$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft File: tyWIwA7vcVgJ61_dbWcXzCjA36w.mft (raw, json) Hash identifier: +usSHxdsgRjAbo97xKgq21w0fN6z16VXsDz9zc/padM= Subject key identifier: 29:50:EF:DF:4A:C1:81:99:33:21:D9:CC:51:F1:97:DA:1C:40:D0:D8 Authority key identifier: B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC Certificate issuer: /CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac Certificate serial: 0196797B8901EBA5AC6FF471AE8F0EEF515D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft Manifest number: 1523 Signing time: Sun 27 Apr 2025 23:01:01 +0000 Manifest this update: Sun 27 Apr 2025 23:01:01 +0000 Manifest next update: Mon 28 Apr 2025 23:01:01 +0000 Files and hashes: 1: 30BxK6_jpie3YrLCVwh_L1trwzk.roa (hash: X9FbkEMlA2QphV+O7rBHZ0meCsmOLXe9r7nPMvJuQcE=) 2: 57saHwwtMFtKDHtko2YaGKrGjJo.roa (hash: tuKl3wIrDMzULngL+WH+D2haKacyphB+9VZ5+FTHHpM=) 3: Dbj9xuGjig4FQD4z5CtOr-cvTeI.roa (hash: Kh8CzaShn4hw0xJ/eT2H0TnUMB7Vdu0F94Rtfvnict8=) 4: EuktsmR6HvXm2m5YsC5Wyo5ecw4.roa (hash: JZi+DlaPt3ZWFPrgsMEzdF/6HYunSwsq7ugQUzVGcAU=) 5: F-P_HvBB3WeH7KniyH81o28KKbo.roa (hash: 8sYaDjHEHJUFW2fXpmzCzQDMt9L045SyDdjIlOEUNco=) 6: WBOYQCAoKRyLsa6JAYAHwgmZIqI.roa (hash: lyZfLnKwP7kxcM63676+jKHGePevi3n5oMgldGNu5qA=) 7: WR7z7m7JZCweB81LV8VsoLwZDDI.roa (hash: n+zNUpOUwgPN3iy+Ul6bCia4Bw0P9Lb0d3EbTWyw+/I=) 8: eNRtwGVQ1VdkNKBRZ8o9uf4Ec24.roa (hash: syspd0kan424RvhNNvOMRktLryIova5s5SuLnxOMs4I=) 9: inKVgfg6tkDW3-Ko2Fj1q9U9rjM.roa (hash: m3IZ4E9iTFBEvHgMwMmb/F3F5jQFINfkwm1zng7j3wE=) 10: jmu-RUwAGlfdjyuIX4pdgwp2S_c.roa (hash: 0w/XwzNScEN/vprJx5SJRgxW5WArgctvQM2YSDSFtog=) 11: tLlGubJJap72E2l8gRh9Uuu4S8A.roa (hash: jBh5pu7FnbvAeJHH3DMpIfaMMsMyb9LyPf0qd9sE/90=) 12: tyWIwA7vcVgJ61_dbWcXzCjA36w.crl (hash: AMZ/UY6HT/324Ojro9vX2dLf3AdNeuOT38TQhb/8OMs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.crl rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Apr 2025 23:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:79:7b:89:01:eb:a5:ac:6f:f4:71:ae:8f:0e:ef:51:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac Validity Not Before: Apr 27 23:01:01 2025 GMT Not After : Apr 28 23:01:01 2025 GMT Subject: CN=2950efdf4ac181993321d9cc51f197da1c40d0d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:7b:81:cc:88:23:07:8a:aa:b8:35:82:66:f7: a0:e9:3b:38:11:93:1c:bb:02:d3:f8:a5:75:c3:6f: 15:48:5b:6c:e2:6b:00:97:73:e7:9c:de:75:78:15: 3f:ae:45:e3:ce:99:c2:44:b9:85:bd:1a:e6:90:e0: 16:35:01:6e:d2:4f:56:48:2c:c7:9b:d5:35:e6:82: 00:20:06:32:ea:2a:e2:09:cb:e5:5e:98:fb:91:37: a8:1f:fb:7a:ac:a2:98:d4:67:c9:18:1f:f7:cb:b8: 6a:f2:f5:5d:0f:e6:37:5a:e0:4c:54:bf:93:58:08: 0e:65:ff:72:d4:45:11:ed:af:f3:fe:c6:16:da:1e: 0c:1a:86:d4:c1:d8:86:da:63:81:7a:90:2f:eb:fb: 9c:4f:3f:2f:3d:fc:f1:b3:15:85:98:66:bf:10:ba: 2f:89:23:88:d0:5f:3d:a3:79:f6:ab:63:d6:6b:74: a0:aa:97:39:db:b3:6f:34:0c:23:c4:ef:89:4b:38: 4e:5d:df:69:c6:b5:e2:ab:a4:ea:67:c2:5d:e8:84: 77:fd:91:0d:d1:70:a7:50:9d:8a:7f:67:bf:93:0b: 45:d3:23:9b:a8:3e:ed:f3:88:d5:96:12:34:3c:32: b6:14:31:bc:5d:6e:2d:07:04:4c:f1:33:e1:6c:92: e8:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:50:EF:DF:4A:C1:81:99:33:21:D9:CC:51:F1:97:DA:1C:40:D0:D8 X509v3 Authority Key Identifier: keyid:B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:ee:9c:93:75:5a:dc:a0:b4:0c:8d:1e:70:65:12:be:7b:78: 6d:1f:59:b4:82:77:4d:f0:7c:9b:6b:82:22:3a:0f:f5:f9:31: f7:aa:bc:ce:eb:a1:ea:af:3d:93:ea:fb:91:7c:95:54:c0:fa: c9:a7:29:25:f9:de:dd:eb:1e:11:0c:bd:10:cb:1c:a2:57:d6: 17:f6:53:71:ce:14:c9:e2:b3:23:82:13:c6:1e:73:21:05:ab: 6f:f1:05:3f:ef:33:26:8b:8d:b3:f2:fb:29:55:72:43:19:ac: 68:97:be:0b:75:9d:76:b1:d5:6f:4b:c5:b1:a8:c9:6c:6d:e4: 80:48:01:c8:a9:a8:c4:8a:27:d6:06:59:c4:c1:75:ee:5a:bb: 9d:85:22:d6:a7:ec:46:e2:92:70:24:4b:06:4b:1a:a1:56:3c: 2d:28:19:cb:43:44:4e:c1:7b:7f:c6:20:bd:82:33:dc:52:29: 5d:98:32:cc:77:d9:71:18:b4:5e:e2:8d:97:97:44:5c:51:6c: 9a:aa:13:f2:67:bb:ca:e1:ab:b2:aa:ab:be:b6:a6:82:cd:0a: 95:fc:cc:28:81:89:95:83:5e:44:13:1d:2c:6a:9f:15:7d:d1: c4:de:4f:b3:5d:ca:13:26:31:39:11:a6:e0:d8:b8:3a:67:9f: 18:6d:7a:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZ5e4kB66Wsb/Rxro8O71FdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3MjU4OGMwMGVlZjcxNTgwOWViNWZkZDZkNjcxN2NjMjhj MGRmYWMwHhcNMjUwNDI3MjMwMTAxWhcNMjUwNDI4MjMwMTAxWjAzMTEwLwYDVQQD EygyOTUwZWZkZjRhYzE4MTk5MzMyMWQ5Y2M1MWYxOTdkYTFjNDBkMGQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3HuBzIgjB4qquDWCZveg6Ts4EZMc uwLT+KV1w28VSFts4msAl3PnnN51eBU/rkXjzpnCRLmFvRrmkOAWNQFu0k9WSCzH m9U15oIAIAYy6iriCcvlXpj7kTeoH/t6rKKY1GfJGB/3y7hq8vVdD+Y3WuBMVL+T WAgOZf9y1EUR7a/z/sYW2h4MGobUwdiG2mOBepAv6/ucTz8vPfzxsxWFmGa/ELov iSOI0F89o3n2q2PWa3Sgqpc527NvNAwjxO+JSzhOXd9pxrXiq6TqZ8Jd6IR3/ZEN 0XCnUJ2Kf2e/kwtF0yObqD7t84jVlhI0PDK2FDG8XW4tBwRM8TPhbJLo7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFClQ799KwYGZMyHZzFHxl9ocQNDYMB8GA1UdIwQY MBaAFLcliMAO73FYCetf3W1nF8wowN+sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHlXSXdBN3ZjVmdKNjFfZGJXY1h6Q2pBMzZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9lYmJhYzktZmVlNy00ZjNiLThjZDUt N2E0MTI1NGVhYWNhLzEvdHlXSXdBN3ZjVmdKNjFfZGJXY1h6Q2pBMzZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9lYmJhYzktZmVlNy00ZjNiLThjZDUtN2E0MTI1NGVhYWNh LzEvdHlXSXdBN3ZjVmdKNjFfZGJXY1h6Q2pBMzZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYO6ck3Va 3KC0DI0ecGUSvnt4bR9ZtIJ3TfB8m2uCIjoP9fkx96q8zuuh6q89k+r7kXyVVMD6 yacpJfne3eseEQy9EMscolfWF/ZTcc4UyeKzI4ITxh5zIQWrb/EFP+8zJouNs/L7 KVVyQxmsaJe+C3WddrHVb0vFsajJbG3kgEgByKmoxIon1gZZxMF17lq7nYUi1qfs RuKScCRLBksaoVY8LSgZy0NETsF7f8YgvYIz3FIpXZgyzHfZcRi0XuKNl5dEXFFs mqoT8me7yuGrsqqrvramgs0KlfzMKIGJlYNeRBMdLGqfFX3RxN5Ps13KEyYxORGm 4Ni4OmefGG16PA== -----END CERTIFICATE-----Generated at Mon Apr 28 04:16:17 2025 by rpki-client