
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft
File: gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft (raw, json)
Hash identifier: 0+0nQz9qAJ3ZfkHC5ZWnFJBiQ0JNndSAwkACxG0UpTs=
Subject key identifier: 5D:46:B5:7B:B6:D8:CA:29:52:A7:23:EE:CB:55:98:FE:71:0F:9D:39
Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
Certificate issuer: /CN=826605b4d27f13968e8794e6ef091223748817d8
Certificate serial: 0194BABB20F04DE76511A02B56CF6EC35A74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft
Manifest number: 148A
Signing time: Fri 31 Jan 2025 05:00:13 +0000
Manifest this update: Fri 31 Jan 2025 05:00:13 +0000
Manifest next update: Sat 01 Feb 2025 05:00:13 +0000
Files and hashes: 1: 1-VklZtGfRDIv9KG76liQR83-to4.roa (hash: edjUQqiISv7wfLcTeAAL1KB6ZQeIyU0cQcVsfaTZHug=)
2: 1-VoUxB16sFUpabKYYCaz09m0veQ.roa (hash: jBzaCnK55nBqjAgFzIbfoxSdnwHfF10JuSwdasZO+DQ=)
3: 2o5lxS17-TuelE1Eo35Ac7B5RQI.roa (hash: r0p74cT43WIPOHKiilDFyNpmu7ELpn61XsWmhxelkQE=)
4: 4locrxHyX6UeBrTCDBKq3fJjIhU.roa (hash: 57RX/2aGUXBNZq4wqCsxDNWTaoMCixeTd2hAfdAzOz4=)
5: BD48RnLKhQNQSxwnTl5Ut3DTaaU.roa (hash: pJeqPcMqpwy5eeOtqwiuelICHhHnGVKN+Sk6N5/HqY4=)
6: C36u7KfhCFOa8XdN016Wy-ytnzU.roa (hash: NBROKoh3VnJzs+HifzEAW5oRrothQyJwHy1p6FD7qNw=)
7: C7zRH1Jrw7K4qkebKM5gx-PMLHo.roa (hash: V9v5Bwq8jAUyaBzFj3ac3ordtwBsUduLjuOy3ng7dlw=)
8: Fjpn_EhgQWiM2WTKdhOHYUup0SI.roa (hash: avJT71Pm6rETaFlOLm5bUihbILmnzENzyrtgZ72o/yM=)
9: G7qOVLwRQlkEUG0XGeZBugA-InU.roa (hash: ra5AqUSh6Ku+Y4KrCiBgkUNOkURj3FGVxxn+YcD+2go=)
10: HcWreomVamO6igDbYdaHvUovBJE.roa (hash: C0xWzWg0wDFX2tcQ+cbN6FO+9kOOnR2BAdkUaR6U260=)
11: P_H5I901p9uT4TULpcfUWpnfgxc.roa (hash: 5nYschX/VQUuVCl6HMxh2V0MkBgtU9xLQ/f2zZLAuzo=)
12: WGNCuqp1cDIkFF52cq8hYpf58EQ.roa (hash: xEraMYTX5Ht3coCGqcmLdPzdxd+9Ax5IlYiKCRT58TQ=)
13: ZCBuvFzddC1aEq7LaHN61cL09t8.roa (hash: 4hCDWeY9A+fW8Nngm3WDc5TUzf0eL6aursZwqmLTRq0=)
14: cZ1VjXvm2kSaXyfxbG6DWvRG8uk.roa (hash: 5UVRN3VFRKsZKsanW2WSNXa8tl9mzCzer8YNhv2aLws=)
15: dUDoTikRrhGqdHuoRq6nJ22ijx4.roa (hash: CZEX4tVYDKiuZFQCXPesSFgD4Ewr620I1xlB1PmSx34=)
16: dmn9WWC1cOw8-syFOH8rVvRUYcM.roa (hash: yTiBT+PxdCbTZTX/xwUlIfZpsEgNm89xZp8RsHoNwSE=)
17: gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl (hash: enbijQAkv6sChVgfFiWdTmy43FYOeGBZXzN4Qwn5qog=)
18: kY7v-kZFRWVPM0lT7sYWUtUQwD4.roa (hash: 2dyjjHYflFomwOu3+s5WMQHZPLjaXr3S2KB2kA29nis=)
19: l_Ry5FOo-OiUKRZ8cthrttm-F9Y.roa (hash: NLd7UhunGsXkE5IXHeIn2nj/Zfr5LqW+H7ZS9niwIqs=)
20: ltR8O9eT6M3oAU_gxp7pcWB8yvg.roa (hash: 5GhoLYlXlz1l2KGazssc6/9eGWn++CM1C2ZU91tWclU=)
21: qE_tcfupauq7XdXPqb7KSreupsQ.roa (hash: 3EJWNtY+Qhvm2DJ7H+6VvM2/OxiFGq47XqF2H0oCbzM=)
22: rU4-fu2i_puERNzqsZusptLEhxw.roa (hash: oUOtoTz5sCAfhIfBXkRUrvoxsTQJBic3IEPNnf2jOds=)
23: sjGNR44IPNB6YOE5kbYUMAmAQ2c.roa (hash: sEDrCkJksXTVWaboHfAfeMVVlrdjOtJNi3rs1KmLVVI=)
24: tl_UOyVyvLiZ56go_zbUXu0w1RU.roa (hash: xLobW8IreRrUrnxI34BPjIORJjKfBMmVKGYJD5SGe5M=)
25: vQxaXFFye15rTmMFdspwW0lZXXw.roa (hash: WNFAIP/uQ0hPHaicgwOuJZAO7BjrvK7w6Kv17nLJESM=)
26: whutfHrGbrMoUBiwqU4xPdyhmA0.roa (hash: IJxHyhxFaVshf8NMZql5Td0GAvIXYopqx9xBaH+8idI=)
27: zCFasBm0EYXOg5wMczyui1g8P7w.roa (hash: vMOSU2/g4EkiB4e8USpsHbmF4Ns22ciWga/oRAR99+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:20:f0:4d:e7:65:11:a0:2b:56:cf:6e:c3:5a:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8
Validity
Not Before: Jan 31 05:00:13 2025 GMT
Not After : Feb 1 05:00:13 2025 GMT
Subject: CN=5d46b57bb6d8ca2952a723eecb5598fe710f9d39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b7:e8:0e:b9:4a:81:2e:b3:f0:7a:5b:07:0b:
5f:f4:60:37:6a:ff:fc:ee:11:89:d3:92:11:87:2c:
8d:a4:65:a5:0d:65:b8:35:ee:5e:b4:85:14:1f:ed:
a3:36:63:08:d6:f1:2b:31:14:90:38:de:b2:b1:f8:
48:e8:6a:3f:32:4a:7b:af:29:0a:44:27:b4:e4:81:
ce:01:7f:96:c2:c3:81:b3:b1:f6:67:7f:8c:42:d6:
5d:62:5c:fc:31:8d:97:c6:3d:29:97:e9:7c:f9:16:
22:4d:0b:4e:db:04:f0:d6:72:2d:11:a6:e9:0d:62:
ed:9f:8e:b1:be:5a:62:ff:9f:da:f5:78:68:51:0f:
b7:ce:46:d9:b0:ce:6c:d8:81:16:84:d3:4e:57:a1:
04:3c:6f:07:b0:80:b7:49:f2:6b:73:60:30:f9:92:
7d:24:bf:26:47:9c:b2:67:6a:25:26:41:2a:15:bd:
fe:88:f0:ab:14:38:de:36:e0:35:35:4f:3d:32:5c:
0b:79:29:4a:bd:17:e5:44:23:4a:89:fd:c0:c4:54:
85:16:c8:95:de:b5:cb:3b:bf:f8:da:cb:2f:ea:08:
0f:4e:aa:16:c0:18:a4:1d:c8:37:47:52:f5:f7:e5:
75:3a:33:f1:a5:f8:bb:1d:85:84:aa:db:25:2f:55:
21:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:46:B5:7B:B6:D8:CA:29:52:A7:23:EE:CB:55:98:FE:71:0F:9D:39
X509v3 Authority Key Identifier:
keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:8a:2d:a8:86:75:35:e6:51:42:b6:db:a3:c5:2c:71:9d:8b:
cb:dc:15:fd:c2:d1:c2:82:1b:e4:41:8c:c2:06:33:86:3c:7e:
a4:f2:01:72:d3:07:ad:dc:d0:a2:cf:de:85:ad:47:12:1d:c3:
9c:3a:49:53:d1:20:0e:b0:68:d9:bf:7a:03:74:21:e1:d5:3f:
62:c5:ed:e2:54:55:fe:85:c3:31:78:ef:7b:b6:38:87:ad:b0:
7a:e0:e0:ac:c3:67:f8:d3:0a:cf:1c:36:ba:e1:cb:6a:4a:03:
99:3f:88:9e:b7:18:60:97:32:73:c7:91:c4:ba:c6:9e:c5:d7:
53:78:b9:3e:44:76:b8:d9:c0:9c:8d:5f:f0:a4:15:fc:f3:04:
41:42:ef:b8:99:a1:e1:f3:92:f7:0c:4e:ea:1a:2e:56:ad:d6:
3c:6e:0d:fb:54:18:fe:f2:51:68:36:18:35:ac:39:e1:b5:f8:
6d:87:96:58:3c:fa:22:b5:d2:b4:04:67:89:32:f6:96:0d:ac:
b7:bf:a1:eb:aa:14:40:b3:ae:2f:41:9e:97:e8:a6:40:33:55:
de:11:46:45:a9:76:e9:ae:eb:56:4d:f5:77:85:60:61:53:67:
44:2a:f5:7d:43:e3:10:44:7e:5e:aa:e5:a1:86:20:39:e6:11:
db:6e:f6:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:35:55 2025 by rpki-client on console-fra.rpki-client.org