![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft
File: API1ekH05ZC6Yudx0gVOAI4O2R4.mft (raw, json)
Hash identifier: xFpPtAUzf3qEhBD6UtbQQf6eXxSB8tI2S0p1SgefvMs=
Subject key identifier: 3F:AE:4D:99:81:D7:FC:35:A1:E9:3D:A7:A8:01:E6:F5:74:B5:39:AF
Authority key identifier: 00:F2:35:7A:41:F4:E5:90:BA:62:E7:71:D2:05:4E:00:8E:0E:D9:1E
Certificate issuer: /CN=00f2357a41f4e590ba62e771d2054e008e0ed91e
Certificate serial: 01904152CD59742262C73FA280F6EED366B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/API1ekH05ZC6Yudx0gVOAI4O2R4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft
Manifest number: 02F2
Signing time: Sat 22 Jun 2024 19:01:03 +0000
Manifest this update: Sat 22 Jun 2024 19:01:03 +0000
Manifest next update: Sun 23 Jun 2024 19:01:03 +0000
Files and hashes: 1: API1ekH05ZC6Yudx0gVOAI4O2R4.crl (hash: iawpDEIB1O5vyGwlsP4jYHpO3mGP5Vr0qJGFTYU7N2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft
rsync://rpki.ripe.net/repository/DEFAULT/API1ekH05ZC6Yudx0gVOAI4O2R4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 19:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:41:52:cd:59:74:22:62:c7:3f:a2:80:f6:ee:d3:66:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00f2357a41f4e590ba62e771d2054e008e0ed91e
Validity
Not Before: Jun 22 19:01:03 2024 GMT
Not After : Jun 23 19:01:03 2024 GMT
Subject: CN=3fae4d9981d7fc35a1e93da7a801e6f574b539af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4a:3a:6a:30:7a:1c:0f:17:71:c4:eb:04:02:
b4:9c:85:6c:d0:41:c7:02:07:6b:80:ee:17:bd:ec:
5d:59:3a:a5:6b:46:ad:18:92:4a:bf:ed:15:82:f9:
bd:48:32:de:03:32:52:69:34:51:a5:13:86:13:c7:
37:c5:55:cf:cb:0b:26:12:58:f6:26:d4:eb:58:cd:
57:b4:e2:aa:31:95:d4:b3:62:2f:c7:00:c7:72:74:
7b:ae:62:13:e7:03:39:b5:ba:8e:5f:66:0f:fe:f2:
be:dc:44:f3:34:9b:7f:75:62:1d:73:e9:89:59:84:
83:5e:ff:b3:7c:19:89:cc:73:c9:9a:11:ba:13:2c:
c8:e9:29:9c:d8:a8:2f:36:ac:44:65:3d:9e:90:ea:
ea:b6:be:5c:5e:c8:0b:0a:38:37:5f:92:69:3d:fc:
2d:08:3d:16:aa:26:1a:d4:11:5f:5d:51:fd:3d:99:
b5:f7:80:5f:a4:2e:45:4d:d1:89:7e:2b:96:b1:90:
5c:46:0d:57:6c:0d:b4:0c:cc:00:a6:f7:51:79:dd:
a6:9e:13:dc:e1:3a:6b:d3:73:ce:03:04:f7:42:c4:
e9:ce:df:63:e4:0f:a8:2f:fe:53:26:ac:f9:b6:24:
80:cb:63:7a:c5:42:1c:a0:11:d2:d2:47:20:42:4d:
2a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:AE:4D:99:81:D7:FC:35:A1:E9:3D:A7:A8:01:E6:F5:74:B5:39:AF
X509v3 Authority Key Identifier:
keyid:00:F2:35:7A:41:F4:E5:90:BA:62:E7:71:D2:05:4E:00:8E:0E:D9:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/API1ekH05ZC6Yudx0gVOAI4O2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:c7:f3:7d:92:bf:a5:41:6f:73:7e:cd:0d:18:ff:d4:64:48:
bd:78:bc:4f:6a:65:5e:73:90:6b:24:3b:93:3b:aa:df:ab:0e:
be:61:e2:72:f7:6c:f4:96:11:f6:d5:d5:f4:af:fe:63:ae:c5:
7f:64:a0:29:80:50:70:13:ab:91:a9:f7:82:0a:23:75:75:c3:
60:5f:ee:2b:5b:9a:8f:f2:98:ec:bf:90:bb:2b:f4:18:06:8b:
4d:63:f8:78:fd:fa:fe:be:34:c6:69:26:21:64:be:f8:59:8d:
29:b5:49:ec:b1:bd:8a:35:4c:2e:4d:80:54:62:08:57:fa:38:
1d:9c:cf:9b:67:5f:c8:be:ff:4a:84:0f:4b:ad:95:ed:96:49:
8f:ec:4a:4d:5f:f0:c1:5b:dc:14:b4:09:0d:7c:94:d8:b2:fa:
d5:44:1f:6d:5e:0a:07:ff:57:c0:47:fa:e8:36:a6:cf:42:c4:
35:c0:2f:ac:fb:d8:38:e2:2e:ad:34:95:72:04:66:e2:8b:4c:
89:62:ab:e2:da:15:5b:44:81:97:84:63:6b:55:8f:24:a3:d6:
60:95:15:a9:68:62:0c:88:92:2a:13:e2:e8:93:3e:6f:b4:f0:
d3:31:6b:f3:5f:8c:29:2c:b8:7e:a6:7f:c2:ed:d2:ce:9a:87:
c9:1e:e5:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:50:55 2024 by rpki-client on console-fra.rpki-client.org