$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft File: NPFybqS9bTyAka4MitGgPpHjWaI.mft (raw, json) Hash identifier: DclKmW5U0pSIxQUV1ac4gYhuuXsIXSYz5slHBy66crs= Subject key identifier: 78:93:5B:BF:6D:61:FF:59:E2:75:2D:33:BD:3E:A6:15:E6:37:50:E1 Authority key identifier: 34:F1:72:6E:A4:BD:6D:3C:80:91:AE:0C:8A:D1:A0:3E:91:E3:59:A2 Certificate issuer: /CN=34f1726ea4bd6d3c8091ae0c8ad1a03e91e359a2 Certificate serial: 01967DC6798EAA1A4E7909507860D94439C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft Manifest number: 124E Signing time: Mon 28 Apr 2025 19:01:21 +0000 Manifest this update: Mon 28 Apr 2025 19:01:21 +0000 Manifest next update: Tue 29 Apr 2025 19:01:21 +0000 Files and hashes: 1: 1-QRYDCk4GRkhhK94MTs5nmWBy_E.roa (hash: 0DMmysmCmz5ptQIzT31buoWW9naDewY16lMSk6nyNPM=) 2: 4_hN70Gn93YtNqyU6RsNlMbDtXc.roa (hash: peVwC9DiY5O5MpDM5td7h9VpXZKdL2e2Hkif7cNRbJM=) 3: 6RKHwkUGkLRE0nOS7i-phv0Y7b8.roa (hash: YNCF/KzAqV3Fo+hsWHR3r0AQecfE2O/ljxIxKeerc6E=) 4: NPFybqS9bTyAka4MitGgPpHjWaI.crl (hash: tVe8UMOT0+mdb6S/vba+RoqXMTfknc3sZaUefLAdFnQ=) 5: RZB6hhj_LzY-DO3DfmavoIAg3K8.roa (hash: 8fSztyIXmdrydCA2Hwo+fzHNQuQ8HachHnXLTdni/F4=) 6: V-ziVBTzF3yW8Qn17SkTQka0Z1w.roa (hash: dzI5Exw0Cav9WTDJa9bU3vaVrx3/DEAhAyNHw9d0Q+M=) 7: f9J3fcUkkHHcn80-VJtEBd6Rau4.roa (hash: JDi8khg5idPehoZbbOnLzz9O6Dz2cHDlR75V8A55UBk=) 8: m26Z4EdJjPTeKqQP4bLFsm0qZJo.roa (hash: NWpdZVKoDOS9cnbyZWpfcC92E8AFSl1SI5HiCmg5+Gg=) 9: mI_12gpPA1x4m56hwYP082Ar3JU.roa (hash: nTAzRPzpRleX8rbBjz+dEflffb+oOGW6DVQuLBf/K4c=) 10: oHw7wrhs1qz9tzh4TUZjM8oea6k.roa (hash: IIsyfj8tmjqckisgTytL6hssPf4b/V3+My7Zj1/h7d0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.crl rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 29 Apr 2025 15:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:7d:c6:79:8e:aa:1a:4e:79:09:50:78:60:d9:44:39:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34f1726ea4bd6d3c8091ae0c8ad1a03e91e359a2 Validity Not Before: Apr 28 19:01:21 2025 GMT Not After : Apr 29 19:01:21 2025 GMT Subject: CN=78935bbf6d61ff59e2752d33bd3ea615e63750e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c8:40:cd:6e:71:29:0a:b8:ec:28:d0:59:7b: 51:61:2b:6b:de:d7:38:1a:fd:88:93:21:e4:15:40: 7f:3e:89:da:15:a6:ca:0c:e0:1b:2d:ee:22:0e:c9: 07:81:17:e6:2b:9a:1e:5b:0f:bc:54:36:dc:b8:01: 04:a3:2c:dc:ee:15:f4:bd:ab:ee:6e:f8:19:e7:db: c7:95:5a:38:6f:28:5b:fd:46:f7:c1:4f:03:02:6e: e4:59:71:35:b8:7a:90:6b:69:46:1f:c9:2b:37:1a: ad:3a:da:0f:da:18:75:86:3e:1c:91:fc:c6:d1:6e: 3b:ec:25:36:85:d8:51:96:d5:fe:04:30:2c:93:4e: ca:b2:ea:12:65:5f:a8:54:d6:62:43:93:d6:a8:7d: 64:c9:19:28:d7:27:f2:92:a4:7a:b6:ef:8d:85:1b: 80:31:3a:38:f8:59:d3:62:36:bd:42:6e:c1:06:2f: 4a:84:0f:97:f5:87:df:56:68:11:9b:6d:2e:50:42: 51:e3:61:1f:a7:9f:b8:5d:0e:96:e5:63:d3:07:a6: e6:cc:79:6d:0e:b1:a5:96:0e:da:42:d4:2c:d5:26: 3e:51:73:a6:e8:10:46:b7:c7:28:c9:10:76:ae:39: 24:94:93:b5:b6:76:4a:81:1e:53:e5:bd:77:c7:11: b4:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:93:5B:BF:6D:61:FF:59:E2:75:2D:33:BD:3E:A6:15:E6:37:50:E1 X509v3 Authority Key Identifier: keyid:34:F1:72:6E:A4:BD:6D:3C:80:91:AE:0C:8A:D1:A0:3E:91:E3:59:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:ff:23:a4:ad:66:21:f6:b8:cf:de:67:7d:3c:a9:64:c6:e9: e6:2b:3d:1b:80:c7:1d:66:ba:e4:d9:18:27:54:00:4a:86:a3: d5:fe:24:e4:5d:61:7f:8b:d4:22:2f:a4:20:c7:32:40:d2:66: 12:80:aa:36:19:06:b5:1b:d5:fb:3a:07:37:91:41:c3:1e:3b: db:74:54:c8:1a:78:95:95:eb:5e:11:b1:7f:a6:af:0f:7f:7c: ff:70:ea:8c:95:c2:30:56:ca:2f:80:c4:00:92:df:18:3d:66: 44:07:23:27:78:cd:d6:c8:ce:a9:b9:63:9e:47:05:f8:7f:ec: 23:46:4e:ca:a4:d4:9c:73:d0:16:67:09:5c:17:f9:ce:b6:a9: 33:56:4f:49:49:53:b3:d5:79:b0:7a:49:2a:7d:99:a7:f6:27: e2:9c:4f:13:c7:a6:f7:63:49:d1:a9:4e:a9:eb:8c:2e:64:89: 19:6a:9e:3a:97:af:b1:b1:32:f1:d9:44:f6:db:16:16:30:d8: a0:82:91:4e:2b:79:fc:1e:7d:ed:f2:13:ae:86:f2:7a:44:1a: 8f:ce:6e:7c:c4:6f:4f:e0:1f:46:d3:8a:e5:b3:e2:53:b3:39: a3:87:50:7e:54:d0:b0:bf:38:4e:bf:e9:06:57:e2:b1:d6:5c: 2e:0b:78:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZ9xnmOqhpOeQlQeGDZRDnBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0ZjE3MjZlYTRiZDZkM2M4MDkxYWUwYzhhZDFhMDNlOTFl MzU5YTIwHhcNMjUwNDI4MTkwMTIxWhcNMjUwNDI5MTkwMTIxWjAzMTEwLwYDVQQD Eyg3ODkzNWJiZjZkNjFmZjU5ZTI3NTJkMzNiZDNlYTYxNWU2Mzc1MGUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMhAzW5xKQq47CjQWXtRYStr3tc4 Gv2IkyHkFUB/PonaFabKDOAbLe4iDskHgRfmK5oeWw+8VDbcuAEEoyzc7hX0vavu bvgZ59vHlVo4byhb/Ub3wU8DAm7kWXE1uHqQa2lGH8krNxqtOtoP2hh1hj4ckfzG 0W477CU2hdhRltX+BDAsk07KsuoSZV+oVNZiQ5PWqH1kyRko1yfykqR6tu+NhRuA MTo4+FnTYja9Qm7BBi9KhA+X9YffVmgRm20uUEJR42Efp5+4XQ6W5WPTB6bmzHlt DrGllg7aQtQs1SY+UXOm6BBGt8coyRB2rjkklJO1tnZKgR5T5b13xxG0xwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHiTW79tYf9Z4nUtM70+phXmN1DhMB8GA1UdIwQY MBaAFDTxcm6kvW08gJGuDIrRoD6R41miMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlBGeWJxUzliVHlBa2E0TWl0R2dQcEhqV2FJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9lZjhlODQtOTE2MS00MDJjLTgxYWQt ZThlOGQyZmU3MGZlLzEvTlBGeWJxUzliVHlBa2E0TWl0R2dQcEhqV2FJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9lZjhlODQtOTE2MS00MDJjLTgxYWQtZThlOGQyZmU3MGZl LzEvTlBGeWJxUzliVHlBa2E0TWl0R2dQcEhqV2FJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALP8jpK1m Ifa4z95nfTypZMbp5is9G4DHHWa65NkYJ1QASoaj1f4k5F1hf4vUIi+kIMcyQNJm EoCqNhkGtRvV+zoHN5FBwx4723RUyBp4lZXrXhGxf6avD398/3DqjJXCMFbKL4DE AJLfGD1mRAcjJ3jN1sjOqbljnkcF+H/sI0ZOyqTUnHPQFmcJXBf5zrapM1ZPSUlT s9V5sHpJKn2Zp/Yn4pxPE8em92NJ0alOqeuMLmSJGWqeOpevsbEy8dlE9tsWFjDY oIKRTit5/B597fITrobyekQaj85ufMRvT+AfRtOK5bPiU7M5o4dQflTQsL84Tr/p BlfisdZcLgt4xg== -----END CERTIFICATE-----Generated at Tue Apr 29 01:22:41 2025 by rpki-client