![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/fd6070-9e0b-433a-8a75-7f73a4671a1e/1/YT1eE3n-qdHQ9yVu0PyRg750_vs.mft
File: YT1eE3n-qdHQ9yVu0PyRg750_vs.mft (raw, json)
Hash identifier: biLU06PIe8I7bURVYDYjS2TDbBicG+HLTmNJZQq0j7A=
Subject key identifier: D1:A1:99:80:28:C8:C4:88:CF:CE:47:5A:39:10:77:0B:86:70:A8:7A
Authority key identifier: 61:3D:5E:13:79:FE:A9:D1:D0:F7:25:6E:D0:FC:91:83:BE:74:FE:FB
Certificate issuer: /CN=613d5e1379fea9d1d0f7256ed0fc9183be74fefb
Certificate serial: 01905321D464FE17F39CD51C6050164A70FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YT1eE3n-qdHQ9yVu0PyRg750_vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/fd6070-9e0b-433a-8a75-7f73a4671a1e/1/YT1eE3n-qdHQ9yVu0PyRg750_vs.mft
Manifest number: 10C0
Signing time: Wed 26 Jun 2024 06:00:44 +0000
Manifest this update: Wed 26 Jun 2024 06:00:44 +0000
Manifest next update: Thu 27 Jun 2024 06:00:44 +0000
Files and hashes: 1: YT1eE3n-qdHQ9yVu0PyRg750_vs.crl (hash: lq3TluWzRq/rmCnh1pfovehWyfZ9v1MraPwauhaLAIs=)
2: sokPXsQjqakTtocG5TR2TfBlkkc.roa (hash: Bwd3W6JTpDkJhn7hNs5BBypXqW4HUDq5FUSwer4+uFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/fd6070-9e0b-433a-8a75-7f73a4671a1e/1/YT1eE3n-qdHQ9yVu0PyRg750_vs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/fd6070-9e0b-433a-8a75-7f73a4671a1e/1/YT1eE3n-qdHQ9yVu0PyRg750_vs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YT1eE3n-qdHQ9yVu0PyRg750_vs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:53:21:d4:64:fe:17:f3:9c:d5:1c:60:50:16:4a:70:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=613d5e1379fea9d1d0f7256ed0fc9183be74fefb
Validity
Not Before: Jun 26 06:00:44 2024 GMT
Not After : Jun 27 06:00:44 2024 GMT
Subject: CN=d1a1998028c8c488cfce475a3910770b8670a87a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1e:70:40:ab:f9:84:c9:84:f6:0e:38:09:68:
89:55:9d:bd:1e:b3:f7:19:d9:19:42:0f:ee:8c:3d:
86:ea:90:8d:b6:a5:57:8c:e7:03:d2:6f:09:c0:04:
a2:c8:ea:dc:e1:ab:e3:30:3e:75:22:ab:5b:09:4a:
2f:a2:a6:64:6e:97:8a:5b:21:42:ad:1d:5a:85:ac:
28:b0:3a:1e:14:8f:4a:6a:3f:84:6f:5b:20:b9:79:
bb:85:30:09:87:67:a9:58:56:30:b5:da:ad:ce:73:
2a:0a:1d:1a:7f:86:b2:55:30:17:0f:38:e5:1c:97:
0e:c0:92:ac:73:1e:42:1c:bf:b2:68:f8:1b:e8:d7:
21:e3:79:9c:d5:25:87:d0:af:80:83:96:27:90:48:
46:b6:37:32:8a:4d:19:77:53:06:bf:ee:96:74:a3:
f5:41:4e:46:a3:1b:db:ae:5c:dc:82:62:f7:2f:00:
4d:fb:db:90:4d:cb:77:52:01:9e:c2:28:6d:c6:44:
59:72:61:89:fc:01:46:c7:62:70:56:20:18:23:a7:
12:a7:55:48:a2:2c:c8:c4:27:d5:96:d8:1a:85:46:
af:09:68:d8:f9:40:2c:0c:e9:f1:da:c2:04:6b:c6:
16:2d:fd:72:63:f7:d7:ac:4b:d4:c1:04:93:c7:0a:
f5:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:A1:99:80:28:C8:C4:88:CF:CE:47:5A:39:10:77:0B:86:70:A8:7A
X509v3 Authority Key Identifier:
keyid:61:3D:5E:13:79:FE:A9:D1:D0:F7:25:6E:D0:FC:91:83:BE:74:FE:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YT1eE3n-qdHQ9yVu0PyRg750_vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/fd6070-9e0b-433a-8a75-7f73a4671a1e/1/YT1eE3n-qdHQ9yVu0PyRg750_vs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/fd6070-9e0b-433a-8a75-7f73a4671a1e/1/YT1eE3n-qdHQ9yVu0PyRg750_vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:df:ce:60:22:3e:e0:85:09:09:8b:5f:8f:75:3c:5f:ab:bf:
75:08:cf:e9:a1:f1:a5:4e:bb:50:fc:97:c2:99:b7:cb:ed:55:
2a:c0:a1:82:a8:8f:9b:69:f3:44:4c:e4:9c:08:b8:ac:b1:27:
10:a0:74:16:fd:00:ad:6e:ef:b1:74:63:6d:76:bc:6b:0b:1a:
61:c7:58:62:ee:9d:b7:a9:77:e0:6d:54:55:f8:1e:72:95:9c:
84:9d:21:31:5f:ca:58:fe:37:d3:4a:51:a3:76:44:c9:f5:18:
d9:be:9c:63:bf:ec:c4:59:80:2b:51:17:af:56:3b:43:cf:4d:
15:c0:11:7d:cb:2c:8a:cc:54:8d:6f:ea:ff:78:a0:00:c8:de:
9b:dd:eb:85:67:b2:1e:ee:cf:09:a2:3c:77:59:76:5d:36:11:
cb:f0:ee:97:e3:31:da:4a:5e:47:ba:b5:2f:c9:c0:9e:48:a3:
42:7d:22:67:a6:c4:7b:7f:e7:e6:69:a2:e7:ec:35:cc:a6:14:
c7:60:b7:ec:34:47:08:cb:72:47:91:61:f9:59:46:c5:3f:25:
64:d9:ee:71:10:e3:51:59:90:d8:86:6e:2e:57:c4:14:ea:31:
a3:ce:68:fd:50:61:28:da:a6:60:cb:23:a0:b3:86:ee:12:53:
17:1d:92:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 10:02:40 2024 by rpki-client on console-ams.rpki-client.org