![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/adea93-808b-4488-a53c-3a06b3af5243/1/xBguKPMRxEKUqMpq2B16eGOvUJk.mft
File: xBguKPMRxEKUqMpq2B16eGOvUJk.mft (raw, json)
Hash identifier: l42r3VE9BSnFBsFdN/Hh4pQo2qd25jc1UiJJiQ6U+x0=
Subject key identifier: B8:86:D0:C8:50:CD:BC:AA:E9:96:2C:7F:48:32:48:53:A3:62:99:D2
Authority key identifier: C4:18:2E:28:F3:11:C4:42:94:A8:CA:6A:D8:1D:7A:78:63:AF:50:99
Certificate issuer: /CN=c4182e28f311c44294a8ca6ad81d7a7863af5099
Certificate serial: 019040B017E8995D6FEEA654B2CDEB5366F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBguKPMRxEKUqMpq2B16eGOvUJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/adea93-808b-4488-a53c-3a06b3af5243/1/xBguKPMRxEKUqMpq2B16eGOvUJk.mft
Manifest number: 0BF8
Signing time: Sat 22 Jun 2024 16:03:20 +0000
Manifest this update: Sat 22 Jun 2024 16:03:20 +0000
Manifest next update: Sun 23 Jun 2024 16:03:20 +0000
Files and hashes: 1: xBguKPMRxEKUqMpq2B16eGOvUJk.crl (hash: 56HiGX6JvhIAZiz0i/YooicwEyQY4U5ad6mf6B2W3L8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/adea93-808b-4488-a53c-3a06b3af5243/1/xBguKPMRxEKUqMpq2B16eGOvUJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/adea93-808b-4488-a53c-3a06b3af5243/1/xBguKPMRxEKUqMpq2B16eGOvUJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xBguKPMRxEKUqMpq2B16eGOvUJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 16:03:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:40:b0:17:e8:99:5d:6f:ee:a6:54:b2:cd:eb:53:66:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4182e28f311c44294a8ca6ad81d7a7863af5099
Validity
Not Before: Jun 22 16:03:20 2024 GMT
Not After : Jun 23 16:03:20 2024 GMT
Subject: CN=b886d0c850cdbcaae9962c7f48324853a36299d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ef:90:b9:e9:2c:c2:b7:65:07:41:1f:9c:a0:
fd:03:14:f3:90:16:51:0e:a5:9d:51:f8:8a:27:43:
67:49:5f:dc:62:37:02:12:85:dc:76:29:bc:8e:55:
ff:7a:0f:6f:39:5a:2a:3e:3f:b2:c5:c5:18:04:da:
56:93:a2:be:19:53:9d:60:74:15:28:e0:09:25:cb:
d7:27:05:bc:86:55:71:88:4f:f9:69:c0:72:5a:c4:
0c:62:c8:a9:08:11:ea:d4:d1:f9:ff:1d:cc:61:e4:
c7:18:66:98:88:83:25:99:28:69:4b:f6:24:a1:03:
db:5c:12:7a:1a:4f:b6:6c:04:b6:ba:f7:46:87:06:
5f:94:a3:f5:ce:c2:14:50:7d:3e:84:4e:e5:db:6b:
e7:d2:a7:e2:f9:26:94:63:ab:97:2f:ae:64:b8:6e:
14:a2:6c:1d:05:e2:dc:63:b7:52:6e:c8:9b:91:03:
94:39:ff:56:ab:56:a9:9e:52:5c:27:f2:84:0b:d3:
78:12:69:83:b6:a7:21:f6:98:b1:2d:68:78:f2:57:
fd:92:4a:cd:fb:40:e2:29:c1:5d:22:58:fa:d3:f7:
65:4c:78:2f:2e:a1:d0:a8:27:0c:c5:8b:5d:d2:4b:
03:75:73:af:27:a9:fd:c8:73:b5:c5:f7:08:ff:60:
ac:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:86:D0:C8:50:CD:BC:AA:E9:96:2C:7F:48:32:48:53:A3:62:99:D2
X509v3 Authority Key Identifier:
keyid:C4:18:2E:28:F3:11:C4:42:94:A8:CA:6A:D8:1D:7A:78:63:AF:50:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBguKPMRxEKUqMpq2B16eGOvUJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/adea93-808b-4488-a53c-3a06b3af5243/1/xBguKPMRxEKUqMpq2B16eGOvUJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/adea93-808b-4488-a53c-3a06b3af5243/1/xBguKPMRxEKUqMpq2B16eGOvUJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:66:e4:88:c5:8f:c2:f8:9f:35:b4:52:1f:34:29:cc:5e:1b:
ee:85:0f:82:83:8a:9c:0d:ed:73:86:bb:6f:15:00:fd:ba:33:
f5:bb:53:0e:49:e4:1a:fe:a6:c5:28:29:cb:a9:fa:5b:43:4d:
06:b8:4c:14:58:40:f8:33:65:21:2a:0a:05:f7:cf:28:11:fa:
75:c5:76:92:25:c8:da:e2:47:ca:3a:61:72:94:6a:60:ff:0e:
fb:31:c6:f6:02:d6:fb:0a:91:cd:1e:03:b0:93:82:0a:d5:30:
90:16:83:b4:62:98:e6:c0:b9:7c:4b:13:7c:9d:98:ec:51:63:
9e:ad:94:3d:e4:83:33:c9:14:78:79:e2:e9:b7:c9:c7:ab:29:
f0:7e:3a:9c:a0:8f:81:67:36:2f:f0:5d:e2:cd:04:53:e6:c3:
c6:f7:21:16:c6:58:ea:b7:2e:12:87:ae:68:69:ce:5f:91:4e:
15:9c:d7:f5:77:12:83:2f:8d:a8:f4:a0:12:e9:6f:4a:2f:31:
95:55:ef:a5:f0:6c:f4:55:3e:da:c6:ae:c0:97:fa:69:74:0a:
c9:1a:bb:40:cb:6a:b5:6b:4b:9c:d3:ee:ec:5a:45:02:a3:64:
77:0e:79:73:a9:93:0c:73:d8:c1:e3:b8:2d:5b:17:f2:f5:65:
b7:f7:c2:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:47:17 2024 by rpki-client on console-fra.rpki-client.org