$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft File: Njdp-GRKWnGK5isFjdH7YstaPCA.mft (raw, json) Hash identifier: VZ1YKH8w2ggQwvv6XDGcqLW5NUEPAGv9ypakIRkd3wU= Subject key identifier: D6:C5:93:CE:9B:6A:2E:D1:D0:3F:1E:F6:A6:89:87:6F:0D:85:B9:4D Authority key identifier: 36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20 Certificate issuer: /CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20 Certificate serial: 01967A1FB986DE2C4005A996BCEDA3E7136A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft Manifest number: 1162 Signing time: Mon 28 Apr 2025 02:00:21 +0000 Manifest this update: Mon 28 Apr 2025 02:00:21 +0000 Manifest next update: Tue 29 Apr 2025 02:00:21 +0000 Files and hashes: 1: 6KojKGt8m1JZYflLectBk9G6KyQ.roa (hash: f7oRXtNmZrUg7ECYCX58KaB9kZ/BYKNvyNqrr7ZA0pg=) 2: 9_VTzPNMtq6bRoN_2gQPbFirB_4.roa (hash: GFcx39JAffdglXqipIFTeQRGB4wpQ89alaTRPqJNkCk=) 3: 9d7-oiu-mBjw4z1zBB1dh7CSH94.roa (hash: NSPVHDDpPzrpqQjtgOJxVDl+4YeQklgmMnIIlaE/zH4=) 4: BxI-z_iKAoRv-KkoQfmyFBd2rBU.roa (hash: azqV4pSZAum5oUwc2nR9O4azmHBN9hS6/dWIvs6n6Yk=) 5: I9XUisFoxGtL5nlEyDkRm9SxnHU.roa (hash: CRR3lDaaR4JHFLVIWiAceY/tOhJb5JmxYXyKyqN2k7o=) 6: JwtLcTu5YVfj_v6EYmBkVEJOCSk.roa (hash: Z/uV55YxgNv0N3LLBrV+q7AxLOdh39PbZ8CIfU7Xb24=) 7: Njdp-GRKWnGK5isFjdH7YstaPCA.crl (hash: ANkmOiWsGkyQkmyhy+fHPRSNobaSUMmWOPE/dSgjTHM=) 8: UB0nHtcN2JqEpsBiE2dgnMbsFmA.roa (hash: /6u2jCfdxJpMMlfUjlpcIXqMInwiMRNkGcmBxEuYZxo=) 9: lVLXkjE5u336DUNe5-yOssKJPTU.roa (hash: LZfaMzNKKI5KTD1Ka0mwOqPdg88OEyiRswrf9PDppVQ=) 10: mMGXQdchjm-1k_0cqBgKyEDxRR4.roa (hash: 3upgVfgQw3wj9y0X5oDRyiDppWmgLqIOtqf6K+MUlIM=) 11: nI4pg8TJwdBGvcOSMEwiKdACRgY.roa (hash: e4fjV36QQP3EEWEcje1wCzIbRILO6c8V4Bt3WpH8Zcc=) 12: o5rwtBSGBeueFoqXJnECfg6cmYA.roa (hash: TLPcNxEKVGJq+q8J97N3QnvxQz4N/IjsjG2sJIGRFeA=) 13: okDig36WatgfOljJ7YAQ7f4qAwI.roa (hash: 9F0Jk3aBVBsMc/BBPP2ZGmKOPXIvDvI2DUUSrfyHD70=) 14: pVY_FGIDhlEf6vs7MShMAVBNlQk.roa (hash: 36C0/NjrkK4EvhEr+5+ZgIKhG5JQMFDTmhg9XNYss9Q=) 15: snSvPYVkGepL_9GgsNIGnoIWw44.roa (hash: T0HMAvigAIpTuY/J9VuaKFj34+4Tc7VdD2Bhy8snzbA=) 16: uiYUyTWWE4PZpkpKN5LB2EKpPu0.roa (hash: z03Urv4xQycLb08btj7gfHzMCKzXb1kRu0QwraJJBFQ=) 17: xZ2Mzu_3c40aDFLd62CdvQWebug.roa (hash: xKY3AuHc8X/lxha18soPYIUuGtqbxocRZavr4da/On8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Apr 2025 23:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:7a:1f:b9:86:de:2c:40:05:a9:96:bc:ed:a3:e7:13:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20 Validity Not Before: Apr 28 02:00:21 2025 GMT Not After : Apr 29 02:00:21 2025 GMT Subject: CN=d6c593ce9b6a2ed1d03f1ef6a689876f0d85b94d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:95:a6:47:4b:7d:9c:65:ae:90:04:42:73:a1: e0:ef:c0:8b:bd:ff:45:7d:d5:2d:62:8a:59:00:78: dd:e8:e7:ab:f8:66:ce:16:47:25:42:f3:ac:89:2b: 16:89:ad:4b:43:a9:1f:e9:01:76:57:70:44:1a:c0: c9:2f:d3:7d:0a:66:dd:f7:4b:1a:d7:46:95:97:03: 46:99:2d:28:84:82:74:cf:ce:4c:63:55:eb:dc:cf: 83:c1:6e:36:7a:96:38:af:c0:0b:8a:d8:76:19:74: b7:06:2b:67:f7:d5:97:38:99:c0:1d:e3:ad:fa:4d: bc:a4:ce:8d:45:f7:ee:dd:3a:97:64:3e:bf:df:be: 93:2b:cc:52:e6:54:34:e0:93:95:14:bd:79:01:3b: 91:f4:64:21:9d:96:8f:86:27:6b:10:e5:a5:8b:4a: 74:9a:f9:df:90:31:ee:0d:7f:2a:1d:5e:0a:6c:1b: 24:c2:2f:ed:13:fe:96:5d:f2:af:99:90:6c:3e:46: 4d:f7:da:33:db:fd:66:26:28:dc:57:6e:ae:84:4f: 8c:61:aa:a7:6f:24:b9:e1:42:af:de:fa:8a:c6:9d: 6a:e0:02:fe:53:19:6d:2b:95:4f:6d:cb:f1:bf:98: 18:bd:e2:93:c2:dd:d7:65:67:b8:2d:01:21:4a:eb: e1:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:C5:93:CE:9B:6A:2E:D1:D0:3F:1E:F6:A6:89:87:6F:0D:85:B9:4D X509v3 Authority Key Identifier: keyid:36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:7c:db:5a:69:86:1f:09:d4:df:cf:03:49:f9:07:7a:ee:ca: c6:12:4b:c8:35:f0:9c:71:80:3c:63:85:59:b8:5c:42:c3:38: 04:67:2b:b0:82:cd:e8:9c:d9:f5:c4:c5:7d:ce:75:8e:65:2a: 12:76:0b:f8:6d:fb:30:46:84:78:b1:76:3b:af:90:48:11:af: 16:9b:0c:5d:92:7f:ea:b2:bb:70:ac:1d:29:13:ca:a0:04:b0: 42:64:25:23:e9:92:45:b8:ee:92:df:78:a2:f5:1c:fd:55:b4: 50:fd:e4:21:b6:14:7b:1c:0c:6e:6b:86:b4:de:f8:91:ea:b1: 6c:9d:79:de:3b:ef:7d:e7:da:9d:0e:ae:38:c6:77:d1:5f:ef: 06:14:6a:46:80:a7:ea:7b:4d:3d:70:38:ae:83:3d:43:5b:55: 92:ae:95:39:af:dc:e0:0a:f6:05:25:61:f3:6f:c3:18:ae:a5: d9:fe:62:19:ae:25:8b:c9:d9:61:70:ef:90:bd:08:2b:5d:4b: fc:09:1c:73:d5:ea:84:98:66:4f:5c:72:93:90:96:30:37:73: 3c:11:d7:7d:5c:63:1c:67:4d:e5:b4:ba:61:cd:eb:5a:e5:d8: ba:a3:58:65:92:52:f0:25:ad:2a:cc:4b:7d:4c:5f:bf:ff:93: 68:f0:d8:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZ6H7mG3ixABamWvO2j5xNqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2Mzc2OWY4NjQ0YTVhNzE4YWU2MmIwNThkZDFmYjYyY2I1 YTNjMjAwHhcNMjUwNDI4MDIwMDIxWhcNMjUwNDI5MDIwMDIxWjAzMTEwLwYDVQQD EyhkNmM1OTNjZTliNmEyZWQxZDAzZjFlZjZhNjg5ODc2ZjBkODViOTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpWmR0t9nGWukARCc6Hg78CLvf9F fdUtYopZAHjd6Oer+GbOFkclQvOsiSsWia1LQ6kf6QF2V3BEGsDJL9N9Cmbd90sa 10aVlwNGmS0ohIJ0z85MY1Xr3M+DwW42epY4r8ALith2GXS3Bitn99WXOJnAHeOt +k28pM6NRffu3TqXZD6/376TK8xS5lQ04JOVFL15ATuR9GQhnZaPhidrEOWli0p0 mvnfkDHuDX8qHV4KbBskwi/tE/6WXfKvmZBsPkZN99oz2/1mJijcV26uhE+MYaqn byS54UKv3vqKxp1q4AL+UxltK5VPbcvxv5gYveKTwt3XZWe4LQEhSuvhbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNbFk86bai7R0D8e9qaJh28NhblNMB8GA1UdIwQY MBaAFDY3afhkSlpxiuYrBY3R+2LLWjwgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmpkcC1HUktXbkdLNWlzRmpkSDdZc3RhUENBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8wZjhmZWEtZjAwYS00NDE1LWIzOTYt Mzk5ZmM5NjkzYjIyLzEvTmpkcC1HUktXbkdLNWlzRmpkSDdZc3RhUENBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8wZjhmZWEtZjAwYS00NDE1LWIzOTYtMzk5ZmM5NjkzYjIy LzEvTmpkcC1HUktXbkdLNWlzRmpkSDdZc3RhUENBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADnzbWmmG HwnU388DSfkHeu7KxhJLyDXwnHGAPGOFWbhcQsM4BGcrsILN6JzZ9cTFfc51jmUq EnYL+G37MEaEeLF2O6+QSBGvFpsMXZJ/6rK7cKwdKRPKoASwQmQlI+mSRbjukt94 ovUc/VW0UP3kIbYUexwMbmuGtN74keqxbJ153jvvfefanQ6uOMZ30V/vBhRqRoCn 6ntNPXA4roM9Q1tVkq6VOa/c4Ar2BSVh82/DGK6l2f5iGa4li8nZYXDvkL0IK11L /Akcc9XqhJhmT1xyk5CWMDdzPBHXfVxjHGdN5bS6Yc3rWuXYuqNYZZJS8CWtKsxL fUxfv/+TaPDYxg== -----END CERTIFICATE-----Generated at Mon Apr 28 09:26:12 2025 by rpki-client