$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.mft File: Z7WwLcQBZm7gRauQzIiBf-CdcGo.mft (raw, json) Hash identifier: MBiYjEYm3IHrgs+fpxQ7VSX3FIDD2vjCXNYhOj1v8uw= Subject key identifier: DD:E2:08:1F:79:31:88:E1:21:23:04:43:2C:08:12:69:9D:C7:81:E2 Authority key identifier: 67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A Certificate issuer: /CN=67b5b02dc401666ee045ab90cc88817fe09d706a Certificate serial: 01967A56B4424A23F8998ED5ED35BB8887CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.mft Manifest number: 1235 Signing time: Mon 28 Apr 2025 03:00:24 +0000 Manifest this update: Mon 28 Apr 2025 03:00:24 +0000 Manifest next update: Tue 29 Apr 2025 03:00:24 +0000 Files and hashes: 1: 2hV2Eva-Yq0Tj6R_zRma3IFAz5U.roa (hash: xaAXokmFBA+GIkC2gCBEPvYGMsKwjG9cFEwuB3Zkoqw=) 2: 3vr6MmTJusXLHnoomZaTFzf2R_Y.roa (hash: wwVRXCGEVqcIpkBMKuCLGQDGcvT246U/Ud4fDza9yz4=) 3: CnW3qR_oIITaOQij9dhtcxmI3Ew.roa (hash: c6jiCaV7kJAiM633jZnJHCKNng9Erj/W/XlTBj+QRpY=) 4: DHALUAN5tK6vdZdATqkw-W3Rehs.roa (hash: 7l9RAeo7N/jmnp2dP2Muv9E6xCL1r9O+gLOg/k2Fq2s=) 5: Q4p-qYS2sgvt0GJ7uYJPvsOIkIg.roa (hash: j/H5JWeQ0CkSOjcFdGwjX75ybxoyKIcMgX/vQel3jRk=) 6: Tt5lRvCR59EmvIm9nWpxifL8PvQ.roa (hash: K94v285TvMOOo7AcPioAGeK/gkVuCpfkO4FQfselq2s=) 7: Z7WwLcQBZm7gRauQzIiBf-CdcGo.crl (hash: MqmbkWQRrJKJr2dTyuiOScM95d728EpY3zdK6TQYfJM=) 8: k7Uhxcf1dLyLbabkMZGt9dayq9s.roa (hash: gFVryfVaKzHzs9H28hxg6aO05RnxqjKmSXgUNR+b4kg=) 9: kIbghkBOfoXjY46mtdWaD6ECFzI.roa (hash: 0pGxzPrydHhKJZ3AyBjYXBgg0KwtH0VaWuahmKMYYJY=) 10: lOoV_awaoXNj1bfhx0bx4WIBK_o.roa (hash: Oj6EJtwaCyCNiMtSUcVlupYUT3Tc0ATPehxbzKeY1zw=) 11: n-1P-bnNMbfHyYOOBdFHAhTQeeU.roa (hash: VCctCwWgn1+jYqEkjhICyTVDTXkxSrSucpTbDGLkOEU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.crl rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.mft rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Apr 2025 23:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:7a:56:b4:42:4a:23:f8:99:8e:d5:ed:35:bb:88:87:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67b5b02dc401666ee045ab90cc88817fe09d706a Validity Not Before: Apr 28 03:00:24 2025 GMT Not After : Apr 29 03:00:24 2025 GMT Subject: CN=dde2081f793188e1212304432c0812699dc781e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:5f:f7:22:76:e0:80:51:01:c2:a6:ab:a7:44: 42:a0:76:6d:4a:7e:27:8a:92:c9:45:5e:cd:df:56: fa:95:5a:fb:a5:c9:e2:57:69:d1:b7:3f:84:b2:73: fc:75:1d:4c:ab:05:f7:07:49:a7:c2:32:5c:13:42: 95:db:9f:8f:03:a7:6c:83:a1:33:68:82:6d:7a:c7: aa:90:40:ae:9a:01:42:da:f1:2b:4b:3d:69:b7:97: 4d:7e:30:89:09:32:84:05:77:b8:01:c8:2c:9b:c7: 40:d3:f4:39:4b:f7:18:6a:ee:7a:4d:e3:e4:9b:d8: 14:13:05:a8:6d:46:29:ea:a1:9b:f6:51:1f:7d:7d: 4b:e2:12:ab:a0:74:08:0d:46:12:24:a7:48:2f:79: e2:dd:83:e3:cf:7a:47:35:41:cb:d5:f9:6e:fb:f3: 43:86:47:2d:0a:9a:5d:ff:e0:4c:80:ab:c7:a1:3d: 8c:9a:50:c8:ee:68:06:8a:92:a9:fb:f1:51:fc:5c: 74:37:f6:06:ef:66:e5:a6:97:63:59:3e:f7:1c:d5: 79:35:5d:37:ec:d9:53:1d:65:31:af:ad:00:8d:c3: 9d:9f:eb:99:50:cb:e6:ea:dc:33:21:d9:11:cc:ac: 42:56:11:80:67:39:4b:f0:29:9f:3e:4f:a0:d8:8b: 76:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:E2:08:1F:79:31:88:E1:21:23:04:43:2C:08:12:69:9D:C7:81:E2 X509v3 Authority Key Identifier: keyid:67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:09:ca:b9:dc:d5:65:ee:de:76:9c:5a:c8:31:ff:58:f6:ab: 47:0b:db:88:10:2c:30:5c:eb:d8:8e:83:7e:31:a8:c5:42:ae: 1d:60:4b:f6:9f:63:2c:4c:55:4f:5a:5a:52:a7:ee:08:a9:74: ef:b9:dd:06:aa:3f:f2:3d:12:c2:0d:df:44:ec:4f:19:8f:eb: 52:b1:5d:47:d2:b1:cd:4f:96:4e:43:00:d2:9f:48:2c:4b:c1: a4:11:d1:97:0d:3d:c5:a3:86:5f:4a:1e:ab:f6:f6:51:39:76: 51:b7:04:85:08:fc:61:25:64:dc:15:f9:8d:6b:76:56:d6:a6: a0:da:d2:4c:f2:19:6f:dc:88:cb:31:bc:4e:ba:5b:db:59:c8: 0b:49:bf:a8:3c:d0:d6:0c:2e:a5:9b:56:06:2a:3e:b5:9d:69: 3d:f8:c8:96:1c:cb:bc:2d:d8:62:9a:47:e5:c7:49:88:5c:10: 87:dc:d8:91:59:48:11:69:64:a7:9e:1e:e5:1c:8e:54:e6:a9: 8c:dd:b5:98:34:72:5c:7d:d7:03:5d:95:52:81:45:22:ea:34: e3:60:01:a9:e7:c6:35:23:0e:a8:1f:f7:d4:96:39:45:b3:a6: 14:c2:99:f4:17:52:4b:57:ef:95:e2:41:05:22:1c:4d:76:a1: 15:8b:27:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZ6VrRCSiP4mY7V7TW7iIfNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3YjViMDJkYzQwMTY2NmVlMDQ1YWI5MGNjODg4MTdmZTA5 ZDcwNmEwHhcNMjUwNDI4MDMwMDI0WhcNMjUwNDI5MDMwMDI0WjAzMTEwLwYDVQQD EyhkZGUyMDgxZjc5MzE4OGUxMjEyMzA0NDMyYzA4MTI2OTlkYzc4MWUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1/3InbggFEBwqarp0RCoHZtSn4n ipLJRV7N31b6lVr7pcniV2nRtz+EsnP8dR1MqwX3B0mnwjJcE0KV25+PA6dsg6Ez aIJteseqkECumgFC2vErSz1pt5dNfjCJCTKEBXe4Acgsm8dA0/Q5S/cYau56TePk m9gUEwWobUYp6qGb9lEffX1L4hKroHQIDUYSJKdIL3ni3YPjz3pHNUHL1flu+/ND hkctCppd/+BMgKvHoT2MmlDI7mgGipKp+/FR/Fx0N/YG72blppdjWT73HNV5NV03 7NlTHWUxr60AjcOdn+uZUMvm6twzIdkRzKxCVhGAZzlL8CmfPk+g2It2pQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN3iCB95MYjhISMEQywIEmmdx4HiMB8GA1UdIwQY MBaAFGe1sC3EAWZu4EWrkMyIgX/gnXBqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjdXd0xjUUJabTdnUmF1UXpJaUJmLUNkY0dvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82NGEzZGUtODEyYS00YWNlLTgxNGQt YjVkODg4YWRmZDM3LzEvWjdXd0xjUUJabTdnUmF1UXpJaUJmLUNkY0dvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82NGEzZGUtODEyYS00YWNlLTgxNGQtYjVkODg4YWRmZDM3 LzEvWjdXd0xjUUJabTdnUmF1UXpJaUJmLUNkY0dvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEAnKudzV Ze7edpxayDH/WParRwvbiBAsMFzr2I6DfjGoxUKuHWBL9p9jLExVT1paUqfuCKl0 77ndBqo/8j0Swg3fROxPGY/rUrFdR9KxzU+WTkMA0p9ILEvBpBHRlw09xaOGX0oe q/b2UTl2UbcEhQj8YSVk3BX5jWt2VtamoNrSTPIZb9yIyzG8Trpb21nIC0m/qDzQ 1gwupZtWBio+tZ1pPfjIlhzLvC3YYppH5cdJiFwQh9zYkVlIEWlkp54e5RyOVOap jN21mDRyXH3XA12VUoFFIuo042ABqefGNSMOqB/31JY5RbOmFMKZ9BdSS1fvleJB BSIcTXahFYsnVQ== -----END CERTIFICATE-----Generated at Mon Apr 28 08:35:19 2025 by rpki-client