![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.mft
File: tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.mft (raw, json)
Hash identifier: UUEutnn9lXxoI9j6XUUzvmLLeNm865e2Erbf5Ve7qIE=
Subject key identifier: 9A:46:73:64:71:27:8A:FA:BB:61:C1:26:E0:37:60:5D:2C:79:96:67
Authority key identifier: B5:22:78:75:99:F1:79:8E:24:5F:99:3F:8C:B8:18:2F:99:CF:D1:04
Certificate issuer: /CN=b522787599f1798e245f993f8cb8182f99cfd104
Certificate serial: 01901DECCEB4F8B6F19FABF82C013286580A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.mft
Manifest number: 0941
Signing time: Sat 15 Jun 2024 22:02:56 +0000
Manifest this update: Sat 15 Jun 2024 22:02:56 +0000
Manifest next update: Sun 16 Jun 2024 22:02:56 +0000
Files and hashes: 1: Km1HHfMUlhTyPoCTSMQsxY5XAVc.roa (hash: KJEa6LEv2A9qsyvS2LQB1UUUBjty0tn4JyzXHyPw7NU=)
2: tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.crl (hash: OfmvpJDUrLaW3b/6YVlfqqsdF3kHFBHhzRSsnj6AOoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:ec:ce:b4:f8:b6:f1:9f:ab:f8:2c:01:32:86:58:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b522787599f1798e245f993f8cb8182f99cfd104
Validity
Not Before: Jun 15 22:02:56 2024 GMT
Not After : Jun 16 22:02:56 2024 GMT
Subject: CN=9a46736471278afabb61c126e037605d2c799667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:98:1f:a4:c4:d1:f6:7a:be:4f:e5:82:b3:3f:
05:f4:4c:4e:0a:90:68:ee:a7:46:a1:61:f4:9c:8a:
02:9b:9d:82:68:5a:4f:72:35:b8:93:f0:ed:8a:b1:
ae:07:e6:53:58:c9:4f:e0:10:72:cd:9c:94:0a:b8:
b9:ae:f1:be:b9:f8:2b:20:df:d0:bd:7d:63:3e:bc:
c4:88:0b:8a:b7:5f:cd:81:6a:fb:11:88:e8:a3:61:
1b:ce:f6:e4:ea:25:72:d8:65:af:b5:56:66:a8:28:
66:cd:30:9a:4c:c9:66:97:7c:57:49:98:0a:ce:51:
de:c0:ed:e2:78:1c:49:63:24:02:7a:77:11:ce:94:
04:22:48:83:ea:cc:c2:f0:2b:57:3c:c8:16:8e:0c:
4b:d2:d0:c5:21:6e:c0:79:70:c0:87:e6:b7:fb:30:
85:a3:e9:7c:81:bd:4c:6a:9d:eb:fb:06:6b:b8:3f:
42:dc:36:14:be:bc:10:1d:44:37:06:bb:6f:3d:69:
bb:50:ec:21:06:ef:44:0c:fc:63:e3:07:6c:3f:2d:
1c:0a:dd:8b:dc:13:63:6d:76:ef:c6:c6:60:07:82:
0b:d3:29:1a:5b:e8:38:31:f5:68:20:63:5c:0b:7e:
fe:82:52:e0:05:36:33:0e:d0:17:1e:a7:67:d9:64:
1c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:46:73:64:71:27:8A:FA:BB:61:C1:26:E0:37:60:5D:2C:79:96:67
X509v3 Authority Key Identifier:
keyid:B5:22:78:75:99:F1:79:8E:24:5F:99:3F:8C:B8:18:2F:99:CF:D1:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:f7:0a:4a:fb:6d:31:be:e7:cf:f4:21:c8:0e:60:c0:d4:69:
80:9f:72:f3:48:ae:97:3b:ed:5f:b9:45:a6:82:66:09:62:4e:
06:0b:57:2f:9e:62:e4:d7:fc:e7:5f:a5:3c:22:66:e2:cf:f0:
74:e3:93:73:c0:9b:26:3b:8e:b7:db:53:1f:62:f0:22:e6:a5:
b9:9d:df:d9:56:32:53:f8:9a:c8:d1:a0:50:ef:6d:1f:7d:15:
96:56:a2:75:5d:79:ee:fc:f6:c0:d5:f2:e0:72:d7:55:8d:76:
65:12:a0:e9:27:86:ac:64:cb:4a:45:cb:3e:60:95:9c:fb:97:
93:ec:5b:48:cf:b3:ee:2a:87:05:51:75:3a:87:3a:3b:fe:29:
2d:bb:33:be:6d:ca:b9:e6:a3:0f:8c:98:09:5d:7d:4f:00:9f:
62:4f:cf:98:33:12:b6:60:a7:19:ae:bf:20:19:6b:6c:cf:9d:
81:fc:b6:04:6f:7b:db:81:b4:30:b9:3b:ce:61:01:6c:b8:c2:
ae:ab:d9:60:52:0a:c3:e9:a9:a2:21:4d:1b:a2:67:14:59:6b:
49:e5:5e:df:a4:22:d5:c3:fb:1b:f7:bf:ab:50:a2:35:f3:ff:
8c:bc:3a:a6:57:bb:15:fd:89:dc:35:82:ac:81:06:45:af:85:
8e:5c:e1:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:53:40 2024 by rpki-client on console-ams.rpki-client.org