$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.mft File: CjfYB9T3zdPgr-SryO5aiAxgkPE.mft (raw, json) Hash identifier: bpba6wbU6t4S1atSaxTQP5o2VglL+LaWJqcsZjOXX6k= Subject key identifier: 4F:E4:D7:94:0F:14:E5:4B:B6:57:E1:BC:EF:5B:3D:46:13:83:34:42 Authority key identifier: 0A:37:D8:07:D4:F7:CD:D3:E0:AF:E4:AB:C8:EE:5A:88:0C:60:90:F1 Certificate issuer: /CN=0a37d807d4f7cdd3e0afe4abc8ee5a880c6090f1 Certificate serial: 01967341BEAFFD974B8CECEA55C3CEFF070F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.mft Manifest number: 1517 Signing time: Sat 26 Apr 2025 18:00:10 +0000 Manifest this update: Sat 26 Apr 2025 18:00:10 +0000 Manifest next update: Sun 27 Apr 2025 18:00:10 +0000 Files and hashes: 1: CjfYB9T3zdPgr-SryO5aiAxgkPE.crl (hash: /gJog3hOAyJlDNA/kJjx3nCJOiDWK13QKdI+Q5wc7wQ=) 2: FNMboaNFS4dq_J98ARIGXoPZgMk.roa (hash: g+DjQQe5PR9O6yvqsBwCFmOG/XGs/TtjlyZg5KiU2nw=) 3: Kd7tkS6D6OIC_ttNItP7c_fNa-k.roa (hash: N1BVy/KuUFpEDCoGKJGNcVR+kViJHNXU5UmQd9NSKDM=) 4: ZSplNm_9GeMJ-OaOGXwYKQxixBM.roa (hash: iyy46lwnRVbko1Ii+0Qc3g2qVyE+yV7nOcFx1D7pckk=) 5: bljFw_6M0rhdvdyihFkoTkuQtkQ.roa (hash: c38udhGlPf0mBbFYPwiBR6YW6q0bRhJQiglvxGlNEOE=) 6: cCAi-yLWOl7KTLvjcgv4I9u3nD8.roa (hash: pzgBJKQlY+wSbZatuzP8YX/UnGaDdO5COchDt+eC4hU=) 7: grw1j9-8samWWiChPkyufP-sl-E.roa (hash: NBZBfXg3sE94wmS64tQlSrQjbH2DFUT/GlOy2NVgQiI=) 8: gtPZlYI7w3coAzc-MlHuuU1oFOM.roa (hash: kHvdU6CJOqssI35/ez8kLYqLbyhabXcTkrkqWWbKmw8=) 9: mId092quyOB83VO8NTOLuLTrwCU.roa (hash: 4ZYjaMOtkO7JVCo9djGezfRPkTYQYlB89pHbn+Vlkh4=) 10: u0jBRb9Z9H3ccoDY49s5ChaWPsY.roa (hash: LuRfHIMnClX5LQuIAIIT+Sg8y8Bhb70AVLwndT4yCAQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.crl rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.mft rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 18:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:73:41:be:af:fd:97:4b:8c:ec:ea:55:c3:ce:ff:07:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a37d807d4f7cdd3e0afe4abc8ee5a880c6090f1 Validity Not Before: Apr 26 18:00:10 2025 GMT Not After : Apr 27 18:00:10 2025 GMT Subject: CN=4fe4d7940f14e54bb657e1bcef5b3d4613833442 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:7d:45:da:1e:b9:b8:8f:14:38:0a:c9:bf:6d: 10:74:62:fa:ad:2c:85:5a:2a:a3:52:24:67:ce:ec: f4:22:f6:87:8a:e4:5a:84:46:e0:53:87:d4:d2:4f: 2e:00:e7:01:30:e0:48:97:a0:8a:41:00:1c:94:c7: fa:69:df:54:cd:55:db:12:fe:be:0f:5e:8d:aa:70: b7:e2:55:40:99:8c:ed:dd:9e:09:89:a1:a2:54:93: b9:2a:45:56:c9:2b:45:1a:03:17:b1:da:d9:57:51: eb:17:0f:c1:d1:4a:f8:f6:ed:99:13:67:c3:b3:da: 28:f0:db:a3:85:8a:b8:59:07:5d:7e:f4:6f:95:46: ee:44:45:0f:02:bc:02:c0:69:b2:b3:4e:f3:bc:11: 63:48:a2:69:fd:5f:46:f8:f2:0c:e9:d5:a3:64:21: 9f:9e:f6:94:e4:a1:f6:e2:bd:83:20:3a:f9:70:90: 8e:7a:45:5c:c2:21:64:2e:57:87:ca:fe:ea:e7:28: ed:29:62:c6:93:32:27:ad:b9:2c:21:02:ab:04:1c: 90:02:ca:a7:31:99:59:5d:18:53:1e:60:9c:64:cf: 91:ab:d3:31:de:a0:a9:75:6c:cb:fb:de:cc:99:57: e4:03:30:1a:13:30:e5:e4:44:38:c9:a8:06:0e:02: 17:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:E4:D7:94:0F:14:E5:4B:B6:57:E1:BC:EF:5B:3D:46:13:83:34:42 X509v3 Authority Key Identifier: keyid:0A:37:D8:07:D4:F7:CD:D3:E0:AF:E4:AB:C8:EE:5A:88:0C:60:90:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:68:ae:86:7c:d6:01:80:dd:22:1a:33:5a:f4:74:1e:76:dd: 0e:82:3f:30:86:ec:61:d7:9e:5c:1b:39:31:c0:78:ad:08:ee: 48:f4:50:65:07:32:66:65:3e:84:c4:21:40:8e:62:9e:89:fb: 5d:9c:4a:78:31:fd:52:33:94:3c:82:dd:11:83:28:92:bd:e8: bd:88:b4:33:39:e3:cd:d5:01:b8:46:4d:06:04:21:8a:c5:3f: 0c:ae:61:96:08:d1:3e:46:28:df:58:f6:bd:91:ae:56:b2:2d: 96:87:e4:27:58:fc:4a:9d:dd:a0:96:6c:88:9d:99:7f:1d:31: 13:00:02:6f:00:94:7f:4e:5b:e4:83:cb:1d:14:6b:41:27:4f: 77:96:84:0e:79:2a:ad:34:e0:64:bb:70:cd:27:e3:37:03:b7: 83:7f:fe:e1:b2:1c:75:4c:1e:60:44:62:bf:0f:22:7e:3a:cb: 32:93:54:26:02:ef:dc:5a:cf:9c:a4:49:ce:08:24:65:dc:fb: fd:b5:2e:d0:5a:6a:5b:c4:c4:4b:b1:2d:62:33:25:02:45:c1: b8:ec:60:19:20:a7:39:c0:82:0b:8c:26:d8:aa:97:53:e6:a0: 78:41:b3:71:57:6e:18:73:50:68:0f:d8:e1:47:69:34:7a:57: c9:ac:17:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZzQb6v/ZdLjOzqVcPO/wcPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhMzdkODA3ZDRmN2NkZDNlMGFmZTRhYmM4ZWU1YTg4MGM2 MDkwZjEwHhcNMjUwNDI2MTgwMDEwWhcNMjUwNDI3MTgwMDEwWjAzMTEwLwYDVQQD Eyg0ZmU0ZDc5NDBmMTRlNTRiYjY1N2UxYmNlZjViM2Q0NjEzODMzNDQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzn1F2h65uI8UOArJv20QdGL6rSyF WiqjUiRnzuz0IvaHiuRahEbgU4fU0k8uAOcBMOBIl6CKQQAclMf6ad9UzVXbEv6+ D16NqnC34lVAmYzt3Z4JiaGiVJO5KkVWyStFGgMXsdrZV1HrFw/B0Ur49u2ZE2fD s9oo8NujhYq4WQddfvRvlUbuREUPArwCwGmys07zvBFjSKJp/V9G+PIM6dWjZCGf nvaU5KH24r2DIDr5cJCOekVcwiFkLleHyv7q5yjtKWLGkzInrbksIQKrBByQAsqn MZlZXRhTHmCcZM+Rq9Mx3qCpdWzL+97MmVfkAzAaEzDl5EQ4yagGDgIXkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE/k15QPFOVLtlfhvO9bPUYTgzRCMB8GA1UdIwQY MBaAFAo32AfU983T4K/kq8juWogMYJDxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2pmWUI5VDN6ZFBnci1TcnlPNWFpQXhna1BFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9iYzI2OGQtNjFmMC00NzFmLWFhYjkt ODAwZWRhMmNmYjM2LzEvQ2pmWUI5VDN6ZFBnci1TcnlPNWFpQXhna1BFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC9iYzI2OGQtNjFmMC00NzFmLWFhYjktODAwZWRhMmNmYjM2 LzEvQ2pmWUI5VDN6ZFBnci1TcnlPNWFpQXhna1BFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW2iuhnzW AYDdIhozWvR0HnbdDoI/MIbsYdeeXBs5McB4rQjuSPRQZQcyZmU+hMQhQI5inon7 XZxKeDH9UjOUPILdEYMokr3ovYi0MznjzdUBuEZNBgQhisU/DK5hlgjRPkYo31j2 vZGuVrItlofkJ1j8Sp3doJZsiJ2Zfx0xEwACbwCUf05b5IPLHRRrQSdPd5aEDnkq rTTgZLtwzSfjNwO3g3/+4bIcdUweYERivw8ifjrLMpNUJgLv3FrPnKRJzggkZdz7 /bUu0FpqW8TES7EtYjMlAkXBuOxgGSCnOcCCC4wm2KqXU+ageEGzcVduGHNQaA/Y 4UdpNHpXyawXIw== -----END CERTIFICATE-----Generated at Sun Apr 27 04:10:48 2025 by rpki-client