![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.mft
File: zIHVTcD9FqySU0uaeA4mdksvj3s.mft (raw, json)
Hash identifier: 6HAsEd+PpmARZcU4QNE5efRZ3/fHmvaQ+SRi0sVti/w=
Subject key identifier: 8A:B0:3D:16:81:61:63:CE:DC:04:6B:77:2C:E2:0F:BC:2F:A1:91:00
Authority key identifier: CC:81:D5:4D:C0:FD:16:AC:92:53:4B:9A:78:0E:26:76:4B:2F:8F:7B
Certificate issuer: /CN=cc81d54dc0fd16ac92534b9a780e26764b2f8f7b
Certificate serial: 01901DEC93DF079FC5C3684335580B5E969C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zIHVTcD9FqySU0uaeA4mdksvj3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.mft
Manifest number: 0BC0
Signing time: Sat 15 Jun 2024 22:02:41 +0000
Manifest this update: Sat 15 Jun 2024 22:02:41 +0000
Manifest next update: Sun 16 Jun 2024 22:02:41 +0000
Files and hashes: 1: 1-8h05c-wk97m9L81JVVxwTFysFo.roa (hash: sb+xxScH5wWLmO3vHL/BOTPZQlitly/UgGDyT5pggJM=)
2: zIHVTcD9FqySU0uaeA4mdksvj3s.crl (hash: m42hk8PqCGBopJx+HVgRciiScl1uLA+RBQx7KEVve7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/zIHVTcD9FqySU0uaeA4mdksvj3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:ec:93:df:07:9f:c5:c3:68:43:35:58:0b:5e:96:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc81d54dc0fd16ac92534b9a780e26764b2f8f7b
Validity
Not Before: Jun 15 22:02:41 2024 GMT
Not After : Jun 16 22:02:41 2024 GMT
Subject: CN=8ab03d16816163cedc046b772ce20fbc2fa19100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e4:4c:9c:e6:e8:fb:ab:da:52:81:33:74:eb:
3a:57:e7:b7:96:6c:03:f3:04:1c:f4:47:9e:ec:3b:
37:e4:34:2e:3e:7e:a1:ff:89:fe:f0:0b:38:d9:2f:
bf:a0:18:c1:c9:19:6a:36:c3:9f:f7:e8:78:7d:7d:
9e:6c:bb:dc:33:70:7e:c1:ed:62:56:3a:71:53:88:
66:dc:f7:f3:ac:59:d9:82:bf:a3:a5:52:c9:76:f3:
62:bd:1c:4d:fd:03:ca:ea:a7:ed:98:f8:fa:06:aa:
d2:b9:66:a5:12:9a:4c:f2:4f:1f:3d:57:43:23:5c:
f5:76:d4:b1:fb:a6:ef:59:7d:72:a0:45:37:87:8a:
bd:47:74:23:64:f1:e9:7e:e9:df:c2:af:3b:7a:f6:
a8:74:86:3f:6e:22:3b:e6:36:e3:19:b9:48:b5:7b:
a5:5f:b5:fc:22:2b:dc:ce:74:d0:fe:87:e9:9f:1c:
a2:a6:3b:ec:ee:e8:e0:32:5c:41:ad:f7:80:37:d2:
bb:ad:d6:ba:db:b3:76:48:24:36:b1:97:b6:98:c3:
bf:b7:9f:bf:cb:5a:cd:96:b4:51:39:47:ad:a8:f4:
4f:e3:09:9f:ad:88:b4:1b:33:51:24:97:3f:b6:0b:
ef:dd:52:f8:9e:36:e2:8e:15:88:fd:69:87:ed:3b:
d0:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:B0:3D:16:81:61:63:CE:DC:04:6B:77:2C:E2:0F:BC:2F:A1:91:00
X509v3 Authority Key Identifier:
keyid:CC:81:D5:4D:C0:FD:16:AC:92:53:4B:9A:78:0E:26:76:4B:2F:8F:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zIHVTcD9FqySU0uaeA4mdksvj3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:2b:76:8d:cd:e7:03:65:81:b9:91:c5:23:1f:0e:41:b6:b1:
bf:69:cc:b1:1d:d5:a7:cb:24:ca:86:0e:0c:94:73:e1:db:2a:
63:62:fd:3d:04:8b:05:01:77:08:d7:76:1f:13:0e:ad:c2:5d:
e3:e8:23:b8:7b:22:5e:9c:c3:d8:b3:57:13:47:09:4c:5e:5a:
cd:d6:37:b2:6d:b4:59:ca:1a:d4:50:c7:50:bd:42:f7:b8:87:
3d:99:8e:8a:2b:1b:90:ca:f1:aa:28:27:a7:ed:c1:43:ac:1d:
4e:ac:cc:68:64:e9:a5:58:1c:ad:9b:c0:4e:d0:24:a0:bf:b0:
6f:c7:fe:92:6e:82:dd:72:bd:27:f9:f8:e9:56:74:67:39:3e:
f2:f5:1f:6c:1c:d2:3a:7b:78:69:69:cb:97:01:34:0c:50:96:
b7:17:de:99:13:bd:fa:1a:2f:67:c9:2b:ba:0b:c7:8f:b2:19:
42:db:c8:37:d0:cf:a9:12:40:ee:dd:6f:cf:50:82:75:97:70:
91:4a:8b:f5:ff:12:7c:c2:1d:db:57:d1:bd:a0:68:25:61:a3:
2c:bc:09:7a:68:42:43:8f:fc:4e:f5:b0:96:84:65:ce:f6:d6:
1b:57:5a:02:6c:7e:7d:08:fa:52:5e:0d:b1:2b:86:4c:a0:0e:
08:ae:da:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:52:55 2024 by rpki-client on console-ams.rpki-client.org