![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.mft
File: nSVxkIIfcFio6v1IGWl0NoutjxQ.mft (raw, json)
Hash identifier: MuQ/tZqzAG6heXSuaGKYxECGdhVxBQVnDuYfhm2+pUs=
Subject key identifier: D2:FC:C7:0B:90:51:50:B1:1C:01:E2:D7:AD:0E:08:8A:D3:7F:2A:2B
Authority key identifier: 9D:25:71:90:82:1F:70:58:A8:EA:FD:48:19:69:74:36:8B:AD:8F:14
Certificate issuer: /CN=9d257190821f7058a8eafd48196974368bad8f14
Certificate serial: 0190298232C2A5011D8FCB8445C551E9E27E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSVxkIIfcFio6v1IGWl0NoutjxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.mft
Manifest number: 11CD
Signing time: Tue 18 Jun 2024 04:01:56 +0000
Manifest this update: Tue 18 Jun 2024 04:01:56 +0000
Manifest next update: Wed 19 Jun 2024 04:01:56 +0000
Files and hashes: 1: TOjF_EMwfYi8gZOM8JzTccH8l0M.roa (hash: 3DgAupwbmnUPDztrT2+zrZEZXdXe9TssQviPFXSzdsY=)
2: lXIDFG1AP_kexA_cJaDNRNW6Whk.roa (hash: lIVPeSP4ugNBKBDxS4PMg+bYQkYtMEa8QTePFcJhq48=)
3: nSVxkIIfcFio6v1IGWl0NoutjxQ.crl (hash: 8q0QQhH5Ttja4xgoJ5H6pk58V6N12HSxkcA/pXVRGWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSVxkIIfcFio6v1IGWl0NoutjxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 19 Jun 2024 04:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:29:82:32:c2:a5:01:1d:8f:cb:84:45:c5:51:e9:e2:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d257190821f7058a8eafd48196974368bad8f14
Validity
Not Before: Jun 18 04:01:56 2024 GMT
Not After : Jun 19 04:01:56 2024 GMT
Subject: CN=d2fcc70b905150b11c01e2d7ad0e088ad37f2a2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:65:5d:96:dd:e0:31:58:aa:b0:a3:cc:b2:f2:
d0:35:c2:21:d6:0a:63:df:9c:de:d1:50:78:89:17:
a3:91:c6:1b:3d:d7:44:4c:54:12:00:f3:c2:b4:98:
10:78:a1:16:df:63:80:6b:a0:1e:c6:29:6e:cf:2b:
13:d4:50:9f:2c:8f:50:d2:dd:1f:ef:97:6e:de:a0:
50:da:08:dd:54:a2:13:71:97:8e:75:a3:cb:94:6a:
fb:8c:d7:49:0e:56:60:a5:8f:71:ab:5b:c5:23:3c:
3c:6a:86:f2:30:71:9c:e2:b9:0b:96:4b:81:54:8d:
ed:d6:c1:6e:c6:40:ac:8b:b6:3b:fa:62:4c:6a:15:
b0:0f:89:67:15:f4:17:6c:9d:3e:af:65:63:1c:29:
85:4b:e2:6a:6e:a0:0e:91:83:4c:20:ba:5b:1d:22:
c4:33:3c:28:15:21:7e:ed:24:80:bb:2b:b8:73:4f:
d7:da:62:53:f2:c8:c0:b7:05:b6:eb:bd:d7:30:2a:
8a:28:92:19:ef:59:6a:4f:90:6d:e9:f8:ba:f3:6d:
04:f3:f4:c8:da:6b:b2:47:bf:32:70:c8:fd:b5:bb:
9b:99:28:c4:37:b4:b0:dd:37:d9:bc:30:f2:9d:6c:
7e:88:31:34:3e:97:c9:4d:1e:05:04:64:20:66:81:
ce:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:FC:C7:0B:90:51:50:B1:1C:01:E2:D7:AD:0E:08:8A:D3:7F:2A:2B
X509v3 Authority Key Identifier:
keyid:9D:25:71:90:82:1F:70:58:A8:EA:FD:48:19:69:74:36:8B:AD:8F:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSVxkIIfcFio6v1IGWl0NoutjxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:4a:ac:81:83:c0:42:aa:1a:5d:2d:1b:f8:24:80:56:82:f3:
79:82:c5:af:94:e7:c0:3f:37:0b:1f:5b:8a:b5:f2:a0:f1:b6:
9e:45:a2:d7:42:bf:75:03:e6:7c:33:77:88:b1:d0:20:ab:87:
52:ec:d6:6f:05:87:b6:58:aa:15:36:c9:99:ac:12:20:e3:84:
08:6c:9f:ae:b6:2d:28:96:7c:7e:32:8a:03:32:83:52:b0:10:
e8:3f:58:e9:06:ab:fc:ce:82:a5:43:74:37:89:5c:34:ec:8c:
20:b4:74:b0:94:fc:d9:99:34:9d:09:97:af:7e:23:6a:82:14:
2a:d0:8d:ee:22:28:a0:9f:c4:a6:4d:8a:9f:38:08:80:d0:e2:
ae:8a:ce:9a:51:df:a2:8a:f0:92:e5:2c:bb:86:ad:bf:30:e4:
12:1e:cb:97:14:66:3c:16:2a:68:48:66:61:6d:20:00:22:5d:
2d:34:cf:55:52:5c:29:ed:59:d8:6e:ef:5b:a6:2e:05:d3:12:
e9:18:6f:d1:b1:e3:d3:aa:b5:5c:92:7d:39:1f:c4:bd:b8:1e:
1a:23:be:81:0a:77:cd:ca:49:dd:9a:56:73:0d:09:c7:09:40:
bd:96:61:ba:0e:99:74:cb:41:06:14:dc:5f:85:85:54:49:88:
5e:7a:a3:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 11:20:47 2024 by rpki-client on console-ams.rpki-client.org