![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/26e21e-db81-46c7-955a-77d315cc16aa/1/pj_zsazNggGkEWyYdXM5I0KJgB4.mft
File: pj_zsazNggGkEWyYdXM5I0KJgB4.mft (raw, json)
Hash identifier: 8hBG2stPofod9QbPkYR6njP8380VlfNuPpif9+V09Bw=
Subject key identifier: A6:FF:F8:98:D7:29:ED:6A:39:10:BB:4E:E1:85:B7:3D:F3:BD:E0:51
Authority key identifier: A6:3F:F3:B1:AC:CD:82:01:A4:11:6C:98:75:73:39:23:42:89:80:1E
Certificate issuer: /CN=a63ff3b1accd8201a4116c98757339234289801e
Certificate serial: 01903B50B7BAB5679EFB8BE627806EACB4D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pj_zsazNggGkEWyYdXM5I0KJgB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/26e21e-db81-46c7-955a-77d315cc16aa/1/pj_zsazNggGkEWyYdXM5I0KJgB4.mft
Manifest number: 9B
Signing time: Fri 21 Jun 2024 15:01:03 +0000
Manifest this update: Fri 21 Jun 2024 15:01:03 +0000
Manifest next update: Sat 22 Jun 2024 15:01:03 +0000
Files and hashes: 1: pj_zsazNggGkEWyYdXM5I0KJgB4.crl (hash: eEGUIn+vgV2BTHtgLuyODhzHg1epeIUlsk25v9qSD8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/26e21e-db81-46c7-955a-77d315cc16aa/1/pj_zsazNggGkEWyYdXM5I0KJgB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/26e21e-db81-46c7-955a-77d315cc16aa/1/pj_zsazNggGkEWyYdXM5I0KJgB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pj_zsazNggGkEWyYdXM5I0KJgB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Jun 2024 09:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:3b:50:b7:ba:b5:67:9e:fb:8b:e6:27:80:6e:ac:b4:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a63ff3b1accd8201a4116c98757339234289801e
Validity
Not Before: Jun 21 15:01:03 2024 GMT
Not After : Jun 22 15:01:03 2024 GMT
Subject: CN=a6fff898d729ed6a3910bb4ee185b73df3bde051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:42:38:f7:99:55:4b:b0:d2:d2:38:33:f6:fe:
d9:cc:1a:cb:40:5a:4d:38:cf:99:3e:04:71:70:c3:
dd:7a:1f:84:64:c6:80:54:db:35:5c:a7:17:80:e6:
55:17:57:79:f6:ad:d6:b1:bc:36:d4:dc:9b:20:b0:
e2:d3:fb:84:50:ea:48:e6:0b:cf:56:56:cc:6e:5e:
3e:65:d6:99:04:73:b1:39:dc:67:bd:a8:5c:04:31:
19:f1:08:4b:4b:08:f7:9e:07:4a:2f:c6:b0:c4:d3:
ea:e0:e0:5c:4c:21:e2:34:db:86:81:5e:e5:c2:b7:
63:18:0c:26:41:53:8a:fb:3d:e1:ce:5a:63:a3:97:
f1:ed:f2:ff:ce:e1:c9:ac:43:53:35:53:c0:c4:3a:
c9:c4:d3:59:df:08:9a:52:6f:a1:2b:3b:71:18:83:
e3:d6:9c:a0:cc:85:ec:9a:79:df:c3:1c:7d:6f:54:
72:8f:84:e7:06:87:d0:c6:03:8c:3b:05:e3:cc:50:
58:92:6e:43:f1:b0:b4:3b:07:7a:47:9c:99:b3:bf:
98:cd:33:23:a9:1c:68:fa:25:d2:32:28:7f:10:3b:
1d:5f:39:df:2a:62:33:a8:74:cb:fa:85:3d:8d:71:
8a:fa:2d:2f:37:8a:26:39:2c:8d:f3:9c:ab:6a:2f:
5b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:FF:F8:98:D7:29:ED:6A:39:10:BB:4E:E1:85:B7:3D:F3:BD:E0:51
X509v3 Authority Key Identifier:
keyid:A6:3F:F3:B1:AC:CD:82:01:A4:11:6C:98:75:73:39:23:42:89:80:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pj_zsazNggGkEWyYdXM5I0KJgB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/26e21e-db81-46c7-955a-77d315cc16aa/1/pj_zsazNggGkEWyYdXM5I0KJgB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/26e21e-db81-46c7-955a-77d315cc16aa/1/pj_zsazNggGkEWyYdXM5I0KJgB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:08:69:f9:ef:56:4d:b0:fa:27:2b:72:9b:7a:20:0a:0d:86:
2a:2e:bc:eb:87:33:9b:b3:93:8b:a6:12:19:a4:f9:99:4f:7c:
95:a3:72:b5:1a:a6:63:7d:fb:b9:14:3c:e9:cf:1c:8c:76:ef:
e8:74:57:fa:6d:c9:7e:ea:45:53:6f:ed:e6:31:28:a5:1c:de:
10:34:8e:eb:92:4c:01:1d:a7:70:10:78:c1:5d:ba:ac:e2:2c:
11:0c:b5:a5:c0:9d:ae:79:7a:b2:db:a0:0d:df:37:89:79:4e:
72:9d:3a:b0:43:63:ab:07:4b:8e:91:9c:31:5e:33:83:38:3f:
1b:ac:f7:17:ea:e1:48:10:ea:8b:06:cd:d1:28:ad:7f:3a:82:
50:5d:e6:ef:04:9c:21:a4:b9:54:cf:5e:db:72:ed:aa:0a:4a:
54:6d:6e:d6:4a:86:d9:4c:aa:73:cc:c6:29:31:c9:32:76:ce:
72:96:f4:8d:88:f4:81:d6:dc:19:e9:ac:8f:76:64:e8:64:2b:
c0:d8:1d:f6:71:7d:fe:7f:ff:0c:57:d9:e4:27:36:94:87:98:
e8:35:18:f5:86:86:c7:b5:c3:53:b7:9c:e8:18:33:77:a2:2f:
71:73:5e:57:92:ab:19:02:b9:5b:b8:26:17:c1:a8:62:ba:3d:
f7:c4:62:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 17:48:11 2024 by rpki-client on console-ams.rpki-client.org