![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/adea93-808b-4488-a53c-3a06b3af5243/1/xBguKPMRxEKUqMpq2B16eGOvUJk.mft
File: xBguKPMRxEKUqMpq2B16eGOvUJk.mft (raw, json)
Hash identifier: DATyCDB1O5BJ9yIVMg3jS047PWMjUppqkut+tXUOV94=
Subject key identifier: 3F:FB:71:4F:5E:65:61:E9:DE:83:93:40:33:3B:E7:B0:A6:87:0E:3F
Authority key identifier: C4:18:2E:28:F3:11:C4:42:94:A8:CA:6A:D8:1D:7A:78:63:AF:50:99
Certificate issuer: /CN=c4182e28f311c44294a8ca6ad81d7a7863af5099
Certificate serial: 01901DEBC30407CF03022054BCC8C67EF00F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBguKPMRxEKUqMpq2B16eGOvUJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/adea93-808b-4488-a53c-3a06b3af5243/1/xBguKPMRxEKUqMpq2B16eGOvUJk.mft
Manifest number: 0BE6
Signing time: Sat 15 Jun 2024 22:01:48 +0000
Manifest this update: Sat 15 Jun 2024 22:01:48 +0000
Manifest next update: Sun 16 Jun 2024 22:01:48 +0000
Files and hashes: 1: xBguKPMRxEKUqMpq2B16eGOvUJk.crl (hash: X1U6YrgITfleH0aeKYRmb5g3eob5L4XwgQecESPRvL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/adea93-808b-4488-a53c-3a06b3af5243/1/xBguKPMRxEKUqMpq2B16eGOvUJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/adea93-808b-4488-a53c-3a06b3af5243/1/xBguKPMRxEKUqMpq2B16eGOvUJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xBguKPMRxEKUqMpq2B16eGOvUJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 22:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:eb:c3:04:07:cf:03:02:20:54:bc:c8:c6:7e:f0:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4182e28f311c44294a8ca6ad81d7a7863af5099
Validity
Not Before: Jun 15 22:01:48 2024 GMT
Not After : Jun 16 22:01:48 2024 GMT
Subject: CN=3ffb714f5e6561e9de839340333be7b0a6870e3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9b:41:32:46:16:34:79:7a:30:39:41:91:ff:
44:1b:4a:83:36:f7:f6:dc:5b:99:e9:cc:0b:6b:11:
32:2f:75:43:c4:d3:d7:08:39:c1:96:ab:38:c3:37:
c5:83:70:9d:9b:19:a1:d4:36:fe:eb:78:12:eb:4b:
7e:9a:b4:ff:31:6e:64:4a:38:22:d1:70:00:da:ef:
b3:60:75:db:23:b8:f2:99:c0:2b:43:a7:77:b1:6f:
f9:d5:fa:eb:48:20:c1:18:24:4c:b3:a1:6e:67:66:
f2:01:f4:0f:83:77:15:3f:51:fe:31:79:88:a5:a6:
1c:c6:79:f7:9a:be:70:0e:7a:9b:15:1e:8b:85:77:
1a:ff:30:b7:5c:8d:c6:2d:f8:77:d4:a9:25:1b:9b:
50:36:26:d3:b3:fd:ca:97:5d:e0:46:30:32:e0:58:
bf:67:68:f3:fd:18:fd:e9:03:65:b2:02:07:88:15:
7c:67:e0:79:c5:bf:9a:e8:20:a6:ec:02:36:46:c5:
15:c2:aa:1f:53:2b:8d:24:a6:3c:cd:33:08:f5:91:
7a:40:53:5b:0c:9d:d7:6e:89:b4:1c:8a:67:d9:b0:
d7:93:34:94:3c:92:22:bc:9a:eb:63:aa:a6:e8:30:
10:19:9c:0b:81:68:5b:8d:b8:ae:78:9f:eb:e6:c6:
04:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:FB:71:4F:5E:65:61:E9:DE:83:93:40:33:3B:E7:B0:A6:87:0E:3F
X509v3 Authority Key Identifier:
keyid:C4:18:2E:28:F3:11:C4:42:94:A8:CA:6A:D8:1D:7A:78:63:AF:50:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBguKPMRxEKUqMpq2B16eGOvUJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/adea93-808b-4488-a53c-3a06b3af5243/1/xBguKPMRxEKUqMpq2B16eGOvUJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/adea93-808b-4488-a53c-3a06b3af5243/1/xBguKPMRxEKUqMpq2B16eGOvUJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:d2:0e:e2:6f:89:0b:74:5e:ab:9f:cf:07:c2:d2:37:c8:3f:
83:20:ed:94:44:0b:14:37:f2:e7:50:46:9b:9e:b5:d5:99:d3:
58:a5:3c:86:a2:44:2d:f1:98:27:c9:a2:7e:9e:6d:ed:a0:38:
79:8c:b9:9c:9c:e3:6d:05:4e:d9:55:65:3a:88:74:44:60:37:
ae:d6:62:0a:53:67:03:b9:16:aa:2f:e4:0f:f0:75:67:33:da:
96:57:c6:26:48:56:46:ee:6f:ee:59:ed:3c:a8:45:df:b8:2e:
41:29:89:a0:17:81:e4:1b:d8:3a:ff:07:31:bf:41:e3:fd:2f:
6e:3e:79:91:78:16:f1:05:71:ca:d0:14:72:f6:75:99:24:6d:
c4:d9:f5:71:54:6b:de:1f:60:e9:d0:ec:c3:41:04:26:44:b3:
72:50:42:8e:69:cc:be:ae:ad:e9:74:07:65:10:ed:41:9b:b3:
33:2b:eb:e1:00:8f:76:b6:81:39:1d:2d:92:53:21:10:fc:34:
b8:bb:d1:38:ec:d9:e5:6f:b2:ab:66:95:f8:a4:f5:ef:e1:fb:
fb:64:f1:c8:af:66:a9:21:f7:08:a9:fe:4f:26:5f:bc:8f:14:
02:e2:79:a9:78:3b:8c:2f:59:12:e1:85:db:51:65:25:f8:89:
43:d1:55:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:48:07 2024 by rpki-client on console-fra.rpki-client.org