![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/0467dc-ccf3-4331-957c-158606318525/1/dYOxUbdLsu2w9c5rbpux4MPQrRs.mft
File: dYOxUbdLsu2w9c5rbpux4MPQrRs.mft (raw, json)
Hash identifier: 9ukK8TSK8lyrMeCRNutMN0luqBiLLHqF2xqbketWLVY=
Subject key identifier: 66:B0:62:9A:51:93:7A:B9:4A:BA:AD:2E:63:03:A8:6E:CA:45:7F:36
Authority key identifier: 75:83:B1:51:B7:4B:B2:ED:B0:F5:CE:6B:6E:9B:B1:E0:C3:D0:AD:1B
Certificate issuer: /CN=7583b151b74bb2edb0f5ce6b6e9bb1e0c3d0ad1b
Certificate serial: 019048D577D7CC356CDE3263782DAB8A491F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dYOxUbdLsu2w9c5rbpux4MPQrRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/0467dc-ccf3-4331-957c-158606318525/1/dYOxUbdLsu2w9c5rbpux4MPQrRs.mft
Manifest number: 11D9
Signing time: Mon 24 Jun 2024 06:01:07 +0000
Manifest this update: Mon 24 Jun 2024 06:01:07 +0000
Manifest next update: Tue 25 Jun 2024 06:01:07 +0000
Files and hashes: 1: dYOxUbdLsu2w9c5rbpux4MPQrRs.crl (hash: Qjy1A0nS4pbvtMOPB3H373wiQEv6wmVgsUum/vq9UmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/0467dc-ccf3-4331-957c-158606318525/1/dYOxUbdLsu2w9c5rbpux4MPQrRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/0467dc-ccf3-4331-957c-158606318525/1/dYOxUbdLsu2w9c5rbpux4MPQrRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dYOxUbdLsu2w9c5rbpux4MPQrRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:48:d5:77:d7:cc:35:6c:de:32:63:78:2d:ab:8a:49:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7583b151b74bb2edb0f5ce6b6e9bb1e0c3d0ad1b
Validity
Not Before: Jun 24 06:01:07 2024 GMT
Not After : Jun 25 06:01:07 2024 GMT
Subject: CN=66b0629a51937ab94abaad2e6303a86eca457f36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:5f:1b:09:70:b4:a8:71:89:24:47:9e:31:0e:
cd:17:aa:a8:2d:d2:f7:62:03:d0:14:1b:d6:43:87:
be:81:bb:c3:dc:0a:36:2b:36:8c:a3:3a:f1:73:ad:
11:1f:ad:ca:3c:92:81:c6:c4:a8:64:eb:6b:b6:06:
7f:50:89:48:cc:42:6f:b9:ac:f4:bc:b6:75:d2:9b:
d7:77:f3:44:bd:32:fd:b2:e6:a7:dd:79:19:e8:b2:
b9:ea:47:cf:dc:2d:dc:d3:4a:b9:51:97:f2:8d:fe:
fb:55:11:22:69:bd:e7:77:77:da:f3:29:fe:d0:1f:
f7:9f:bc:a3:46:44:1a:29:b1:1f:bb:84:71:08:78:
e0:66:0d:f8:94:2e:34:8a:cd:41:f7:0f:a8:d6:5a:
79:61:e2:7f:bf:38:2a:ff:e0:e8:19:a6:0f:27:21:
6e:51:bb:71:d8:37:a9:99:e9:8d:d3:67:e2:2a:16:
a0:d3:36:92:58:7a:7c:21:59:8a:e7:ab:a8:75:dd:
7c:ef:55:9f:29:e0:67:3b:c4:21:bc:6f:d4:bb:e6:
b5:69:86:91:36:c8:d6:9a:0c:c9:98:c0:94:31:b8:
09:77:a5:19:a0:5f:96:83:a3:f8:30:b1:d5:70:5b:
cd:b6:89:cc:83:8e:a6:ab:b1:c7:39:51:65:22:bb:
ee:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:B0:62:9A:51:93:7A:B9:4A:BA:AD:2E:63:03:A8:6E:CA:45:7F:36
X509v3 Authority Key Identifier:
keyid:75:83:B1:51:B7:4B:B2:ED:B0:F5:CE:6B:6E:9B:B1:E0:C3:D0:AD:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYOxUbdLsu2w9c5rbpux4MPQrRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0467dc-ccf3-4331-957c-158606318525/1/dYOxUbdLsu2w9c5rbpux4MPQrRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0467dc-ccf3-4331-957c-158606318525/1/dYOxUbdLsu2w9c5rbpux4MPQrRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:26:8c:01:8d:d3:4b:8d:b0:03:4f:ed:64:29:fc:21:04:a6:
7c:2e:2f:b2:c0:6a:cc:62:37:62:0d:1d:13:0a:d3:6b:5e:bb:
b6:49:c4:c0:9e:07:c7:1b:32:a7:94:61:e4:e9:2e:df:7e:b3:
ff:83:d2:65:3b:c0:1b:4b:27:ff:68:cf:ca:75:2c:98:8b:82:
01:ee:65:11:91:5b:2c:ba:ae:2d:cc:c5:26:53:76:2f:b0:83:
65:e2:52:28:44:8f:99:70:13:0c:96:2e:44:c4:a1:e3:d7:a7:
d8:f2:da:a0:77:fa:94:7c:4b:af:70:a2:5f:61:55:22:a6:5e:
3e:89:c5:8b:37:b0:76:01:0c:7e:17:d9:24:9c:96:f1:03:b3:
da:ee:15:fb:52:40:db:e2:63:62:75:22:12:99:00:69:76:3d:
cb:f7:d5:c9:90:cd:0a:d1:69:77:ca:14:eb:77:d9:a3:ca:72:
69:e6:f6:52:8b:1a:d1:c4:0b:21:53:6a:04:a2:6c:e3:08:8c:
82:16:2c:e5:ea:f7:ca:1b:d5:fc:f7:7f:cd:26:29:17:6a:be:
96:88:9c:3d:7d:80:3f:24:87:83:88:03:bb:1f:cd:e4:91:03:
9a:b4:01:02:7c:09:73:f6:cb:bd:d8:55:f9:38:07:5a:f4:86:
13:e0:1d:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 09:18:19 2024 by rpki-client on console-ams.rpki-client.org