
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.mft
File: OroRckcuqAJl0SmCln3gqLC8WQE.mft (raw, json)
Hash identifier: gOKDsFr8woL7/yFbt2LPiyQUttIOot8rm7Y8cueJHQQ=
Subject key identifier: 84:15:CF:27:DC:9C:B4:FA:F5:8D:0E:86:9D:87:58:DB:4E:C5:A2:20
Authority key identifier: 3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01
Certificate issuer: /CN=3aba1172472ea80265d12982967de0a8b0bc5901
Certificate serial: 0194BB293991CC35AE9CA7C3759B22B870AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.mft
Manifest number: 144A
Signing time: Fri 31 Jan 2025 07:00:28 +0000
Manifest this update: Fri 31 Jan 2025 07:00:28 +0000
Manifest next update: Sat 01 Feb 2025 07:00:28 +0000
Files and hashes: 1: 6BTZ5AaOEQekUYjUxJjubDiWWfg.roa (hash: Eh6waq+vwtUrAUXpLnHirNMkZ/QKST4EehD+sMDaTTU=)
2: 900joE2kII87-kVZQYJE9AVHaUE.roa (hash: 0o1fmx1wkON/yzQU3eDlgv0XvPCaxuqScr/6FHEDSAU=)
3: FXMeaT7mqLaeoQKo6gjW0hUo-Kg.roa (hash: ai3NnXxTZaMRdq2X8gaZ6slmnlshdaCfmTM1E9B0TBc=)
4: G71nm17nOEzUWw1GLyO7Zfj_lkU.roa (hash: r0m4YbLwwtUtSb9XhbM+KsB7fqF7UQjjTclZT2Fc14A=)
5: JBDZ5Omk-dFxCYBySxy03bWCSP4.roa (hash: Mi1MXsCOtN7hOmiWrHBSy05DtnpW+MAaQ+3qt5iOnkc=)
6: JIOTHuHxMtqBMx5mXgc6EZ3pd2k.roa (hash: DCxRs8r4ffmbTDh+ON4DjiCp8BK/u4NKeBfbW9CrT2I=)
7: JLwtTQi8VNVHhaVDu0kN5D34KjI.roa (hash: 8veoK+i1W9Fs1rw5NS+3eYVP4YbxUV5xVG3SSE+qpqo=)
8: K6NvXWxeieEcpm2hNIX3E8yWnCc.roa (hash: houDODyvcrrQkM+mji0MiXPbIgylwDAksDWSdz1YXUE=)
9: LH8IHsZqoBAnHXbiWnl3_OBv-14.roa (hash: 26G+CYwhBK1WMF4bxi0+XDtnSZ5llQadHqUlBLxpZ4U=)
10: Ln8QlB3P0RX7C0x_g97ovwG-MN4.roa (hash: 8wye3Q/ZQvQqLzNWOjfsPRuB58YYCzfOe1zTV5GvyPs=)
11: OroRckcuqAJl0SmCln3gqLC8WQE.crl (hash: yI47eD4J9i/In2Xym6NU9NZm9CdBUsh8PhDt8Y1kWrE=)
12: P2R5KI0mfa5ZtHzhHcIf8tqbscg.roa (hash: Ielj2DMfogWo7KfHt7oy3eF4WhAcJoLdahmXcEPW/XA=)
13: RqNdFo0Q6Dx3SC6ObRGFzkVQBi4.roa (hash: OrI3ji3m8A6uA9gfybbbMlud3mHSX6x2yzZDFJ/KxNs=)
14: asX4JxZY70Wh1TkIKCgqO_mMec0.roa (hash: UvUECOYX9pZrR+BBRmekI4gAoLk0RMd4U1+0xPQqJW4=)
15: dfVrorkgDXq-b3-QlttQA8sgW4w.roa (hash: 5H66iIzqCMGoksSoQLOuKiVcrRxOIQ4J1jOJkX6At50=)
16: hs3PS0PRyRLIwptbOrxYgVXbpUk.roa (hash: EMDVPaUHTTvlVBnvbCHPVNncgqYud935PafdYG6UmCo=)
17: k44Mpa9GcJ6dnuXPl0nYSwqip6I.roa (hash: pwXmLZKe7pdmF7xytwQTGPruNvJ7hi4Xv4R9xq2KjQc=)
18: kW066m9DXa5QVOUSyinFWrQGR_k.roa (hash: qDkdXP2dueHR9dJeUVzMjqaWnTwJkS158Rm7QFLdZvQ=)
19: ljrsKkBLXJvYvcdZuX8JWasQFe4.roa (hash: vBmx7C2e8PSmXtfZdupHaynZdSjLgLaFpSb8R62FCP0=)
20: nkeXVKF6zzQCYL4BHAHTb24meB8.roa (hash: pcIicCRvZsHCwkYq5WwVoVzOQXOI/E6R317Mea33uac=)
21: w5_xzg68siU1xwo2TRNx9ptuZUg.roa (hash: dz0710YGDAoK//WB0wD9yVfkTEtuo0ioNy/ODQjxKRM=)
22: zMLH0Z0n_ZfTiWpxjWDNCBm8FP0.roa (hash: 1zSkkqDH7rhfTGP6CblxxApp8yosaiHxrLIiFpb9d40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:39:91:cc:35:ae:9c:a7:c3:75:9b:22:b8:70:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aba1172472ea80265d12982967de0a8b0bc5901
Validity
Not Before: Jan 31 07:00:28 2025 GMT
Not After : Feb 1 07:00:28 2025 GMT
Subject: CN=8415cf27dc9cb4faf58d0e869d8758db4ec5a220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c0:d1:e7:87:62:f9:f7:fa:a4:81:6f:32:be:
39:f0:b2:1f:a7:40:6c:73:d6:d3:f4:25:22:e1:eb:
70:a8:42:ef:c5:1f:67:64:73:43:93:eb:e7:f9:23:
20:e7:b9:fc:97:b4:79:48:4a:61:df:88:54:8d:f9:
6a:3c:d8:16:74:f2:16:33:ae:c8:78:a9:84:92:0b:
5d:40:03:90:a2:1f:2a:82:b6:f7:2f:50:7e:91:84:
85:2f:2c:b7:ea:ca:ba:be:dc:8f:f6:fc:e9:9d:75:
92:8e:06:19:82:c2:9c:93:62:15:46:f7:71:87:7f:
bd:b4:1b:8c:69:30:26:c6:2f:bf:be:20:3f:e1:3c:
71:58:37:51:2d:a4:60:85:53:90:92:0b:2a:bf:10:
9b:ba:5a:1c:b0:46:57:dc:f2:00:20:93:35:a1:c7:
27:d0:24:76:12:fb:9e:e1:e8:29:dd:04:54:f6:18:
4e:34:a2:27:8c:78:cb:56:f0:69:af:d3:1c:e2:56:
1b:11:65:16:fb:ff:9b:31:13:86:87:e1:4d:6d:d8:
9d:57:8c:69:3d:24:18:1e:05:7b:04:2f:21:6a:12:
be:33:67:b5:e8:63:6d:0d:b4:7f:02:86:4f:f1:1d:
58:cf:dc:94:e4:c2:e1:cb:88:95:fe:8c:a5:da:25:
87:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:15:CF:27:DC:9C:B4:FA:F5:8D:0E:86:9D:87:58:DB:4E:C5:A2:20
X509v3 Authority Key Identifier:
keyid:3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:0f:ee:36:d0:03:f7:65:64:06:cf:86:b2:c4:9d:09:e3:2d:
fa:78:38:3f:b5:77:cc:71:1a:93:78:9a:e9:86:ba:27:7e:c6:
91:66:ec:91:9e:b6:7a:e5:68:ae:e3:7b:34:f5:83:1d:44:47:
75:48:41:bd:9c:48:8c:84:7e:30:af:37:e6:0f:84:f9:0e:85:
b4:0d:7f:50:e6:1a:61:ac:d2:19:c0:1a:8b:f2:14:f3:e9:56:
a1:9e:02:5c:d9:68:71:73:02:03:a3:68:c5:c2:90:a2:6a:8c:
6a:a8:74:7f:f0:31:a0:00:1d:23:58:94:cf:dd:f3:20:15:d2:
41:a4:76:06:ea:d5:8f:a2:0d:c0:28:a1:c7:84:a2:2e:df:b9:
40:ed:a5:fc:49:c9:3f:48:35:18:8c:d4:c2:cc:49:d9:26:3f:
9f:3d:a6:ab:c6:18:d7:b1:95:24:18:38:f0:a6:2e:2b:be:7a:
c5:7e:d2:db:d6:f5:82:0e:26:91:81:b9:aa:5c:14:30:8e:95:
22:79:5c:cd:c8:3a:59:35:aa:63:38:20:35:5e:4f:11:a0:3b:
db:bb:71:96:47:c9:c7:12:59:1b:c6:13:0d:b5:bd:9e:75:f0:
80:3c:9b:87:aa:e4:bd:00:db:1a:2f:f3:cd:7c:78:95:08:5d:
9f:5e:8a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:34:37 2025 by rpki-client on console-fra.rpki-client.org