
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.mft
File: 7W2p5BaG0hwSeZyOhLJ0qoJBUIw.mft (raw, json)
Hash identifier: +qNHBIHnM46oi/tP5MGIviEa1rGdx2e3su8pD0ksvDU=
Subject key identifier: 9F:E9:F1:10:F6:5D:0F:22:D9:06:EA:2D:33:1C:51:B8:93:E0:08:BF
Authority key identifier: ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C
Certificate issuer: /CN=ed6da9e41686d21c12799c8e84b274aa8241508c
Certificate serial: 0194BB2988A2012C730597507DEAC38B17BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.mft
Manifest number: 143A
Signing time: Fri 31 Jan 2025 07:00:48 +0000
Manifest this update: Fri 31 Jan 2025 07:00:48 +0000
Manifest next update: Sat 01 Feb 2025 07:00:48 +0000
Files and hashes: 1: 3mF0o8ObxMG1vPes91bWbw0tnsA.roa (hash: UJhMkfjPft/QeBcE4Z26qo9FCGStMKR3bjVpARVrtgI=)
2: 4Kx-vHuWGicyF3SMrQ7KSs4yNdM.roa (hash: /Y71/tOsnj44V3PPOqV8jyNAecsoDys+kyFhb/Na/TY=)
3: 7W2p5BaG0hwSeZyOhLJ0qoJBUIw.crl (hash: pKzPa4RIO1wAxoYN0wU4zkd4fGAQztLQcl5TexIpofI=)
4: DnWgBwSyPonu4ANiqDXcSFS5Sss.roa (hash: l2btTGNwK1K4Uvs9UU8E5RV5U3WcxEKUPo27wW3zozU=)
5: Kwj4i4rNyzJUOvELNWnXH3R-jw4.roa (hash: FGt3z3IlUQQX3L4JhYd4ue2NJONgSL3qDjZtT83LgI4=)
6: ZZNCkXLYZ6Y1vjDn726elCnAwo4.roa (hash: ZD/D10TjxvxPnphswHr71BuG4/cKcdw6xIt+YdeWXm0=)
7: Zvza_AEVzZujcB3uf3ENKXzKqQM.roa (hash: 57giD/GidN1QIt0FbCVf8xCexXWHCYg5Vqj76NoF+sc=)
8: _ERs_WqsyKBsbDNrpF7678MzuE8.roa (hash: x/e8FoqvrkwlrxEHgqowJDwm2nzTqRfGs9L2jLZX1F0=)
9: mCecvopZfXG3WIu7Fhw-f_4DPAk.roa (hash: MecNKHL4HsnfTECbSBEtAo1C5aYtC+yZbiahatmHpI0=)
10: tkwaNKS943lqIrcwP4wFPu7CmLA.roa (hash: LUFlc4a0Hl1DhNUuKnQE9p25tD0hoETIl0Xrym01FDA=)
11: xiXR5CA0LknEtnJqptzk0g7U8nI.roa (hash: hnOXUmiCqjx6p2C6Uol9CSOlJTYzXWkQvpMB/lW+MX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:88:a2:01:2c:73:05:97:50:7d:ea:c3:8b:17:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed6da9e41686d21c12799c8e84b274aa8241508c
Validity
Not Before: Jan 31 07:00:48 2025 GMT
Not After : Feb 1 07:00:48 2025 GMT
Subject: CN=9fe9f110f65d0f22d906ea2d331c51b893e008bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a1:de:31:a0:bd:d0:04:7a:19:0a:4d:69:57:
46:da:67:23:47:c5:33:9a:26:b3:c3:ed:54:ce:9d:
e3:1a:00:70:de:ce:7e:f9:4f:e0:20:1e:b5:c1:bf:
34:90:0a:40:95:bc:62:09:5c:63:4c:d3:2a:b8:83:
db:75:17:f9:76:31:9e:1b:6b:c5:58:5c:8b:f8:7c:
33:e0:03:0d:bd:af:1a:55:23:be:08:61:14:65:94:
81:58:e6:1d:63:6a:54:3a:7b:56:7b:1c:7a:ad:90:
e7:f5:53:fb:20:ab:b8:48:f8:7c:3d:13:b0:f8:28:
84:f7:c8:05:ba:68:ee:70:35:01:c4:a8:59:8d:b8:
c7:3e:4e:f5:ea:74:0a:e5:2a:6d:c1:86:a8:1d:18:
09:79:87:ae:15:c1:c7:ce:8a:33:99:f2:6b:24:89:
04:54:77:d4:e7:5e:0e:fa:a8:bf:fa:17:36:85:a8:
f3:96:79:13:bd:7e:48:6e:a4:1c:a9:51:c0:5b:6b:
56:9b:db:48:13:bf:57:c8:8a:1b:e4:f3:87:d9:30:
bb:93:6a:cb:33:cd:1e:d2:9d:54:01:38:27:cc:8f:
d5:f7:17:b2:ef:c0:82:0d:5e:d4:7a:8d:4b:7f:3e:
9c:62:87:a2:61:51:9c:af:0b:e9:ea:cd:d7:01:21:
60:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:E9:F1:10:F6:5D:0F:22:D9:06:EA:2D:33:1C:51:B8:93:E0:08:BF
X509v3 Authority Key Identifier:
keyid:ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:00:ae:50:14:37:d7:e2:c8:a6:55:91:e5:75:18:cb:ee:dc:
6d:9c:f4:da:23:f2:54:78:76:95:1c:35:e4:b5:53:15:62:5b:
f9:51:36:3b:57:04:5e:a7:37:06:3f:a0:58:9c:d6:b1:3d:47:
26:f2:e3:21:25:42:21:80:82:85:b2:14:36:62:d6:3b:60:2e:
99:99:c1:87:16:56:fe:1c:ea:d5:a9:52:c6:48:3e:2f:89:b3:
a6:f4:8e:c9:03:40:84:f5:35:78:3f:30:8a:09:f7:11:75:5c:
b8:a9:5a:35:cb:bf:eb:61:81:7e:17:16:39:b1:87:c6:0a:14:
22:e2:ac:4b:d7:64:18:bd:59:a0:8e:88:ce:50:c7:62:6b:29:
05:b6:da:02:13:4e:de:cd:50:c3:e2:6c:b0:54:f6:eb:4e:5e:
de:da:cd:e8:2a:b7:43:18:c5:48:30:2b:73:d1:63:27:4c:02:
2b:d0:da:8b:67:6f:4c:bc:13:ed:b2:39:62:a8:bc:2c:c0:af:
8a:82:28:af:38:73:4d:75:6a:53:d0:06:0d:34:61:36:fd:19:
71:c7:95:b8:fe:74:44:4d:06:43:13:e7:ed:cf:ee:e2:98:f0:
54:41:28:d7:a4:81:27:f0:12:d5:82:98:5b:72:d2:f1:07:f4:
69:39:3c:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:28:19 2025 by rpki-client on console-fra.rpki-client.org