$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft File: NSrjOxGzajGbqBNH2FJIDY50yH0.mft (raw, json) Hash identifier: zvvRzrY6GXOq1by2J21NFYPQDkxObugpyTE+sVN0y+Q= Subject key identifier: 0F:53:6E:13:4B:B7:F8:4A:59:8A:16:3D:4D:45:61:90:96:B5:0F:51 Authority key identifier: 35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D Certificate issuer: /CN=352ae33b11b36a319ba81347d852480d8e74c87d Certificate serial: 019675309E66C285E09E5090900914D8A79B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft Manifest number: 1505 Signing time: Sun 27 Apr 2025 03:00:42 +0000 Manifest this update: Sun 27 Apr 2025 03:00:42 +0000 Manifest next update: Mon 28 Apr 2025 03:00:42 +0000 Files and hashes: 1: 0T-kX-yMl6hrvSqG2ynD73xdyQo.roa (hash: cgmatniwn1/xiHv69T4cMPpIEH50V1xo/4j28Z9x1m0=) 2: 17mCqGV8t4z7hhbymmlowxpohlM.roa (hash: yC9WJu/Jd4wcWlQ9QZAgVlQjobSTHwxFtZkbAGBBVww=) 3: 1pDyz5W_JAft5FPBZfAc2Dvzg5c.roa (hash: LgK+kT8mVqNGaAx7gaXMs9zRjHjrV8c0zXwW/GXnPSA=) 4: 6kMRVDnionlAub1gckO_HkRUbqI.roa (hash: qj6KuKORTLdS4aBQ071+TsqqvTIUymsR7TQRluBWD8g=) 5: 84kpIndO6O-kBrvo6G8FCJ-Mh7c.roa (hash: uKI3cc6MdSBc3U/MUFC3w51NVXcvXAUE9e8+DJj6c/E=) 6: CHbKKVMpLk01B-ESgxaPOu3Vvlk.roa (hash: L335VlqzZgeAefFFrQPy002bZMiytu82bj4ohO+r9FM=) 7: GVeAWRodRK-Mh61DOhsiaxRFZdA.roa (hash: 6wFMaWRMR8ReBoYGgjQ/Oo8mpX+xVZB1ZTic2qm8uE4=) 8: NSrjOxGzajGbqBNH2FJIDY50yH0.crl (hash: LGZlgfSFdjBFilC4BBVoX0tDfHx0XCWXpLQk2aG+SE8=) 9: Og01fojxRGGibY1rWvCYrh8hqkw.roa (hash: gBWSEnn5mf0WfgNy7lHpYiyck7oRxx2s4gQls5jB+9Q=) 10: bh7p04HAmQsz8fs7_RAvgdbLXWc.roa (hash: XNtliyQUFflqK4Nj54d3XkY/W8QWS5S1FxEE4AThAPo=) 11: d4YVQNnChkBacDcydIrt5a5Rh6A.roa (hash: fh+DUICn/8r5lof6k4KiduZBw0s+kpBbyc0dMlUaf8A=) 12: fOGnk_VrznVU7DESiUqaZO8J_Us.roa (hash: xqQ89zCDDHN48Cqif0FGkMh7uc+JhrHIZHYiBVL1kd0=) 13: gIlo4vPfA-Asqm6bEqwCB86sKZw.roa (hash: mlBG0jrpcRSdb5T2GyUhX9gWpQsliliCeTcNKQRGY5g=) 14: hL4j8iuigkkNTiErA56QF9MabJw.roa (hash: 3JK+S5IrXE+YdoNB6wcCFPK3b1CU93EhTlsUYxkzyGc=) 15: lzfdj3sYjKwxJ-lEm4PMRG_z-x0.roa (hash: k0S/RTqMQtMqoYVsegJF/SGrW/zlHJLMymOnkkPiIpo=) 16: p3j4d7EN7rDZiNLKgGxCrP802jo.roa (hash: 7FdkPqi5mYojSW+i81Swo2BRIuKy4/SBN+6JsrhNjL8=) 17: rE2Ly0V1-oN-VtZjGs2shpF_cD8.roa (hash: pxUNok0w8Es2RyI40wdeQRUFAth2XgxN8GHXhm6zKn8=) 18: u20K50DQR1l8QXeOK7QG7eVh8Uw.roa (hash: PRxkrKwBa4GPRRnGQxkmXgsaYMTCHr9YZeDWPgI43r8=) 19: ygd83f_VnIRT7CYGvaw5CvksSLo.roa (hash: vfYm7cKZBuKoo5h42MYbmqAxBPCTlW3BklGv4+fo3QE=) 20: ykMpu1OjLYCWHCVsOgMXym15xtE.roa (hash: K1TvclD8VtPE+Fs7ZT7FGPsfDHpL8RsT+Tb6gJAHLvk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:75:30:9e:66:c2:85:e0:9e:50:90:90:09:14:d8:a7:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=352ae33b11b36a319ba81347d852480d8e74c87d Validity Not Before: Apr 27 03:00:42 2025 GMT Not After : Apr 28 03:00:42 2025 GMT Subject: CN=0f536e134bb7f84a598a163d4d45619096b50f51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:5e:c6:74:39:3b:87:ea:46:8e:34:f2:cc:80: b5:89:7f:54:1b:84:08:b4:0e:45:c5:08:71:43:40: bd:eb:f1:f6:0d:45:fd:bc:cb:5f:cb:7e:d5:5f:f2: ac:2b:07:6e:1c:98:ea:18:21:11:4e:46:05:e5:50: 4c:bf:bd:bf:6f:98:66:45:d2:c4:18:29:ca:5d:7d: 00:b1:db:14:34:0b:c4:86:f1:24:88:11:ac:db:13: 65:08:3d:09:af:5c:70:57:fa:10:be:16:e2:b5:75: f2:fb:bb:b4:a5:97:8d:08:76:b7:4e:30:45:a4:84: 17:6b:e8:c0:eb:51:fa:84:da:bc:1a:f6:f9:dd:5b: 26:70:d8:6a:bf:75:39:cf:79:c9:3b:78:2b:ca:c3: 06:c0:bf:5a:e4:51:c2:8b:02:5e:9e:97:fd:4c:0e: c9:25:98:44:0d:3b:4e:b5:89:cc:5a:e6:b5:09:48: a6:f2:20:1c:e5:78:59:ae:df:aa:ff:e2:df:05:80: 7c:1f:ae:d7:e0:df:d2:9f:23:18:cf:8f:bc:f7:ae: 5e:44:57:5e:3f:43:c4:b3:88:04:24:48:7d:39:72: 1c:c2:8b:a1:de:39:03:62:7f:1a:74:c5:a5:92:58: ce:1d:9d:a7:3e:85:0e:26:e6:45:be:2c:ab:cf:11: 8a:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:53:6E:13:4B:B7:F8:4A:59:8A:16:3D:4D:45:61:90:96:B5:0F:51 X509v3 Authority Key Identifier: keyid:35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:c4:8d:59:ec:bb:9a:04:ea:a5:06:f0:bc:f5:14:c9:3b:24: 6b:39:c4:9b:2a:bb:2c:39:3b:d6:2f:08:4a:e1:a2:ca:3a:cb: 49:c6:d1:09:3e:92:bd:61:0d:21:b3:be:48:3a:c6:d0:ec:28: 8c:d3:a3:00:63:64:95:08:77:43:e1:64:cd:c3:4f:94:cb:b2: 55:a8:cc:75:b2:45:80:ae:f4:32:d0:8d:f8:3d:5a:e3:d8:df: 6e:e4:2a:e9:56:cb:3b:62:bb:53:c6:d2:4c:e7:f2:83:0d:a2: eb:78:2c:d6:df:99:46:47:aa:e3:72:9e:5d:19:6b:80:44:43: 70:be:07:f9:d2:c4:c6:6f:3a:ea:6e:9e:45:29:4f:c0:c3:ac: 47:fb:ec:1d:f1:31:49:3a:36:9b:15:e3:99:c0:1e:d0:66:cc: 2e:7e:af:88:6c:b4:f9:0e:37:53:bc:e6:8a:c5:68:19:25:c5: c6:56:5c:3a:fd:65:24:ed:e7:8d:b5:b9:ba:3f:0d:d2:62:75: e4:ea:4f:f3:cd:18:d6:84:96:1b:aa:70:3b:4e:bc:e0:83:23: 22:4e:b3:a7:fc:bf:fd:4c:e1:ff:35:77:02:2b:fb:dd:98:c2: b8:81:9f:a4:83:9a:be:19:cd:b3:12:70:17:db:17:2b:7f:16: f5:a6:82:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZ1MJ5mwoXgnlCQkAkU2KebMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MmFlMzNiMTFiMzZhMzE5YmE4MTM0N2Q4NTI0ODBkOGU3 NGM4N2QwHhcNMjUwNDI3MDMwMDQyWhcNMjUwNDI4MDMwMDQyWjAzMTEwLwYDVQQD EygwZjUzNmUxMzRiYjdmODRhNTk4YTE2M2Q0ZDQ1NjE5MDk2YjUwZjUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiF7GdDk7h+pGjjTyzIC1iX9UG4QI tA5FxQhxQ0C96/H2DUX9vMtfy37VX/KsKwduHJjqGCERTkYF5VBMv72/b5hmRdLE GCnKXX0AsdsUNAvEhvEkiBGs2xNlCD0Jr1xwV/oQvhbitXXy+7u0pZeNCHa3TjBF pIQXa+jA61H6hNq8Gvb53VsmcNhqv3U5z3nJO3grysMGwL9a5FHCiwJenpf9TA7J JZhEDTtOtYnMWua1CUim8iAc5XhZrt+q/+LfBYB8H67X4N/SnyMYz4+8965eRFde P0PEs4gEJEh9OXIcwouh3jkDYn8adMWlkljOHZ2nPoUOJuZFviyrzxGKGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA9TbhNLt/hKWYoWPU1FYZCWtQ9RMB8GA1UdIwQY MBaAFDUq4zsRs2oxm6gTR9hSSA2OdMh9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9jNTVhYjAtZWEyMi00YTE5LThiMzMt MjUwNTBjNTkzYWExLzEvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9jNTVhYjAtZWEyMi00YTE5LThiMzMtMjUwNTBjNTkzYWEx LzEvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUcSNWey7 mgTqpQbwvPUUyTskaznEmyq7LDk71i8ISuGiyjrLScbRCT6SvWENIbO+SDrG0Owo jNOjAGNklQh3Q+FkzcNPlMuyVajMdbJFgK70MtCN+D1a49jfbuQq6VbLO2K7U8bS TOfygw2i63gs1t+ZRkeq43KeXRlrgERDcL4H+dLExm866m6eRSlPwMOsR/vsHfEx STo2mxXjmcAe0GbMLn6viGy0+Q43U7zmisVoGSXFxlZcOv1lJO3njbW5uj8N0mJ1 5OpP880Y1oSWG6pwO0684IMjIk6zp/y//Uzh/zV3Aiv73ZjCuIGfpIOavhnNsxJw F9sXK38W9aaCTA== -----END CERTIFICATE-----Generated at Sun Apr 27 05:37:42 2025 by rpki-client