$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft File: KIVYUqS80b8eyBPzwTsPHzcvOXE.mft (raw, json) Hash identifier: bWO4L3UIDSdt4wEFMKQbSoM5eRO0wyvRf7jgMsWWxzU= Subject key identifier: CB:A3:96:A5:77:43:F8:3D:5D:55:5C:80:C0:B5:C5:23:85:A1:F5:30 Authority key identifier: 28:85:58:52:A4:BC:D1:BF:1E:C8:13:F3:C1:3B:0F:1F:37:2F:39:71 Certificate issuer: /CN=28855852a4bcd1bf1ec813f3c13b0f1f372f3971 Certificate serial: 0196895BB4A594348AB502C7DF07B99D6AA0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft Manifest number: 1534 Signing time: Thu 01 May 2025 01:00:10 +0000 Manifest this update: Thu 01 May 2025 01:00:10 +0000 Manifest next update: Fri 02 May 2025 01:00:10 +0000 Files and hashes: 1: 0QJCOt-53tnbei-BBNpPRqd93lA.roa (hash: SxpfZus2XMCNBzDteZgXEjPeCC02JP1wgshR4fmnE74=) 2: KIVYUqS80b8eyBPzwTsPHzcvOXE.crl (hash: BHcD9+ozeFLuGwOjcs7hrHW7hiuVDF4XVYUvAIIr5ec=) 3: PQE-MW_ft7NOulI3nuA3Ttqd9zM.roa (hash: tS26IQNDjX0XuEf3rRKTOSs366e2zvh7MCyAP+zqiiA=) 4: S87F6thVxwCZscy_VovEDJcB8HM.roa (hash: E4K0X+XV1CxBX46EYMwd+oDIHEvCmqQAB6iKbCet77s=) 5: VTDj_r3bXLmjYM4IT8BX3iK7e9U.roa (hash: ekN4wi00dh7ioFcXBha/Y6Vr/ITetrwuauLICkt3Dpw=) 6: aer8a26VEmmy2Cy7_8hze3JY1ak.roa (hash: 7q3S2TY/+jxhv9AP9xHCanK4ZXfND8pGXb4R0LjZhXM=) 7: kgTLGOsUBsYOKbWXNc3cqPzwgb4.roa (hash: ST4s4BtTU2rODHYfq5kax5E8/vHW7595/W9otyGkb80=) 8: pL_tDJmTdtKmoEEnGB3Z5Sqfoww.roa (hash: H1JfkznIuDny5RXJezYE6vZGSTmymf6VReWBmSqQlss=) 9: r35yid910YnMRVJ0dohWLbFg9fA.roa (hash: R0fRzKPoSAK4VI2tCDaL9PTR+axXctfnY3qc7wzVVJQ=) 10: zP8qZCQuiGnyynXqFEworI-l4Kk.roa (hash: 8v3+9BYp2qaRN+mDEqf3MiLHJ2vk/UAqK532lYFyFAk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.crl rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 May 2025 21:27:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:89:5b:b4:a5:94:34:8a:b5:02:c7:df:07:b9:9d:6a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28855852a4bcd1bf1ec813f3c13b0f1f372f3971 Validity Not Before: May 1 01:00:10 2025 GMT Not After : May 2 01:00:10 2025 GMT Subject: CN=cba396a57743f83d5d555c80c0b5c52385a1f530 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:5b:2d:4b:7a:fc:12:6f:8a:39:ab:ad:76:b2: 5e:a0:01:9d:ed:02:30:ca:05:65:7d:fd:53:a9:9b: af:89:01:98:8d:92:a8:53:9c:ab:0a:7d:c9:ed:6f: 98:7a:ec:8d:5f:cf:4e:09:ec:29:d5:8c:67:06:5c: 2b:b9:e0:28:94:e6:6b:60:31:ae:f2:55:2f:91:30: a1:f0:63:5a:4e:d0:f1:d1:74:6c:12:c0:71:9a:db: 31:5a:d9:9e:4f:8b:f0:a4:17:f1:68:f1:03:9a:d1: a6:b8:d5:39:d8:cd:6c:ae:81:30:81:f2:c4:fb:8b: 37:95:b4:b4:6c:c1:9e:fa:b8:99:3b:89:34:ba:8b: 79:a5:e1:6d:f7:69:4b:18:ef:f6:71:e4:e6:33:3d: 09:5f:28:ec:53:72:b6:ed:c4:fa:01:1c:e8:fe:89: b9:b3:3c:53:41:de:7a:6d:e1:23:1e:64:f6:5f:7d: f9:27:da:9f:2b:84:1f:07:01:e1:f3:f2:43:17:bc: 21:96:9f:2c:ad:86:e3:7f:8c:b3:31:74:ae:8b:f4: c5:79:50:6b:40:7c:62:83:fb:a5:1a:e9:ec:b7:2b: b3:ec:67:d3:a5:28:5d:fb:1a:e8:aa:ed:28:fa:54: 51:80:a1:1e:b5:47:ec:cc:71:ba:5c:a7:66:09:80: 58:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:A3:96:A5:77:43:F8:3D:5D:55:5C:80:C0:B5:C5:23:85:A1:F5:30 X509v3 Authority Key Identifier: keyid:28:85:58:52:A4:BC:D1:BF:1E:C8:13:F3:C1:3B:0F:1F:37:2F:39:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:1a:fd:3b:4b:8c:e3:88:18:52:e1:7f:de:2a:4f:9f:5c:aa: 09:59:e6:89:2e:64:f5:bd:d4:c8:13:e1:b7:6d:d4:02:3f:35: 95:49:aa:59:09:6c:4a:5e:d1:40:d1:ad:ec:94:7a:ce:ab:30: 68:fc:a1:ce:46:b1:87:d0:62:c8:33:be:85:3b:44:54:a2:58: f7:c5:45:46:14:de:be:e4:0f:20:c9:36:94:ae:26:5d:b6:70: a0:7d:db:32:5c:38:65:64:2d:44:3f:6c:42:59:d1:09:b9:e9: 56:cf:61:a9:5f:55:e1:b4:7e:64:1a:0b:18:d0:80:a5:73:0e: 7b:0c:03:e6:70:0a:e0:a2:41:ed:75:46:32:91:d4:7e:e4:2a: c3:7d:2e:34:44:92:1c:b7:e5:3e:49:d9:af:32:e0:5d:e1:c0: af:89:4d:ac:c1:f6:cf:61:6f:20:6b:43:6e:cd:2d:a3:9c:7d: 97:80:83:c6:9e:89:63:a1:40:fd:c1:9b:5c:6a:22:a8:7d:bd: 50:f8:7e:94:20:ba:99:3c:ae:ce:b0:01:82:7d:88:0d:1a:01: de:fb:65:c5:47:3b:09:d8:91:e5:bf:2c:29:41:f4:a5:c1:7b: 48:c8:f9:ef:03:ce:e0:2e:17:22:46:44:34:87:cc:cd:c6:00: 58:3b:df:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZaJW7SllDSKtQLH3we5nWqgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4ODU1ODUyYTRiY2QxYmYxZWM4MTNmM2MxM2IwZjFmMzcy ZjM5NzEwHhcNMjUwNTAxMDEwMDEwWhcNMjUwNTAyMDEwMDEwWjAzMTEwLwYDVQQD EyhjYmEzOTZhNTc3NDNmODNkNWQ1NTVjODBjMGI1YzUyMzg1YTFmNTMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFstS3r8Em+KOautdrJeoAGd7QIw ygVlff1TqZuviQGYjZKoU5yrCn3J7W+YeuyNX89OCewp1YxnBlwrueAolOZrYDGu 8lUvkTCh8GNaTtDx0XRsEsBxmtsxWtmeT4vwpBfxaPEDmtGmuNU52M1sroEwgfLE +4s3lbS0bMGe+riZO4k0uot5peFt92lLGO/2ceTmMz0JXyjsU3K27cT6ARzo/om5 szxTQd56beEjHmT2X335J9qfK4QfBwHh8/JDF7whlp8srYbjf4yzMXSui/TFeVBr QHxig/ulGunstyuz7GfTpShd+xroqu0o+lRRgKEetUfszHG6XKdmCYBYswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMujlqV3Q/g9XVVcgMC1xSOFofUwMB8GA1UdIwQY MBaAFCiFWFKkvNG/HsgT88E7Dx83LzlxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0lWWVVxUzgwYjhleUJQendUc1BIemN2T1hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8wZTM2ZmMtYmEwYi00Y2U2LWFmNmEt NzA0NDYzZWJhZDM2LzEvS0lWWVVxUzgwYjhleUJQendUc1BIemN2T1hFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8wZTM2ZmMtYmEwYi00Y2U2LWFmNmEtNzA0NDYzZWJhZDM2 LzEvS0lWWVVxUzgwYjhleUJQendUc1BIemN2T1hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUBr9O0uM 44gYUuF/3ipPn1yqCVnmiS5k9b3UyBPht23UAj81lUmqWQlsSl7RQNGt7JR6zqsw aPyhzkaxh9BiyDO+hTtEVKJY98VFRhTevuQPIMk2lK4mXbZwoH3bMlw4ZWQtRD9s QlnRCbnpVs9hqV9V4bR+ZBoLGNCApXMOewwD5nAK4KJB7XVGMpHUfuQqw30uNESS HLflPknZrzLgXeHAr4lNrMH2z2FvIGtDbs0to5x9l4CDxp6JY6FA/cGbXGoiqH29 UPh+lCC6mTyuzrABgn2IDRoB3vtlxUc7CdiR5b8sKUH0pcF7SMj57wPO4C4XIkZE NIfMzcYAWDvf2g== -----END CERTIFICATE-----Generated at Thu May 1 06:49:05 2025 by rpki-client