$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft File: wsErUnpdH4uLzyMOthH1LxHVK78.mft (raw, json) Hash identifier: DOi80heGO/pOITlwn2eRlpWMgGrBzeew9aTAm4RNIkA= Subject key identifier: 53:9E:10:14:BB:2E:37:9A:CF:EF:30:EE:A6:42:10:00:1E:D7:20:AE Authority key identifier: C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF Certificate issuer: /CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf Certificate serial: 0196741DA3771FC0E6284D1D7B60993775E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft Manifest number: 152C Signing time: Sat 26 Apr 2025 22:00:21 +0000 Manifest this update: Sat 26 Apr 2025 22:00:21 +0000 Manifest next update: Sun 27 Apr 2025 22:00:21 +0000 Files and hashes: 1: 1-g043uZGbcoJpf0hDKUAK6KYjMY.roa (hash: oXh/AdBAL+hhAJ60ylz2T4fDifmqPlRHNnfI4LxfO4g=) 2: 4UV2kYJsBRO1Uo0sYaR8d-zWu7M.roa (hash: 4lr6xQLhcUwRUwjrbz/Q9ig+qZGJYjRtsOrl+llFTZI=) 3: 7Df7JRlOKH8gDykOMVukqaTvgiY.roa (hash: Uk5pTOJ/i2noBJtpzBqTt/F61tyL656kiSZXzf/FEP0=) 4: 8yYiY1YNwyk677GprCpY-cRpwSM.roa (hash: eqdijA/aHk9KZOfgIpUzQWlBgXMp62c/42Y4/ug1w4U=) 5: 9YFs85YsKGTIVDBM56breEqVtxA.roa (hash: qqV3B5vzjjlBmuMS8CdNVBF1exlyNiMWJZdCD+80Tlg=) 6: 9oF_YBPk2N7TBl4840GxsFnZQ7I.roa (hash: AlGFLtN9GjJwBPE0gCs6Q6TU04FkoUZ/Kroy0jMJUjM=) 7: BjjnvskFHojAmLtOcKHf6cIeor4.roa (hash: 68wQkVvr9s70ErwyewLwg/v+Sn8FP7xN+7ToSgJC2eQ=) 8: O82D9-Sl5TuPA51YDMjd3oEQ_Bw.roa (hash: GpWxPeguh9vxIQvIL/oOPSEMASvNh0GDzUvixDoM4bM=) 9: VklwYAMB76GdFlZEPkNhX4QuNYk.roa (hash: 8+ZNddyslsyHAQNuItAdRnRBvt4AbAN/VlPdsNqo93A=) 10: jQVct_I-Q9u8SJsbhp_aBJKmAO4.roa (hash: Goq6CQ+X0WEoVfwAUI4pBsxNxBCuYLwqrXAabZR3bPo=) 11: kxW1ACFlthp6zFliAhXG5aZtJrg.roa (hash: gl4ysipzIWR3k1Nea68+h+I7SDKD7ZPTCg44K0WQbck=) 12: nV6d6dYJokqR_WNJ0e5S9DIoVtk.roa (hash: ZHD4y/aBIOK9FnRbF/fVjipRuAyUMG3sRGTAcZNGLRk=) 13: pO3sjHr6a0aftr_c4hFnOCTpu-k.roa (hash: 0HEZ96PPuctS/ZloTVzx6CjdJPtvxwr82RYy3GTaOCE=) 14: ri2xAd-oHR-fT9LflEmMOZqy2Kw.roa (hash: hVv7MJmhWiXR3Iis6smsr081jaLjufwCt16mF67L6FU=) 15: wsErUnpdH4uLzyMOthH1LxHVK78.crl (hash: Kbx8JMecUareZmf+xi4Me/Be/cDv3JFTg3N3GPoO55s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 17:20:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:74:1d:a3:77:1f:c0:e6:28:4d:1d:7b:60:99:37:75:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf Validity Not Before: Apr 26 22:00:21 2025 GMT Not After : Apr 27 22:00:21 2025 GMT Subject: CN=539e1014bb2e379acfef30eea64210001ed720ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:50:1f:78:0c:d6:4d:cb:eb:af:9f:2d:ed:80: 93:9d:a0:37:a3:03:2f:e9:60:c8:e2:2a:b2:1d:13: 8a:f1:7a:7c:56:a0:80:f2:c7:07:49:e4:29:d9:4a: 69:6f:17:e5:23:91:51:3f:28:e1:87:3d:18:83:18: a4:91:07:98:f1:34:aa:a5:ba:7f:95:45:ad:51:97: 5b:fb:69:e6:81:5e:8f:d2:23:55:5e:1c:27:eb:92: 9d:f8:52:84:9e:59:91:a8:56:07:f4:44:87:08:3c: cf:11:47:8b:2d:26:07:c1:e1:db:34:3e:cf:c3:3a: 1f:b6:f6:4e:79:cf:06:f8:f0:f8:49:52:6e:b5:9e: 0a:b6:d0:70:36:7b:ff:93:fb:e6:c8:bc:53:ce:09: 3a:c6:34:15:48:40:52:b7:fb:36:3a:e0:4d:0b:a5: 80:84:01:fe:57:27:bc:01:9d:9a:6d:0b:6b:08:9f: d1:4f:70:95:1a:aa:0e:04:40:0b:80:bf:0c:41:c6: 31:e2:ec:31:1a:22:94:0b:25:b9:a5:6c:0a:f3:72: 42:8c:f5:56:ed:0d:e2:0d:cb:a3:06:d1:8d:96:21: f9:50:7c:0d:ca:77:7f:4d:bc:3d:86:9f:c2:2e:bd: f9:59:1f:87:da:6a:ee:a9:f1:f4:51:4c:d4:fe:52: 05:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:9E:10:14:BB:2E:37:9A:CF:EF:30:EE:A6:42:10:00:1E:D7:20:AE X509v3 Authority Key Identifier: keyid:C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:be:18:83:c7:d2:39:1c:32:bf:22:fb:6e:37:a2:34:ed:d4: 5b:0d:c0:03:65:45:00:55:02:c1:af:ff:9c:5a:1e:83:7f:75: 90:c7:86:64:64:11:6c:8a:c1:92:21:68:16:62:a8:68:ff:ac: f9:bc:e5:37:75:3b:0a:1f:7c:a4:b4:e7:5a:51:d8:03:7c:56: fb:c6:4b:d9:10:e4:2a:62:8f:e0:06:6e:09:30:c1:65:28:62: 46:83:1a:8e:5f:64:71:45:85:cf:c1:ea:7d:84:c0:4f:cd:bf: f3:be:8d:5a:37:f0:1e:24:43:d5:f2:64:cd:a4:a2:1c:a4:e8: d9:d0:e2:5c:8c:25:ac:8b:c4:2e:ec:ec:30:a2:12:6e:88:c8: 53:c4:76:44:f3:35:3f:31:73:42:ae:f7:1d:3e:26:22:88:f2: 70:41:1d:7a:4e:76:ea:b9:19:03:04:46:23:45:f6:56:e9:95: 80:68:81:56:b9:b9:41:9a:f6:c2:87:77:51:02:5e:b7:6c:92: 6f:55:03:85:0d:cb:1e:8e:01:43:67:24:c4:90:77:b5:cd:49: 45:5c:ae:a0:cd:61:65:dc:fa:6b:2b:78:7f:39:f8:e1:02:3f: 0c:38:2d:d6:66:6b:5e:2f:b3:31:f9:60:46:04:8d:33:60:ca: 6b:8f:61:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZ0HaN3H8DmKE0de2CZN3XmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyYzEyYjUyN2E1ZDFmOGI4YmNmMjMwZWI2MTFmNTJmMTFk NTJiYmYwHhcNMjUwNDI2MjIwMDIxWhcNMjUwNDI3MjIwMDIxWjAzMTEwLwYDVQQD Eyg1MzllMTAxNGJiMmUzNzlhY2ZlZjMwZWVhNjQyMTAwMDFlZDcyMGFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFAfeAzWTcvrr58t7YCTnaA3owMv 6WDI4iqyHROK8Xp8VqCA8scHSeQp2UppbxflI5FRPyjhhz0YgxikkQeY8TSqpbp/ lUWtUZdb+2nmgV6P0iNVXhwn65Kd+FKEnlmRqFYH9ESHCDzPEUeLLSYHweHbND7P wzoftvZOec8G+PD4SVJutZ4KttBwNnv/k/vmyLxTzgk6xjQVSEBSt/s2OuBNC6WA hAH+Vye8AZ2abQtrCJ/RT3CVGqoOBEALgL8MQcYx4uwxGiKUCyW5pWwK83JCjPVW 7Q3iDcujBtGNliH5UHwNynd/Tbw9hp/CLr35WR+H2mruqfH0UUzU/lIFPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFOeEBS7Ljeaz+8w7qZCEAAe1yCuMB8GA1UdIwQY MBaAFMLBK1J6XR+Li88jDrYR9S8R1Su/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zZWJiNDYtYjlkZC00Njk1LTgxNWMt NDZlZTU3OGEwYmZlLzEvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zZWJiNDYtYjlkZC00Njk1LTgxNWMtNDZlZTU3OGEwYmZl LzEvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV74Yg8fS ORwyvyL7bjeiNO3UWw3AA2VFAFUCwa//nFoeg391kMeGZGQRbIrBkiFoFmKoaP+s +bzlN3U7Ch98pLTnWlHYA3xW+8ZL2RDkKmKP4AZuCTDBZShiRoMajl9kcUWFz8Hq fYTAT82/876NWjfwHiRD1fJkzaSiHKTo2dDiXIwlrIvELuzsMKISbojIU8R2RPM1 PzFzQq73HT4mIojycEEdek526rkZAwRGI0X2VumVgGiBVrm5QZr2wod3UQJet2yS b1UDhQ3LHo4BQ2ckxJB3tc1JRVyuoM1hZdz6ayt4fzn44QI/DDgt1mZrXi+zMflg RgSNM2DKa49hAQ== -----END CERTIFICATE-----Generated at Sun Apr 27 00:36:21 2025 by rpki-client