$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.mft File: i0eqCfLGEPb0S051wc2dzTiE5V0.mft (raw, json) Hash identifier: GoAkqBZDptqShri6gZMw8w7n/NSIaRpud0tzj6Nkux0= Subject key identifier: B4:E1:DB:0D:34:A8:16:F0:0A:4C:83:C5:09:0A:7A:91:AE:CC:31:ED Authority key identifier: 8B:47:AA:09:F2:C6:10:F6:F4:4B:4E:75:C1:CD:9D:CD:38:84:E5:5D Certificate issuer: /CN=8b47aa09f2c610f6f44b4e75c1cd9dcd3884e55d Certificate serial: 01967F0F37B71EA3A6A322E7D1AE11DFC30B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.mft Manifest number: 056F Signing time: Tue 29 Apr 2025 01:00:25 +0000 Manifest this update: Tue 29 Apr 2025 01:00:25 +0000 Manifest next update: Wed 30 Apr 2025 01:00:25 +0000 Files and hashes: 1: 1N4Y-cxz_J8zvyVIPn4xaQ56W2I.roa (hash: LqNoYMeIHUvi7e8ZqSiPD8gSQPNLvRqFi/MU8NW82NY=) 2: 59PndGiGSGsbZj2RG0Ycf2mhgxQ.roa (hash: 4mRCrakJ34q1MdXD9vBIYWH6H5pZIK2v8drs+brvjAI=) 3: 6WgYdehy91JaGiXTQ4-mtet9hKA.roa (hash: k18cYqD3ZZMZ5W+a0Kjw8aqcJhfy210LAE8xFma2X2Y=) 4: TI__S_5wBSs76T2sPdddnNR3NI4.roa (hash: 1cgm9AfaKeKcFrBAUFYpRgSienV4cq0Pog28Pn4vsBo=) 5: ax82hmj304KQ6lsAdD5oZeQi8aQ.roa (hash: etYT+wmJ3v0dyDPK3kOFDbBh+/DHGm30j18qmZddn14=) 6: clWNFKcGPCSVI8IczoLVlzymSwE.roa (hash: kwC3djRgAXxGmhjo7j0gZC7YajpIcaKz89NjkpuMd6c=) 7: d_GmJYSiWtstngRCp4D-3Nytktc.roa (hash: b5QdQbGkypzupkHkl6NURfR0Tou888+YLeKDY72J/ww=) 8: i0eqCfLGEPb0S051wc2dzTiE5V0.crl (hash: +4gpHIvqunM2RXyXEjLxHLsbvU22QDT2I1bmMNH36xI=) 9: t3F8K-eKkpIig0xnri8gdWPYoUc.roa (hash: 0LMmNIPY61uLEOsd/F4vx4OEiYbCbnmZs1SeTx2VOHc=) 10: xCwC0ruPjNW76bEQ25__qiX8bTI.roa (hash: /PNuMEC0HX9r4nNg0Hwe56qDotvTcrptdJE+VRq+wv0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.crl rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.mft rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 29 Apr 2025 22:36:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:7f:0f:37:b7:1e:a3:a6:a3:22:e7:d1:ae:11:df:c3:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b47aa09f2c610f6f44b4e75c1cd9dcd3884e55d Validity Not Before: Apr 29 01:00:25 2025 GMT Not After : Apr 30 01:00:25 2025 GMT Subject: CN=b4e1db0d34a816f00a4c83c5090a7a91aecc31ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:56:7d:38:87:d5:41:db:18:c8:95:8d:81:5c: 32:58:2b:ea:9f:7d:42:3e:3a:9c:3d:3b:7d:fa:70: 43:c9:90:ca:74:78:46:da:9b:33:d0:83:c6:32:53: 13:34:64:ca:38:d8:5a:02:73:4e:ba:78:e9:cf:85: c2:a3:e7:5c:cd:67:b1:ab:97:43:cf:32:6a:3b:e2: 83:59:5f:6a:b7:54:92:24:1f:56:ff:88:5a:77:eb: 7f:9d:e0:f0:ad:a0:6f:61:bc:22:74:65:86:75:50: a7:a8:38:09:9c:92:60:f1:dc:1d:e1:ae:df:07:10: b5:2a:f1:11:8f:41:1a:2c:15:37:7b:b2:0c:f8:8b: 1b:40:80:ae:54:64:72:bf:44:6d:81:cd:a2:42:4e: 4b:73:a6:d3:b4:e5:5d:06:a6:c1:16:73:b4:ec:64: 44:ba:8e:b0:e5:6e:9e:ea:78:06:97:d0:b0:2d:59: 21:8a:e7:0b:34:01:ae:90:61:3e:02:6f:d2:f5:fe: 13:b2:79:a4:a7:a4:f4:9c:58:5a:6d:14:a9:62:03: f9:26:be:75:60:10:df:f5:87:6a:a0:d7:c5:f3:90: ad:13:59:2c:83:04:76:16:80:a9:6a:0c:01:29:b4: 46:85:31:0e:25:5f:81:fc:ec:8a:5b:37:63:b6:b0: 1a:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:E1:DB:0D:34:A8:16:F0:0A:4C:83:C5:09:0A:7A:91:AE:CC:31:ED X509v3 Authority Key Identifier: keyid:8B:47:AA:09:F2:C6:10:F6:F4:4B:4E:75:C1:CD:9D:CD:38:84:E5:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:37:e6:8e:cf:22:91:f2:65:df:b8:35:f6:b2:f7:70:5e:31: 5e:93:ca:5c:13:8e:7e:c6:9b:10:a3:4e:a8:f1:87:f5:5d:38: b4:d8:1d:03:41:61:07:03:c5:60:05:a4:e9:3f:be:70:8d:ba: ed:21:5b:ea:bd:c8:27:ba:72:96:e1:c1:11:4c:5c:b1:e9:5d: 47:de:83:3a:26:8a:bf:58:a9:89:cd:4a:79:50:b4:b4:e6:18: ea:23:c7:b5:be:f1:22:03:f6:4d:cd:e1:6c:c2:78:91:da:d9: 8c:3a:6b:ae:f5:32:a2:09:4f:df:76:51:a3:e6:bb:05:87:3a: 66:2c:96:be:70:22:f6:7e:96:dd:ea:21:a0:d7:e1:2c:73:ca: 4d:9c:4d:cd:0b:10:52:5f:e6:1b:64:65:e5:35:8a:8b:23:c1: 69:87:92:8a:b0:fd:78:5a:f6:ef:31:2e:78:05:4a:03:ca:06: 32:47:9a:e8:dd:83:dd:09:c4:24:b8:cb:b5:0d:13:8a:cf:fe: ee:7c:5b:13:e0:9b:66:90:aa:c7:05:24:8b:cd:35:6a:12:92: a7:6c:7c:a8:7e:e0:c3:50:42:bc:81:1a:44:c3:4a:e0:13:73: 8c:7d:7c:c5:93:6d:57:88:da:26:3b:93:42:dd:b1:40:d8:b4: fd:e0:0f:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZ/Dze3HqOmoyLn0a4R38MLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiNDdhYTA5ZjJjNjEwZjZmNDRiNGU3NWMxY2Q5ZGNkMzg4 NGU1NWQwHhcNMjUwNDI5MDEwMDI1WhcNMjUwNDMwMDEwMDI1WjAzMTEwLwYDVQQD EyhiNGUxZGIwZDM0YTgxNmYwMGE0YzgzYzUwOTBhN2E5MWFlY2MzMWVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlZ9OIfVQdsYyJWNgVwyWCvqn31C PjqcPTt9+nBDyZDKdHhG2psz0IPGMlMTNGTKONhaAnNOunjpz4XCo+dczWexq5dD zzJqO+KDWV9qt1SSJB9W/4had+t/neDwraBvYbwidGWGdVCnqDgJnJJg8dwd4a7f BxC1KvERj0EaLBU3e7IM+IsbQICuVGRyv0Rtgc2iQk5Lc6bTtOVdBqbBFnO07GRE uo6w5W6e6ngGl9CwLVkhiucLNAGukGE+Am/S9f4Tsnmkp6T0nFhabRSpYgP5Jr51 YBDf9YdqoNfF85CtE1ksgwR2FoCpagwBKbRGhTEOJV+B/OyKWzdjtrAaMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLTh2w00qBbwCkyDxQkKepGuzDHtMB8GA1UdIwQY MBaAFItHqgnyxhD29EtOdcHNnc04hOVdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTBlcUNmTEdFUGIwUzA1MXdjMmR6VGlFNVYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9mNTYwZTEtNzg0MC00OTUxLWFiNzgt NTAwMTUzOWQ3MTg1LzEvaTBlcUNmTEdFUGIwUzA1MXdjMmR6VGlFNVYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9mNTYwZTEtNzg0MC00OTUxLWFiNzgtNTAwMTUzOWQ3MTg1 LzEvaTBlcUNmTEdFUGIwUzA1MXdjMmR6VGlFNVYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgzfmjs8i kfJl37g19rL3cF4xXpPKXBOOfsabEKNOqPGH9V04tNgdA0FhBwPFYAWk6T++cI26 7SFb6r3IJ7pyluHBEUxcseldR96DOiaKv1ipic1KeVC0tOYY6iPHtb7xIgP2Tc3h bMJ4kdrZjDprrvUyoglP33ZRo+a7BYc6ZiyWvnAi9n6W3eohoNfhLHPKTZxNzQsQ Ul/mG2Rl5TWKiyPBaYeSirD9eFr27zEueAVKA8oGMkea6N2D3QnEJLjLtQ0Tis/+ 7nxbE+CbZpCqxwUki801ahKSp2x8qH7gw1BCvIEaRMNK4BNzjH18xZNtV4jaJjuT Qt2xQNi0/eAPCQ== -----END CERTIFICATE-----Generated at Tue Apr 29 05:22:18 2025 by rpki-client