![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/xn4qRuNPSRQzyLYvMZuQK9396DE.mft
File: xn4qRuNPSRQzyLYvMZuQK9396DE.mft (raw, json)
Hash identifier: MhaM1kEtxvFL++WGIl7OXRvuoM4QkACSMmb3PXMvy5Q=
Subject key identifier: 65:63:43:DD:09:18:8C:81:7B:EC:98:49:7C:B5:47:E5:0D:CF:5A:F1
Authority key identifier: C6:7E:2A:46:E3:4F:49:14:33:C8:B6:2F:31:9B:90:2B:DD:FD:E8:31
Certificate issuer: /CN=c67e2a46e34f491433c8b62f319b902bddfde831
Certificate serial: 01901E901AC6059F76E50D68DF1B18684438
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xn4qRuNPSRQzyLYvMZuQK9396DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/xn4qRuNPSRQzyLYvMZuQK9396DE.mft
Manifest number: 0EF9
Signing time: Sun 16 Jun 2024 01:01:18 +0000
Manifest this update: Sun 16 Jun 2024 01:01:18 +0000
Manifest next update: Mon 17 Jun 2024 01:01:18 +0000
Files and hashes: 1: 46JMDzgygP8yVSQnUwnu_ScpyHQ.roa (hash: u6yXT49rOvOPXdloG/Btq422oOntzmV18qOsV5UcTxo=)
2: 5KcLRy-cZuSsgteyBc4ZCpbOBgE.roa (hash: vlMY9M8ZCYNSJr7C0tbuNcxuWWhYbZY+IB3rhRzuBaE=)
3: KssG4Wky6VtFwLpOlwssyh1QkTY.roa (hash: qjnKtpo9HoXqxoz/mmiU7Cos4RpZ169yBf/C4pFEPK8=)
4: xn4qRuNPSRQzyLYvMZuQK9396DE.crl (hash: TTzHKiplkUhZ3e9vLpFoOMkqs+/O9woUXGEFNV1/UNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/xn4qRuNPSRQzyLYvMZuQK9396DE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/xn4qRuNPSRQzyLYvMZuQK9396DE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xn4qRuNPSRQzyLYvMZuQK9396DE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1e:90:1a:c6:05:9f:76:e5:0d:68:df:1b:18:68:44:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c67e2a46e34f491433c8b62f319b902bddfde831
Validity
Not Before: Jun 16 01:01:18 2024 GMT
Not After : Jun 17 01:01:18 2024 GMT
Subject: CN=656343dd09188c817bec98497cb547e50dcf5af1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:fc:ae:53:7b:c7:c3:df:e9:c1:d7:42:18:6e:
14:3e:e7:04:d5:10:14:a9:62:d0:77:ca:be:c8:c8:
d6:62:ee:2d:01:39:d9:47:0c:d0:ac:e9:f6:d7:cc:
95:59:fb:63:6e:fe:7d:a8:e6:aa:bd:d8:c5:16:a5:
12:8b:de:ac:2b:4a:13:c3:4a:d2:da:19:40:35:b4:
89:a9:ce:06:9d:6d:a9:8e:9a:2b:1f:ab:be:87:77:
72:87:e7:af:66:4b:6b:89:e5:e1:43:6f:6a:15:b1:
aa:a1:39:65:15:92:60:3f:55:18:97:3f:2e:3a:ad:
5e:7e:55:6a:f2:11:b8:1e:88:84:33:e5:6e:09:b2:
dd:4b:8a:73:1c:5d:84:ac:b3:06:33:3d:74:b3:e8:
33:6c:3f:7d:c4:0d:df:6e:db:7f:44:9d:64:14:a0:
aa:99:e1:57:32:69:2c:f6:7e:d5:00:4c:9a:24:c6:
4a:96:ec:e3:35:8e:96:f4:22:c1:69:bc:53:6c:ed:
52:49:7f:1a:09:16:3b:e3:43:4f:ad:0d:09:14:0a:
b7:9f:99:e1:51:fe:3a:10:3a:96:c5:c8:74:b3:94:
f6:8b:1a:69:4e:b4:46:6d:94:ce:24:83:6e:2b:27:
9f:e0:36:f2:8b:4b:16:ae:02:29:75:9c:d6:6d:48:
76:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:63:43:DD:09:18:8C:81:7B:EC:98:49:7C:B5:47:E5:0D:CF:5A:F1
X509v3 Authority Key Identifier:
keyid:C6:7E:2A:46:E3:4F:49:14:33:C8:B6:2F:31:9B:90:2B:DD:FD:E8:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xn4qRuNPSRQzyLYvMZuQK9396DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/xn4qRuNPSRQzyLYvMZuQK9396DE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/xn4qRuNPSRQzyLYvMZuQK9396DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:01:a0:7f:b6:c6:5d:7d:4d:27:68:08:fd:13:e0:3c:af:c7:
ff:91:29:b0:e7:b7:37:82:73:1d:9c:27:34:de:dd:c3:74:69:
14:56:23:3c:db:d7:a9:96:6c:12:2e:4c:ee:5b:1f:53:01:28:
bf:39:32:56:c2:86:1c:66:be:36:d0:9b:33:c9:89:f3:3d:d8:
53:36:07:17:28:5c:28:20:39:e9:19:b6:7e:ea:7d:a9:59:b2:
67:a4:cd:6a:ce:8e:cf:af:66:e3:bc:de:b2:53:b1:2c:52:4c:
a3:57:5a:60:ea:57:00:40:7c:3e:aa:aa:d7:3b:ce:e6:2a:d1:
e4:6f:a5:e0:3c:6b:8f:1d:26:28:ae:71:92:fb:bd:a3:48:33:
4d:49:08:d9:9e:e0:b9:66:ed:5b:eb:6f:2b:8e:42:16:dd:f7:
42:8a:fc:81:2b:a5:01:03:6d:1d:d0:20:2f:1a:91:b3:37:c8:
9d:41:35:01:69:9d:ef:e5:ad:b7:26:ee:6f:47:63:df:73:9d:
59:a1:51:26:d5:49:c8:61:a1:36:a8:13:07:cb:29:f1:f8:70:
11:cf:ea:f9:17:f0:f3:31:84:90:b4:24:33:9f:4c:34:0b:f4:
28:0c:7f:02:2d:06:bd:ea:66:49:7c:4f:0a:a4:55:d0:ee:3b:
54:f9:b1:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:45:50 2024 by rpki-client on console-fra.rpki-client.org