![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/333034-e737-436d-b149-3119d3332282/1/njQ_BMJ9FUVaqlzapFadN6iJUNc.mft
File: njQ_BMJ9FUVaqlzapFadN6iJUNc.mft (raw, json)
Hash identifier: 16arLKhKdjPMVZYcbeLoAbehNw7IgXVlBtjzMaCmkng=
Subject key identifier: C1:18:7B:9F:9A:9B:45:E0:15:BA:8D:92:35:70:82:B8:99:E1:8E:56
Authority key identifier: 9E:34:3F:04:C2:7D:15:45:5A:AA:5C:DA:A4:56:9D:37:A8:89:50:D7
Certificate issuer: /CN=9e343f04c27d15455aaa5cdaa4569d37a88950d7
Certificate serial: 01902FBAC4B28EC852E0F33E732CA7509DEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njQ_BMJ9FUVaqlzapFadN6iJUNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/333034-e737-436d-b149-3119d3332282/1/njQ_BMJ9FUVaqlzapFadN6iJUNc.mft
Manifest number: 0EFD
Signing time: Wed 19 Jun 2024 09:01:27 +0000
Manifest this update: Wed 19 Jun 2024 09:01:27 +0000
Manifest next update: Thu 20 Jun 2024 09:01:27 +0000
Files and hashes: 1: ZQuc3eiJ_pjnCfm4KPAujnCUyPY.roa (hash: AxM2gnlWDlR2cqh64pu8Bmxv3mingG1abjHAS+j2Q/s=)
2: njQ_BMJ9FUVaqlzapFadN6iJUNc.crl (hash: NTLYv+yFMIchso6CPGmor9FfG4FKdqAlgiHBEGheTOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/333034-e737-436d-b149-3119d3332282/1/njQ_BMJ9FUVaqlzapFadN6iJUNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/333034-e737-436d-b149-3119d3332282/1/njQ_BMJ9FUVaqlzapFadN6iJUNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/njQ_BMJ9FUVaqlzapFadN6iJUNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Jun 2024 09:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:2f:ba:c4:b2:8e:c8:52:e0:f3:3e:73:2c:a7:50:9d:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e343f04c27d15455aaa5cdaa4569d37a88950d7
Validity
Not Before: Jun 19 09:01:27 2024 GMT
Not After : Jun 20 09:01:27 2024 GMT
Subject: CN=c1187b9f9a9b45e015ba8d92357082b899e18e56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a6:00:3e:f9:f6:c9:09:bc:60:e9:37:33:d2:
44:fa:ef:72:55:df:b5:e1:2b:10:c7:c0:f4:ba:5f:
e1:f5:5b:33:fa:40:17:2f:f3:c8:67:fb:03:aa:53:
84:a9:c4:ca:09:01:90:e4:0d:f5:1e:97:76:79:ef:
a7:92:0f:fa:0a:b1:93:f5:1c:71:2a:ee:17:fe:98:
36:1e:d1:b5:ed:0b:50:5f:e9:ca:ec:13:a7:6e:80:
a1:f8:ab:6d:94:7c:39:1d:da:8e:6a:57:09:2c:90:
1f:8a:d3:78:6e:d8:60:5e:b0:fa:71:ad:10:27:99:
40:fc:89:3f:4f:17:88:63:c5:4c:6e:af:5d:3a:fa:
4f:ff:6e:d7:25:87:0a:f7:55:28:25:8f:d0:b3:6a:
f0:55:52:20:dc:75:db:8a:21:e0:4f:35:57:a9:91:
12:63:42:0b:51:ae:bc:cb:c6:31:6a:71:f3:91:dd:
5a:3f:25:5c:24:46:08:b0:ea:b7:82:a1:b9:31:32:
1d:d5:6d:81:fc:b0:40:61:e4:9e:0c:0d:0d:95:f5:
2e:bb:f9:9a:33:8b:62:2d:1e:cc:26:a5:ea:c3:a0:
d8:2c:b0:20:0e:01:3f:c0:ef:e8:e8:b8:30:15:34:
77:6c:4d:cb:89:6f:ce:94:a5:1b:e3:f1:de:a4:fb:
0c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:18:7B:9F:9A:9B:45:E0:15:BA:8D:92:35:70:82:B8:99:E1:8E:56
X509v3 Authority Key Identifier:
keyid:9E:34:3F:04:C2:7D:15:45:5A:AA:5C:DA:A4:56:9D:37:A8:89:50:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njQ_BMJ9FUVaqlzapFadN6iJUNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/333034-e737-436d-b149-3119d3332282/1/njQ_BMJ9FUVaqlzapFadN6iJUNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/333034-e737-436d-b149-3119d3332282/1/njQ_BMJ9FUVaqlzapFadN6iJUNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:34:6a:d3:19:91:fa:f8:88:b4:64:f1:6a:24:cc:e7:3a:bb:
59:a3:ba:ff:6c:01:79:52:7b:5d:ac:02:94:60:c0:cf:a6:e8:
0f:17:9c:4b:11:cf:ef:a6:7a:6a:95:11:a7:1b:b2:d3:40:e5:
fa:eb:ac:a7:65:5c:d0:fd:c4:52:9c:f8:1f:4a:af:c1:72:98:
94:0a:de:35:8d:e4:89:51:0c:b4:e3:a0:68:1f:fd:aa:cc:5a:
4c:91:ba:9f:d1:7e:58:fa:88:1c:1c:86:78:a1:ed:d7:52:a2:
42:77:27:60:3c:8a:bb:6a:41:86:ba:68:6f:f8:7a:9b:42:1c:
dc:1f:04:d5:c2:e4:2f:7e:4e:50:5e:76:21:46:03:78:0e:cf:
a2:d0:01:65:d5:95:78:53:40:e5:87:10:54:3b:2e:bf:16:f0:
b7:59:d9:17:c1:30:c2:74:0d:61:0d:d0:24:b8:90:48:7d:ab:
fe:9e:a5:c8:31:3a:53:2f:65:20:41:1e:22:aa:b1:f1:84:86:
14:bb:af:d1:ce:a9:f8:5f:47:3b:45:9a:e4:c8:88:6f:69:dd:
43:06:0e:59:49:f6:d0:f5:15:61:d9:11:b1:5f:d8:26:be:ae:
1e:d4:f6:7e:3b:55:3d:72:3a:13:38:80:cf:5a:1b:e0:ae:dc:
9b:ce:c3:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 19 17:49:56 2024 by rpki-client on console-fra.rpki-client.org