
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.mft
File: g1vJu1R-J3iNIhvIu9X7AuAkSA8.mft (raw, json)
Hash identifier: XSgcQIUBo+ZryAlzOV0UTCrBQqDqV386Lz5yiN8EooY=
Subject key identifier: 9D:6B:89:79:96:89:4E:17:40:67:08:17:D4:AB:0C:C9:DF:21:F2:2F
Authority key identifier: 83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F
Certificate issuer: /CN=835bc9bb547e27788d221bc8bbd5fb02e024480f
Certificate serial: 0194BB96C4DA6B44159A9C8589205F54F7A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.mft
Manifest number: 143E
Signing time: Fri 31 Jan 2025 09:00:07 +0000
Manifest this update: Fri 31 Jan 2025 09:00:07 +0000
Manifest next update: Sat 01 Feb 2025 09:00:07 +0000
Files and hashes: 1: 0RuxYCs-ZR77zbS2FKRWZztVK0Q.roa (hash: jSdqasNIGwiL/SkcUsG3UsldrYCjzkxpl4GYnjGAclY=)
2: 4jaGZdOEYrPblfps0YpbkEMcNKM.roa (hash: G6P2F/yQN3KTaexhThEC0j4hTEjLeDNZKdLyv/NC+3M=)
3: 4sVuDUHUhuqv4fotP4t5XZJrll4.roa (hash: ObxWj69OtudWkX1fVAGgmn9Z1mlrHpzlXmvK45aoIXM=)
4: 7GopD--APCfXYx9PjcNYgXNDy2A.roa (hash: KIrKeJz8KA76goRAIf/fblPP4cBUagZY3WoTBQ0WHf0=)
5: 9WKsimr4vOF_rpwncL6ruOF18YY.roa (hash: xH/VPFrvixhNlhTD8hrquKiIRK1N1S8LQ39X4kWgDbU=)
6: DXe2QCeg44oSwSjch2B9InQFKjo.roa (hash: K6OnR7hdUcOFhOpAS0quOhv9TOcSZTKYV24C7+i6Ykc=)
7: Dtu0FUQBTwq7nMetgTpNdxrJrUc.roa (hash: 2+O0fEd5VicZaDp5QDSOVxRQGaFMgRpvuxLyoCSaMdM=)
8: QP6HFrGNHPgiMzuluLrD65g0i-A.roa (hash: l99hGpVbTIt/+tvuvWJuKHSUe5o+u4epf35vOiEw4Vc=)
9: Zg9LMTVlLMAMzOgaRCOZsvbj5YY.roa (hash: 9YC0kyDqEXxaDbjw/WFc8btR+dLVmBtAW2yMy6GIxwY=)
10: ZgkKPqbv9uiQkq9_E4cqyYGcFls.roa (hash: m/krRcpOPe54FnCcamtSok5EA+fs9cArfGttZA4+K7A=)
11: bL6MKH62F5NiojNDkRLOm7t1V50.roa (hash: VYSTyygBbvuJ4ferc/WHT6RrnYr38adoWbgUflVODE4=)
12: e8sw3NSVdW7RuwBxKGlVO3o7vs4.roa (hash: vas7IbvKA+23Qxw1IFtJvSTpfV6psv5Y/rS0T6Oox/Y=)
13: g1vJu1R-J3iNIhvIu9X7AuAkSA8.crl (hash: /mzUj12Mxhzi+Qbyyla2EBxFnuRJg7KIF8w8qeuK4ic=)
14: gY7BKIjwewKZZlWFSHLcdLr49NM.roa (hash: i0lchkykJ9yatPl5KViR8cy+o8YUx9lts6RmnA23id8=)
15: lJKzT4vHn4_RNrGZ7RT83InY1Uo.roa (hash: 1M7WfjegVNptr4D+2mX5sIz0gMGS0MMNadIY7FGYqNo=)
16: ndVpFTiV-032z1oLz_wixEvXGiw.roa (hash: /HnhEZMMk7Eh52x99XbC/u8H+8NvDyXM8aky5jw29mA=)
17: pyjq9eTJ16BICExepyy4hHdzJBY.roa (hash: 1qL3K1S3vi6SKpgKIPcn0F7XdPnvihL3lLBBWXETN6c=)
18: rvBoaYSrYkbtJTtOKbhTdATaFJM.roa (hash: LE4FJA/j7M053Yg4eAl5SJ9uM0sRd4GVsWhWeNGGUv0=)
19: z4wc-XAByuKg9_4TbtczZujvcTM.roa (hash: k/l1khmraEpcZ2ZtOkT01pmuwNGz8qHwS9DZWQhB7Ek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:96:c4:da:6b:44:15:9a:9c:85:89:20:5f:54:f7:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=835bc9bb547e27788d221bc8bbd5fb02e024480f
Validity
Not Before: Jan 31 09:00:07 2025 GMT
Not After : Feb 1 09:00:07 2025 GMT
Subject: CN=9d6b897996894e1740670817d4ab0cc9df21f22f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e3:8f:ab:52:1a:3d:a8:88:cb:48:a0:b2:8b:
ae:c5:ac:d8:55:91:09:9c:a6:de:f9:3c:3d:6c:8e:
4c:98:79:17:26:d1:17:ab:da:bc:4a:ce:f7:ba:c7:
31:bc:64:67:df:f8:f6:30:5b:c9:f4:b8:59:e2:fd:
0d:cb:6a:0d:21:7d:b3:54:57:d0:40:a2:48:09:6e:
50:d7:0f:77:38:01:2b:8a:b6:cc:95:fd:bb:86:f1:
77:44:14:f9:c8:71:44:20:e1:e2:85:24:5d:55:d2:
c3:46:e1:19:a6:96:3f:47:24:b6:58:a1:b7:88:aa:
f2:a5:3a:3e:44:c4:2e:40:b0:8f:55:c3:b8:12:2e:
8a:8d:05:b8:9d:3f:6e:78:3f:f2:85:95:21:cb:28:
4e:be:df:3a:f5:e5:ee:84:de:19:1b:36:c2:c4:20:
f8:09:43:05:bc:7b:04:19:94:0e:df:52:33:70:ad:
3f:1b:ce:b4:de:a1:70:15:a1:22:e3:2f:35:13:3c:
ee:ac:8f:1e:8c:5c:1c:05:7c:36:6d:32:a7:c7:c5:
f6:7d:34:9b:ab:7b:93:d2:8d:5f:4a:6e:f8:93:36:
cf:02:d9:27:bc:ec:94:af:40:ce:25:ac:4c:76:e5:
03:76:fd:84:a6:a5:45:8e:36:92:aa:eb:ec:c3:8c:
59:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:6B:89:79:96:89:4E:17:40:67:08:17:D4:AB:0C:C9:DF:21:F2:2F
X509v3 Authority Key Identifier:
keyid:83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:9d:a6:40:da:d1:38:bc:be:c9:28:7e:9e:00:3e:c1:68:14:
2a:f4:c7:2b:6a:ac:be:8c:d1:74:6d:86:11:c6:65:a2:ab:ab:
c9:d4:21:2b:f8:8a:8b:86:4a:b6:b9:48:94:77:c2:6b:76:11:
7c:0c:26:40:d5:33:47:bc:e3:93:af:e8:66:c3:3e:ac:43:ea:
9a:b0:8a:3e:d5:17:1f:17:f9:70:d0:36:e2:9f:17:6b:ca:fa:
42:00:42:94:f9:f4:c5:51:f4:a3:d2:65:be:66:c0:d6:54:71:
3c:a7:52:a7:e5:65:b0:77:43:d6:f8:c6:04:32:64:3f:64:19:
02:dc:58:34:ec:9b:ad:8b:d9:a1:32:0a:20:9a:bd:ca:94:45:
97:68:fa:75:02:5f:72:6e:80:b8:e2:48:84:45:5b:7e:b7:e1:
c8:6f:e0:dd:82:13:9f:30:ef:17:f2:88:c8:d2:ad:26:2a:e7:
25:35:15:c8:17:72:e7:36:3e:b9:18:b5:60:37:8e:dd:f9:f3:
93:ab:dd:45:4e:95:dd:a6:40:c1:cc:7f:2e:6f:cc:a7:bf:5b:
fd:14:16:ba:96:94:af:c4:97:fa:c0:d7:ed:96:02:01:7c:b4:
2a:a0:4b:d2:33:d9:3d:87:35:95:b0:3d:6c:01:5f:ea:e1:42:
4f:58:9a:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:34:57 2025 by rpki-client on console-fra.rpki-client.org