$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft File: KXxQjSOzgxW79FtybSIFCkYSe4w.mft (raw, json) Hash identifier: jFd0BI4w/QzaHjNWf/6lMUV/MwBSvUqaiMxxhNb4zSY= Subject key identifier: 99:CD:A3:76:EB:D5:6E:4A:F9:BD:E1:1E:7A:E7:E0:A1:DF:3F:9F:86 Authority key identifier: 29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C Certificate issuer: /CN=297c508d23b38315bbf45b726d22050a46127b8c Certificate serial: 01967C7C5ADFC675A3D9EDB290706C0A9C84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft Manifest number: 151E Signing time: Mon 28 Apr 2025 13:00:46 +0000 Manifest this update: Mon 28 Apr 2025 13:00:46 +0000 Manifest next update: Tue 29 Apr 2025 13:00:46 +0000 Files and hashes: 1: 6DiazTfSLwiU3nHVXB2_ipX3pSI.roa (hash: GgVQ0c2h8QmAuSALS7AfweuOCzU4KJ/qThY066+SiL8=) 2: F9Dj4BH3DTiBJqZUn9Gq6zuqgzw.roa (hash: PvC6qEA55o/ujVGgT7SwQI1kg6RiKLhNPwSFFwPuR5o=) 3: FM0AOR7qs5ReYOYfvDzPvyeOFF4.roa (hash: pyPxYA6UMvNM4UkCYSW/CeHul7I1PWvfOpcPGXbUI7A=) 4: KXxQjSOzgxW79FtybSIFCkYSe4w.crl (hash: hfLMtSwbsoFXMvaNhlAwluPV85nMZOqF4tCksg5N2Ko=) 5: LzFoDYPr7_0gEjtlfJ6xXw6t_lo.roa (hash: rXfhzDDWrE3BbdIp2NtDgdm3XDSADxRFIs8wy+p88S0=) 6: OPHuyxpO9PisbasiiAKtaHkvxVA.roa (hash: x3Qa5U665mgT3yS3jj1UddNty1CV91Oaf8NDM/bZhaM=) 7: kgi8mKAM2yCVgRH4L9W1E0GBctE.roa (hash: /x/rSNiAHNpL5ZxR6vbLMgxwW3ubNoY4GIMOdVAovVA=) 8: wN-88kHsfZoIQbMbBeQSvFTLUAA.roa (hash: TZn5hV31aDddpb82jvBnOx8ugm4e4LbJg3sHA8zL+QM=) 9: xDp3K5cwdwo-amBn4Z3yMMAdo3Y.roa (hash: eoBx0TZUtOUgkA8rEPSl3wkXkZ2dgXNZBSrXrhwvq14=) 10: zYd_cPkM9NVsX7bTQ07hSv4bWMk.roa (hash: 7m24y9mQHGr+u8/2znCaziY9Qt7M+iB4zeF7KEcBtdg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.crl rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 29 Apr 2025 13:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:7c:7c:5a:df:c6:75:a3:d9:ed:b2:90:70:6c:0a:9c:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=297c508d23b38315bbf45b726d22050a46127b8c Validity Not Before: Apr 28 13:00:46 2025 GMT Not After : Apr 29 13:00:46 2025 GMT Subject: CN=99cda376ebd56e4af9bde11e7ae7e0a1df3f9f86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:91:84:95:be:08:4a:1b:fb:67:04:3c:db:c8: 3c:81:61:39:b9:0f:81:fb:b2:0f:e6:94:6a:0c:48: 2a:2d:91:04:5e:93:d0:1d:98:34:38:0c:5e:07:a3: 1c:7e:cf:4f:2f:b9:df:22:5f:8e:b1:26:d7:b3:04: 27:3f:9e:bb:99:ee:51:f6:da:b0:ee:fe:57:d3:41: 11:cf:ee:87:ac:2a:2e:f8:8b:58:79:eb:74:85:ac: 56:31:85:00:27:96:4e:87:82:57:cc:67:e9:99:3f: 29:2f:46:d8:25:53:9d:52:91:76:40:18:e6:be:9d: 65:61:e5:04:12:fb:9f:01:dd:8b:a7:7f:19:12:af: ae:25:2a:ad:03:27:54:78:9c:ee:b6:1b:b7:ca:9e: dd:bf:d8:a9:19:80:99:a4:a1:46:64:8c:f0:18:2a: d8:4d:f0:35:a6:07:46:2d:b4:7e:76:30:cf:05:d2: 96:46:22:9a:05:7e:38:65:4b:3c:43:fe:3d:96:57: 80:36:af:9f:5d:37:1d:74:5a:8b:48:15:16:db:f8: b2:9f:30:66:7a:7e:96:b0:10:f8:26:4c:ee:0f:cd: 39:4e:5e:e0:97:9a:78:a4:cb:ba:4f:8e:a4:34:9e: 0d:72:1b:ac:b9:d3:0a:50:f4:b3:b0:b0:c5:17:33: 5f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:CD:A3:76:EB:D5:6E:4A:F9:BD:E1:1E:7A:E7:E0:A1:DF:3F:9F:86 X509v3 Authority Key Identifier: keyid:29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:26:4e:dd:46:2a:ae:12:e0:0b:f3:9d:03:e1:63:d4:c0:e1: 91:10:69:cf:0c:b6:c3:92:76:91:fb:9d:8e:16:4d:50:d7:7d: a6:0b:fa:51:f8:65:91:ed:ea:ab:08:45:73:7f:0a:4f:9b:71: b5:e5:67:1c:f7:1e:d1:a0:52:3c:40:3a:9e:ad:2b:eb:92:5c: 3e:cf:18:73:2c:0f:24:ca:67:43:0a:54:cf:c9:4a:3d:01:04: d2:30:3c:6e:93:a6:1b:ed:44:22:2c:4e:f1:a7:05:90:1c:6e: c6:4d:c2:8c:94:50:c0:57:d5:78:57:3c:d5:9b:f1:22:e8:4f: af:4b:f1:ce:34:df:b2:8e:c7:2f:d0:10:2e:b7:e6:00:32:4e: e2:22:92:65:a5:89:21:47:21:c6:3b:28:a9:e9:dc:d2:bb:7b: c5:f6:52:cd:a6:dd:d2:4e:66:34:46:45:5a:17:52:fe:95:18: 02:ec:4b:6d:63:60:c5:3b:3f:f7:9c:fa:0d:89:4d:c2:a5:89: 82:d7:fd:04:9c:45:5b:d2:ea:65:9c:f0:64:6e:f9:5d:63:da: 58:89:cc:de:3c:03:67:d2:4c:e6:fa:85:b4:71:3c:f7:2e:c8: e7:42:58:b0:ff:bf:dc:31:b3:5b:8b:42:15:41:2d:8c:a9:ed: 6a:34:68:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZ8fFrfxnWj2e2ykHBsCpyEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5N2M1MDhkMjNiMzgzMTViYmY0NWI3MjZkMjIwNTBhNDYx MjdiOGMwHhcNMjUwNDI4MTMwMDQ2WhcNMjUwNDI5MTMwMDQ2WjAzMTEwLwYDVQQD Eyg5OWNkYTM3NmViZDU2ZTRhZjliZGUxMWU3YWU3ZTBhMWRmM2Y5Zjg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8JGElb4IShv7ZwQ828g8gWE5uQ+B +7IP5pRqDEgqLZEEXpPQHZg0OAxeB6Mcfs9PL7nfIl+OsSbXswQnP567me5R9tqw 7v5X00ERz+6HrCou+ItYeet0haxWMYUAJ5ZOh4JXzGfpmT8pL0bYJVOdUpF2QBjm vp1lYeUEEvufAd2Lp38ZEq+uJSqtAydUeJzuthu3yp7dv9ipGYCZpKFGZIzwGCrY TfA1pgdGLbR+djDPBdKWRiKaBX44ZUs8Q/49lleANq+fXTcddFqLSBUW2/iynzBm en6WsBD4JkzuD805Tl7gl5p4pMu6T46kNJ4NchusudMKUPSzsLDFFzNfNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJnNo3br1W5K+b3hHnrn4KHfP5+GMB8GA1UdIwQY MBaAFCl8UI0js4MVu/Rbcm0iBQpGEnuMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1h4UWpTT3pneFc3OUZ0eWJTSUZDa1lTZTR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC84YWJlZWQtZjUzYi00Nzc2LWE4ZTIt MzZlOWE3OWJkOTUwLzEvS1h4UWpTT3pneFc3OUZ0eWJTSUZDa1lTZTR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC84YWJlZWQtZjUzYi00Nzc2LWE4ZTItMzZlOWE3OWJkOTUw LzEvS1h4UWpTT3pneFc3OUZ0eWJTSUZDa1lTZTR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFCZO3UYq rhLgC/OdA+Fj1MDhkRBpzwy2w5J2kfudjhZNUNd9pgv6Ufhlke3qqwhFc38KT5tx teVnHPce0aBSPEA6nq0r65JcPs8YcywPJMpnQwpUz8lKPQEE0jA8bpOmG+1EIixO 8acFkBxuxk3CjJRQwFfVeFc81ZvxIuhPr0vxzjTfso7HL9AQLrfmADJO4iKSZaWJ IUchxjsoqenc0rt7xfZSzabd0k5mNEZFWhdS/pUYAuxLbWNgxTs/95z6DYlNwqWJ gtf9BJxFW9LqZZzwZG75XWPaWInM3jwDZ9JM5vqFtHE89y7I50JYsP+/3DGzW4tC FUEtjKntajRoLA== -----END CERTIFICATE-----Generated at Mon Apr 28 22:49:46 2025 by rpki-client