$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.mft File: wtIegEq3cTrXh33eYDqngksxmDw.mft (raw, json) Hash identifier: SOPksqZhBEmALGZPplZTgZv1KTSJpGZE+BdzwZbV3a0= Subject key identifier: 84:9A:21:3E:E1:B6:42:6F:FE:75:95:14:82:D0:B0:77:24:25:2C:58 Authority key identifier: C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C Certificate issuer: /CN=c2d21e804ab7713ad7877dde603aa7824b31983c Certificate serial: 01967341C46EDC7C7F08AEA43B8AF51D0C44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.mft Manifest number: 0E80 Signing time: Sat 26 Apr 2025 18:00:12 +0000 Manifest this update: Sat 26 Apr 2025 18:00:12 +0000 Manifest next update: Sun 27 Apr 2025 18:00:12 +0000 Files and hashes: 1: 6npNfqw9ft3wFBb5k5d8Au1GyrU.roa (hash: Ypl6gLmfJjGNPDL8Gk8ZFTBrn9giPszXF7Ziq9N8zCY=) 2: CEHno33Cl7h0GLAM4p0jfcTuU2k.roa (hash: VzZMvgTQCr8mQ/IevQojqSyjWV0o3WsjpJkJUVzQ2fo=) 3: F0e-LrOaO1fC5d8GXQ9bEeDZ160.roa (hash: cofTGB9X2CyIcikGAWppFcO24T6sgvWIjXIVxAl57xQ=) 4: GB4vtqTXSwKp7zeWzOQndrqFgF8.roa (hash: rdiyJfrKTAJ+PqJC+r6+QSHIQKbyvYvJTxSXGGM5e8w=) 5: GeAJ1HW4BIewoLPfGbb-SsL5NGw.roa (hash: srwRADwGDIIx52WT+/n/TTLrhpUiRbeWdmuzYXw/VCw=) 6: HGLfNFEmq1zoGMYRZBEFVC-KI2E.roa (hash: FKMG8ZBG6AFoA3ZFzEjcDqb09W6tPLhjGkfNe7kPOX4=) 7: JN30kUlZb2UdsgE-OutzbLQiERo.roa (hash: B/Z1tvVR2z8KZUGUWDKLU3ou6I+OjR3sN2Q9pxieTbk=) 8: biJknYRjE5L_jTv2KpvNG71JuZs.roa (hash: HCdhdiyjdtaidQONiCaAjw0Va1l2ztmngnp9upg/BOo=) 9: cMyuoWOy66eDKnjdJCEfhSkyz1E.roa (hash: LOQsteLks/Yul4nf8jy2hWFak5manC4iYDuO7o5PTtg=) 10: dxFo2JNSLNyFjO0-WsCs0C6Hof0.roa (hash: NmFePRA7yHk29wTet83LObHlNy/GZGPfuri37nzr9Xk=) 11: hdNNHQIFwnpnxNggYxU1p6Z-XGk.roa (hash: tOBVPWHOBl8156ZGKWKuty1/zjQtgPwsgL3f1n3MYGU=) 12: nq9QkGdX68nm-XUKViIxXutv5p0.roa (hash: LYeY4Ewyqeshu3FPO2U3xARlcYpAxYT/ihB3h+fhL+8=) 13: o0w1bPk9yQkEzOmquHjyTCzVPsc.roa (hash: m8T06/6PXu8/epS4UvU7PZ+M0wtlNs/1xaD5zm6hoAE=) 14: uZxgwvEf9WeuGM60Zi1VK8Mj4UI.roa (hash: 33y4OizHoHywglDgbvg5deRkLMeifLFTIVE+wULlWa4=) 15: vxkpUFyY_pV46Dy2vccW_kFg3Xg.roa (hash: qhf8yhleIujtWTxbbg63MczcaiHWwXzoRrg7MjpLcgQ=) 16: wtIegEq3cTrXh33eYDqngksxmDw.crl (hash: YqADelhqJ6mQ6iPDYpGkhbn0USXfvowDJ/SCSVR0Kps=) 17: wwFX4PAqfUeMNXpGS3KNseh4ppg.roa (hash: OLlfS0/X+1Yl71pRy+nk3a/H1A/qBK8IAfXsmm/hZsc=) 18: z9W-SXWXNvPf50hBoKJTZsS-x88.roa (hash: Pj96ONEJXoTrBWw/wBWoBoF3HEpksk4ZBOjXYOlm2eQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.mft rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 17:20:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:73:41:c4:6e:dc:7c:7f:08:ae:a4:3b:8a:f5:1d:0c:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2d21e804ab7713ad7877dde603aa7824b31983c Validity Not Before: Apr 26 18:00:12 2025 GMT Not After : Apr 27 18:00:12 2025 GMT Subject: CN=849a213ee1b6426ffe75951482d0b07724252c58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:32:b5:06:c7:9a:a4:f7:6f:8b:2a:18:96:56: f1:70:ca:52:6c:bf:d1:d4:00:5d:1f:cc:7d:81:66: 57:26:fc:7e:02:80:22:54:dd:18:dc:97:73:96:7c: 3e:2c:53:ca:fc:2a:ca:da:9a:0a:1c:fb:94:9e:ee: d7:87:55:19:f0:5f:70:fc:78:57:39:e5:92:c6:27: 6a:60:48:89:b7:4c:c7:df:5b:fb:4b:cb:88:69:df: 4b:67:04:f0:f6:41:a1:b9:4d:d1:b6:0f:de:c1:3f: 4b:f6:f9:df:8b:dd:da:57:a4:34:23:e0:f6:64:e5: b6:be:fc:12:36:c7:57:ac:c5:4f:f5:5e:2a:29:43: 5e:40:39:77:e7:2a:b0:55:d1:fd:2b:25:f7:5d:8e: 77:65:85:31:b0:e2:1c:80:ec:75:48:a0:0e:5f:02: d1:f2:05:9e:a0:50:69:3e:2d:e9:d4:0b:80:64:9b: f0:9e:39:48:07:80:47:7f:d0:6c:e8:31:54:85:a9: ac:87:69:82:a4:b0:02:2a:e2:b4:2c:ee:8f:60:dd: 29:8b:05:db:b9:9e:6a:f6:d9:c0:7b:83:60:fd:70: 26:41:06:77:4e:7f:33:44:c5:c9:ba:10:a5:27:0d: 6b:ff:f1:d0:85:a5:3a:fb:39:9e:6a:13:0a:77:8c: 45:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:9A:21:3E:E1:B6:42:6F:FE:75:95:14:82:D0:B0:77:24:25:2C:58 X509v3 Authority Key Identifier: keyid:C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:ea:92:35:d0:04:82:8e:23:be:e0:86:29:4f:fb:f7:95:ff: a5:3d:62:69:cf:df:95:f8:c0:80:63:55:56:8c:e2:96:8f:53: 98:f4:37:9a:10:f8:30:69:54:36:0f:61:56:06:f8:70:eb:8d: 5b:97:60:14:5b:83:45:94:69:79:29:ed:f6:d9:98:ca:3e:3f: 8e:52:be:cc:0f:8a:c4:24:4a:2e:7f:ba:3a:9d:c6:75:c3:8f: 5f:73:09:91:19:41:28:a1:88:59:83:27:49:54:48:17:71:ae: c6:0a:d6:5f:34:da:13:7b:ef:33:79:40:3a:ed:e3:f4:d4:0a: 13:fc:28:a2:95:fe:91:e5:28:dd:93:20:a3:d9:52:8f:63:e6: d7:23:15:66:4b:82:ba:c4:3a:63:c8:dc:da:f4:01:b4:db:ae: 9e:e2:eb:15:3e:8c:4c:4c:8b:73:a8:f2:1c:1a:30:39:ae:23: fc:4a:67:21:2b:cc:2b:37:2c:8d:ca:1d:95:03:5f:f5:c5:b5: 47:56:4f:15:42:32:18:e2:96:99:70:37:66:98:ff:1e:15:ba: 7e:33:51:c5:d8:23:6c:7d:4a:ad:70:e7:39:67:9c:db:d0:33: 61:33:d0:58:0d:0d:58:e1:75:db:d6:03:b2:81:64:9c:cf:9c: e1:92:e0:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZzQcRu3Hx/CK6kO4r1HQxEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyZDIxZTgwNGFiNzcxM2FkNzg3N2RkZTYwM2FhNzgyNGIz MTk4M2MwHhcNMjUwNDI2MTgwMDEyWhcNMjUwNDI3MTgwMDEyWjAzMTEwLwYDVQQD Eyg4NDlhMjEzZWUxYjY0MjZmZmU3NTk1MTQ4MmQwYjA3NzI0MjUyYzU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2zK1BseapPdviyoYllbxcMpSbL/R 1ABdH8x9gWZXJvx+AoAiVN0Y3Jdzlnw+LFPK/CrK2poKHPuUnu7Xh1UZ8F9w/HhX OeWSxidqYEiJt0zH31v7S8uIad9LZwTw9kGhuU3Rtg/ewT9L9vnfi93aV6Q0I+D2 ZOW2vvwSNsdXrMVP9V4qKUNeQDl35yqwVdH9KyX3XY53ZYUxsOIcgOx1SKAOXwLR 8gWeoFBpPi3p1AuAZJvwnjlIB4BHf9Bs6DFUhamsh2mCpLACKuK0LO6PYN0piwXb uZ5q9tnAe4Ng/XAmQQZ3Tn8zRMXJuhClJw1r//HQhaU6+zmeahMKd4xFJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFISaIT7htkJv/nWVFILQsHckJSxYMB8GA1UdIwQY MBaAFMLSHoBKt3E614d93mA6p4JLMZg8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3RJZWdFcTNjVHJYaDMzZVlEcW5na3N4bUR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wNGI0NDYtNGFlMS00ZmU1LWI2NDYt NTlhZTA5ZWRiZWI5LzEvd3RJZWdFcTNjVHJYaDMzZVlEcW5na3N4bUR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8wNGI0NDYtNGFlMS00ZmU1LWI2NDYtNTlhZTA5ZWRiZWI5 LzEvd3RJZWdFcTNjVHJYaDMzZVlEcW5na3N4bUR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAluqSNdAE go4jvuCGKU/795X/pT1iac/flfjAgGNVVozilo9TmPQ3mhD4MGlUNg9hVgb4cOuN W5dgFFuDRZRpeSnt9tmYyj4/jlK+zA+KxCRKLn+6Op3GdcOPX3MJkRlBKKGIWYMn SVRIF3GuxgrWXzTaE3vvM3lAOu3j9NQKE/woopX+keUo3ZMgo9lSj2Pm1yMVZkuC usQ6Y8jc2vQBtNuunuLrFT6MTEyLc6jyHBowOa4j/EpnISvMKzcsjcodlQNf9cW1 R1ZPFUIyGOKWmXA3Zpj/HhW6fjNRxdgjbH1KrXDnOWec29AzYTPQWA0NWOF129YD soFknM+c4ZLgJw== -----END CERTIFICATE-----Generated at Sat Apr 26 23:07:33 2025 by rpki-client