$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/Eipka-1MQXprSAX5PXenpGXjS5M.mft File: Eipka-1MQXprSAX5PXenpGXjS5M.mft (raw, json) Hash identifier: Wjk8mTrXnWBzyz53AADJxLupjtID0K5OrNNq5/RoFjg= Subject key identifier: 19:CA:81:51:47:E7:24:46:97:79:4A:3F:3E:0C:0A:75:0F:D8:66:CE Authority key identifier: 12:2A:64:6B:ED:4C:41:7A:6B:48:05:F9:3D:77:A7:A4:65:E3:4B:93 Certificate issuer: /CN=122a646bed4c417a6b4805f93d77a7a465e34b93 Certificate serial: 01967AC5171B58B9552442098819DDA7D102 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eipka-1MQXprSAX5PXenpGXjS5M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/Eipka-1MQXprSAX5PXenpGXjS5M.mft Manifest number: 1513 Signing time: Mon 28 Apr 2025 05:00:58 +0000 Manifest this update: Mon 28 Apr 2025 05:00:58 +0000 Manifest next update: Tue 29 Apr 2025 05:00:58 +0000 Files and hashes: 1: 4YzbiOUc55i_-wnN2lE8VcFHTjM.roa (hash: EJ1xacTTePUHCKfjWzR41VZNC5bwx1ceCyx+D2VuM0k=) 2: Eipka-1MQXprSAX5PXenpGXjS5M.crl (hash: BuzKJfVnMSZrK5iMpl1XJgiOUe7CNUutD4pCCM2PZnk=) 3: HZDIjKjXqWPf-ee37Nhj9_hhLmU.roa (hash: HSOaEhMUsdBzgZ8yvnvkhm7cbQn7PS/dlSIORdNMvnw=) 4: LSDiDkGHf8ktuSvpLiCF4QxxoHA.roa (hash: 1aHlaSEVJU/CBfEh/B+hUORROVZbrb1jBZXbNMg5cy4=) 5: N3Y7O0SBisZukLRMHy8_setuvFI.roa (hash: mKagmk6f++epGFCdum5PDcyniZIRDa8iTpQ+v2TwpbA=) 6: OO3HInjQE4V4nLX5G6Vefr6iPdA.roa (hash: mSjEnkNAFz3QeKqAoiXZ5g2rlJocA3yHCPraXIzbyWs=) 7: OmskgLTfs_yHaV8sxyBdNIbaPY0.roa (hash: +YVWkhb4gyvwjOmlRZNIrwJ0F1cssnxh9edgyxYPzgA=) 8: SLekjmBf2tyIMOB3CJb0Z47uJtk.roa (hash: dyK450H8i+alS9mWM0crx5H3Vwy79u+jha7k1eN+nzM=) 9: VUcsIi_9-b8RzEwnDD6jGVaTQ0M.roa (hash: FrKooKPN8B42nu5wk7iHVN6k1WQH71cGopIkNxiN9ZM=) 10: lNRs0BmJg2zqQMNQc_ixIHE9WsQ.roa (hash: 7Ls+3IQ8Q9VQV+f9v4gnxgD+wykLzcCXGexomxswIGQ=) 11: pK-j5yshh0oWZpvGt4P0ScMumdE.roa (hash: mnyHWgzU3xisUAQNhTt84VgPqHifggdlwwma4Rga83M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/Eipka-1MQXprSAX5PXenpGXjS5M.crl rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/Eipka-1MQXprSAX5PXenpGXjS5M.mft rsync://rpki.ripe.net/repository/DEFAULT/Eipka-1MQXprSAX5PXenpGXjS5M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 29 Apr 2025 05:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:7a:c5:17:1b:58:b9:55:24:42:09:88:19:dd:a7:d1:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=122a646bed4c417a6b4805f93d77a7a465e34b93 Validity Not Before: Apr 28 05:00:58 2025 GMT Not After : Apr 29 05:00:58 2025 GMT Subject: CN=19ca815147e7244697794a3f3e0c0a750fd866ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:26:e8:9e:3e:c1:ee:9a:29:9d:a2:d5:22:23: 0a:6d:3a:55:e0:87:71:9c:dd:5f:bd:c2:22:c0:8f: a1:7f:02:4a:4d:d3:63:5a:d3:d2:90:62:96:03:4c: 31:d7:08:1e:59:4b:00:01:64:a8:94:69:68:61:95: b4:ce:22:a4:c1:fb:d5:8c:6c:11:b7:4f:05:e9:17: 69:92:b0:8a:63:69:b9:b6:2b:6a:20:f8:94:aa:fb: 37:87:30:d0:c0:52:c0:31:e0:6d:61:86:0c:1a:25: 65:f9:43:64:b7:49:3e:6d:6c:8b:a1:29:ad:70:af: a2:7d:ed:7b:f3:62:cb:b1:92:aa:dc:86:f0:6a:33: 17:93:24:97:6c:7d:52:00:01:2e:4f:dd:54:3d:73: 96:88:06:f4:b0:38:92:33:67:a2:ab:24:87:5e:e9: 38:e3:46:fb:c3:bd:e5:52:22:c3:9b:a9:70:96:4e: f8:e2:d5:d7:7a:5e:bb:0f:77:ec:2f:7d:11:4b:36: d1:4b:b2:bb:60:3f:ae:8e:47:4a:9f:87:d8:fe:9b: 68:32:a4:7f:14:60:71:f9:09:a8:45:1f:3c:92:f9: 28:96:9e:f4:95:35:70:96:e7:a1:c7:23:56:15:06: e5:d1:bb:ac:9c:22:1a:71:f3:8c:12:94:85:18:96: 13:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:CA:81:51:47:E7:24:46:97:79:4A:3F:3E:0C:0A:75:0F:D8:66:CE X509v3 Authority Key Identifier: keyid:12:2A:64:6B:ED:4C:41:7A:6B:48:05:F9:3D:77:A7:A4:65:E3:4B:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eipka-1MQXprSAX5PXenpGXjS5M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/Eipka-1MQXprSAX5PXenpGXjS5M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/Eipka-1MQXprSAX5PXenpGXjS5M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:15:01:24:d3:cd:73:d2:71:20:b0:3e:39:64:ae:04:4a:db: 88:eb:08:22:75:e6:79:59:13:43:18:ed:c2:15:e0:3d:63:a3: 32:dc:11:6c:6a:fa:54:da:84:d6:b6:49:46:ae:e5:4a:b5:cd: ab:9e:a5:e1:87:4d:f2:c4:4f:ab:76:3d:18:85:98:9d:08:ee: 1d:77:5b:27:fd:a4:95:e8:0e:cf:cb:ea:bf:cd:6c:db:48:8f: 3b:f9:9a:54:17:18:c7:e3:41:59:93:35:39:06:69:a6:d9:eb: dd:8c:0c:1c:5a:d6:19:19:f3:9d:cc:63:2c:b5:4f:82:da:6f: e8:7b:62:e0:d7:1b:c6:ae:05:16:5f:52:0d:fa:26:e7:6d:21: a4:41:2f:9d:c3:8b:11:45:f3:e7:e5:c9:64:7d:2e:50:0f:74: 17:12:3b:ec:33:31:00:41:a1:52:1a:18:cc:5a:a4:60:6f:17: 07:e6:79:ae:e6:0d:42:40:8e:c8:35:75:b6:51:2d:27:a3:e7: df:62:4d:87:ad:db:8b:87:9e:11:21:e0:54:3a:52:61:29:ab: f1:eb:51:db:3c:af:87:75:0f:05:b8:ba:22:b5:8a:b5:28:be: 2b:8f:bc:3d:3f:d5:e0:94:63:ae:2b:75:c2:1b:04:88:40:5c: 44:ef:3e:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZ6xRcbWLlVJEIJiBndp9ECMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyMmE2NDZiZWQ0YzQxN2E2YjQ4MDVmOTNkNzdhN2E0NjVl MzRiOTMwHhcNMjUwNDI4MDUwMDU4WhcNMjUwNDI5MDUwMDU4WjAzMTEwLwYDVQQD EygxOWNhODE1MTQ3ZTcyNDQ2OTc3OTRhM2YzZTBjMGE3NTBmZDg2NmNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsibonj7B7popnaLVIiMKbTpV4Idx nN1fvcIiwI+hfwJKTdNjWtPSkGKWA0wx1wgeWUsAAWSolGloYZW0ziKkwfvVjGwR t08F6RdpkrCKY2m5titqIPiUqvs3hzDQwFLAMeBtYYYMGiVl+UNkt0k+bWyLoSmt cK+ife1782LLsZKq3IbwajMXkySXbH1SAAEuT91UPXOWiAb0sDiSM2eiqySHXuk4 40b7w73lUiLDm6lwlk744tXXel67D3fsL30RSzbRS7K7YD+ujkdKn4fY/ptoMqR/ FGBx+QmoRR88kvkolp70lTVwluehxyNWFQbl0busnCIacfOMEpSFGJYTrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBnKgVFH5yRGl3lKPz4MCnUP2GbOMB8GA1UdIwQY MBaAFBIqZGvtTEF6a0gF+T13p6Rl40uTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWlwa2EtMU1RWHByU0FYNVBYZW5wR1hqUzVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9hNTk2ZTItMjlkMi00OGM2LTliYWIt NWNiZDFmM2ZmMzlhLzEvRWlwa2EtMU1RWHByU0FYNVBYZW5wR1hqUzVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS9hNTk2ZTItMjlkMi00OGM2LTliYWItNWNiZDFmM2ZmMzlh LzEvRWlwa2EtMU1RWHByU0FYNVBYZW5wR1hqUzVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAphUBJNPN c9JxILA+OWSuBErbiOsIInXmeVkTQxjtwhXgPWOjMtwRbGr6VNqE1rZJRq7lSrXN q56l4YdN8sRPq3Y9GIWYnQjuHXdbJ/2klegOz8vqv81s20iPO/maVBcYx+NBWZM1 OQZpptnr3YwMHFrWGRnzncxjLLVPgtpv6Hti4Ncbxq4FFl9SDfom520hpEEvncOL EUXz5+XJZH0uUA90FxI77DMxAEGhUhoYzFqkYG8XB+Z5ruYNQkCOyDV1tlEtJ6Pn 32JNh63bi4eeESHgVDpSYSmr8etR2zyvh3UPBbi6IrWKtSi+K4+8PT/V4JRjrit1 whsEiEBcRO8+Zg== -----END CERTIFICATE-----Generated at Mon Apr 28 12:41:06 2025 by rpki-client