![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.mft
File: yAkUktLOioDAh7h2-R1qPCm-eiU.mft (raw, json)
Hash identifier: 165y023TNbXxh1hQjqlZDa1sJwDUCm/kpb2HgYZzJc0=
Subject key identifier: 7B:46:21:E1:C8:91:FE:49:A0:64:6A:1D:04:D5:33:6E:FF:01:8D:E2
Authority key identifier: C8:09:14:92:D2:CE:8A:80:C0:87:B8:76:F9:1D:6A:3C:29:BE:7A:25
Certificate issuer: /CN=c8091492d2ce8a80c087b876f91d6a3c29be7a25
Certificate serial: 019050C612840C5B1D6A1AAD239C6A9D85DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yAkUktLOioDAh7h2-R1qPCm-eiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.mft
Manifest number: 07D9
Signing time: Tue 25 Jun 2024 19:01:16 +0000
Manifest this update: Tue 25 Jun 2024 19:01:16 +0000
Manifest next update: Wed 26 Jun 2024 19:01:16 +0000
Files and hashes: 1: 3h24TRVyHi2zdoD0oWknvVXjtv0.roa (hash: VQkILqYnRxzkLHNHiQAHFT5hdyIfaQtSNb52okrwMa0=)
2: yAkUktLOioDAh7h2-R1qPCm-eiU.crl (hash: ATFkf6zCs5Iv1OCv7cWjjZZxyIahzY0BPNBC2SLqhfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yAkUktLOioDAh7h2-R1qPCm-eiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 14:33:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:50:c6:12:84:0c:5b:1d:6a:1a:ad:23:9c:6a:9d:85:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8091492d2ce8a80c087b876f91d6a3c29be7a25
Validity
Not Before: Jun 25 19:01:16 2024 GMT
Not After : Jun 26 19:01:16 2024 GMT
Subject: CN=7b4621e1c891fe49a0646a1d04d5336eff018de2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ae:81:d6:c7:11:ea:9d:5c:e5:9d:23:3a:7f:
ed:3f:60:7e:31:17:f3:df:f9:56:95:52:5f:d0:35:
d3:2f:48:22:5e:60:94:1a:b7:b8:d0:ba:b4:79:df:
7b:1e:f2:40:19:37:89:71:7c:2f:34:8c:8e:0e:f2:
f3:49:a6:bc:cb:f3:fb:3a:0c:de:37:0a:9f:0e:3f:
fc:43:4e:99:af:3f:c2:31:99:01:6a:48:c2:36:17:
d2:16:f3:46:7b:4c:12:83:45:62:f4:0d:c9:aa:1b:
19:fa:bd:88:d5:5c:91:ec:c4:96:72:3a:ae:26:de:
ec:46:24:0f:0e:07:18:d4:8a:6e:d8:98:50:45:0a:
59:b4:cf:4d:29:dc:e8:58:22:f8:8d:a2:4d:7d:64:
5e:ad:e1:04:99:a0:5a:9c:ea:f1:53:a4:d7:0a:88:
da:3e:fb:c8:54:1e:34:56:d3:b6:54:70:d1:c0:33:
9d:5a:48:82:23:ef:c5:be:c1:8a:af:a2:f6:7a:53:
97:99:64:dd:04:38:da:44:da:9b:69:64:d4:7c:64:
1a:4c:ef:bd:c0:56:09:26:e7:94:30:df:2e:6d:dc:
11:7b:25:f5:b9:1e:d6:ae:da:8a:9e:99:b6:5f:45:
5a:f8:b9:a6:1e:ac:dc:4d:c6:9e:4d:e6:2e:b5:6f:
eb:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:46:21:E1:C8:91:FE:49:A0:64:6A:1D:04:D5:33:6E:FF:01:8D:E2
X509v3 Authority Key Identifier:
keyid:C8:09:14:92:D2:CE:8A:80:C0:87:B8:76:F9:1D:6A:3C:29:BE:7A:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yAkUktLOioDAh7h2-R1qPCm-eiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:cf:98:79:f1:5d:d6:51:6d:9f:d4:00:e1:66:96:47:c7:ec:
4a:c1:c9:28:18:ee:a1:0d:83:1c:3e:74:1b:6c:b6:6f:cc:8b:
53:39:46:8e:a4:ff:13:65:9a:a2:a5:8e:87:76:70:a8:d9:98:
33:ed:e7:ba:43:c5:9f:41:d7:8a:9b:ab:f7:5c:dd:92:aa:0a:
9d:00:83:18:e8:47:08:ba:a6:47:ed:9d:f6:f0:e8:e0:f2:d4:
17:e3:4f:a8:8c:97:a2:53:07:e9:21:71:6c:98:f3:23:04:96:
4a:4a:72:62:a3:04:a6:04:5f:d5:73:c5:1d:94:bf:6c:af:9a:
1b:50:f8:a1:06:84:26:08:ff:ab:84:e4:35:43:8e:7b:e4:74:
a1:d9:41:6f:51:44:31:fd:97:80:68:0b:0e:b7:54:6a:50:bc:
03:df:04:f8:48:0a:22:23:97:9e:1e:b5:7a:a3:45:31:07:3e:
0a:3c:63:b6:e8:d7:70:89:ae:bc:99:1d:0e:22:71:e1:6e:01:
eb:91:74:7b:ba:23:a4:3b:9b:ba:85:91:e3:d6:2b:80:56:31:
ba:b3:90:ed:ea:6d:8d:ca:83:46:a4:16:d3:fc:47:22:db:36:
c3:4a:45:55:79:b8:42:9d:b9:41:57:02:6a:73:e2:6a:78:9a:
22:a4:14:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 23:08:25 2024 by rpki-client on console-ams.rpki-client.org