![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/HI4XQR4BAMkUsEDVFMKOHX02mR4.mft
File: HI4XQR4BAMkUsEDVFMKOHX02mR4.mft (raw, json)
Hash identifier: 3ZrHZMY9bPhM5L9Ko7n48XLh1dtrFx6OgdcXK3dsrF4=
Subject key identifier: 7C:AB:E4:F4:37:88:7D:DF:CD:94:3C:E3:13:FF:B8:99:98:5E:F6:B7
Authority key identifier: 1C:8E:17:41:1E:01:00:C9:14:B0:40:D5:14:C2:8E:1D:7D:36:99:1E
Certificate issuer: /CN=1c8e17411e0100c914b040d514c28e1d7d36991e
Certificate serial: 01905C92F8E47EAE56E01386E5815FC1DB98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HI4XQR4BAMkUsEDVFMKOHX02mR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/HI4XQR4BAMkUsEDVFMKOHX02mR4.mft
Manifest number: 0EF7
Signing time: Fri 28 Jun 2024 02:00:54 +0000
Manifest this update: Fri 28 Jun 2024 02:00:54 +0000
Manifest next update: Sat 29 Jun 2024 02:00:54 +0000
Files and hashes: 1: HI4XQR4BAMkUsEDVFMKOHX02mR4.crl (hash: UQG2I641GAQfzWE1NsoQox0w15g3LlcBPU7uyBY4LmI=)
2: hOpqybgGweckoqTnppJ1ZC36PYo.roa (hash: tkwGKyXKm49ThjrjzdrwYXnu1w6XoZOJbo68RfUeCNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/HI4XQR4BAMkUsEDVFMKOHX02mR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/HI4XQR4BAMkUsEDVFMKOHX02mR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HI4XQR4BAMkUsEDVFMKOHX02mR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Jun 2024 20:47:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:5c:92:f8:e4:7e:ae:56:e0:13:86:e5:81:5f:c1:db:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c8e17411e0100c914b040d514c28e1d7d36991e
Validity
Not Before: Jun 28 02:00:54 2024 GMT
Not After : Jun 29 02:00:54 2024 GMT
Subject: CN=7cabe4f437887ddfcd943ce313ffb899985ef6b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:57:83:8b:3a:ee:d7:72:b8:54:81:42:da:f5:
10:31:4b:89:18:88:60:67:b6:1c:17:24:8e:63:12:
3d:f6:de:19:53:30:e2:16:95:13:a0:dc:58:0a:a5:
f6:84:dd:82:89:3a:39:af:2d:78:cd:72:4c:ca:3b:
b2:01:18:46:c4:7f:c0:fc:8a:eb:df:f8:94:8e:7f:
ff:a2:55:84:58:d8:71:d7:51:3b:d3:3c:84:3f:20:
f3:5f:88:d1:f7:f6:04:2e:40:2f:5e:aa:89:b6:4f:
e9:e2:49:56:b6:95:2f:4c:e6:bf:59:57:35:4e:0e:
ad:55:6b:c3:87:71:ef:74:95:aa:90:1b:5a:f6:07:
c1:53:fb:28:44:73:96:0b:35:1d:fb:cc:cb:dd:13:
63:13:cf:93:45:55:f8:6a:30:05:5f:3b:29:bd:8e:
ae:39:54:fb:23:ea:22:f5:46:db:4d:55:b5:4e:30:
77:89:26:3f:88:ad:56:3b:c9:a3:5b:bd:7e:15:ac:
96:53:cd:42:ad:33:43:6c:12:d5:d1:93:77:e1:4c:
db:59:63:4e:c4:f9:2c:07:6b:4a:93:ee:ff:18:9a:
d3:cd:20:80:13:83:ad:ad:a2:45:ba:a7:0d:44:c5:
ac:5e:de:3b:06:fc:b5:fb:2e:c1:d4:75:08:e8:20:
a9:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:AB:E4:F4:37:88:7D:DF:CD:94:3C:E3:13:FF:B8:99:98:5E:F6:B7
X509v3 Authority Key Identifier:
keyid:1C:8E:17:41:1E:01:00:C9:14:B0:40:D5:14:C2:8E:1D:7D:36:99:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HI4XQR4BAMkUsEDVFMKOHX02mR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/HI4XQR4BAMkUsEDVFMKOHX02mR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/HI4XQR4BAMkUsEDVFMKOHX02mR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:9a:ad:20:02:41:f7:a8:52:ce:a3:b2:9c:80:bb:b5:ce:ea:
89:72:03:b2:64:74:ef:14:d9:39:2f:a4:11:cc:4a:e9:31:98:
39:d2:e8:49:6a:e9:ad:60:ff:12:26:19:bb:c4:31:77:e9:49:
d2:79:30:30:0b:12:2a:91:e6:2a:cb:e2:5e:b0:bc:2a:25:f2:
f5:e7:a4:85:f4:41:a1:31:47:e0:a6:22:b9:76:1a:f6:41:7a:
65:32:ba:06:5f:a9:55:99:3d:dc:76:ff:33:56:d2:51:3b:64:
c2:7c:45:36:fa:89:f2:51:26:97:f5:bb:54:4c:94:ee:2c:51:
70:78:56:6c:31:f8:49:e1:95:cf:66:54:c3:95:55:ee:8a:b4:
0f:b5:4d:bb:57:d9:eb:d3:9a:51:19:22:38:43:39:68:e0:2a:
ee:27:08:7d:3f:9e:d4:4d:80:79:d6:38:0f:74:34:f5:7d:f4:
48:f4:f9:cf:45:3a:bc:31:a6:6d:02:1d:59:7a:e4:78:90:ff:
70:03:93:f5:0f:94:5a:e0:fb:c7:a9:76:6c:3e:a4:36:df:23:
0c:a9:e3:02:83:54:21:72:4a:fe:6c:12:6e:16:bc:c8:38:fa:
c9:03:75:99:39:f7:50:c1:88:43:80:c5:57:11:79:cc:44:52:
ac:ff:9d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 03:53:39 2024 by rpki-client on console-fra.rpki-client.org