$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft File: zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft (raw, json) Hash identifier: qsbnX2LiSS8dE1h/1vtpf4A0qIdvrvu0jGlSy6+Ds8M= Subject key identifier: 1E:45:7D:B9:53:5C:B1:78:E6:0A:56:2B:60:E1:33:F8:EE:A4:80:E9 Authority key identifier: CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77 Certificate issuer: /CN=cec5afe769b94346e1cd362eb85f875b23b17277 Certificate serial: 01967153CFFA573CD32EF795D66A7345D3DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft Manifest number: 0E76 Signing time: Sat 26 Apr 2025 09:00:40 +0000 Manifest this update: Sat 26 Apr 2025 09:00:40 +0000 Manifest next update: Sun 27 Apr 2025 09:00:40 +0000 Files and hashes: 1: 0vDMBCZWFOKh-q-XGUwu2Jr3z7Y.roa (hash: uWfrAsGA9zSBFRUppF4EGIbGfP7a2y+0eTMFReV79oU=) 2: 1-EH3zz14aNQaNvLk-kA5ObugP0M.roa (hash: AInhS8QzIu5+kTFM1AzSru0PxsCBAqGzcKM2yjycOYo=) 3: 4nM4rBv9VVZiBpLQiIbQsg6NSx0.roa (hash: pcYAXIo8mN5119CAEJXDu1uZ7LPPD2vqAMHmgIZuOWM=) 4: 9gWd_bF55nUFtzlptfQ-Ji7hQPI.roa (hash: xEiD+NeQMOim7hnrMiNX9H8tnd7mZQhnJ+lXAAgggm4=) 5: KH5q6_efsAJjbaCfus-hh1oZQWA.roa (hash: gjBnI4kxIIC3raOpuYMhEBykghBBy5koqMqm8N4fh5A=) 6: KnG8E7kezj3tf5epLozmTXTa310.roa (hash: DtT9ixAjwNWnGrRh0hq/H61cwW7Mp11Bc6qafI15X5M=) 7: NYD7kEkEPf-ABChHg559KWDxZM8.roa (hash: wEdTjLyasP6V7i4QrzN1J6SR98/Z10g1DKcaBU2r67I=) 8: aI-_oTt6aFi0rGtdpFFsZSUUhnk.roa (hash: ZpzPh7grr/BmAU1ND5+d/vIuS1VNGFc3sngZPWDtPBs=) 9: eL97ct3zq6TVsXqsm_lH3Bbmhag.roa (hash: lU3q1Bg78D4eXPO6TJ7nPcg82PdCzYKhbHO7kJienoQ=) 10: lSv4oHTtNY8TzLUjbRcqin21GM4.roa (hash: cWxkPQ7cLaDE94lvjvRa4rVit4z5KhiypB5wM4L+M6g=) 11: m1fv2wuNZrr8jBjk4GOP29n9uGg.roa (hash: kteVPpKzQdVFACZScgeUlas5Q589BNk8kwEszbWHglI=) 12: ppLoxUxyivEc3yWndu-pke-HgJs.roa (hash: xxTEUKme3aRveqdKSvTxmEaxTjRGb/uS7Dl8YoJIW9c=) 13: qiz-f9e8_qagVo454Qf-usEmhyI.roa (hash: 0k1gLPvcIoWvEOFBnscDSuywq30yMwZrPLJ7ynVOwEs=) 14: ruY7n1D9cAaf_aNsuAFKpSkEn90.roa (hash: iF7yWJ9yULuaJcnv62fja14BHo/HkbBE43s+ysMeZAE=) 15: y2fFeuZ4ALNmbxOF-TJC2ez9A_A.roa (hash: ZW4XWeHDbmOrkzP6lKA3E8FtGyPFeQqM41Y/X1LGTZg=) 16: zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl (hash: I/J/e7jQs9GoIqRIVvmGqkksnA7Z+I/4Sx2xeRwrCyw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 09:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:71:53:cf:fa:57:3c:d3:2e:f7:95:d6:6a:73:45:d3:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec5afe769b94346e1cd362eb85f875b23b17277 Validity Not Before: Apr 26 09:00:40 2025 GMT Not After : Apr 27 09:00:40 2025 GMT Subject: CN=1e457db9535cb178e60a562b60e133f8eea480e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2a:ee:94:0b:fc:86:ef:a6:f0:06:3e:80:52: f7:f5:37:4b:9b:6a:71:ea:ca:31:30:30:aa:31:d4: f5:0f:57:84:29:6a:37:79:48:70:fa:cc:e9:80:4e: ec:a9:4a:19:bf:e7:0c:fb:0d:07:af:be:19:1e:93: bc:49:34:e8:2a:03:aa:0e:5b:f5:c4:e3:3e:92:a8: b4:cf:60:93:49:e4:05:28:2f:f0:dc:97:ca:0c:fd: a1:01:60:7c:3e:3c:56:da:57:77:6d:d7:52:9f:96: b8:33:2f:42:70:b8:76:82:48:98:83:1b:08:bc:f4: 1c:32:24:f3:c0:9d:85:29:85:2d:27:81:a3:6d:07: 1f:23:7c:86:6f:1f:67:fb:91:31:b5:f0:fa:64:5f: ea:69:4d:06:d5:43:56:43:a2:48:fb:60:55:a9:49: a1:d7:49:65:08:82:bf:d4:1c:18:f8:97:52:86:34: bf:95:cf:ee:c1:f3:c7:91:62:12:c1:1f:e3:77:1c: 5a:5b:d8:bc:3f:46:88:74:ac:2e:8e:cc:e1:a6:73: 3e:77:ce:5a:3e:a8:55:4c:ec:a8:bd:71:ab:6e:f4: 25:d3:06:7c:3a:b7:37:c7:58:97:4e:5d:e4:c3:a2: 73:c0:18:69:6a:84:77:77:df:f6:6d:39:47:b9:29: 5d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:45:7D:B9:53:5C:B1:78:E6:0A:56:2B:60:E1:33:F8:EE:A4:80:E9 X509v3 Authority Key Identifier: keyid:CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:6c:63:39:2a:e1:33:34:58:c0:f2:1a:05:39:85:96:8b:26: c3:d0:09:2d:18:7f:e8:25:6f:eb:05:60:25:f6:33:8e:cb:25: c1:69:b1:39:c1:8b:88:f4:2c:16:a5:09:7b:94:d0:f9:81:0f: 80:e2:8f:40:29:48:1f:b8:9d:3e:c0:e8:1a:7f:e8:49:a3:e3: ca:71:44:2b:35:7a:8d:43:1e:ac:ef:73:8d:ae:6d:8a:25:de: f1:e0:5d:32:8b:e1:e6:d2:f7:86:a9:a1:31:01:ad:c9:ff:69: da:a5:2f:5f:54:f9:17:7a:85:05:7c:88:02:46:91:2a:2b:8c: 2f:4e:13:56:d6:a7:69:d6:8c:ff:73:5e:49:b0:19:45:f7:f6: 47:54:3a:3f:20:03:0b:99:89:e1:49:96:ec:3a:77:6c:8b:e3: 3a:2e:b9:1f:f8:63:45:71:e5:cb:df:fb:b4:04:05:28:18:b9: 38:4e:0e:29:d2:0d:e3:0d:5b:28:e7:7f:f2:5a:76:f1:f1:5a: 45:24:68:0b:8d:d6:99:d3:8f:54:58:90:f2:5c:f0:83:23:bf: 79:16:8c:13:51:2e:70:94:3d:b1:24:f9:a3:d9:63:fd:fe:52: 75:c2:66:a2:0d:f0:85:04:d9:c0:ad:af:7b:4e:ec:04:13:8e: 58:b7:c6:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZxU8/6VzzTLveV1mpzRdPfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlYzVhZmU3NjliOTQzNDZlMWNkMzYyZWI4NWY4NzViMjNi MTcyNzcwHhcNMjUwNDI2MDkwMDQwWhcNMjUwNDI3MDkwMDQwWjAzMTEwLwYDVQQD EygxZTQ1N2RiOTUzNWNiMTc4ZTYwYTU2MmI2MGUxMzNmOGVlYTQ4MGU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuirulAv8hu+m8AY+gFL39TdLm2px 6soxMDCqMdT1D1eEKWo3eUhw+szpgE7sqUoZv+cM+w0Hr74ZHpO8STToKgOqDlv1 xOM+kqi0z2CTSeQFKC/w3JfKDP2hAWB8PjxW2ld3bddSn5a4My9CcLh2gkiYgxsI vPQcMiTzwJ2FKYUtJ4GjbQcfI3yGbx9n+5ExtfD6ZF/qaU0G1UNWQ6JI+2BVqUmh 10llCIK/1BwY+JdShjS/lc/uwfPHkWISwR/jdxxaW9i8P0aIdKwujszhpnM+d85a PqhVTOyovXGrbvQl0wZ8Orc3x1iXTl3kw6JzwBhpaoR3d9/2bTlHuSld6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB5FfblTXLF45gpWK2DhM/jupIDpMB8GA1UdIwQY MBaAFM7Fr+dpuUNG4c02Lrhfh1sjsXJ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenNXdjUybTVRMGJoelRZdXVGLUhXeU94Y25jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi8zZDU2OWMtMTkwNy00ZDJjLWFjZWQt MzMyNDdjOGUxYzFmLzEvenNXdjUybTVRMGJoelRZdXVGLUhXeU94Y25jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi8zZDU2OWMtMTkwNy00ZDJjLWFjZWQtMzMyNDdjOGUxYzFm LzEvenNXdjUybTVRMGJoelRZdXVGLUhXeU94Y25jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGWxjOSrh MzRYwPIaBTmFlosmw9AJLRh/6CVv6wVgJfYzjsslwWmxOcGLiPQsFqUJe5TQ+YEP gOKPQClIH7idPsDoGn/oSaPjynFEKzV6jUMerO9zja5tiiXe8eBdMovh5tL3hqmh MQGtyf9p2qUvX1T5F3qFBXyIAkaRKiuML04TVtanadaM/3NeSbAZRff2R1Q6PyAD C5mJ4UmW7Dp3bIvjOi65H/hjRXHly9/7tAQFKBi5OE4OKdIN4w1bKOd/8lp28fFa RSRoC43WmdOPVFiQ8lzwgyO/eRaME1EucJQ9sST5o9lj/f5SdcJmog3whQTZwK2v e07sBBOOWLfGkw== -----END CERTIFICATE-----Generated at Sat Apr 26 18:32:10 2025 by rpki-client