![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.mft
File: oBdGz2u9yL1WZvMGgRvf_SFrGqY.mft (raw, json)
Hash identifier: pTq2ZuCdvPKcMWQJIlTk/kqdiZ+8eCmDBNFBUIqBjUs=
Subject key identifier: 75:20:CE:A5:3B:A5:D9:12:B9:DF:FF:1B:F4:54:0A:00:6B:CD:FC:29
Authority key identifier: A0:17:46:CF:6B:BD:C8:BD:56:66:F3:06:81:1B:DF:FD:21:6B:1A:A6
Certificate issuer: /CN=a01746cf6bbdc8bd5666f306811bdffd216b1aa6
Certificate serial: 01906294D77FFA6C24076E74FA4B961BA0B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oBdGz2u9yL1WZvMGgRvf_SFrGqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.mft
Manifest number: 11E8
Signing time: Sat 29 Jun 2024 06:00:39 +0000
Manifest this update: Sat 29 Jun 2024 06:00:39 +0000
Manifest next update: Sun 30 Jun 2024 06:00:39 +0000
Files and hashes: 1: UMOQuIGusgPOcSZTIJpaYcujt7w.roa (hash: xXR2qEbEe9YAAmg2G/R2jD3Fa4ao1nRUHX1ujejqxek=)
2: oBdGz2u9yL1WZvMGgRvf_SFrGqY.crl (hash: CUNCh8eyrP+c6JSpUZzsamHGMd9CReFr5qKKYOfy1Vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/oBdGz2u9yL1WZvMGgRvf_SFrGqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 30 Jun 2024 06:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:62:94:d7:7f:fa:6c:24:07:6e:74:fa:4b:96:1b:a0:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a01746cf6bbdc8bd5666f306811bdffd216b1aa6
Validity
Not Before: Jun 29 06:00:39 2024 GMT
Not After : Jun 30 06:00:39 2024 GMT
Subject: CN=7520cea53ba5d912b9dfff1bf4540a006bcdfc29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8c:0e:d2:95:04:89:61:1c:56:4d:ba:1e:93:
49:f1:df:5e:36:35:ac:8c:12:67:20:05:fc:03:e0:
85:bd:67:31:ed:e9:0b:25:70:f2:36:80:f3:0d:57:
02:62:b7:6e:e1:76:71:75:a9:6d:28:b8:21:10:0c:
48:7c:34:a0:fc:74:a5:3c:c6:28:e5:4c:bb:85:0d:
8d:f7:fe:c5:e5:ec:6a:0e:89:92:fd:2f:fa:6b:75:
c9:25:af:74:cc:81:2b:c8:20:95:d6:16:7e:be:ec:
22:d6:41:f5:58:43:50:10:26:bc:ad:96:a3:0d:d9:
1b:4b:23:c5:74:fd:d3:42:1b:cb:da:ea:6c:8c:75:
0c:4e:10:a8:3e:97:e0:94:f5:68:9b:11:70:90:1b:
45:4e:80:6d:93:35:ec:ff:9d:9c:f1:1c:34:ca:4c:
a5:99:79:4e:76:fd:4a:af:58:29:96:80:d2:37:7d:
7e:10:ac:7a:80:e7:0d:d4:49:b2:ef:30:2a:86:34:
80:73:6c:76:be:85:f1:8d:f4:fb:40:04:89:c9:0b:
5a:d9:89:eb:92:eb:e4:67:d4:c8:10:d6:63:21:86:
2c:ef:b5:9a:01:da:4b:a3:f2:8d:e9:83:74:8b:20:
37:88:4e:3c:c3:6f:07:c6:92:17:8d:47:48:1f:5a:
cd:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:20:CE:A5:3B:A5:D9:12:B9:DF:FF:1B:F4:54:0A:00:6B:CD:FC:29
X509v3 Authority Key Identifier:
keyid:A0:17:46:CF:6B:BD:C8:BD:56:66:F3:06:81:1B:DF:FD:21:6B:1A:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBdGz2u9yL1WZvMGgRvf_SFrGqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:d9:24:a4:12:21:bd:70:57:ff:07:ae:6b:2d:f2:71:0b:55:
98:39:9a:20:51:2a:e5:ca:c6:10:76:37:50:11:40:b9:cf:46:
2f:9d:11:81:36:c5:ee:4d:d7:7d:c0:4a:74:2a:43:d6:37:2e:
74:3b:43:99:82:91:04:79:3a:6f:20:c3:62:1b:c9:6b:c2:c5:
07:a2:c3:4d:4b:9d:73:4e:18:d8:15:47:8d:01:a7:a4:46:5b:
c9:61:32:e3:97:d4:51:5f:5d:8a:63:02:f8:bb:99:43:63:4d:
79:f9:15:85:d0:0e:19:c1:29:0c:2b:64:34:d0:12:bb:d3:a4:
8e:dd:5e:6d:8a:73:70:79:b7:44:ad:f1:56:a7:d2:a4:c0:d0:
67:8a:a7:fe:7c:0f:51:a5:a6:1f:bf:7d:96:81:5b:7d:78:71:
22:ca:4c:a2:bd:ea:8c:71:57:ce:3e:e6:14:59:9f:d9:80:87:
81:45:5f:90:1f:6d:02:b4:bb:bc:35:c1:d4:c3:18:ae:ca:22:
f6:cc:88:da:ef:9f:91:02:61:73:a7:8c:18:11:17:80:25:9d:
43:59:7a:4e:0d:1b:f5:21:9d:fa:4d:48:44:86:67:77:39:28:
8c:4f:87:d3:d9:ce:74:ec:be:36:a6:6c:cf:14:7e:da:15:d7:
7c:1b:a4:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 12:52:51 2024 by rpki-client on console-fra.rpki-client.org