![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.mft
File: kJrEshegjDSPstyft0IuHekY9Rc.mft (raw, json)
Hash identifier: iNLfmmw8yr5z2GdRKbTqC5k23v8sbTR+DBAq0gOcWxI=
Subject key identifier: BB:B8:37:5A:0E:3F:7C:E1:57:DB:BD:7B:B2:93:C9:16:53:A1:65:C0
Authority key identifier: 90:9A:C4:B2:17:A0:8C:34:8F:B2:DC:9F:B7:42:2E:1D:E9:18:F5:17
Certificate issuer: /CN=909ac4b217a08c348fb2dc9fb7422e1de918f517
Certificate serial: 019053FF25D02FD106EF43BFEFA661171435
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kJrEshegjDSPstyft0IuHekY9Rc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.mft
Manifest number: 04D7
Signing time: Wed 26 Jun 2024 10:02:28 +0000
Manifest this update: Wed 26 Jun 2024 10:02:28 +0000
Manifest next update: Thu 27 Jun 2024 10:02:28 +0000
Files and hashes: 1: 5fATlOoxVMRxRyp1KsLsqXvu3qY.roa (hash: wNFY8s5JI3q7QhZ/d5rgJXFUjgC1L689lkIqr1UyTJw=)
2: YjQRbGXQNkyJ4u9GsJ4aQwWyHVg.roa (hash: D42BZO2//ShDG4ZBJaUrO0hH4Q+XHzJ6IQV2bvg3Myw=)
3: kJrEshegjDSPstyft0IuHekY9Rc.crl (hash: ZA6MoNe91eTUHjKisLl7GI7/ZxO8LtYPqzaptdmtDgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kJrEshegjDSPstyft0IuHekY9Rc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:53:ff:25:d0:2f:d1:06:ef:43:bf:ef:a6:61:17:14:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=909ac4b217a08c348fb2dc9fb7422e1de918f517
Validity
Not Before: Jun 26 10:02:28 2024 GMT
Not After : Jun 27 10:02:28 2024 GMT
Subject: CN=bbb8375a0e3f7ce157dbbd7bb293c91653a165c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b0:a6:c6:d3:ea:18:b9:f7:80:d6:a3:7a:0b:
00:cf:c1:aa:6e:a6:c2:09:a9:94:dc:ab:07:23:6c:
fe:03:85:d8:44:9b:37:7d:11:29:01:49:c3:3b:72:
bb:f3:dc:13:48:ec:62:82:d6:47:a5:96:07:e7:c4:
ff:e2:59:b2:57:2f:3b:ec:6d:54:a1:bc:89:58:75:
52:97:a1:7a:8f:a8:2c:8f:bf:98:e2:65:32:89:a8:
ac:91:b8:c4:ab:c8:5d:6b:f2:b1:c2:0e:f3:0d:75:
06:c7:ef:5a:8a:16:43:50:a9:e9:91:b5:f2:b9:50:
34:15:56:12:e2:af:5d:86:26:c2:e3:7b:2b:57:ad:
a9:d7:41:3c:bc:f6:59:82:03:17:83:6f:49:62:dc:
f6:b9:d9:e9:14:44:a5:64:c8:b1:be:5d:4c:5d:c0:
fc:d4:a4:27:48:86:c7:c5:3d:01:80:9c:cf:a8:75:
8d:5c:d0:8f:1e:39:22:89:b8:57:c8:0f:e4:b8:5c:
7d:02:9e:be:e7:d6:e6:4c:a7:da:33:67:2e:b9:af:
fc:ef:dd:e2:45:82:94:88:b4:e2:c3:31:e8:fc:90:
9a:41:bc:8f:1f:74:e1:48:03:8c:2a:cc:a1:b3:79:
75:4c:3d:e2:3e:8c:91:fa:b1:be:cd:e3:26:20:7a:
a3:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:B8:37:5A:0E:3F:7C:E1:57:DB:BD:7B:B2:93:C9:16:53:A1:65:C0
X509v3 Authority Key Identifier:
keyid:90:9A:C4:B2:17:A0:8C:34:8F:B2:DC:9F:B7:42:2E:1D:E9:18:F5:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kJrEshegjDSPstyft0IuHekY9Rc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:fb:0c:f4:a8:b3:e7:52:8d:84:6f:41:c1:f7:86:de:30:da:
5e:f2:cb:3c:b0:6c:ce:9c:8b:87:2c:aa:12:d4:1d:9b:1e:3b:
80:1b:27:5d:87:43:e0:b4:31:26:b8:5d:f6:aa:96:a4:47:2d:
0f:a5:b1:68:43:18:6c:46:78:01:ac:d8:05:d8:56:83:51:47:
d0:6e:b9:81:62:c2:81:65:67:f6:ab:8a:68:36:76:f7:1d:2d:
3c:3b:da:ee:a8:fc:26:19:6b:33:84:5b:68:94:65:22:9d:57:
b8:b7:21:ce:8a:23:20:34:3e:85:30:02:a7:bb:ee:1f:05:73:
5e:2f:9c:d1:f0:68:b0:b5:00:ad:aa:6c:e1:69:80:3a:dd:52:
cf:51:f7:eb:b5:24:4e:eb:25:ae:22:1f:1c:36:af:23:78:9b:
e2:54:ac:54:58:fd:c7:4a:3c:ee:13:b6:ac:21:8d:e5:4e:20:
bb:8e:65:1d:49:57:3d:f8:01:c2:89:45:63:6d:71:e1:fe:e3:
ee:aa:88:1c:a2:01:01:d7:d8:66:29:60:2e:3b:1d:06:85:08:
48:e2:aa:d4:69:2c:6f:f2:a8:03:30:f0:44:dd:0a:9a:3c:19:
f9:1b:e3:2d:83:0f:ae:9f:03:00:44:b1:d0:f8:ae:52:f9:4a:
48:86:aa:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 12:55:30 2024 by rpki-client on console-ams.rpki-client.org