$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.mft File: BpLF8WMTZTQlvEZxBYdeOil8_5s.mft (raw, json) Hash identifier: 43uu7qriR4YvB7bIA6gXsuvYSMrHUgB2gD7/dvJ+Goc= Subject key identifier: 43:03:0A:5A:1A:D1:BF:1C:0E:8F:9C:EC:7A:31:E2:25:44:DF:6E:88 Authority key identifier: 06:92:C5:F1:63:13:65:34:25:BC:46:71:05:87:5E:3A:29:7C:FF:9B Certificate issuer: /CN=0692c5f16313653425bc467105875e3a297cff9b Certificate serial: 0196865AC4D64AE0A2D5ADB5F56F34F258BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BpLF8WMTZTQlvEZxBYdeOil8_5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.mft Manifest number: 07EB Signing time: Wed 30 Apr 2025 11:00:17 +0000 Manifest this update: Wed 30 Apr 2025 11:00:17 +0000 Manifest next update: Thu 01 May 2025 11:00:17 +0000 Files and hashes: 1: 6m4iBU1uV9OjtT-yI0kHDyi4gLg.roa (hash: N5jGzrk7sta0axX9QvqTjHgaFwV4arIObuPbt2KJNnM=) 2: 7tTZk2wCmakp5M5T1YuiU8TuWxw.roa (hash: 8JeqZuwRL8gNhmaq+aEKdQ907Eg7DEpF3/RheOxRpLQ=) 3: 84TrX0qs1Y4yZ95W-q51Grc9rH0.roa (hash: sAIYXtIgwoe7qa6SiMh9Mq7V0vDYEf6NPqM5EjqisbM=) 4: BpLF8WMTZTQlvEZxBYdeOil8_5s.crl (hash: K6xTrGR47hfEEHh4T6yKmHcn4NHa8WkCm1rz52iZ/LI=) 5: DH2KmHptf0XCrxVYDl8SWJ6n_OU.roa (hash: 1p3/Uw0Hzg9UQAF7EIOu+m40aaRU5MBeT7UYxTAJl5M=) 6: I0lZ-wnGmJHIeWk4JSccdYLGI-0.roa (hash: LnR75ICh/pu9YTgE61/TkYN/sNwF0ls7eWnRXUdZNeI=) 7: Qgkw5GtNRcsOFSShf-z0xF_tI6I.roa (hash: mZ0NWqp/jNCXFtNZo5WbQ6xy8wKTYFTecNdM8OwQcds=) 8: _6aivCsAWH-kqctPZhR5amDxfsA.roa (hash: nWAJSN6GSWrgvbg0VuNNKDg0OVs+juuAy8NmC7uqE34=) 9: acXjyXZbDzNfFna5ZWRHDz6K5YE.roa (hash: sm9lkJZIavBC2tJvS1A50JKwZEAycxeog0lweVtHcXM=) 10: e31KG_8dad-8ny4PFtbT297H7Sw.roa (hash: GQmunQnH91NAJBx06ug5Vq/w7qs39J3e7sMnlc2OutE=) 11: ej-rBCJmnu-miAXBE5PIqlt8TFo.roa (hash: Z10wztRjBSEGOvVc7tXz4TILdxZp89J4+J08gFrTvVU=) 12: gcpaoxI47uAbfYR_M1Dl9LctMNk.roa (hash: hG0WyItsQE7UjKos3HOIuobdbMTAqgbbv6pzl/cN/6g=) 13: pSbX-PyBbCbb6sLnIu1jAWYX5ak.roa (hash: GoC5K97gl9mRDyYEwiwyowaJojmTfgrX+bjBIRbHQpg=) 14: xe-KS40JXwA4DSnnilL2aYekU18.roa (hash: trUq9aYHMLBwRD59FTvYVzHcchsIZi2f2vJplQh7+rM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.mft rsync://rpki.ripe.net/repository/DEFAULT/BpLF8WMTZTQlvEZxBYdeOil8_5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 May 2025 09:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:86:5a:c4:d6:4a:e0:a2:d5:ad:b5:f5:6f:34:f2:58:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0692c5f16313653425bc467105875e3a297cff9b Validity Not Before: Apr 30 11:00:17 2025 GMT Not After : May 1 11:00:17 2025 GMT Subject: CN=43030a5a1ad1bf1c0e8f9cec7a31e22544df6e88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:83:2f:50:60:f0:c6:22:cb:e7:b0:4c:43:8c: 67:2d:b3:ff:3d:29:a5:ff:57:00:18:82:2e:2e:68: de:ca:a6:59:44:d3:a6:59:01:13:56:d6:a9:9d:df: da:2a:57:46:d6:23:d3:dd:a5:8f:c2:e7:64:88:f1: 3b:94:f5:4f:67:bf:e4:22:f6:71:93:17:f8:f3:8c: eb:19:c7:de:9f:65:91:45:b1:17:0e:f6:01:ec:bd: 2f:ff:ea:60:40:f1:ea:4d:e2:fb:06:18:b9:6a:26: a8:8c:59:11:43:67:d1:f1:04:53:d4:d6:dc:cb:dc: 8d:f0:ed:69:e8:01:61:44:03:18:ed:22:af:de:0f: 0d:ed:e1:ad:f9:28:e0:e1:0a:bd:d8:f2:06:82:ea: 38:12:84:23:51:c9:96:92:3b:fd:cd:f2:e0:10:9c: 89:a5:15:bc:a7:e8:ee:e5:41:4a:b8:7f:70:2f:f0: 09:14:06:5b:4c:49:15:1d:59:96:fd:b2:6b:2e:77: 78:e2:fa:53:e7:9d:f5:98:fc:b1:65:f2:de:89:14: aa:c4:4a:fb:e2:4a:ad:d2:bf:6c:35:20:93:be:b8: b2:f0:0a:9a:c0:ca:5b:b3:d0:d1:e4:69:f8:bf:1e: d4:49:6b:24:ec:07:49:98:ab:b4:dc:72:07:2e:de: 50:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:03:0A:5A:1A:D1:BF:1C:0E:8F:9C:EC:7A:31:E2:25:44:DF:6E:88 X509v3 Authority Key Identifier: keyid:06:92:C5:F1:63:13:65:34:25:BC:46:71:05:87:5E:3A:29:7C:FF:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpLF8WMTZTQlvEZxBYdeOil8_5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:24:e4:03:e1:02:2e:38:06:4c:60:71:21:b8:02:e5:78:06: 6a:81:0f:e1:46:eb:78:8a:65:d5:73:c3:d2:4a:df:52:cb:29: 90:2e:8e:43:a4:5a:e7:ca:10:fa:35:af:54:dd:46:2c:a6:6d: 41:f1:b6:2c:66:5c:52:d1:d9:af:56:b7:d7:6e:f5:8a:1b:43: 89:36:bd:57:46:b0:35:d0:99:16:c0:e5:db:42:20:7c:c9:70: c2:5a:26:77:40:fb:9f:b1:25:51:87:fa:46:c2:4d:f2:9f:55: a9:94:f4:0a:64:ab:f8:40:91:46:e3:60:71:e9:f6:55:e4:59: 25:84:21:4c:4c:4c:2e:5f:04:4e:eb:fc:af:6e:52:db:df:63: 32:81:05:3d:bb:73:db:16:38:19:2c:fe:67:6d:fa:b9:d8:d9: 60:cf:3c:16:d6:47:8b:7f:35:1e:7a:cf:95:55:fe:d3:39:1d: 7b:42:2c:36:59:f3:8d:37:b7:71:59:9f:ac:76:d6:38:60:fd: dc:15:31:ae:b0:12:63:d7:41:d4:8f:97:d8:97:4d:1c:b6:04: cb:bb:ae:8d:38:f9:4a:62:dd:3c:6c:dc:fd:e3:1c:16:88:2e: 0c:b2:ad:d3:4c:80:85:f8:fc:4e:6b:c0:d2:03:ee:58:5b:db: d6:4c:5e:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZaGWsTWSuCi1a219W808li6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2OTJjNWYxNjMxMzY1MzQyNWJjNDY3MTA1ODc1ZTNhMjk3 Y2ZmOWIwHhcNMjUwNDMwMTEwMDE3WhcNMjUwNTAxMTEwMDE3WjAzMTEwLwYDVQQD Eyg0MzAzMGE1YTFhZDFiZjFjMGU4ZjljZWM3YTMxZTIyNTQ0ZGY2ZTg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4MvUGDwxiLL57BMQ4xnLbP/PSml /1cAGIIuLmjeyqZZRNOmWQETVtapnd/aKldG1iPT3aWPwudkiPE7lPVPZ7/kIvZx kxf484zrGcfen2WRRbEXDvYB7L0v/+pgQPHqTeL7Bhi5aiaojFkRQ2fR8QRT1Nbc y9yN8O1p6AFhRAMY7SKv3g8N7eGt+Sjg4Qq92PIGguo4EoQjUcmWkjv9zfLgEJyJ pRW8p+ju5UFKuH9wL/AJFAZbTEkVHVmW/bJrLnd44vpT5531mPyxZfLeiRSqxEr7 4kqt0r9sNSCTvriy8AqawMpbs9DR5Gn4vx7USWsk7AdJmKu03HIHLt5QYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEMDCloa0b8cDo+c7Hox4iVE326IMB8GA1UdIwQY MBaAFAaSxfFjE2U0JbxGcQWHXjopfP+bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnBMRjhXTVRaVFFsdkVaeEJZZGVPaWw4XzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS83Nzk5MjgtODgxYy00MzNhLWIyNDMt YzlmNTdlOTU5ZWYxLzEvQnBMRjhXTVRaVFFsdkVaeEJZZGVPaWw4XzVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS83Nzk5MjgtODgxYy00MzNhLWIyNDMtYzlmNTdlOTU5ZWYx LzEvQnBMRjhXTVRaVFFsdkVaeEJZZGVPaWw4XzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALCTkA+EC LjgGTGBxIbgC5XgGaoEP4UbreIpl1XPD0krfUsspkC6OQ6Ra58oQ+jWvVN1GLKZt QfG2LGZcUtHZr1a31271ihtDiTa9V0awNdCZFsDl20IgfMlwwlomd0D7n7ElUYf6 RsJN8p9VqZT0CmSr+ECRRuNgcen2VeRZJYQhTExMLl8ETuv8r25S299jMoEFPbtz 2xY4GSz+Z236udjZYM88FtZHi381HnrPlVX+0zkde0IsNlnzjTe3cVmfrHbWOGD9 3BUxrrASY9dB1I+X2JdNHLYEy7uujTj5SmLdPGzc/eMcFoguDLKt00yAhfj8TmvA 0gPuWFvb1kxe7w== -----END CERTIFICATE-----Generated at Wed Apr 30 14:25:59 2025 by rpki-client