![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/d52045-deea-499a-b0fc-8befb874d85c/1/_C-Nzs9k1DCkjs1YaHg7Bfdcv6s.mft
File: _C-Nzs9k1DCkjs1YaHg7Bfdcv6s.mft (raw, json)
Hash identifier: DnYBliTWcmp0fb9RyBMJvwgycKZHgv62b9idj/GPYi8=
Subject key identifier: EF:C4:25:E2:5E:03:C7:09:C2:6C:8E:6B:46:08:86:C7:6E:15:30:3C
Authority key identifier: FC:2F:8D:CE:CF:64:D4:30:A4:8E:CD:58:68:78:3B:05:F7:5C:BF:AB
Certificate issuer: /CN=fc2f8dcecf64d430a48ecd5868783b05f75cbfab
Certificate serial: 01901D46053B14F50752FF6DED905F7D18D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_C-Nzs9k1DCkjs1YaHg7Bfdcv6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/d52045-deea-499a-b0fc-8befb874d85c/1/_C-Nzs9k1DCkjs1YaHg7Bfdcv6s.mft
Manifest number: 0B75
Signing time: Sat 15 Jun 2024 19:00:46 +0000
Manifest this update: Sat 15 Jun 2024 19:00:46 +0000
Manifest next update: Sun 16 Jun 2024 19:00:46 +0000
Files and hashes: 1: _C-Nzs9k1DCkjs1YaHg7Bfdcv6s.crl (hash: jOl1jlJxSGSrLQTLHzPTMrI6ukERn0HJCvezwutRrug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/d52045-deea-499a-b0fc-8befb874d85c/1/_C-Nzs9k1DCkjs1YaHg7Bfdcv6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/d52045-deea-499a-b0fc-8befb874d85c/1/_C-Nzs9k1DCkjs1YaHg7Bfdcv6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/_C-Nzs9k1DCkjs1YaHg7Bfdcv6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:46:05:3b:14:f5:07:52:ff:6d:ed:90:5f:7d:18:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc2f8dcecf64d430a48ecd5868783b05f75cbfab
Validity
Not Before: Jun 15 19:00:46 2024 GMT
Not After : Jun 16 19:00:46 2024 GMT
Subject: CN=efc425e25e03c709c26c8e6b460886c76e15303c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:15:49:8a:04:fc:d8:71:d6:85:65:f3:ed:5a:
2a:77:21:7b:ed:3b:a4:e1:76:e3:13:1e:4d:a7:74:
65:10:d3:6d:58:df:c0:c1:7c:43:a4:d1:fc:0a:e4:
db:79:a9:a3:28:34:14:ea:c1:97:07:6a:06:5f:b8:
6b:a9:37:18:0e:b2:55:51:2b:70:68:1c:38:0b:23:
a8:1e:40:02:11:12:69:a7:11:b9:49:4b:f8:63:aa:
6f:70:ec:96:a0:42:19:b3:a5:69:e0:08:54:1c:97:
a9:4f:f7:97:d0:ea:33:52:30:04:73:0a:68:75:2c:
93:67:82:42:52:1d:d4:b6:02:e3:95:3a:de:f4:16:
00:3e:31:bf:c2:d9:d8:5c:26:36:af:e8:f1:3f:ee:
73:dd:e5:a0:d3:3e:6d:fd:e4:5e:7d:54:1c:b0:4d:
3f:08:45:27:cf:f8:40:a4:13:dc:02:c7:41:e3:27:
5b:a9:20:da:80:c9:b7:38:30:1d:87:d3:a3:0e:0c:
be:71:ee:aa:02:e6:5e:58:81:6d:ab:4e:77:58:e8:
cc:16:0a:6d:8d:18:64:67:f2:6c:5e:5d:5a:1c:12:
46:1f:67:9f:81:93:07:58:c1:93:52:79:fd:64:ca:
d6:a6:c3:16:9a:38:6f:fe:c5:d4:32:15:8e:41:c4:
d6:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:C4:25:E2:5E:03:C7:09:C2:6C:8E:6B:46:08:86:C7:6E:15:30:3C
X509v3 Authority Key Identifier:
keyid:FC:2F:8D:CE:CF:64:D4:30:A4:8E:CD:58:68:78:3B:05:F7:5C:BF:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_C-Nzs9k1DCkjs1YaHg7Bfdcv6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d52045-deea-499a-b0fc-8befb874d85c/1/_C-Nzs9k1DCkjs1YaHg7Bfdcv6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d52045-deea-499a-b0fc-8befb874d85c/1/_C-Nzs9k1DCkjs1YaHg7Bfdcv6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:b3:b5:49:46:1a:88:c7:52:16:82:13:d7:ec:54:96:ca:1e:
f6:6c:63:56:a0:05:48:1e:ac:3c:77:ec:ce:a4:cb:c7:07:2e:
2d:7d:db:06:21:d0:89:96:99:47:4a:84:cb:75:b9:6a:ea:7c:
7c:02:a9:04:f0:fa:8f:a5:ed:c2:67:3b:d6:aa:74:4d:f5:52:
2e:e5:61:24:9f:16:08:56:17:db:f7:5e:e9:85:66:22:d2:0e:
4c:8b:8f:9c:72:29:ef:7a:92:a5:74:b4:86:6f:f2:76:16:40:
f1:1e:f0:d4:ad:43:81:62:11:ff:f6:6a:c7:0d:4d:cf:24:12:
30:c3:7f:b7:d6:38:89:a8:eb:d1:42:40:ae:ae:b8:5a:3a:23:
45:c6:49:e6:4d:59:db:60:bb:a0:a5:74:15:30:d4:e1:3c:de:
be:24:6e:39:8c:49:7a:ba:8c:2a:40:88:70:14:3c:d9:41:58:
2d:3b:65:83:dd:f5:bc:d2:1e:65:6f:87:67:c3:ed:f3:de:30:
a5:c5:cf:c8:24:c4:8b:cb:48:66:78:d0:be:a6:05:f9:a9:e1:
42:2e:b6:d5:45:2a:30:a8:8c:7a:90:50:6c:64:66:81:c6:0b:
e9:ba:3e:01:a2:10:e5:b6:b0:d6:47:82:d6:c7:db:79:b4:28:
8c:bb:fc:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 20:42:40 2024 by rpki-client on console-fra.rpki-client.org