$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft File: 7jE2ffbRhhBxySuucmUjMm9Fuio.mft (raw, json) Hash identifier: jHk6oraqM5mJIcYN+/JgxU930TO/i4tU5QC9NxjedoA= Subject key identifier: 04:5E:B2:97:89:E2:09:C4:13:99:ED:F0:95:14:A7:4B:40:07:A9:25 Authority key identifier: EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A Certificate issuer: /CN=ee31367df6d1861071c92bae726523326f45ba2a Certificate serial: 01967679E8EC2C0371AFD559FB58ECE804C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft Manifest number: 1520 Signing time: Sun 27 Apr 2025 09:00:22 +0000 Manifest this update: Sun 27 Apr 2025 09:00:22 +0000 Manifest next update: Mon 28 Apr 2025 09:00:22 +0000 Files and hashes: 1: 2moa6mH80qm3IguzeOVfriRFI-w.roa (hash: j1fSM40RJhYQeBXMR1k4sve6WbFK63q8AmH4WPbC0Tk=) 2: 7jE2ffbRhhBxySuucmUjMm9Fuio.crl (hash: NPb9e71WBOVonoBqCNEvOoAunM3AbjF8Od81jqvlAuo=) 3: CXoFElZwW4PWs_hTQ87v6bEKvR4.roa (hash: 1SVSIuQGG2HcuOnMn4jS+KIa5ua4QSXf9ENt7KvsOQk=) 4: FMaPqE5TIdnmZNocYxdc5fwMWSY.roa (hash: JA/2EVWKbOQSq1/3vVw4VHdOS4gY4KVxfI8Zlx03fcw=) 5: OQadFX-qT3gCoM0N-bZt3P6oHFk.roa (hash: 46o7jeEMiMdTNObDyI76FFzvM1LIe1/KQjE4TCfjPsc=) 6: P8zXUAaQks5p-XgYDOvceaS5lbk.roa (hash: Z62eQfzzFQBfWvdsKjtVKModn2zABInZxrMBevoUQ4Y=) 7: PoBO5x_Ygu-AT9DvSuiJTf_ttjA.roa (hash: qtTisIWpOzmReY6w2mAnrMMzLySXI6rOsYAaJcyqeeo=) 8: T-lrle-lMMn_3ceJvqi204wvJBg.roa (hash: pfDjaYpc+cz+oMEPVwyi0YHOySPdXXVVjni9rDotFgo=) 9: XNkz6ZVHIVynkp_0EBDRKs20yRg.roa (hash: AkJazMwGlN/vrZ2JnBw7g2g2XhDrm0alHaLhRcLDCi0=) 10: __OxFEyH1FYcvs1JCgS-JD7OZlw.roa (hash: YSuGVAn8QITI9B6yQeEMR6fNv8UQPFQ3OllUy3lS53Q=) 11: fFcReiDCZvGq5LR_cyZOKyKXGlY.roa (hash: ukxchoy/na4y4RwXvsuBg69N9jB1OiY5O6m03uaDW3A=) 12: fcBtkXfjS9kQlveEGfiEVLIB7J0.roa (hash: ROEERJqLb1vPSxawZ1IsC8sK1RVt08mmNavrdqSvxsY=) 13: hvDxWczJSCD1N66X4dBRt3gG1t8.roa (hash: MPSonopmIFoV4IaEMBT6BZbRxseta+ksAG7ucEI2WUU=) 14: jndEHNZ2x0pbxmjtnUN_iL0EOgg.roa (hash: VNMFBQYDM78mD696fWYXbt5tsmZPIllrl31MY4LZBZs=) 15: ohTlEE-9-hCPb5DTk-_fGsRCE_A.roa (hash: x8jCPCcQdObbaBTAaMbUaPRjH4TWD/Pqc9qCuIKOouA=) 16: pTHe5z_UC5Rv2zAgyZz5PhBBbIc.roa (hash: LCSm3osyvHakBWxSlCUH1WcECMjCvAEncqaI0o/t+nY=) 17: zPy0xYpq_RYYV72dvP_8iEtD_Lw.roa (hash: i7Cn4wrgMzgR1e+oHe7mzJfihR1BEwwDViBupY0xQNw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Apr 2025 05:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:76:79:e8:ec:2c:03:71:af:d5:59:fb:58:ec:e8:04:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee31367df6d1861071c92bae726523326f45ba2a Validity Not Before: Apr 27 09:00:22 2025 GMT Not After : Apr 28 09:00:22 2025 GMT Subject: CN=045eb29789e209c41399edf09514a74b4007a925 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:0f:a5:4c:b1:19:43:8d:4c:b3:8f:98:3f:ea: e9:ae:3d:c4:ea:2b:e1:a1:6d:8d:7a:6b:bc:4a:9e: a9:c9:fc:9d:a4:b0:c9:da:ba:b1:c5:b0:36:5a:37: 28:2f:15:35:99:48:d0:e8:96:eb:64:c8:b0:c1:12: a3:6e:c7:5d:20:58:73:a5:6c:cc:6c:fd:50:69:e1: 6b:c7:a5:da:49:44:07:92:8b:2d:70:df:04:39:20: ed:55:f7:e4:14:b4:7d:64:42:d0:30:63:10:15:83: 7a:c6:e6:a0:dc:bb:bf:15:88:44:25:a0:1f:cc:13: 7a:73:c5:74:d6:d1:38:bb:a7:9e:5c:9d:b9:1a:95: 5b:d2:ed:23:e9:a7:49:1b:b9:da:35:a7:67:fd:a0: 53:99:c3:b0:e3:a5:c0:2c:c7:6e:fb:22:0b:4f:dc: 1a:e2:28:d2:ed:fd:a6:53:f6:eb:57:2f:66:83:3c: ff:6a:98:4b:86:d6:fb:6d:10:a9:9e:76:78:0a:59: 2f:8e:bc:58:61:0a:f8:d1:f2:0d:cc:af:47:41:33: e2:06:43:11:f2:59:57:f7:83:49:5c:34:58:be:98: 86:80:fe:bb:20:d2:7a:a1:9a:6e:7a:bc:78:4d:d7: 68:94:36:c4:ac:0c:e8:ca:db:13:ab:58:a4:4b:fe: f5:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:5E:B2:97:89:E2:09:C4:13:99:ED:F0:95:14:A7:4B:40:07:A9:25 X509v3 Authority Key Identifier: keyid:EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:96:09:80:57:aa:3e:20:ed:fb:8c:68:77:6f:83:04:5c:7b: cd:55:07:2b:b3:e4:5a:d7:32:a6:5c:50:36:ef:1c:e3:15:08: c6:54:54:b9:2e:92:3d:d9:32:2f:a8:7b:bc:7a:96:2e:5a:88: 2f:e6:1b:34:b4:0e:cd:d2:3f:ab:8d:9d:78:cf:3e:f6:a0:55: 44:a0:96:df:cc:b5:a1:65:bf:b0:9d:0a:77:f0:ec:1b:4f:9e: aa:93:28:e8:b3:4a:fe:a6:d7:38:44:f5:1c:01:28:53:73:db: de:83:5f:1f:56:f1:56:75:ee:cb:b5:b8:0b:a0:51:30:02:8c: 34:ae:a9:c6:23:a2:5a:3e:cf:de:c3:f7:bf:44:ec:b3:a9:b8: a3:d6:95:29:17:e6:79:a3:9f:ff:62:a6:10:78:e7:ae:31:fd: 74:42:49:28:c9:9e:2e:83:91:05:79:5a:9d:18:9c:99:a8:0a: 2e:1c:a6:db:57:4e:14:e1:c4:d6:f4:87:08:d2:6d:68:9c:21: b0:b6:ad:be:ba:fb:e0:e8:24:66:84:43:63:1e:b0:57:2d:ff: 85:7f:89:9a:fa:ec:82:89:65:15:5b:84:fe:e5:c9:08:3c:da: 70:d7:ce:90:d8:1d:2d:a1:7f:b4:78:1f:bb:8d:31:08:4d:b2: b9:6f:11:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZ2eejsLANxr9VZ+1js6ATDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMzEzNjdkZjZkMTg2MTA3MWM5MmJhZTcyNjUyMzMyNmY0 NWJhMmEwHhcNMjUwNDI3MDkwMDIyWhcNMjUwNDI4MDkwMDIyWjAzMTEwLwYDVQQD EygwNDVlYjI5Nzg5ZTIwOWM0MTM5OWVkZjA5NTE0YTc0YjQwMDdhOTI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjg+lTLEZQ41Ms4+YP+rprj3E6ivh oW2Nemu8Sp6pyfydpLDJ2rqxxbA2WjcoLxU1mUjQ6JbrZMiwwRKjbsddIFhzpWzM bP1QaeFrx6XaSUQHkostcN8EOSDtVffkFLR9ZELQMGMQFYN6xuag3Lu/FYhEJaAf zBN6c8V01tE4u6eeXJ25GpVb0u0j6adJG7naNadn/aBTmcOw46XALMdu+yILT9wa 4ijS7f2mU/brVy9mgzz/aphLhtb7bRCpnnZ4ClkvjrxYYQr40fINzK9HQTPiBkMR 8llX94NJXDRYvpiGgP67INJ6oZpuerx4TddolDbErAzoytsTq1ikS/71nQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFARespeJ4gnEE5nt8JUUp0tAB6klMB8GA1UdIwQY MBaAFO4xNn320YYQcckrrnJlIzJvRboqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2pFMmZmYlJoaEJ4eVN1dWNtVWpNbTlGdWlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8xYmI0ZGQtZTljNC00ZDNkLTlhM2It MTE1OWRiZmJlZDU0LzEvN2pFMmZmYlJoaEJ4eVN1dWNtVWpNbTlGdWlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS8xYmI0ZGQtZTljNC00ZDNkLTlhM2ItMTE1OWRiZmJlZDU0 LzEvN2pFMmZmYlJoaEJ4eVN1dWNtVWpNbTlGdWlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE5YJgFeq PiDt+4xod2+DBFx7zVUHK7PkWtcyplxQNu8c4xUIxlRUuS6SPdkyL6h7vHqWLlqI L+YbNLQOzdI/q42deM8+9qBVRKCW38y1oWW/sJ0Kd/DsG0+eqpMo6LNK/qbXOET1 HAEoU3Pb3oNfH1bxVnXuy7W4C6BRMAKMNK6pxiOiWj7P3sP3v0Tss6m4o9aVKRfm eaOf/2KmEHjnrjH9dEJJKMmeLoORBXlanRicmagKLhym21dOFOHE1vSHCNJtaJwh sLatvrr74OgkZoRDYx6wVy3/hX+JmvrsgollFVuE/uXJCDzacNfOkNgdLaF/tHgf u40xCE2yuW8RQw== -----END CERTIFICATE-----Generated at Sun Apr 27 11:34:31 2025 by rpki-client