![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/9773dc-d8e8-480d-98f2-c00cbc1492bf/1/0phnd6RO0JQPKaeVx19Fpi9EuzM.mft
File: 0phnd6RO0JQPKaeVx19Fpi9EuzM.mft (raw, json)
Hash identifier: jqtYt7xD0VFq3GIC+rXlTdodSfuv83jYxyReYtAHBl0=
Subject key identifier: FC:DC:7A:D1:37:93:5D:F5:A8:84:2B:11:7E:34:34:6C:0B:42:CB:0F
Authority key identifier: D2:98:67:77:A4:4E:D0:94:0F:29:A7:95:C7:5F:45:A6:2F:44:BB:33
Certificate issuer: /CN=d2986777a44ed0940f29a795c75f45a62f44bb33
Certificate serial: 01901DED24090EE674DBCA1F3F29BA1DE695
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0phnd6RO0JQPKaeVx19Fpi9EuzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/9773dc-d8e8-480d-98f2-c00cbc1492bf/1/0phnd6RO0JQPKaeVx19Fpi9EuzM.mft
Manifest number: 01B0
Signing time: Sat 15 Jun 2024 22:03:18 +0000
Manifest this update: Sat 15 Jun 2024 22:03:18 +0000
Manifest next update: Sun 16 Jun 2024 22:03:18 +0000
Files and hashes: 1: 0phnd6RO0JQPKaeVx19Fpi9EuzM.crl (hash: WV0by8N6OcJ2godtMkBAqCk06XlinDx7EvmWzFFWa0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/9773dc-d8e8-480d-98f2-c00cbc1492bf/1/0phnd6RO0JQPKaeVx19Fpi9EuzM.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/9773dc-d8e8-480d-98f2-c00cbc1492bf/1/0phnd6RO0JQPKaeVx19Fpi9EuzM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0phnd6RO0JQPKaeVx19Fpi9EuzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 22:03:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:ed:24:09:0e:e6:74:db:ca:1f:3f:29:ba:1d:e6:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2986777a44ed0940f29a795c75f45a62f44bb33
Validity
Not Before: Jun 15 22:03:18 2024 GMT
Not After : Jun 16 22:03:18 2024 GMT
Subject: CN=fcdc7ad137935df5a8842b117e34346c0b42cb0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ac:b8:b7:41:2d:bc:09:33:3e:31:88:81:2e:
45:e7:52:a8:af:bb:a3:1b:62:cb:b3:5f:c1:72:d3:
d2:ae:cf:88:9d:b4:16:80:ed:6c:a1:40:26:b5:20:
d3:02:6f:17:e1:6d:4f:36:71:fc:ce:1c:79:4a:17:
29:52:91:ae:80:06:a1:6a:aa:cc:2d:36:7d:ca:76:
ad:b8:e2:5b:64:b3:f7:b6:6f:e4:75:06:8c:97:3f:
05:ac:2d:00:c2:cb:62:ec:da:54:cd:a8:92:6c:f5:
95:fd:ce:da:aa:70:92:ad:6c:bb:d5:9e:59:72:55:
85:2d:a8:53:63:e7:a5:5c:8f:68:76:c5:42:9c:ef:
1c:ab:6e:0d:1d:eb:7c:39:d8:76:23:09:df:ae:5d:
25:cd:02:80:78:70:e4:ca:ec:68:36:26:de:15:83:
25:9e:df:8d:a9:68:f2:d1:26:f6:0a:8c:69:67:8c:
6f:99:a0:f4:64:45:63:68:ac:14:08:ec:25:64:36:
02:ba:da:e4:75:88:5e:c5:b3:7a:03:1a:50:81:ce:
48:0f:4a:89:21:7a:49:55:5e:bd:6e:fc:a7:34:49:
92:ed:9d:25:a7:0e:1c:5b:c8:9d:3d:e5:69:ff:53:
5f:a2:a1:2c:2d:52:dc:ef:88:7c:e5:5d:7e:1a:c2:
b3:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:DC:7A:D1:37:93:5D:F5:A8:84:2B:11:7E:34:34:6C:0B:42:CB:0F
X509v3 Authority Key Identifier:
keyid:D2:98:67:77:A4:4E:D0:94:0F:29:A7:95:C7:5F:45:A6:2F:44:BB:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0phnd6RO0JQPKaeVx19Fpi9EuzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/9773dc-d8e8-480d-98f2-c00cbc1492bf/1/0phnd6RO0JQPKaeVx19Fpi9EuzM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/9773dc-d8e8-480d-98f2-c00cbc1492bf/1/0phnd6RO0JQPKaeVx19Fpi9EuzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:e9:7c:d6:35:70:f9:20:9f:ad:03:2a:71:2f:3c:69:5f:e9:
f5:08:0d:4b:f4:5d:b8:e7:22:c7:01:d4:4b:b0:e1:29:41:ad:
b5:8e:15:25:0b:9c:33:45:9c:a3:3c:93:43:ba:16:32:f1:b2:
9d:44:4b:64:72:5b:03:33:6f:0c:7c:ca:a7:80:26:52:ac:64:
0c:38:df:1f:9a:04:ed:48:b4:31:f6:ca:98:66:b4:1e:23:12:
af:97:de:61:81:00:81:03:11:33:ab:09:3d:cc:f0:65:1a:e4:
2d:cf:ab:61:87:7f:b1:a1:08:95:30:5a:17:22:5a:25:15:46:
84:b3:6a:d5:aa:f8:30:c4:72:7a:02:86:51:35:7d:36:50:74:
ed:2b:33:18:3a:9d:99:47:1f:b3:d3:df:45:0f:32:d9:b3:2b:
6d:dd:aa:ec:d2:74:d3:56:63:4f:69:ed:fb:b5:83:32:73:13:
76:ff:6f:a7:1a:83:be:c5:86:de:2d:fd:a9:43:b2:1a:e2:8a:
03:07:03:50:63:32:3f:99:c0:d5:ca:ca:50:7e:02:9a:05:11:
5a:3b:9b:8f:d0:ca:c3:11:be:b5:cb:76:4a:a9:7d:fb:75:c2:
c6:a3:00:b2:e6:2c:89:5a:7e:2d:cb:7e:5c:32:b3:3b:3a:6a:
03:f5:b9:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 05:02:18 2024 by rpki-client on console-ams.rpki-client.org