$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft File: nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft (raw, json) Hash identifier: OKB40Xz8meXF3XZZKImC5XgybIQGrp6s/yJwH3glR0o= Subject key identifier: B7:CB:5A:1B:FE:22:C0:E2:67:90:7C:71:5A:2B:55:CB:A4:53:78:9A Authority key identifier: 9D:5D:E4:90:FF:87:4E:96:89:CE:CF:72:6C:BB:4E:2F:51:F6:C7:31 Certificate issuer: /CN=9d5de490ff874e9689cecf726cbb4e2f51f6c731 Certificate serial: 01967FEAF747A8CCA01F79D0C5A463B435EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft Manifest number: 1518 Signing time: Tue 29 Apr 2025 05:00:27 +0000 Manifest this update: Tue 29 Apr 2025 05:00:27 +0000 Manifest next update: Wed 30 Apr 2025 05:00:27 +0000 Files and hashes: 1: 3vl8XIfuhRt73vGy6IwhrWPuLQI.roa (hash: q3Fh75KrQyoQfVHvtuNwmD855fGW6oB7xId9MSHUyb4=) 2: 6wuhUyQ6B8hcKFtpQPLF4a8xiLM.roa (hash: PVP/CIAq5vbBthYH2NgEEDe22Dw5jd7urf5cJiuVvXo=) 3: 9NNSEhajneEgbt66V0EkEE6XolA.roa (hash: xTgVQs+MsZfir4Ub3DiVbK1ClBqkcXuh9whyhrkEvAM=) 4: BzRg7cqbGCxPjaoZhAl0Moquf1Y.roa (hash: 6kEaZouendLfYXdknvUfHV20sm02LURoxyHpm7Wn7AY=) 5: G-7uTcKf4R76KSJdYf98itHFuPU.roa (hash: uB9gNVUlSjqGsS16y0z5ke/O0agEGAvuljoiA6PJrUM=) 6: QgQPTUqWSoJLC8pH1ZTpV9J6Spg.roa (hash: roAeP2l3vRUpAFpkZSsf9wX3WRLL0BI8ikMQ5kYqDxQ=) 7: ftQQpBrk0ZFia4n99q7-wX-5E0M.roa (hash: U0GhDpZiZ5saXJRfz3p+tKxwcbveFdHD/WbcCpSo+CQ=) 8: mUKuky3l-ZY5p-RPO9s2pPEyk78.roa (hash: ti7kzq8iHsvI0iGcqQO/PpqkoDoJf7orqrrfuhBfEKg=) 9: nV3kkP-HTpaJzs9ybLtOL1H2xzE.crl (hash: N9wkx0MEVZJ9ofB1HpYgjICQVAno9nbuDbjkX7h59OI=) 10: pp90XH9ku5igKr_7gjm59WVXVs4.roa (hash: bfssuNaaIGlZ7LKFXdiYHHy+DIw/jcyEOsfVzSQEBMQ=) 11: qFB-AfrzECXh6GN5dVSZvb0x6SI.roa (hash: GzIs503Dc0bsL2WCHQKf2MOheJQNWlvUYNrT8tj73vc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.crl rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:7f:ea:f7:47:a8:cc:a0:1f:79:d0:c5:a4:63:b4:35:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d5de490ff874e9689cecf726cbb4e2f51f6c731 Validity Not Before: Apr 29 05:00:27 2025 GMT Not After : Apr 30 05:00:27 2025 GMT Subject: CN=b7cb5a1bfe22c0e267907c715a2b55cba453789a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:aa:99:09:b0:01:94:ec:8b:1f:3e:ce:64:8b: b4:af:7d:a3:04:25:56:ba:42:65:65:8a:72:85:ca: ae:3c:87:a7:2e:90:92:6b:c6:3a:0e:75:95:4e:81: 3c:cd:85:82:15:73:42:f0:5d:a2:5e:58:05:95:cd: ce:46:b3:eb:9a:01:2a:c4:e2:bd:71:ab:ef:e9:28: a6:eb:42:9b:bf:34:f3:f2:cf:91:ff:4a:0a:63:6c: c4:d9:db:25:6f:37:99:d8:a1:57:74:f6:9c:97:04: 20:72:8f:8f:d8:35:f6:85:7d:35:cc:97:b9:73:7e: f0:f5:94:e5:26:84:ec:41:bb:9e:83:23:49:8c:8d: ba:2d:dd:72:4c:63:9e:14:15:72:1d:1b:5f:69:7d: 46:3a:f5:76:27:de:da:16:c5:0b:12:b6:ed:59:e8: 6e:f2:03:39:d3:19:e1:66:00:c7:3e:d5:16:50:30: 93:b4:ed:f2:68:27:06:c7:0e:51:65:41:3b:55:61: cb:e2:50:b5:a3:8c:d4:48:15:14:f2:d8:52:8c:1d: a4:b8:76:3a:f9:7b:94:1d:69:59:a7:01:ea:57:3b: 5b:7e:8d:52:21:68:fc:71:04:c0:80:be:10:bc:96: 0c:15:7b:8b:89:80:1d:c0:4b:3a:25:d5:73:75:97: 69:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:CB:5A:1B:FE:22:C0:E2:67:90:7C:71:5A:2B:55:CB:A4:53:78:9A X509v3 Authority Key Identifier: keyid:9D:5D:E4:90:FF:87:4E:96:89:CE:CF:72:6C:BB:4E:2F:51:F6:C7:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:5d:8c:25:13:b6:1e:2e:84:05:50:17:fa:f6:bd:e6:27:5f: 82:24:d2:e5:4b:62:fc:39:2b:03:c5:59:8a:0f:93:6d:fe:e9: f5:05:a0:1f:29:af:ab:e3:bf:e4:a8:57:96:55:19:3e:b0:9c: 91:0c:b4:3c:96:c4:4a:09:63:70:65:4a:18:e3:30:42:d9:5c: 1c:2c:37:7a:50:bd:55:7d:7a:45:c0:95:78:07:8d:01:40:a1: ac:bf:7a:0d:26:e6:b4:23:e9:e6:3b:dd:44:94:54:9e:c0:f4: 68:5d:5e:b2:54:8d:c4:73:ca:40:f9:2d:63:6b:a6:de:f6:46: ea:6a:ba:de:a8:56:20:b5:b5:dd:a5:31:98:a0:cd:70:46:b4: 1e:40:dc:d6:1e:bd:ce:07:d0:06:e0:a1:0b:09:4b:27:36:51: 94:be:fc:ec:12:cd:96:06:82:ce:73:58:77:9c:81:39:6d:32: 7f:bd:f5:29:a6:62:22:24:85:9b:aa:40:07:97:a1:e5:da:b9: 24:3b:56:ed:01:8f:86:c7:ea:43:c1:0a:6b:bd:6a:7a:b5:fc: cc:24:0d:c8:30:46:74:0c:20:6c:87:f0:39:e0:2e:87:58:ed: 2e:5f:e7:51:87:70:e0:d4:46:d8:15:e9:3f:f0:11:74:df:6c: 3a:30:06:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZ/6vdHqMygH3nQxaRjtDXuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkNWRlNDkwZmY4NzRlOTY4OWNlY2Y3MjZjYmI0ZTJmNTFm NmM3MzEwHhcNMjUwNDI5MDUwMDI3WhcNMjUwNDMwMDUwMDI3WjAzMTEwLwYDVQQD EyhiN2NiNWExYmZlMjJjMGUyNjc5MDdjNzE1YTJiNTVjYmE0NTM3ODlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6qZCbABlOyLHz7OZIu0r32jBCVW ukJlZYpyhcquPIenLpCSa8Y6DnWVToE8zYWCFXNC8F2iXlgFlc3ORrPrmgEqxOK9 cavv6Sim60KbvzTz8s+R/0oKY2zE2dslbzeZ2KFXdPaclwQgco+P2DX2hX01zJe5 c37w9ZTlJoTsQbuegyNJjI26Ld1yTGOeFBVyHRtfaX1GOvV2J97aFsULErbtWehu 8gM50xnhZgDHPtUWUDCTtO3yaCcGxw5RZUE7VWHL4lC1o4zUSBUU8thSjB2kuHY6 +XuUHWlZpwHqVztbfo1SIWj8cQTAgL4QvJYMFXuLiYAdwEs6JdVzdZdpmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLfLWhv+IsDiZ5B8cVorVcukU3iaMB8GA1UdIwQY MBaAFJ1d5JD/h06Wic7Pcmy7Ti9R9scxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblYza2tQLUhUcGFKenM5eWJMdE9MMUgyeHpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC83NDViZGItMTA0Yi00OWM3LTk5ZDUt Y2VjMzNiYTFiZGY1LzEvblYza2tQLUhUcGFKenM5eWJMdE9MMUgyeHpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC83NDViZGItMTA0Yi00OWM3LTk5ZDUtY2VjMzNiYTFiZGY1 LzEvblYza2tQLUhUcGFKenM5eWJMdE9MMUgyeHpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgV2MJRO2 Hi6EBVAX+va95idfgiTS5Uti/DkrA8VZig+Tbf7p9QWgHymvq+O/5KhXllUZPrCc kQy0PJbESgljcGVKGOMwQtlcHCw3elC9VX16RcCVeAeNAUChrL96DSbmtCPp5jvd RJRUnsD0aF1eslSNxHPKQPktY2um3vZG6mq63qhWILW13aUxmKDNcEa0HkDc1h69 zgfQBuChCwlLJzZRlL787BLNlgaCznNYd5yBOW0yf731KaZiIiSFm6pAB5eh5dq5 JDtW7QGPhsfqQ8EKa71qerX8zCQNyDBGdAwgbIfwOeAuh1jtLl/nUYdw4NRG2BXp P/ARdN9sOjAG+A== -----END CERTIFICATE-----Generated at Tue Apr 29 09:40:54 2025 by rpki-client