$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.mft File: Yijn4B-tpJwaUvoT82JsQbQaUbg.mft (raw, json) Hash identifier: vySmh+xsc4kGmX8K2QPtVya4aUHfiMswyVhw4doelg4= Subject key identifier: 0C:31:C0:A4:5B:1F:DF:B1:C1:D9:FB:A8:5C:C7:76:5D:8B:7E:94:03 Authority key identifier: 62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8 Certificate issuer: /CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8 Certificate serial: 01968A6F14652DE90E559BDA69C6A6B22CA7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.mft Manifest number: 10E7 Signing time: Thu 01 May 2025 06:00:57 +0000 Manifest this update: Thu 01 May 2025 06:00:57 +0000 Manifest next update: Fri 02 May 2025 06:00:57 +0000 Files and hashes: 1: 39Hl2YtVKmMlT4Np8aTqcLmOeDQ.roa (hash: J30KXNySdgIczVtUgN74dsxfOaEmv254pBQGUApoGWU=) 2: 3vDPYhTVSNkpwDXIOAhKw07fJVo.roa (hash: LClf9wKTgSH7aYKU8gpOq60UxTyxsP0oBqiiisbaoMw=) 3: 9gdq4DPxWANqV88tyEbEG8Ldy2s.roa (hash: Qcx/zZKUQJlfYuyogBZyJJ8LJtGP90X7Aowz2zO0zoM=) 4: EUqk-yAaG5paOCIVkA1j8wPk104.roa (hash: CKnm8iWykIQyELL5aMGGlKm7sfX4o/GjDgMt4OBiDmo=) 5: MS7f7uAFrgsoqEC82oQcdxoTjbw.roa (hash: q7csoElnOVcDXyC+5AwwUXnv70b0boL5P5Uhy6UmF5c=) 6: MVUh0hcLIjE07dK8EAE-IOh5K_k.roa (hash: h64Mn6MhkYZu/pWDLICKE5G2uu0K1bG/f4Qgol+8E+k=) 7: PQV-lmNPs22kjH81gqLzZC2Hxyk.roa (hash: 3Z7VYjtRWDW6BIMcoEyNqO1K5os33IdoDIoXJJUJXX4=) 8: QZoa2FVMFT1UIn9TjIdCJB0KRm0.roa (hash: Ms+peXedl4VTyfxLJJp1x3zUfnRF0n3j5fmzunIlaVk=) 9: WfEws16cTi2Df979LQ6mRAE2axY.roa (hash: dALElZ6XR2T3Ta1WDi4smMz8JqXiVTKehinoqdH3p2M=) 10: XRMjotv_RyNi_vyyDUqJa5DvdNQ.roa (hash: NqkkZ+12y4P7wuBMP3qkI6mM9Ot2hXdE9NxBdiV//lo=) 11: Yijn4B-tpJwaUvoT82JsQbQaUbg.crl (hash: GIWXcQezZ0/dwswu8GI06sTZfkwAJbqMWMPkKPhTOws=) 12: _uqBPfdUyY-uye7sIJ6VDcTnm9Q.roa (hash: qTMeoGDMJupk/FgaEtzpurysBRR50/CTtxcte770sgo=) 13: aQ9TKcMoz5YUQ7Dv119RHqsXoe8.roa (hash: kuhGQLKsA1Pu5uUkS6WTtzxq+5UJHPF8akUoFzgsuJ4=) 14: fBH0IYJayUM82fLAtCFKL3waLMo.roa (hash: aENlkeS/IhrQKMHBx/tjK8TdolIAB2oUek9AYMeHgkc=) 15: hBP1dFOLVBvt5xRqn-UPkUvOwX0.roa (hash: V1O7muMxpNnuboppInS/cPK8sqYq+I6fZjgAvWtea64=) 16: hO23WjxsvovLeYLtPCuS-3E0Vpo.roa (hash: 4CIWct6dmxFnbDCjzVX8u7ggPdnC/a3Xxdl8QvHxzeE=) 17: i8JcBpZfWepYkpF9UtgUc8u8oaE.roa (hash: hAhGsCAZqxE2Xuoo8wKC0KNjWz+UEQ+A4lqd+kgBL1s=) 18: jjbE1RnOSZ2q761YRZ132c8JiG8.roa (hash: dQGgrXxlcNXkPaPmlJTPvKt0F6rOcsVsYCx7icARUrQ=) 19: kLq7SqUeKI2DIUAAWUSXfOrIc2Y.roa (hash: rGBOCgBJX1i/E1elpdsBPlkFxELh0gIOeC6WMkdyhOw=) 20: lAqndAolY7BWQzN7LT0Q-IX6vb0.roa (hash: TGjadtZcD24yjuhtvBWL3IHkQVMYaJkPJka0+x4+n2k=) 21: mVXDsutnAgycmKCU0s0vqiIrWkg.roa (hash: nEoy3ANJmNvdHM1/EwE8AOqLbRC8BUKhSO6ToUJ1eCc=) 22: rWQw3Ap9IMTI_3cbUgb5cs9sfpg.roa (hash: 16/Ubwkj0gDZvLp3sxFfuFWuE+SLZxXhapNbePhBARw=) 23: tCBTeEpVZ9rGnN0OWe0wOiDMqec.roa (hash: +xHIXcppCVOpv/Ff3OFAwPnh7JSeP+CGAOVt+PcgeQg=) 24: tLgdq7x552M51Z859B5olJtsdB0.roa (hash: rixhj8UvpeqfwDPceY6i6tMORueTt6XMWtFaW5Efwiw=) 25: vm3AkptGALvAIgoY078ymc1XraE.roa (hash: u7VTKuFFoDvsz4NJh5f73LnR4kgTqMbb59uC7JU+Hv8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.mft rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 May 2025 06:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:8a:6f:14:65:2d:e9:0e:55:9b:da:69:c6:a6:b2:2c:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8 Validity Not Before: May 1 06:00:57 2025 GMT Not After : May 2 06:00:57 2025 GMT Subject: CN=0c31c0a45b1fdfb1c1d9fba85cc7765d8b7e9403 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:7d:38:d9:24:a7:1d:89:74:05:b4:1b:9d:2d: a6:5d:02:99:6e:23:a1:21:0d:84:b1:c4:db:62:d7: ac:cb:50:f1:1b:33:85:d0:4b:40:2b:58:f6:54:f1: 01:da:f0:98:8b:87:0d:48:d1:f8:70:b2:4a:d8:1d: 2e:33:c3:c0:6e:46:f3:fc:ef:40:79:78:df:c1:25: bb:a7:6c:f1:5b:38:23:78:ee:53:4d:f8:2a:d5:1f: cb:8a:e5:74:4c:7b:5c:2a:38:22:a3:a3:7a:a5:49: c2:92:53:d9:ba:af:aa:51:d6:8f:e0:53:f2:08:af: 74:dc:d2:a5:da:9f:bc:da:c2:04:d5:b1:af:f8:d0: a2:9f:0b:c5:41:c5:1d:fc:88:2f:40:92:cc:d8:45: d4:f3:b3:d7:be:31:53:ca:25:80:cf:a1:30:85:a7: 88:a0:36:6e:55:14:b2:4b:30:20:e0:29:2f:bf:39: 8a:99:39:30:74:ce:ae:a6:a6:9d:a0:cf:67:f9:45: 8e:ca:38:61:49:b5:8c:dc:ba:07:6f:73:85:01:60: b5:74:42:0d:ae:70:73:00:e9:ce:ad:24:b6:9c:1a: 5b:68:20:99:ee:99:4f:f5:39:ff:f2:af:87:fc:26: 50:e0:40:d8:e5:1f:2a:20:12:f9:a5:8b:d4:4d:03: 20:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:31:C0:A4:5B:1F:DF:B1:C1:D9:FB:A8:5C:C7:76:5D:8B:7E:94:03 X509v3 Authority Key Identifier: keyid:62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:ad:97:32:04:d6:81:25:cc:b3:2a:ad:a9:ad:f1:9e:85:a9: 40:27:2b:61:c1:4c:17:b7:a0:88:22:06:14:1c:3d:1b:23:0d: e7:96:20:8e:c8:e0:48:a6:ec:d9:a6:e7:45:7a:c8:b6:71:1d: 47:bb:2d:2e:59:7c:58:5c:ae:b0:8c:d7:70:04:05:0b:f3:53: e0:f0:b4:b8:4c:a0:db:d2:9c:ca:ad:b6:8a:37:0f:95:86:15: 33:0e:f2:9b:ff:0e:93:e1:38:c5:15:90:12:85:dd:d3:55:96: 49:09:f1:da:36:83:3d:64:65:f8:29:d4:d4:0a:ad:cf:ce:5a: fa:05:fc:d5:ee:f8:90:ed:e6:d1:6f:65:8a:f1:cb:d5:bd:a9: 16:ce:e0:80:31:cd:2d:31:49:c9:08:b6:45:7f:af:89:70:69: 43:c6:01:8d:4a:05:54:b5:55:7e:d8:68:87:75:a4:df:c8:e2: 80:c8:26:c3:a5:8d:dc:e3:36:d9:02:18:03:74:db:1a:30:fb: f2:2b:a8:cd:ad:a0:98:0b:a3:e9:f0:41:f3:ad:f3:3b:6d:fd: 61:72:5b:3f:89:6f:d0:f9:17:67:7d:be:da:24:63:55:b0:d8: 3c:f1:54:00:73:11:37:06:6a:f4:07:59:bd:ef:f6:11:b8:b0: c4:6c:72:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZaKbxRlLekOVZvaacamsiynMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyMjhlN2UwMWZhZGE0OWMxYTUyZmExM2YzNjI2YzQxYjQx YTUxYjgwHhcNMjUwNTAxMDYwMDU3WhcNMjUwNTAyMDYwMDU3WjAzMTEwLwYDVQQD EygwYzMxYzBhNDViMWZkZmIxYzFkOWZiYTg1Y2M3NzY1ZDhiN2U5NDAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA23042SSnHYl0BbQbnS2mXQKZbiOh IQ2EscTbYtesy1DxGzOF0EtAK1j2VPEB2vCYi4cNSNH4cLJK2B0uM8PAbkbz/O9A eXjfwSW7p2zxWzgjeO5TTfgq1R/LiuV0THtcKjgio6N6pUnCklPZuq+qUdaP4FPy CK903NKl2p+82sIE1bGv+NCinwvFQcUd/IgvQJLM2EXU87PXvjFTyiWAz6EwhaeI oDZuVRSySzAg4CkvvzmKmTkwdM6upqadoM9n+UWOyjhhSbWM3LoHb3OFAWC1dEIN rnBzAOnOrSS2nBpbaCCZ7plP9Tn/8q+H/CZQ4EDY5R8qIBL5pYvUTQMg4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAwxwKRbH9+xwdn7qFzHdl2LfpQDMB8GA1UdIwQY MBaAFGIo5+AfraScGlL6E/NibEG0GlG4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWlqbjRCLXRwSndhVXZvVDgySnNRYlFhVWJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iYWFmZjMtYWViNC00NjE2LThmYjUt NzY3NDE2NTI1MTBkLzEvWWlqbjRCLXRwSndhVXZvVDgySnNRYlFhVWJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9iYWFmZjMtYWViNC00NjE2LThmYjUtNzY3NDE2NTI1MTBk LzEvWWlqbjRCLXRwSndhVXZvVDgySnNRYlFhVWJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfK2XMgTW gSXMsyqtqa3xnoWpQCcrYcFMF7egiCIGFBw9GyMN55YgjsjgSKbs2abnRXrItnEd R7stLll8WFyusIzXcAQFC/NT4PC0uEyg29Kcyq22ijcPlYYVMw7ym/8Ok+E4xRWQ EoXd01WWSQnx2jaDPWRl+CnU1Aqtz85a+gX81e74kO3m0W9livHL1b2pFs7ggDHN LTFJyQi2RX+viXBpQ8YBjUoFVLVVfthoh3Wk38jigMgmw6WN3OM22QIYA3TbGjD7 8iuoza2gmAuj6fBB863zO239YXJbP4lv0PkXZ32+2iRjVbDYPPFUAHMRNwZq9AdZ ve/2EbiwxGxy7g== -----END CERTIFICATE-----Generated at Thu May 1 10:03:40 2025 by rpki-client