![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.mft
File: TEz85gybDy1Hs2KGTY_rsiW7UkQ.mft (raw, json)
Hash identifier: +QRjemAF0pU6WOaZJ/HRq3IQs619FIWRp1dGYiiN4jQ=
Subject key identifier: 56:92:E5:98:30:F5:0E:76:A8:BC:7D:5C:7E:35:6E:9B:94:FE:DA:44
Authority key identifier: 4C:4C:FC:E6:0C:9B:0F:2D:47:B3:62:86:4D:8F:EB:B2:25:BB:52:44
Certificate issuer: /CN=4c4cfce60c9b0f2d47b362864d8febb225bb5244
Certificate serial: 01901E58BED5BEEDCB7DA978206B813DA655
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TEz85gybDy1Hs2KGTY_rsiW7UkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.mft
Manifest number: 11C3
Signing time: Sun 16 Jun 2024 00:00:50 +0000
Manifest this update: Sun 16 Jun 2024 00:00:50 +0000
Manifest next update: Mon 17 Jun 2024 00:00:50 +0000
Files and hashes: 1: TEz85gybDy1Hs2KGTY_rsiW7UkQ.crl (hash: 3U0Vz2Q3+XFoVlwotUP9941w3hNgFP07Ujg1B7y+Cys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/TEz85gybDy1Hs2KGTY_rsiW7UkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 19:09:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1e:58:be:d5:be:ed:cb:7d:a9:78:20:6b:81:3d:a6:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c4cfce60c9b0f2d47b362864d8febb225bb5244
Validity
Not Before: Jun 16 00:00:50 2024 GMT
Not After : Jun 17 00:00:50 2024 GMT
Subject: CN=5692e59830f50e76a8bc7d5c7e356e9b94feda44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:34:30:80:08:bf:47:58:f9:e2:7f:84:20:73:
be:7e:43:81:4f:4d:a2:02:b0:52:d0:35:bc:97:69:
c9:54:d3:f9:5d:f6:1e:92:8f:e0:3f:52:a4:02:92:
5b:0b:cf:bc:51:b6:3f:c3:9b:85:68:2a:3c:22:c5:
a1:0a:0d:33:f1:a9:4f:f1:2a:00:c0:a3:0c:38:db:
80:7d:29:ef:d3:60:54:57:ce:a6:0e:9c:36:6f:96:
48:80:00:7d:be:cb:b8:73:fe:b7:b6:7d:c0:22:81:
ee:ff:a4:15:77:8e:a9:f9:b6:b9:60:9e:10:21:0e:
d5:bf:2c:04:20:db:2f:53:64:4a:ee:1d:a8:1c:a8:
3f:a7:16:b5:2d:ae:75:5b:1f:25:49:e8:8c:2a:f9:
11:c9:7a:47:d7:04:63:fe:58:51:5a:63:73:af:29:
66:0c:47:96:10:29:16:8e:56:8d:37:7a:09:08:2a:
df:63:1a:97:ea:24:4f:40:6d:bf:e5:c7:d1:4f:22:
9a:39:f5:25:e2:f1:83:8a:c6:54:3c:3a:84:2b:f8:
1c:34:d4:ef:c2:2e:ac:f9:d4:e0:4b:7c:07:19:61:
e8:76:fe:28:eb:fb:ad:14:f2:a4:10:89:d1:b9:1d:
3e:60:32:95:31:17:a4:1d:c9:e9:89:c8:8d:e7:65:
d4:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:92:E5:98:30:F5:0E:76:A8:BC:7D:5C:7E:35:6E:9B:94:FE:DA:44
X509v3 Authority Key Identifier:
keyid:4C:4C:FC:E6:0C:9B:0F:2D:47:B3:62:86:4D:8F:EB:B2:25:BB:52:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEz85gybDy1Hs2KGTY_rsiW7UkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:6a:ff:79:b3:52:a2:1c:7e:49:5d:e3:b7:c5:bf:66:7d:0c:
7d:db:fa:60:d2:42:2c:e6:7d:f1:cc:df:30:b6:c3:11:8a:2f:
fd:01:08:a6:a2:58:2d:8f:5d:57:8b:66:3d:54:cb:77:ae:d4:
75:35:17:05:75:08:a5:66:d2:97:1d:08:30:ed:63:9a:04:1c:
c2:7e:06:e2:27:76:52:e2:d9:1e:64:2c:0f:9e:3a:0b:d8:bd:
a0:a6:66:d4:f0:e7:99:04:a2:0b:b3:3b:8a:8d:d1:bd:28:85:
b7:7c:a5:6c:2c:d3:7c:4c:56:c9:81:b0:c9:26:e7:ce:b7:7b:
91:6f:c1:d8:95:d6:50:2c:a1:59:72:31:a5:1f:6b:61:27:31:
61:3d:bc:72:ff:01:7a:59:47:72:df:b5:83:9f:6f:8f:c7:15:
e3:85:c3:ea:9d:1c:55:d0:ee:44:b5:1e:9c:18:b1:17:36:31:
01:e4:5d:0f:94:e7:b3:f6:03:82:95:99:33:dd:89:3b:46:50:
1a:8d:37:91:3c:24:f0:dc:f7:7c:6e:b2:e6:3e:14:c2:93:09:
f4:83:e3:05:11:9d:f4:27:c2:e9:6e:bb:b1:57:f8:c7:46:ce:
a4:28:0e:e5:b0:ca:8f:89:67:01:e4:c3:bc:4c:0b:10:86:40:
59:de:1c:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 01:06:14 2024 by rpki-client on console-fra.rpki-client.org