![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.mft
File: M54PXmVDk87aIttEl48nPnieI0E.mft (raw, json)
Hash identifier: CvDX9HWr2awUqjf9olU7tDKs85A/tbw7KN2w2IxWBVI=
Subject key identifier: 2E:88:E5:7B:64:50:8F:45:FF:C7:B1:05:17:D8:23:5B:E6:91:E7:C4
Authority key identifier: 33:9E:0F:5E:65:43:93:CE:DA:22:DB:44:97:8F:27:3E:78:9E:23:41
Certificate issuer: /CN=339e0f5e654393ceda22db44978f273e789e2341
Certificate serial: 0190448BBD43FC0E8BDA1496601049C7CCE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M54PXmVDk87aIttEl48nPnieI0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.mft
Manifest number: 0BAD
Signing time: Sun 23 Jun 2024 10:02:06 +0000
Manifest this update: Sun 23 Jun 2024 10:02:06 +0000
Manifest next update: Mon 24 Jun 2024 10:02:06 +0000
Files and hashes: 1: Ifui4PQbndse730lSZO3lCfkioY.roa (hash: D7nCViVTcLQTl0eYTC8UiUGnFlIt90jpYP7MJq7/kAA=)
2: M54PXmVDk87aIttEl48nPnieI0E.crl (hash: mLBtJBXsTwweijhB00Zo4Uu4Csg4BmjkVWJMwIiwUHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/M54PXmVDk87aIttEl48nPnieI0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 06:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:44:8b:bd:43:fc:0e:8b:da:14:96:60:10:49:c7:cc:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=339e0f5e654393ceda22db44978f273e789e2341
Validity
Not Before: Jun 23 10:02:06 2024 GMT
Not After : Jun 24 10:02:06 2024 GMT
Subject: CN=2e88e57b64508f45ffc7b10517d8235be691e7c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:12:e3:d6:89:7a:76:5d:22:e7:a7:47:45:47:
bb:b0:7c:3b:10:23:05:74:5f:d4:1f:ed:96:46:ee:
73:fd:c0:0d:be:01:8e:23:b2:07:69:d5:dc:b3:2c:
2b:02:d0:f0:de:31:91:15:2b:ac:82:d5:9b:5a:27:
e2:02:f9:3d:ce:13:a2:e0:96:54:e8:fb:08:01:59:
d7:66:ea:80:b3:25:df:dc:e0:89:1c:26:c9:42:96:
9b:d9:64:8a:fd:d9:28:0a:87:5d:8d:b7:d4:be:f0:
d2:9f:db:d6:75:00:0e:bb:11:b1:b4:f8:e0:8e:2e:
b4:80:fc:12:01:fa:8a:72:5b:86:7a:d3:12:74:89:
04:82:95:99:51:a3:8b:0f:5d:57:cc:70:db:f5:93:
04:8f:0a:4d:0a:c7:e3:74:a1:65:be:a1:ec:28:15:
bb:56:a4:56:d6:08:d4:7e:dc:3d:4b:10:eb:16:db:
96:71:cd:b2:5b:20:f7:fb:5e:1a:45:79:cd:fe:fc:
ff:07:c2:23:0e:6d:d5:3f:c8:da:3b:1d:8d:7d:df:
de:10:fd:c7:c4:e4:57:57:de:1e:56:09:2e:bc:4b:
96:3d:15:72:bc:05:d0:f8:da:38:c7:1d:55:73:c3:
57:92:a1:fa:77:5e:5e:55:4d:bd:52:52:d1:91:ce:
a2:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:88:E5:7B:64:50:8F:45:FF:C7:B1:05:17:D8:23:5B:E6:91:E7:C4
X509v3 Authority Key Identifier:
keyid:33:9E:0F:5E:65:43:93:CE:DA:22:DB:44:97:8F:27:3E:78:9E:23:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M54PXmVDk87aIttEl48nPnieI0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:e0:5f:03:c6:53:73:88:c8:ff:c5:9e:bc:e2:fc:59:5c:71:
1c:43:45:07:36:d7:4e:f4:cf:81:cf:fb:35:c5:10:5c:34:dc:
3c:5f:d3:2f:8a:2e:53:30:46:ff:cf:15:b6:30:53:01:65:ae:
a8:08:a0:f0:d6:a6:4a:c7:ee:db:44:2d:43:86:6d:40:39:f7:
f1:94:5c:11:56:5d:d6:fa:80:7c:40:ec:9f:08:0f:bd:81:b6:
a0:fd:67:a2:73:56:29:f4:63:14:2a:10:96:1a:6b:11:b7:78:
27:87:34:b4:77:94:e6:cd:f3:dc:b5:71:e8:e3:0d:a1:d2:a4:
28:89:2a:46:3c:04:9f:79:21:4c:9e:c9:c0:6d:6e:49:03:8e:
9a:b4:b9:73:a1:73:82:0a:2e:df:44:af:dd:12:26:61:bc:b4:
b6:2d:f0:b3:04:74:82:22:78:fe:33:6d:c5:bf:72:b7:28:38:
58:45:76:06:ba:65:10:42:06:06:43:87:84:14:8d:0d:ce:38:
40:c3:3f:13:ec:4a:d3:27:c6:71:18:32:0b:de:3f:cb:e8:6c:
55:4a:35:a6:6d:23:0f:b4:8a:8f:5e:a3:25:36:26:93:81:24:
6e:e7:68:df:36:74:4c:f2:b3:6c:0e:d6:0b:92:49:1f:69:45:
ed:6e:2f:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 15:05:17 2024 by rpki-client on console-ams.rpki-client.org