$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft File: 7TChMXGFYKNKs0k4hOhY7EMfatE.mft (raw, json) Hash identifier: WEyjtDOfx1ynsnCD5BbgXgYmAvJ57OM4ieorepIAWVk= Subject key identifier: 95:83:19:04:BB:96:58:98:C4:C5:6C:F3:9E:6D:64:2F:D3:32:C3:EC Authority key identifier: ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1 Certificate issuer: /CN=ed30a131718560a34ab3493884e858ec431f6ad1 Certificate serial: 01968390E65B934F20FC7080D90E99C65F52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft Manifest number: 0B6D Signing time: Tue 29 Apr 2025 22:00:33 +0000 Manifest this update: Tue 29 Apr 2025 22:00:33 +0000 Manifest next update: Wed 30 Apr 2025 22:00:33 +0000 Files and hashes: 1: 7TChMXGFYKNKs0k4hOhY7EMfatE.crl (hash: npXQmjHeDQ67DX1XnlbEEgYxA+2wTaFhDEBgUHsCA5M=) 2: CMrHF8H9YG0k4ImZKJ0Wv5prbiU.roa (hash: 7mi0g+KT3QF83gURKdhKKpg94gTD0horBgadWGVDb8E=) 3: FfSeCwPXspTGNJXs1YFUWRkPWd8.roa (hash: 2wkLeptVYT3svowWE9iGU2ivjkcGP5lQfdyzSutjYiw=) 4: McQBWIkKTuiBTTZqAfwfimGiJv8.roa (hash: kezXGJ7slA/edYCjH/7MkGlnqiO9ieoRDACp9a7xuJg=) 5: PsSNrF4GYSF0wH771eRpN_af86E.roa (hash: 9DKoGdEkKbdB2FEIrzJZnlfynd23Qv+qRMTZsGGY64U=) 6: Sf-fnn87zqI6IDyZOCzOmqlh3ZM.roa (hash: ys8hXeVOTWclda1oWzQD6jxmP+pwlIxNYEQ2N3HNoIA=) 7: _Ehrq3F22eZQSCUZ41NXs1Mis4w.roa (hash: culdYqYdPXx/iLIUaW8VpKJoZ1AwgkT3iD+KMiCIgQM=) 8: buI3YKDrfWPqXXHZRlTS3-bj0cs.roa (hash: UTI3BZiE8tVZY3qvGvbwT+0MAq76+0w1dzLWYm9V4G0=) 9: lJu4vvomNeL77Z8YpH2r84A1bZM.roa (hash: mTkLp4XIHK60hTMHWyRMAysJ6XfiJSK2I0bd+JC5zqI=) 10: qi0InhuXBU-ET3BQIygAjHDv7R4.roa (hash: EwPEIgFR9Y7apfRR0iJdm8aoI2On5DfKKekezl88mDo=) 11: qu7kmExCuDOLhLu5jIOipsHVZUU.roa (hash: mpb42buPTORd/2C44Vbt1Yru22KauX6K16YgcD4OCHs=) 12: uw16RrYC31ae26o-GMI2QavuMU0.roa (hash: 8/SaDVncSWNGOp0BT1E2Z6/gbpYML5fhwg/+UmSEX/w=) 13: v3Y2kQBxLTzeaG8d43skpwQULcs.roa (hash: B7Egk3MrSfO4fxdlQbPhy1Krh5zi1OM2O8JrAFo0eOM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 30 Apr 2025 15:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:83:90:e6:5b:93:4f:20:fc:70:80:d9:0e:99:c6:5f:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed30a131718560a34ab3493884e858ec431f6ad1 Validity Not Before: Apr 29 22:00:33 2025 GMT Not After : Apr 30 22:00:33 2025 GMT Subject: CN=95831904bb965898c4c56cf39e6d642fd332c3ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:86:ed:bd:49:ce:b8:8f:66:e6:d5:0a:40:a9: b1:52:3d:43:f9:39:b9:29:7a:9f:41:2b:17:46:e2: 67:74:40:d8:1a:e0:22:96:e4:1f:48:85:a1:dd:5c: 21:44:cb:5f:01:db:94:0f:80:2b:a6:36:de:c5:c3: ab:3c:7a:73:8b:05:5f:c4:74:3f:fd:0a:d0:c0:bc: 14:27:d3:5d:4d:3b:19:9d:37:6b:2b:c2:94:05:91: 41:6e:42:d9:0f:92:fa:c9:a7:a2:9e:e0:50:52:a8: f6:1d:6e:4c:3e:a7:90:57:27:f3:e1:87:66:f3:d7: 5f:fb:16:e5:70:89:ed:fb:49:d3:6e:cc:e2:4f:fe: 05:e2:f8:26:c0:4c:5d:8e:49:86:20:16:b8:37:3b: 22:a1:98:28:f0:91:8b:cd:9e:c1:f4:15:e9:a2:dc: 41:28:5e:33:1f:e7:7c:9f:f3:3e:f8:ee:fe:bd:b4: 32:ff:60:1d:a5:73:40:ed:fe:22:9b:65:3e:e6:46: b2:c8:ad:35:3f:55:50:04:71:3a:0e:52:80:83:49: b1:97:f6:c9:6b:3e:25:53:81:cf:70:91:2e:35:75: c8:39:9a:10:89:a8:e5:6a:99:ee:c3:55:f3:d7:13: 8a:17:0b:c8:20:79:82:06:68:c3:77:b2:e1:c1:1c: 4f:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:83:19:04:BB:96:58:98:C4:C5:6C:F3:9E:6D:64:2F:D3:32:C3:EC X509v3 Authority Key Identifier: keyid:ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:e4:43:f5:ee:69:24:1a:8c:d3:8b:e4:0e:49:31:bd:7a:c3: 4d:cf:40:d6:35:b1:34:e9:9f:7a:e3:8e:b9:42:33:47:69:cd: 06:da:d5:22:49:0b:7a:29:f7:f7:7c:de:7e:96:2e:fe:fe:1b: 88:23:27:71:6f:6c:aa:be:19:77:ee:2b:05:8f:08:d3:0b:f1: 41:25:0e:8b:4e:64:5a:cb:53:9b:72:a2:af:70:01:72:50:98: 87:45:02:34:91:ca:be:52:d5:7e:e2:a6:0e:6a:66:36:08:a8: bd:8a:45:4f:43:79:ea:39:3f:1b:bb:04:73:d9:35:d9:27:7d: 58:8c:85:ce:67:04:e2:55:bc:19:b2:35:34:44:19:74:fd:11: de:d5:9b:13:da:b2:97:8c:a8:ca:86:1f:00:d4:12:da:e0:28: 10:9d:0d:20:c4:9b:33:be:93:3b:32:a6:70:73:1e:85:6c:c2: 71:88:b3:87:1e:a0:61:db:31:3d:68:47:8b:e3:d9:fc:45:08: 79:2a:01:bc:4e:46:40:f7:f1:eb:c8:55:fe:6f:04:c2:29:04: 80:e6:05:d9:04:6a:72:2b:d2:cb:0c:46:28:69:f5:fc:76:2f: c8:dd:bb:3a:95:5c:c6:6d:7e:27:74:2e:20:67:44:08:31:0e: 0e:dc:4d:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZaDkOZbk08g/HCA2Q6Zxl9SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkMzBhMTMxNzE4NTYwYTM0YWIzNDkzODg0ZTg1OGVjNDMx ZjZhZDEwHhcNMjUwNDI5MjIwMDMzWhcNMjUwNDMwMjIwMDMzWjAzMTEwLwYDVQQD Eyg5NTgzMTkwNGJiOTY1ODk4YzRjNTZjZjM5ZTZkNjQyZmQzMzJjM2VjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwobtvUnOuI9m5tUKQKmxUj1D+Tm5 KXqfQSsXRuJndEDYGuAiluQfSIWh3VwhRMtfAduUD4ArpjbexcOrPHpziwVfxHQ/ /QrQwLwUJ9NdTTsZnTdrK8KUBZFBbkLZD5L6yaeinuBQUqj2HW5MPqeQVyfz4Ydm 89df+xblcInt+0nTbsziT/4F4vgmwExdjkmGIBa4NzsioZgo8JGLzZ7B9BXpotxB KF4zH+d8n/M++O7+vbQy/2AdpXNA7f4im2U+5kayyK01P1VQBHE6DlKAg0mxl/bJ az4lU4HPcJEuNXXIOZoQiajlapnuw1Xz1xOKFwvIIHmCBmjDd7LhwRxPRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJWDGQS7lliYxMVs855tZC/TMsPsMB8GA1UdIwQY MBaAFO0woTFxhWCjSrNJOIToWOxDH2rRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1RDaE1YR0ZZS05LczBrNGhPaFk3RU1mYXRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi81YjA3MDItMTZlNy00NjI3LWFlMTkt NGIzYjFiNjNiNmFiLzEvN1RDaE1YR0ZZS05LczBrNGhPaFk3RU1mYXRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi81YjA3MDItMTZlNy00NjI3LWFlMTktNGIzYjFiNjNiNmFi LzEvN1RDaE1YR0ZZS05LczBrNGhPaFk3RU1mYXRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEuRD9e5p JBqM04vkDkkxvXrDTc9A1jWxNOmfeuOOuUIzR2nNBtrVIkkLein393zefpYu/v4b iCMncW9sqr4Zd+4rBY8I0wvxQSUOi05kWstTm3Kir3ABclCYh0UCNJHKvlLVfuKm DmpmNgiovYpFT0N56jk/G7sEc9k12Sd9WIyFzmcE4lW8GbI1NEQZdP0R3tWbE9qy l4yoyoYfANQS2uAoEJ0NIMSbM76TOzKmcHMehWzCcYizhx6gYdsxPWhHi+PZ/EUI eSoBvE5GQPfx68hV/m8EwikEgOYF2QRqcivSywxGKGn1/HYvyN27OpVcxm1+J3Qu IGdECDEODtxNiw== -----END CERTIFICATE-----Generated at Wed Apr 30 00:53:09 2025 by rpki-client