C:64:0A:0A:34:29:05:E5:A5:17:07:52:8F:5A:33:A1
Certificate issuer: /CN=dbf5bcb91c640a0a342905e5a51707528f5a33a1
Certificate serial: 01903707C96498671DD10E0C6E004D780811
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2_W8uRxkCgo0KQXlpRcHUo9aM6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft
Manifest number: 0FC3
Signing time: Thu 20 Jun 2024 19:02:55 +0000
Manifest this update: Thu 20 Jun 2024 19:02:55 +0000
Manifest next update: Fri 21 Jun 2024 19:02:55 +0000
Files and hashes: 1: 2_W8uRxkCgo0KQXlpRcHUo9aM6E.crl (hash: xUjSZSnbM0KesHYoGYfXgsed4VkBceSO17teeE1OF6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/2_W8uRxkCgo0KQXlpRcHUo9aM6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 19:02:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:37:07:c9:64:98:67:1d:d1:0e:0c:6e:00:4d:78:08:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbf5bcb91c640a0a342905e5a51707528f5a33a1
Validity
Not Before: Jun 20 19:02:55 2024 GMT
Not After : Jun 21 19:02:55 2024 GMT
Subject: CN=f9ae7f039fe5d7b4125229fe884e734c1e625d3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ab:83:2f:e1:12:09:65:fb:48:ea:ac:5b:9c:
29:38:ff:0e:a3:d6:6b:31:6f:be:34:23:de:e1:79:
be:b1:16:db:b4:72:cb:b6:df:3e:34:6f:8d:80:6e:
d0:3f:48:37:d9:e8:44:5e:8d:d2:db:3c:e6:a3:25:
98:cd:66:ea:aa:6e:b5:a9:e7:bb:6a:03:40:5b:e2:
39:21:d4:af:6c:dd:2e:fa:f9:65:53:d0:19:8e:c5:
13:43:b1:99:cf:12:dc:fd:b5:af:6a:de:35:2b:11:
17:b7:78:95:92:7d:c9:7b:df:99:4f:cc:3b:e8:99:
11:2f:9a:92:e2:cb:5e:a2:71:24:91:d5:a7:4c:b4:
c2:6d:e8:f5:0e:c7:e7:97:d9:e7:0e:c2:26:5c:9f:
c6:5e:11:5f:33:79:16:4e:82:8c:a2:f2:c7:f3:8e:
aa:e7:0d:3e:74:43:ee:b0:e1:be:80:71:a2:7b:cb:
02:e3:ca:29:56:41:60:3e:cd:3e:f3:d9:46:46:23:
20:94:da:e5:22:7d:31:5d:c9:c0:01:77:9c:b3:9c:
69:8b:eb:83:91:1e:07:5f:2c:2e:d9:4f:05:cc:0b:
82:55:ee:36:cd:a9:6b:ef:9f:3a:a9:f0:b8:0c:a1:
f4:f4:d0:25:f9:4a:4a:fe:7b:31:a6:eb:c9:f2:8c:
c9:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:AE:7F:03:9F:E5:D7:B4:12:52:29:FE:88:4E:73:4C:1E:62:5D:3E
X509v3 Authority Key Identifier:
keyid:DB:F5:BC:B9:1C:64:0A:0A:34:29:05:E5:A5:17:07:52:8F:5A:33:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2_W8uRxkCgo0KQXlpRcHUo9aM6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:28:4f:43:ee:59:75:8f:b5:59:26:10:85:35:92:06:33:a9:
4f:a8:87:bf:07:9b:a2:b2:3c:63:43:38:bf:b6:03:0b:42:d5:
ed:f3:be:34:6c:b9:b3:f8:6a:bc:6c:7f:7b:03:26:86:c2:61:
e7:d4:62:7f:26:6d:2b:89:54:3e:84:3b:ef:1c:db:d2:ae:00:
2e:e8:4e:37:4e:2d:3e:f0:68:aa:00:27:30:94:1a:af:dd:34:
6c:24:e0:9d:e0:41:48:56:84:a1:06:0b:48:92:0f:f9:1d:4a:
e3:9c:ff:0e:a4:9e:d6:59:72:d9:68:32:28:be:bd:a7:78:06:
32:e5:29:03:35:b1:b4:08:03:3f:85:77:72:2c:eb:dd:6d:fc:
99:bd:1e:22:6c:cb:11:fb:7e:94:be:0d:d5:44:9a:d0:40:48:
6c:df:9c:d5:a5:70:b5:02:5e:d5:12:43:b4:a6:34:b1:0b:13:
fa:60:30:9e:ed:e5:67:89:5d:14:24:b5:da:fc:ac:d3:c9:38:
89:99:9f:11:d4:7f:ee:7a:b7:a4:70:24:fd:3a:5a:2f:fb:1f:
6c:3c:25:a8:94:35:56:ef:b9:27:63:45:59:87:a2:d9:64:40:
5e:de:e0:2b:75:52:c6:d9:06:0d:a6:75:15:17:2f:fd:c3:59:
65:e4:db:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 04:34:57 2024 by rpki-client on console-ams.rpki-client.org