![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.mft
File: zxTbNzCF4owNm3S-e46JdAuV-fo.mft (raw, json)
Hash identifier: pRQLK0YbVzQGXwM9tHf7RK34qEZxdGt0oHPlCbsXPFA=
Subject key identifier: 76:99:02:41:0E:DB:BA:8E:3E:98:13:DA:28:27:C1:FC:3C:C9:68:26
Authority key identifier: CF:14:DB:37:30:85:E2:8C:0D:9B:74:BE:7B:8E:89:74:0B:95:F9:FA
Certificate issuer: /CN=cf14db373085e28c0d9b74be7b8e89740b95f9fa
Certificate serial: 01903AE485E682A1426534BE2FEECEB6431F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxTbNzCF4owNm3S-e46JdAuV-fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.mft
Manifest number: 07D0
Signing time: Fri 21 Jun 2024 13:02:53 +0000
Manifest this update: Fri 21 Jun 2024 13:02:53 +0000
Manifest next update: Sat 22 Jun 2024 13:02:53 +0000
Files and hashes: 1: zxTbNzCF4owNm3S-e46JdAuV-fo.crl (hash: vDXk+Gz4LGaqoLunJfFgz5wIfmPH394c6zILAilISp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zxTbNzCF4owNm3S-e46JdAuV-fo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Jun 2024 09:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:3a:e4:85:e6:82:a1:42:65:34:be:2f:ee:ce:b6:43:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf14db373085e28c0d9b74be7b8e89740b95f9fa
Validity
Not Before: Jun 21 13:02:53 2024 GMT
Not After : Jun 22 13:02:53 2024 GMT
Subject: CN=769902410edbba8e3e9813da2827c1fc3cc96826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b5:8f:17:e1:ff:a3:a9:69:d2:29:1c:3c:ea:
8c:18:93:98:d3:29:9f:26:15:b7:55:27:75:e6:2a:
24:de:21:7b:a7:4b:1c:2d:f0:13:de:8c:9a:0f:e6:
39:83:c2:0c:4d:40:35:d8:9a:13:b9:ab:a2:0c:58:
12:b7:95:eb:ec:54:dd:ea:34:c9:36:99:b2:83:09:
c8:2d:39:49:1e:43:b6:50:68:d8:da:4d:1d:2f:e1:
be:82:2d:3d:6f:89:01:c3:5e:7b:39:4e:78:de:70:
76:10:9c:d4:12:51:0f:16:4b:85:c2:d0:fc:dd:87:
1d:93:33:aa:58:94:5c:bb:11:26:6e:5a:ab:28:c9:
a0:c8:46:55:1c:34:1b:37:5e:f7:d0:d0:8c:f7:f4:
71:b5:4b:39:7d:99:ca:29:76:f5:9e:53:02:3f:0a:
d5:49:00:da:3b:eb:29:28:12:d2:5a:5a:ab:6c:84:
22:b4:97:51:ea:c1:49:d7:db:a3:c1:bf:8d:45:89:
2e:21:23:52:88:bb:fe:33:c7:96:25:70:b5:8c:05:
07:44:d5:80:27:81:4c:7f:b7:db:87:3d:b1:d7:f1:
d3:e3:40:a2:19:98:51:0d:59:ec:ec:26:54:b5:b0:
fc:25:23:57:a3:06:eb:03:9a:4e:af:0f:0e:f2:ab:
e7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:99:02:41:0E:DB:BA:8E:3E:98:13:DA:28:27:C1:FC:3C:C9:68:26
X509v3 Authority Key Identifier:
keyid:CF:14:DB:37:30:85:E2:8C:0D:9B:74:BE:7B:8E:89:74:0B:95:F9:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxTbNzCF4owNm3S-e46JdAuV-fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:43:66:5d:a2:b1:4f:d1:84:d4:cb:09:6f:2b:37:a9:76:1f:
d2:68:09:0b:53:8b:86:44:22:bf:a7:c5:5b:3b:f9:7a:61:f5:
aa:d2:ef:bf:75:cf:4b:26:0a:f8:b3:3b:ab:d4:ec:98:3b:41:
92:2f:f7:1f:64:07:7c:47:95:8d:8d:89:f2:87:3e:e9:4e:10:
72:f4:f1:a9:86:92:4e:4a:bc:d1:61:55:25:82:34:b4:a8:41:
41:eb:ea:f1:cc:5f:78:52:ac:7c:2c:86:47:55:ef:57:14:43:
df:bc:e7:d9:eb:a7:08:a8:7d:16:3f:ef:fb:85:34:3f:8b:2f:
c7:d3:45:c7:3e:e9:e6:67:93:1e:d3:30:30:fd:dd:b4:f4:c8:
64:47:9b:a2:7b:81:f7:c2:6c:1a:ac:89:4a:d5:1d:f6:89:bd:
3f:46:07:eb:90:c3:96:59:75:22:91:30:18:12:a0:fe:d0:b1:
3a:d8:56:72:c4:75:3b:97:a0:6f:40:3f:80:4a:66:74:a5:2a:
58:b2:84:47:0f:45:48:f9:7c:b5:ed:40:ee:dc:2d:3a:0f:ca:
56:b4:44:be:83:88:66:ff:2b:07:be:06:fd:9e:73:f3:57:f5:
d1:ee:54:22:da:11:43:fe:3a:7d:36:6f:91:30:58:d3:f6:fb:
01:9c:5b:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 17:55:03 2024 by rpki-client on console-ams.rpki-client.org