$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.mft File: Z7WwLcQBZm7gRauQzIiBf-CdcGo.mft (raw, json) Hash identifier: jdZYXg3+AtzBoaOnOoa4bvLlC/a618e32PDwqwZAjZw= Subject key identifier: F2:3F:B1:CB:CE:3A:17:D6:42:E9:69:8A:9A:C0:D9:99:04:7E:2A:55 Authority key identifier: 67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A Certificate issuer: /CN=67b5b02dc401666ee045ab90cc88817fe09d706a Certificate serial: 0196748BA0D92AC2CC6EF3089B3A297BF1C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.mft Manifest number: 1232 Signing time: Sun 27 Apr 2025 00:00:29 +0000 Manifest this update: Sun 27 Apr 2025 00:00:29 +0000 Manifest next update: Mon 28 Apr 2025 00:00:29 +0000 Files and hashes: 1: 2hV2Eva-Yq0Tj6R_zRma3IFAz5U.roa (hash: xaAXokmFBA+GIkC2gCBEPvYGMsKwjG9cFEwuB3Zkoqw=) 2: 3vr6MmTJusXLHnoomZaTFzf2R_Y.roa (hash: wwVRXCGEVqcIpkBMKuCLGQDGcvT246U/Ud4fDza9yz4=) 3: CnW3qR_oIITaOQij9dhtcxmI3Ew.roa (hash: c6jiCaV7kJAiM633jZnJHCKNng9Erj/W/XlTBj+QRpY=) 4: DHALUAN5tK6vdZdATqkw-W3Rehs.roa (hash: 7l9RAeo7N/jmnp2dP2Muv9E6xCL1r9O+gLOg/k2Fq2s=) 5: Q4p-qYS2sgvt0GJ7uYJPvsOIkIg.roa (hash: j/H5JWeQ0CkSOjcFdGwjX75ybxoyKIcMgX/vQel3jRk=) 6: Tt5lRvCR59EmvIm9nWpxifL8PvQ.roa (hash: K94v285TvMOOo7AcPioAGeK/gkVuCpfkO4FQfselq2s=) 7: Z7WwLcQBZm7gRauQzIiBf-CdcGo.crl (hash: 6nvzaIoX1lkcD569Nuai/Tv7mIZX5xFWL7xsdKhn1VE=) 8: k7Uhxcf1dLyLbabkMZGt9dayq9s.roa (hash: gFVryfVaKzHzs9H28hxg6aO05RnxqjKmSXgUNR+b4kg=) 9: kIbghkBOfoXjY46mtdWaD6ECFzI.roa (hash: 0pGxzPrydHhKJZ3AyBjYXBgg0KwtH0VaWuahmKMYYJY=) 10: lOoV_awaoXNj1bfhx0bx4WIBK_o.roa (hash: Oj6EJtwaCyCNiMtSUcVlupYUT3Tc0ATPehxbzKeY1zw=) 11: n-1P-bnNMbfHyYOOBdFHAhTQeeU.roa (hash: VCctCwWgn1+jYqEkjhICyTVDTXkxSrSucpTbDGLkOEU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.crl rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.mft rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:74:8b:a0:d9:2a:c2:cc:6e:f3:08:9b:3a:29:7b:f1:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67b5b02dc401666ee045ab90cc88817fe09d706a Validity Not Before: Apr 27 00:00:29 2025 GMT Not After : Apr 28 00:00:29 2025 GMT Subject: CN=f23fb1cbce3a17d642e9698a9ac0d999047e2a55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d6:a5:95:86:35:c1:f6:a6:e5:7c:ec:64:95: 67:c6:38:79:55:3d:36:92:1a:80:54:4c:21:b1:1d: 26:32:43:dc:8c:d5:35:54:06:77:5b:95:2e:6b:37: 10:8e:f6:40:74:51:92:83:61:2b:ef:23:14:70:8b: 1c:2f:52:bc:e6:31:28:c9:5b:51:0a:a1:54:86:4e: d1:7f:53:53:1b:85:2b:f1:37:35:d2:9f:29:57:c1: c3:88:a3:61:eb:2a:d9:3e:16:98:1d:ce:84:f3:4f: ce:0d:cc:c6:66:81:d9:e6:3c:db:56:e1:72:d8:c5: 6d:eb:8f:b5:7a:0d:9f:e8:95:05:f8:c6:cc:4f:31: f0:82:5e:70:ec:6e:0e:37:08:72:5c:c9:85:01:96: c1:e9:6b:f5:c9:90:e5:02:d2:6f:4f:8d:a7:25:1c: f1:2a:e3:f3:cd:bf:27:fd:f3:4d:c7:da:40:95:a2: ed:f5:69:bd:5c:bf:7a:79:2f:e9:7c:63:cf:ec:1e: 86:61:46:5d:67:d1:18:5a:ca:8f:e3:5c:d1:e6:3f: 88:36:02:95:f2:d7:38:da:b8:10:e7:ea:66:d2:23: 96:b4:0b:cc:87:03:48:d0:62:1a:61:81:55:a7:64: 1c:e7:a7:9e:9b:46:97:fe:75:ec:b8:1b:e9:6d:36: 54:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:3F:B1:CB:CE:3A:17:D6:42:E9:69:8A:9A:C0:D9:99:04:7E:2A:55 X509v3 Authority Key Identifier: keyid:67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:78:26:0c:b4:52:8e:b8:0b:1a:d6:9b:0d:32:e5:90:13:40: 52:e1:56:b0:71:eb:c7:a3:19:f2:b1:dc:be:0c:1e:d2:16:23: a0:98:e2:50:c8:e3:06:c6:e0:43:85:b0:13:4f:b0:47:b6:a4: ea:4c:db:5b:f9:1b:e1:b2:e5:2c:d7:9f:c8:32:8b:ea:e7:12: 83:bd:b7:de:4b:4a:6e:d4:68:ff:ac:a5:c0:23:ee:1a:8b:72: 1c:6f:96:14:39:5b:ab:9a:50:e9:d0:78:5b:25:3c:4e:b2:62: 6c:cb:60:19:ce:02:20:12:1e:c1:22:6b:75:7a:96:32:36:66: 95:30:ec:44:3b:0c:7f:ec:2f:8f:fe:18:90:31:a1:aa:34:ac: cf:2c:25:e7:8c:b9:96:fa:de:f7:fb:6d:7e:10:d5:f6:36:c6: b5:dc:ee:64:e9:30:c3:18:c4:15:34:17:9f:a6:66:a7:b8:9f: 44:3c:6e:3b:54:0e:42:49:ae:fd:0a:1d:fa:e5:10:8c:3d:71: 3d:28:df:e0:e6:e4:ff:ed:38:c0:9b:e1:b9:a4:7f:97:3f:bf: 1d:17:8e:62:d1:a2:f9:4d:e4:4d:e1:94:bb:be:d0:aa:a0:8c: 6b:60:72:92:42:74:a1:20:80:be:88:e0:38:6e:fe:45:eb:2b: f4:46:3f:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZ0i6DZKsLMbvMImzope/HCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3YjViMDJkYzQwMTY2NmVlMDQ1YWI5MGNjODg4MTdmZTA5 ZDcwNmEwHhcNMjUwNDI3MDAwMDI5WhcNMjUwNDI4MDAwMDI5WjAzMTEwLwYDVQQD EyhmMjNmYjFjYmNlM2ExN2Q2NDJlOTY5OGE5YWMwZDk5OTA0N2UyYTU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNallYY1wfam5XzsZJVnxjh5VT02 khqAVEwhsR0mMkPcjNU1VAZ3W5UuazcQjvZAdFGSg2Er7yMUcIscL1K85jEoyVtR CqFUhk7Rf1NTG4Ur8Tc10p8pV8HDiKNh6yrZPhaYHc6E80/ODczGZoHZ5jzbVuFy 2MVt64+1eg2f6JUF+MbMTzHwgl5w7G4ONwhyXMmFAZbB6Wv1yZDlAtJvT42nJRzx KuPzzb8n/fNNx9pAlaLt9Wm9XL96eS/pfGPP7B6GYUZdZ9EYWsqP41zR5j+INgKV 8tc42rgQ5+pm0iOWtAvMhwNI0GIaYYFVp2Qc56eem0aX/nXsuBvpbTZUewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPI/scvOOhfWQulpiprA2ZkEfipVMB8GA1UdIwQY MBaAFGe1sC3EAWZu4EWrkMyIgX/gnXBqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjdXd0xjUUJabTdnUmF1UXpJaUJmLUNkY0dvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82NGEzZGUtODEyYS00YWNlLTgxNGQt YjVkODg4YWRmZDM3LzEvWjdXd0xjUUJabTdnUmF1UXpJaUJmLUNkY0dvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82NGEzZGUtODEyYS00YWNlLTgxNGQtYjVkODg4YWRmZDM3 LzEvWjdXd0xjUUJabTdnUmF1UXpJaUJmLUNkY0dvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApXgmDLRS jrgLGtabDTLlkBNAUuFWsHHrx6MZ8rHcvgwe0hYjoJjiUMjjBsbgQ4WwE0+wR7ak 6kzbW/kb4bLlLNefyDKL6ucSg7233ktKbtRo/6ylwCPuGotyHG+WFDlbq5pQ6dB4 WyU8TrJibMtgGc4CIBIewSJrdXqWMjZmlTDsRDsMf+wvj/4YkDGhqjSszywl54y5 lvre9/ttfhDV9jbGtdzuZOkwwxjEFTQXn6Zmp7ifRDxuO1QOQkmu/Qod+uUQjD1x PSjf4Obk/+04wJvhuaR/lz+/HReOYtGi+U3kTeGUu77QqqCMa2BykkJ0oSCAvojg OG7+Resr9EY/HQ== -----END CERTIFICATE-----Generated at Sun Apr 27 09:46:17 2025 by rpki-client