![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/6ba656-e25e-49ab-a4bf-6826e25b807f/1/y15v1iT-wGkv5waeN5Ix5STYD7w.mft
File: y15v1iT-wGkv5waeN5Ix5STYD7w.mft (raw, json)
Hash identifier: okfIsmDVjmksg3L1GclqM7NcIH0SuDnX6YX3o0p0PrM=
Subject key identifier: 24:3E:F8:FE:5C:B4:D6:39:0A:4B:92:09:66:43:4B:75:3D:54:1A:42
Authority key identifier: CB:5E:6F:D6:24:FE:C0:69:2F:E7:06:9E:37:92:31:E5:24:D8:0F:BC
Certificate issuer: /CN=cb5e6fd624fec0692fe7069e379231e524d80fbc
Certificate serial: 01903AE2B82B4B3D1ED5DFCED1A23D0410B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y15v1iT-wGkv5waeN5Ix5STYD7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/6ba656-e25e-49ab-a4bf-6826e25b807f/1/y15v1iT-wGkv5waeN5Ix5STYD7w.mft
Manifest number: 0C7F
Signing time: Fri 21 Jun 2024 13:00:55 +0000
Manifest this update: Fri 21 Jun 2024 13:00:55 +0000
Manifest next update: Sat 22 Jun 2024 13:00:55 +0000
Files and hashes: 1: fyun39i0hpE25gGvBWfxhMiF8lE.roa (hash: ZUjzzhOo9wpyn27eIn33/VMfz1EYf2hZLpAxox6nq34=)
2: y15v1iT-wGkv5waeN5Ix5STYD7w.crl (hash: WbKddHk1ufxR1LDMFAw+bpnWbYEQOmZLrwCih73R3ro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/6ba656-e25e-49ab-a4bf-6826e25b807f/1/y15v1iT-wGkv5waeN5Ix5STYD7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/6ba656-e25e-49ab-a4bf-6826e25b807f/1/y15v1iT-wGkv5waeN5Ix5STYD7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/y15v1iT-wGkv5waeN5Ix5STYD7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Jun 2024 09:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:3a:e2:b8:2b:4b:3d:1e:d5:df:ce:d1:a2:3d:04:10:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb5e6fd624fec0692fe7069e379231e524d80fbc
Validity
Not Before: Jun 21 13:00:55 2024 GMT
Not After : Jun 22 13:00:55 2024 GMT
Subject: CN=243ef8fe5cb4d6390a4b920966434b753d541a42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:62:c1:7b:08:15:f5:27:5f:93:aa:8b:3e:97:
b1:f4:a2:79:c5:43:97:2b:e7:f9:6d:7f:0a:3a:55:
b5:bf:e4:d7:30:83:51:11:0c:39:40:80:43:2f:8a:
f7:13:6e:a0:d2:2e:74:ba:01:31:49:2a:05:81:ba:
f7:9e:48:20:0a:26:65:d7:fb:77:35:4b:fa:c7:10:
ad:ea:9c:10:08:86:44:5e:fc:16:1e:57:0b:a3:84:
82:01:37:48:69:6f:a1:f1:78:da:cb:d8:49:f3:50:
2f:c8:5a:80:6e:df:e3:63:a5:64:c7:d8:fa:e2:0d:
14:91:50:e8:7c:34:e3:79:78:f4:cb:dc:ee:b4:b0:
cb:ba:56:94:29:36:95:30:e8:62:2a:d7:38:62:ee:
59:79:03:ee:21:7e:36:af:6b:f2:34:74:fd:2c:8b:
c9:3d:da:8a:9e:7b:cb:93:66:0b:07:e1:a1:53:7e:
85:2c:b0:2b:a7:ad:74:fc:79:ed:c4:b8:84:c0:37:
e6:30:73:e0:02:52:81:b0:cd:0f:6a:3f:7d:f2:e7:
97:4c:96:d3:d2:66:d7:ad:0e:cb:e4:9f:b3:24:df:
c7:15:cb:48:c6:44:9e:bc:92:29:61:57:13:dd:20:
f4:ed:52:38:e2:47:15:da:b2:6f:44:1f:5d:4c:f5:
5b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:3E:F8:FE:5C:B4:D6:39:0A:4B:92:09:66:43:4B:75:3D:54:1A:42
X509v3 Authority Key Identifier:
keyid:CB:5E:6F:D6:24:FE:C0:69:2F:E7:06:9E:37:92:31:E5:24:D8:0F:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y15v1iT-wGkv5waeN5Ix5STYD7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/6ba656-e25e-49ab-a4bf-6826e25b807f/1/y15v1iT-wGkv5waeN5Ix5STYD7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/6ba656-e25e-49ab-a4bf-6826e25b807f/1/y15v1iT-wGkv5waeN5Ix5STYD7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:0f:60:54:38:b1:17:56:67:20:b8:ce:3e:27:55:f7:a4:f9:
b2:ba:1a:30:a0:8e:8a:b1:12:3a:d1:1b:22:dd:2a:f1:ae:04:
60:bd:9e:1e:4c:37:09:52:82:02:d9:80:54:d9:4d:87:78:1b:
20:83:ba:db:4e:6b:80:2f:41:51:d6:90:78:ad:98:49:fd:93:
c6:b3:fd:2e:8b:68:4c:bb:e9:5a:b9:64:81:84:f6:8d:a7:02:
95:33:a8:9d:a0:a4:09:37:87:e4:81:64:3d:fb:aa:7e:76:83:
56:8f:b4:45:a9:95:77:80:2c:85:e7:8e:11:c4:76:47:e6:dc:
a7:60:c0:d9:ee:80:17:7d:9b:51:ea:d7:fe:e3:48:0c:1d:3f:
5f:26:be:3e:60:77:3c:7e:f5:83:6a:56:af:63:d4:90:bd:c6:
b5:43:c0:e3:84:13:9b:6c:17:04:ea:86:f4:90:64:ec:c7:a1:
3e:e9:a8:c8:c1:6b:a7:75:9a:99:3d:ad:55:09:3a:8a:5a:16:
ee:ce:42:4b:2d:d0:1c:6b:6d:a0:0e:e6:6d:0d:01:67:f3:ca:
b8:41:c8:8a:a8:b0:1e:28:bc:49:bf:98:cf:87:c0:3b:60:d9:
d4:b1:b5:f7:72:9c:6c:f9:3c:8f:3a:85:4a:ff:9f:83:05:5d:
c9:4f:cc:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 17:54:29 2024 by rpki-client on console-ams.rpki-client.org