![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft
File: BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft (raw, json)
Hash identifier: +/Leazi2qLomIhM5S+YkAw++41btVDUzyw5VF0mhDXE=
Subject key identifier: 61:69:F4:9B:75:ED:0E:E2:C8:08:87:8F:06:16:63:5C:22:0E:05:83
Authority key identifier: 05:0E:3B:7D:FB:D5:99:10:FE:52:7C:C7:E2:9A:F6:4D:53:80:6C:91
Certificate issuer: /CN=050e3b7dfbd59910fe527cc7e29af64d53806c91
Certificate serial: 01906F0758CF3EB5FC0A27A34F4BB8D34711
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BQ47ffvVmRD-UnzH4pr2TVOAbJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft
Manifest number: 11EF
Signing time: Mon 01 Jul 2024 16:01:10 +0000
Manifest this update: Mon 01 Jul 2024 16:01:10 +0000
Manifest next update: Tue 02 Jul 2024 16:01:10 +0000
Files and hashes: 1: BQ47ffvVmRD-UnzH4pr2TVOAbJE.crl (hash: 7rSkMMvIREkDKSV/ogTF3mokwQs2wVdU3mm2F4HjvlU=)
2: TkEYkt4ztdTUIJ7a5_qrI5gW3ds.roa (hash: FFu6uRp6vzUWqmfOeSkC77qrOhaQtiESJwNd6t0IKuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BQ47ffvVmRD-UnzH4pr2TVOAbJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 02 Jul 2024 13:50:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:6f:07:58:cf:3e:b5:fc:0a:27:a3:4f:4b:b8:d3:47:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=050e3b7dfbd59910fe527cc7e29af64d53806c91
Validity
Not Before: Jul 1 16:01:10 2024 GMT
Not After : Jul 2 16:01:10 2024 GMT
Subject: CN=6169f49b75ed0ee2c808878f0616635c220e0583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d6:2b:5a:8e:2a:00:1a:ae:a1:35:0d:f0:96:
15:98:bc:1f:f8:8a:67:8c:0d:ae:2c:b7:c5:62:04:
2a:28:d2:8d:13:51:03:bb:36:f2:b2:17:19:89:22:
79:d4:2e:eb:46:fe:03:be:38:88:7e:1b:45:ae:c9:
84:be:dd:79:bb:ea:2c:c6:20:0e:20:22:48:ff:89:
5b:f1:31:e3:bd:eb:09:c8:94:74:1b:a5:79:4f:d9:
30:d2:94:05:9e:6d:23:5a:cb:3a:3f:32:31:5c:ea:
2c:c9:e2:00:3c:fe:f0:4d:39:72:5b:c9:b4:b7:de:
1e:b1:d7:94:2f:6e:c7:38:2c:cc:c6:a5:6f:85:29:
38:b0:ac:32:da:2a:73:fb:c3:1b:11:6f:3b:12:29:
0e:1e:98:70:25:b5:2a:98:f5:98:9c:47:8e:2a:11:
e2:8e:ef:92:7d:c4:e4:76:e7:30:51:48:bf:3e:1b:
c3:34:42:c4:da:59:b1:35:85:51:3f:ac:27:ab:30:
ea:b8:e7:f9:3b:cf:f0:1b:ab:f6:25:cd:94:76:6a:
ae:71:0d:76:50:03:9e:55:88:2e:eb:af:55:a1:96:
2f:07:19:db:05:5d:e5:a9:6e:71:07:9d:9a:86:e3:
d4:b1:d7:09:96:77:73:e8:36:6d:04:2f:4f:31:c3:
f1:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:69:F4:9B:75:ED:0E:E2:C8:08:87:8F:06:16:63:5C:22:0E:05:83
X509v3 Authority Key Identifier:
keyid:05:0E:3B:7D:FB:D5:99:10:FE:52:7C:C7:E2:9A:F6:4D:53:80:6C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQ47ffvVmRD-UnzH4pr2TVOAbJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:09:4f:78:b8:2f:8c:5f:33:92:ad:c5:80:3f:c2:b4:15:9b:
bf:0c:82:3d:98:19:7c:c7:60:da:17:57:c5:d2:bf:38:d8:96:
ea:d6:4e:79:30:60:bb:f6:30:9c:8a:9c:45:b0:69:4e:3e:51:
1e:7c:da:f1:b7:08:be:b8:06:55:77:6f:ce:c8:90:77:64:5e:
39:06:bd:85:e9:b2:0c:14:a2:f5:a3:ed:7d:81:72:1d:18:a3:
78:38:2e:27:33:14:1e:7c:bb:76:cc:03:03:ce:cc:51:f5:35:
2c:2d:3b:ec:18:84:7a:1b:1b:7b:65:f0:f0:e6:0b:0c:de:d3:
ed:d2:93:13:6e:0a:c4:c1:aa:28:e1:da:13:e9:e8:e2:47:d9:
52:06:59:dc:8b:9f:fa:05:9c:8e:0a:10:18:08:d5:ef:7b:86:
67:a0:61:99:30:48:9a:29:2c:b7:a7:d1:4b:6d:9d:b9:31:f1:
3c:7b:34:59:75:0f:a9:fc:94:22:7c:dd:53:67:90:a2:69:9a:
6c:3c:9a:da:fe:94:77:13:c1:e7:cc:91:98:2c:fe:bb:07:ae:
c1:d1:d7:48:e8:54:ba:93:cf:2b:7e:55:74:a4:1c:e1:83:e8:
51:0e:b8:98:87:0c:90:f5:56:8e:31:11:10:b2:aa:8b:82:bd:
a3:d5:8b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 19:33:34 2024 by rpki-client on console-ams.rpki-client.org