$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.mft File: sLWoCnEG4KS4VFyBULtyxpn8yaA.mft (raw, json) Hash identifier: bdSNPnqgzTq3TryJ+Ks8NhXXTY1SJNM4Bu/SslVH4ns= Subject key identifier: 7C:FB:31:AF:5D:89:5D:9B:45:AC:85:CC:AB:80:DD:A3:B8:A8:C7:23 Authority key identifier: B0:B5:A8:0A:71:06:E0:A4:B8:54:5C:81:50:BB:72:C6:99:FC:C9:A0 Certificate issuer: /CN=b0b5a80a7106e0a4b8545c8150bb72c699fcc9a0 Certificate serial: 0194BB974341F810D329D78567BCD595D811 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.mft Manifest number: 1447 Signing time: Fri 31 Jan 2025 09:00:39 +0000 Manifest this update: Fri 31 Jan 2025 09:00:39 +0000 Manifest next update: Sat 01 Feb 2025 09:00:39 +0000 Files and hashes: 1: 60jG5Ay8pKNRLAaYiabGAbMAWcU.roa (hash: mGDjXdclRD6cM00fzezmu8njPZGu0i86EMmzQCWdsaI=) 2: 8NknCKB4mqEufbZ6UbHgAa8xKGk.roa (hash: +VuXhmjH2zdhVZOeQIf+1XfhIBEvtUJA5CNUFP6jbIc=) 3: Cwb1KDzjyZP06ERQCkOqE8eDn-Q.roa (hash: qEbiLSfggbr/wcV1CfVb4G8sOcwZPVPdEo2xFZT7GWw=) 4: XXx0PZbW0VSnHcKqWvct0KGeX5o.roa (hash: fg2kYbNMaJFsDmSVzEYMa+3owPgOnqiysynI+fCXGgg=) 5: XqyfpygCBb8Q3tIPPqdoPK94M0A.roa (hash: 2VTgMTAP00AWrF9/qszpE/dPLTmJ6fjO0h7TyCaHdtE=) 6: d5wYN4sqYmgKKKUN9X-8jp9PKTs.roa (hash: /7Xb7BgMP/VziPk4Q/U+uMUdmAyttT7O93i5sL6urDU=) 7: i1CU3OfnjKON64QGCajnRU5gSS0.roa (hash: YY36Gemk4OiepX/UrPW7HzLvQewBOeW3gkIiItZgQz8=) 8: jU-enqBlwHSK5LFQUkQMv3mnQ3c.roa (hash: XGjlZdDrp7Q05Es+vT4dQhjxGrAgZ9KHZykl/3VpHuk=) 9: lrinFZObhZGfc1162OW4cGhpyFU.roa (hash: vPwojb/wgcSm6giu4fADfyjwWPUNFIPRDyI7Tyilnak=) 10: rgPd-lPBT_KjoGNurNCPr8-tYLM.roa (hash: 7UFfmlghHed6gv5YUhlj2bi7/Km6EbVr9jqYqXUYH8o=) 11: sLWoCnEG4KS4VFyBULtyxpn8yaA.crl (hash: 6U4gr27TK8qUKvSP4fB/8g4KpBC2/2Y5KpZPpjiTpVQ=) 12: uYQNZGrXH6jilfHVW7M6-uKjZF8.roa (hash: K7dbhIw3GKL8CpYsfdoECZtVDjcGxNIlpZxMSzxg0fc=) 13: zad7TKoNmHhoc0CyHOzgSXKr6f4.roa (hash: LQ6zogTRTgGoz9vqyWdA5yZND4PDb2ytjo7mWtS7rF8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.crl rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.mft rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 01 Feb 2025 09:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:94:bb:97:43:41:f8:10:d3:29:d7:85:67:bc:d5:95:d8:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0b5a80a7106e0a4b8545c8150bb72c699fcc9a0 Validity Not Before: Jan 31 09:00:39 2025 GMT Not After : Feb 1 09:00:39 2025 GMT Subject: CN=7cfb31af5d895d9b45ac85ccab80dda3b8a8c723 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:9b:01:df:d7:a8:47:ed:16:1e:f1:45:f9:fd: 26:82:03:8d:1f:77:54:71:4c:41:ab:b2:9a:33:b2: 25:79:d6:54:92:c8:ba:25:1f:06:7a:2d:2d:7d:2d: 98:ec:5e:d4:cb:dc:b2:01:96:59:6c:40:0a:bf:a1: 2b:c5:7b:03:08:4e:fb:65:62:a3:6f:63:95:d7:b2: 18:65:7d:ee:ad:6f:51:24:ab:ce:d7:59:e5:e7:95: 21:fd:40:3b:b7:56:eb:25:9b:36:5e:bc:da:14:9e: a9:94:9f:63:94:b1:03:87:87:cd:85:07:64:44:1b: 9d:f7:26:b1:12:67:5f:d8:6c:be:7a:9e:e9:ca:2d: 9a:f6:f7:7a:b5:aa:02:f4:84:0e:24:7c:9e:96:54: f6:a4:3b:cc:31:59:81:07:46:ae:1b:ad:e2:cd:4f: a9:38:22:de:30:ea:c5:8a:84:51:79:30:ba:30:a5: d7:80:a4:49:b1:4b:c3:d5:59:d7:d1:dc:24:6a:81: fc:28:ef:66:b8:99:f8:95:16:fb:52:77:65:02:8b: e5:a2:7a:fa:6c:8c:d8:0a:c8:f4:e4:6f:79:c5:a5: a8:40:75:24:27:fa:1b:e9:1f:2d:87:9d:c1:73:d4: 14:f0:47:aa:58:ef:c0:ae:5e:ad:b1:6c:a2:22:97: e3:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:FB:31:AF:5D:89:5D:9B:45:AC:85:CC:AB:80:DD:A3:B8:A8:C7:23 X509v3 Authority Key Identifier: keyid:B0:B5:A8:0A:71:06:E0:A4:B8:54:5C:81:50:BB:72:C6:99:FC:C9:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:72:56:76:56:92:10:89:e1:6e:e4:03:66:52:02:66:1f:61: 38:d9:8a:5b:a7:bc:d3:81:6d:c5:4a:1d:81:e6:6c:03:28:e2: 35:b7:45:f8:50:d9:18:23:64:cb:04:01:58:d2:ca:cd:ca:f4: e2:81:ba:70:07:de:5b:bc:0b:ff:27:a0:d4:db:16:e5:fb:6d: b3:f6:82:b2:65:c6:5f:98:33:4e:74:be:60:86:4d:85:c7:43: ce:40:7d:a8:58:e7:9c:c8:bf:cd:e8:76:ea:39:b2:5c:f3:3e: 3d:9c:01:fc:2b:5d:12:8a:a6:9c:26:0a:cf:d9:d2:84:27:9d: 9e:2c:2d:9e:b7:74:38:dc:96:70:eb:0b:4a:52:d7:85:ce:55: 6b:c7:f9:c4:70:9f:9f:92:bb:b3:03:ca:14:39:c1:5d:83:6f: f7:c8:e4:c3:15:b3:f2:ac:80:50:37:9d:8f:6a:5b:5c:c6:dd: 99:af:09:9e:30:a8:8c:bf:fd:cc:0b:2c:1d:ad:cc:db:0e:e2: 23:39:af:e8:fb:6d:97:96:91:11:93:e9:4e:9c:7d:5d:f0:eb: a6:a4:7e:d4:b3:81:95:02:7a:87:e4:0f:7c:66:a8:10:d6:d9: f0:76:e3:2f:9a:34:3d:2e:00:55:f0:54:d9:57:52:61:c0:32: bf:bb:9d:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZS7l0NB+BDTKdeFZ7zVldgRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwYjVhODBhNzEwNmUwYTRiODU0NWM4MTUwYmI3MmM2OTlm Y2M5YTAwHhcNMjUwMTMxMDkwMDM5WhcNMjUwMjAxMDkwMDM5WjAzMTEwLwYDVQQD Eyg3Y2ZiMzFhZjVkODk1ZDliNDVhYzg1Y2NhYjgwZGRhM2I4YThjNzIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJsB39eoR+0WHvFF+f0mggONH3dU cUxBq7KaM7IledZUksi6JR8Gei0tfS2Y7F7Uy9yyAZZZbEAKv6ErxXsDCE77ZWKj b2OV17IYZX3urW9RJKvO11nl55Uh/UA7t1brJZs2XrzaFJ6plJ9jlLEDh4fNhQdk RBud9yaxEmdf2Gy+ep7pyi2a9vd6taoC9IQOJHyellT2pDvMMVmBB0auG63izU+p OCLeMOrFioRReTC6MKXXgKRJsUvD1VnX0dwkaoH8KO9muJn4lRb7UndlAovlonr6 bIzYCsj05G95xaWoQHUkJ/ob6R8th53Bc9QU8EeqWO/Arl6tsWyiIpfjyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHz7Ma9diV2bRayFzKuA3aO4qMcjMB8GA1UdIwQY MBaAFLC1qApxBuCkuFRcgVC7csaZ/MmgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0xXb0NuRUc0S1M0VkZ5QlVMdHl4cG44eWFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9mMTUzZGMtY2JmYi00YTRmLTgwZDIt NzQ1ZTA4ZmU1OGM2LzEvc0xXb0NuRUc0S1M0VkZ5QlVMdHl4cG44eWFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi9mMTUzZGMtY2JmYi00YTRmLTgwZDItNzQ1ZTA4ZmU1OGM2 LzEvc0xXb0NuRUc0S1M0VkZ5QlVMdHl4cG44eWFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZnJWdlaS EInhbuQDZlICZh9hONmKW6e804FtxUodgeZsAyjiNbdF+FDZGCNkywQBWNLKzcr0 4oG6cAfeW7wL/yeg1NsW5ftts/aCsmXGX5gzTnS+YIZNhcdDzkB9qFjnnMi/zeh2 6jmyXPM+PZwB/CtdEoqmnCYKz9nShCedniwtnrd0ONyWcOsLSlLXhc5Va8f5xHCf n5K7swPKFDnBXYNv98jkwxWz8qyAUDedj2pbXMbdma8JnjCojL/9zAssHa3M2w7i Izmv6Pttl5aREZPpTpx9XfDrpqR+1LOBlQJ6h+QPfGaoENbZ8HbjL5o0PS4AVfBU 2VdSYcAyv7udLw== -----END CERTIFICATE-----Generated at Fri Jan 31 15:40:24 2025 by rpki-client on console-fra.rpki-client.org