![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/e67956-de18-40c4-b013-951e5afae9e7/1/LdgAjePP9i0vrKENmf8gw-h43N8.mft
File: LdgAjePP9i0vrKENmf8gw-h43N8.mft (raw, json)
Hash identifier: a3Pn4aVjC3KFza7eqlZmQOfK/pamp9ea3Fd2Khk5FXk=
Subject key identifier: 0C:66:04:22:D0:76:E7:45:2A:F6:96:B2:27:2E:02:8A:9A:66:37:D4
Authority key identifier: 2D:D8:00:8D:E3:CF:F6:2D:2F:AC:A1:0D:99:FF:20:C3:E8:78:DC:DF
Certificate issuer: /CN=2dd8008de3cff62d2faca10d99ff20c3e878dcdf
Certificate serial: 01901DB3CBDF0A66AB7409B664CF43B9B2B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LdgAjePP9i0vrKENmf8gw-h43N8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/e67956-de18-40c4-b013-951e5afae9e7/1/LdgAjePP9i0vrKENmf8gw-h43N8.mft
Manifest number: 87
Signing time: Sat 15 Jun 2024 21:00:40 +0000
Manifest this update: Sat 15 Jun 2024 21:00:40 +0000
Manifest next update: Sun 16 Jun 2024 21:00:40 +0000
Files and hashes: 1: LdgAjePP9i0vrKENmf8gw-h43N8.crl (hash: 4ZoGnWIAnjGX086cvEC2nW3GSn7HSQ2DTM1/rBanki8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/e67956-de18-40c4-b013-951e5afae9e7/1/LdgAjePP9i0vrKENmf8gw-h43N8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/e67956-de18-40c4-b013-951e5afae9e7/1/LdgAjePP9i0vrKENmf8gw-h43N8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LdgAjePP9i0vrKENmf8gw-h43N8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 21:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:b3:cb:df:0a:66:ab:74:09:b6:64:cf:43:b9:b2:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dd8008de3cff62d2faca10d99ff20c3e878dcdf
Validity
Not Before: Jun 15 21:00:40 2024 GMT
Not After : Jun 16 21:00:40 2024 GMT
Subject: CN=0c660422d076e7452af696b2272e028a9a6637d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e3:9f:d8:04:12:38:d5:50:62:9b:71:6f:c3:
75:4b:40:26:59:a5:df:dd:18:f3:ec:12:03:50:6e:
5e:a3:81:f5:38:35:54:4b:ca:e0:99:3a:3d:26:f1:
9f:21:89:fd:6f:bc:28:25:6e:69:20:08:c1:e9:a7:
68:79:e6:1a:f8:ab:e0:24:84:9f:e8:bd:90:a9:43:
c0:43:df:dd:5f:3d:82:b2:4b:a0:be:53:9c:c4:ff:
92:3f:4f:ca:5c:d7:7d:b0:57:3c:a9:fb:fc:d4:cd:
e3:73:5b:3e:8b:0a:0e:cd:59:5c:8e:c6:0b:87:84:
45:48:2e:ff:dc:54:53:f4:2e:a6:f5:ba:3c:eb:0d:
0b:f5:a9:e9:7c:68:f3:27:76:fa:a7:8d:83:57:a6:
56:c4:15:e0:38:f6:b5:79:3a:bb:e7:42:6c:26:82:
61:73:35:f8:a4:d0:3b:77:2d:94:8b:e5:ba:c1:3b:
43:54:88:ff:19:56:eb:a3:16:1b:b3:ed:b1:6b:64:
8b:fe:51:68:0c:43:fb:e9:18:04:d9:bb:20:09:c6:
c5:cc:43:98:69:4d:0d:20:3f:42:35:9b:9e:7b:c5:
85:35:a5:41:56:cd:71:38:28:76:6a:a2:9e:6e:ea:
ee:ba:c4:12:22:fb:b5:de:75:26:11:af:e5:f4:2c:
4b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:66:04:22:D0:76:E7:45:2A:F6:96:B2:27:2E:02:8A:9A:66:37:D4
X509v3 Authority Key Identifier:
keyid:2D:D8:00:8D:E3:CF:F6:2D:2F:AC:A1:0D:99:FF:20:C3:E8:78:DC:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LdgAjePP9i0vrKENmf8gw-h43N8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e67956-de18-40c4-b013-951e5afae9e7/1/LdgAjePP9i0vrKENmf8gw-h43N8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e67956-de18-40c4-b013-951e5afae9e7/1/LdgAjePP9i0vrKENmf8gw-h43N8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:f5:82:c4:4a:7e:5f:54:b3:75:a3:63:ea:8b:e5:c0:23:14:
7a:da:f8:c3:16:e0:f7:bc:cf:35:bf:9b:11:15:99:c7:cf:ac:
54:0a:c0:ef:b1:11:60:29:bb:45:0e:bd:a2:4a:68:3a:72:17:
90:4a:e5:b6:47:b9:60:be:78:16:b4:60:97:ad:cf:15:34:0e:
5c:ed:08:f7:42:a2:ef:59:0b:5e:56:f9:ea:20:90:8b:3a:1c:
a3:68:54:38:58:fe:58:3b:8d:b8:9a:67:cc:aa:33:20:38:e3:
ff:74:69:4b:56:0f:26:3b:c3:9a:6d:08:06:75:60:7e:23:06:
5a:6b:0c:87:d3:73:d7:8b:0b:06:9b:ca:0c:da:e0:7b:aa:6c:
fe:df:57:4e:8b:00:25:cc:37:6f:58:72:88:2d:b5:19:26:a4:
ef:aa:82:80:e7:a0:77:1c:0f:d4:13:ca:65:2e:42:9f:73:8d:
a1:63:59:2e:c8:3f:2a:74:06:d5:86:58:1f:53:3e:37:34:47:
40:70:a2:69:a6:a3:54:dc:8d:4a:4f:34:ce:38:4a:3f:90:14:
ab:48:fe:5c:6e:cb:4e:f5:8f:fa:34:83:22:ae:8a:9f:a4:ce:
36:9d:b8:48:e9:12:58:ec:7e:65:92:3e:ad:5b:3d:6e:59:ea:
a3:62:17:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 05:00:47 2024 by rpki-client on console-ams.rpki-client.org