![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/b09acb-636c-4557-80a8-6d929695a5bc/1/GWYoYXwA6N_yDKZpkxOvefrQr8Y.mft
File: GWYoYXwA6N_yDKZpkxOvefrQr8Y.mft (raw, json)
Hash identifier: 71dvo2gy1i8UlPlW9BjBsLOSEyGHK7uM4KgMrRridmY=
Subject key identifier: B1:FE:41:34:13:EA:42:68:25:A5:06:2E:45:3F:B7:14:99:59:BC:FF
Authority key identifier: 19:66:28:61:7C:00:E8:DF:F2:0C:A6:69:93:13:AF:79:FA:D0:AF:C6
Certificate issuer: /CN=196628617c00e8dff20ca6699313af79fad0afc6
Certificate serial: 0190429D179055ECEE4B6798FADD6DD32AB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GWYoYXwA6N_yDKZpkxOvefrQr8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/b09acb-636c-4557-80a8-6d929695a5bc/1/GWYoYXwA6N_yDKZpkxOvefrQr8Y.mft
Manifest number: 0A9E
Signing time: Sun 23 Jun 2024 01:01:49 +0000
Manifest this update: Sun 23 Jun 2024 01:01:49 +0000
Manifest next update: Mon 24 Jun 2024 01:01:49 +0000
Files and hashes: 1: GWYoYXwA6N_yDKZpkxOvefrQr8Y.crl (hash: yHU02vHxTBP1t9pf+jDsSVFUaKEIlRfvqJ02296Tmko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/b09acb-636c-4557-80a8-6d929695a5bc/1/GWYoYXwA6N_yDKZpkxOvefrQr8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/b09acb-636c-4557-80a8-6d929695a5bc/1/GWYoYXwA6N_yDKZpkxOvefrQr8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GWYoYXwA6N_yDKZpkxOvefrQr8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:42:9d:17:90:55:ec:ee:4b:67:98:fa:dd:6d:d3:2a:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=196628617c00e8dff20ca6699313af79fad0afc6
Validity
Not Before: Jun 23 01:01:49 2024 GMT
Not After : Jun 24 01:01:49 2024 GMT
Subject: CN=b1fe413413ea426825a5062e453fb7149959bcff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:20:de:a8:f4:ab:d9:a4:89:11:66:23:9b:e8:
86:39:c6:d9:14:b2:ad:5c:34:b9:86:7e:1e:90:a1:
9a:e4:2e:a6:4b:4f:de:9a:40:8b:15:f7:c9:98:c4:
41:3e:bf:ad:f9:33:7a:07:f6:f1:5a:f1:ee:e1:c8:
6c:f3:95:75:c0:e1:96:00:fc:7a:6b:dd:de:47:fd:
7a:ee:8f:c7:00:a1:88:6a:cf:3c:e2:46:9e:48:4b:
03:53:ed:bf:ce:30:b7:41:e6:c8:13:42:9f:39:ce:
f3:2a:8b:a7:41:e9:73:e7:9c:8e:a6:56:71:92:28:
f4:c2:fc:27:e7:d9:b0:e6:bf:d5:e2:57:93:d8:2c:
8d:22:71:9a:a9:c0:9e:da:95:83:19:c3:3f:99:30:
22:4b:f5:d7:04:1d:6e:4a:ee:5b:79:92:1a:10:a8:
a3:0c:87:5b:cf:d4:a9:e3:8a:c1:6d:28:4b:90:ec:
ee:d7:cc:da:54:1c:57:d8:74:e3:f9:d0:fb:14:c4:
5c:86:a8:13:6d:f8:90:87:ee:81:fd:da:57:f7:38:
ee:51:f5:c2:fe:df:42:aa:57:6b:36:47:f6:86:36:
e5:bd:59:f5:5c:d4:68:2e:8b:7f:86:82:cf:2b:ff:
fe:1f:70:bb:0b:ac:1d:a4:3d:d8:52:ce:03:39:aa:
c5:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:FE:41:34:13:EA:42:68:25:A5:06:2E:45:3F:B7:14:99:59:BC:FF
X509v3 Authority Key Identifier:
keyid:19:66:28:61:7C:00:E8:DF:F2:0C:A6:69:93:13:AF:79:FA:D0:AF:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWYoYXwA6N_yDKZpkxOvefrQr8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b09acb-636c-4557-80a8-6d929695a5bc/1/GWYoYXwA6N_yDKZpkxOvefrQr8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b09acb-636c-4557-80a8-6d929695a5bc/1/GWYoYXwA6N_yDKZpkxOvefrQr8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:6c:72:f2:61:6c:83:a2:88:66:56:c6:75:c4:27:9c:c9:42:
06:df:0a:43:c0:ea:e3:fe:73:6f:25:aa:eb:d2:41:9e:5b:ed:
02:64:ca:67:12:54:1a:02:cb:fb:fc:8c:38:cf:13:c8:f0:9f:
47:26:9b:d0:84:b4:c2:6d:3a:68:ff:72:14:07:53:27:93:54:
49:53:bd:c4:a7:f5:13:30:a9:80:69:4f:e4:7f:4d:3d:38:fc:
de:6d:03:b9:c1:ad:c5:8a:f7:7a:f3:36:5d:01:6e:a3:04:d5:
81:f2:2c:a4:45:c7:9f:fd:15:eb:5b:48:52:d5:8e:48:f1:47:
68:d2:3c:fe:c5:1c:48:d1:0c:f2:82:df:8c:d0:6d:9d:39:74:
e1:dc:46:1e:ee:d6:c9:c2:8c:7e:3e:22:e1:75:5c:1f:2c:7c:
51:55:9b:fc:c0:2b:68:85:d2:4a:da:36:e5:2e:1a:5e:74:ba:
46:37:de:e1:c6:de:2f:ab:17:61:b6:5a:d1:c1:7f:5a:11:fe:
f5:fc:14:62:82:49:47:df:0d:78:cb:2b:ff:1b:42:d0:89:2d:
e7:a8:fa:0e:e2:da:68:03:28:ae:cf:01:2c:b4:57:13:5b:60:
a0:79:eb:cb:a3:d6:39:a6:ba:75:32:09:aa:a6:4a:64:7e:7d:
ea:41:2d:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 03:23:22 2024 by rpki-client on console-fra.rpki-client.org