$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.mft File: sLWoCnEG4KS4VFyBULtyxpn8yaA.mft (raw, json) Hash identifier: FckPIoSqEDH46AXELnXvEMcDSpLQSapGErGzoBJ5QlM= Subject key identifier: DF:C0:41:8E:C0:87:2F:15:68:AC:37:07:AC:DC:19:0E:8C:D1:80:C1 Authority key identifier: B0:B5:A8:0A:71:06:E0:A4:B8:54:5C:81:50:BB:72:C6:99:FC:C9:A0 Certificate issuer: /CN=b0b5a80a7106e0a4b8545c8150bb72c699fcc9a0 Certificate serial: 019673B032774B24EC03AE7AB182BCCAB584 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.mft Manifest number: 152B Signing time: Sat 26 Apr 2025 20:00:49 +0000 Manifest this update: Sat 26 Apr 2025 20:00:49 +0000 Manifest next update: Sun 27 Apr 2025 20:00:49 +0000 Files and hashes: 1: 60jG5Ay8pKNRLAaYiabGAbMAWcU.roa (hash: mGDjXdclRD6cM00fzezmu8njPZGu0i86EMmzQCWdsaI=) 2: 8NknCKB4mqEufbZ6UbHgAa8xKGk.roa (hash: +VuXhmjH2zdhVZOeQIf+1XfhIBEvtUJA5CNUFP6jbIc=) 3: Cwb1KDzjyZP06ERQCkOqE8eDn-Q.roa (hash: qEbiLSfggbr/wcV1CfVb4G8sOcwZPVPdEo2xFZT7GWw=) 4: M4GvrNf8uqUm8NINVMsgeY-dZpg.roa (hash: JFzR2ZsY7nrJvXYkxcf00jQkDAoE9ASXG53ZH1eILBw=) 5: XXx0PZbW0VSnHcKqWvct0KGeX5o.roa (hash: fg2kYbNMaJFsDmSVzEYMa+3owPgOnqiysynI+fCXGgg=) 6: XqyfpygCBb8Q3tIPPqdoPK94M0A.roa (hash: 2VTgMTAP00AWrF9/qszpE/dPLTmJ6fjO0h7TyCaHdtE=) 7: d5wYN4sqYmgKKKUN9X-8jp9PKTs.roa (hash: /7Xb7BgMP/VziPk4Q/U+uMUdmAyttT7O93i5sL6urDU=) 8: i1CU3OfnjKON64QGCajnRU5gSS0.roa (hash: YY36Gemk4OiepX/UrPW7HzLvQewBOeW3gkIiItZgQz8=) 9: jU-enqBlwHSK5LFQUkQMv3mnQ3c.roa (hash: XGjlZdDrp7Q05Es+vT4dQhjxGrAgZ9KHZykl/3VpHuk=) 10: rgPd-lPBT_KjoGNurNCPr8-tYLM.roa (hash: 7UFfmlghHed6gv5YUhlj2bi7/Km6EbVr9jqYqXUYH8o=) 11: sLWoCnEG4KS4VFyBULtyxpn8yaA.crl (hash: nuH2gFMqIWM0J4Amn+FMvpq0+npSf6/9dIR+5ocCfYw=) 12: uYQNZGrXH6jilfHVW7M6-uKjZF8.roa (hash: K7dbhIw3GKL8CpYsfdoECZtVDjcGxNIlpZxMSzxg0fc=) 13: zad7TKoNmHhoc0CyHOzgSXKr6f4.roa (hash: LQ6zogTRTgGoz9vqyWdA5yZND4PDb2ytjo7mWtS7rF8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.crl rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.mft rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:73:b0:32:77:4b:24:ec:03:ae:7a:b1:82:bc:ca:b5:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0b5a80a7106e0a4b8545c8150bb72c699fcc9a0 Validity Not Before: Apr 26 20:00:49 2025 GMT Not After : Apr 27 20:00:49 2025 GMT Subject: CN=dfc0418ec0872f1568ac3707acdc190e8cd180c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f8:07:6e:f2:18:b0:56:bc:58:f2:69:b0:48: 24:ae:da:26:cf:8b:d4:66:e7:fa:2b:51:ed:a3:af: e6:b0:3b:d2:5a:a4:19:1c:0e:3f:f4:d8:72:a3:e8: 59:fe:da:3a:4b:04:36:4f:9d:2c:0e:a4:b3:22:2e: f3:b6:1f:35:3f:67:95:55:fd:b9:92:e1:61:96:1e: c1:8a:83:7b:70:50:78:92:03:98:cd:94:3d:68:c6: a6:33:a9:38:66:b6:c5:e8:b5:87:2b:4d:e8:42:b4: 36:ed:b9:c1:5a:6a:da:72:b3:53:08:fa:90:d6:dc: c9:39:35:be:36:f4:6c:1d:39:0a:a0:99:61:34:07: bc:67:00:7d:4a:cb:6c:e1:9d:59:57:e1:a0:e3:5c: 62:8e:96:5d:f7:42:5e:d1:16:81:d2:e2:38:59:0f: 28:e0:c9:83:7d:0e:32:f1:ff:9e:68:15:ef:08:57: 66:a4:61:8e:ad:59:06:a4:f6:04:8e:4e:c1:4c:db: a2:ed:18:f9:97:cb:4f:95:8c:ad:d5:dc:c5:5a:62: 57:a7:5b:e1:a8:99:43:98:98:48:5f:a9:ba:ae:8e: 26:b2:26:7a:c9:9b:b3:b1:21:f6:c2:c5:f5:5d:88: 3d:1d:ee:de:17:ee:2b:5b:da:fc:41:58:8f:c6:fd: 42:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:C0:41:8E:C0:87:2F:15:68:AC:37:07:AC:DC:19:0E:8C:D1:80:C1 X509v3 Authority Key Identifier: keyid:B0:B5:A8:0A:71:06:E0:A4:B8:54:5C:81:50:BB:72:C6:99:FC:C9:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:e6:82:bc:de:0c:07:b6:59:ae:0d:c2:29:f8:6a:a2:b0:b1: 14:8d:d2:7f:6f:be:de:41:16:5b:ba:21:35:d4:53:a9:af:be: b8:ac:f5:11:9f:5c:1e:a4:13:29:ec:5f:34:c0:ba:bc:97:af: b8:cf:bf:60:d3:8f:29:74:af:34:c9:b0:66:20:dd:b2:f3:a7: 90:ac:25:39:75:df:c4:7d:2c:7f:d9:0d:1d:85:6e:d3:44:f8: e9:f5:d3:78:2f:30:de:7e:9e:e4:a3:48:8f:9b:e1:24:8a:49: 77:74:b9:a9:1f:28:db:84:fa:c3:7b:ab:07:d7:91:45:cb:8f: 60:ca:01:5a:85:72:c1:5f:86:9b:61:d3:bd:16:44:c3:b2:1c: 7b:97:10:44:48:e7:fc:20:1a:17:95:47:0f:d5:ba:81:f3:6a: a8:b4:ef:e3:5a:66:b3:30:cb:20:cc:e3:6f:11:92:c0:fc:f0: 8b:31:05:60:e4:1d:9d:ff:1c:29:2f:4b:cb:a3:90:40:ee:f6: ad:de:9b:45:be:b9:f4:5c:29:20:40:8b:a8:80:1d:12:98:1f: b5:7e:a5:7d:8b:2b:4e:17:b4:29:8f:d4:94:44:4c:3b:41:3c: b6:03:f7:e4:82:e8:0e:85:24:6d:81:9e:ab:ca:97:39:6a:b5: 45:c9:f8:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZzsDJ3SyTsA656sYK8yrWEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwYjVhODBhNzEwNmUwYTRiODU0NWM4MTUwYmI3MmM2OTlm Y2M5YTAwHhcNMjUwNDI2MjAwMDQ5WhcNMjUwNDI3MjAwMDQ5WjAzMTEwLwYDVQQD EyhkZmMwNDE4ZWMwODcyZjE1NjhhYzM3MDdhY2RjMTkwZThjZDE4MGMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/gHbvIYsFa8WPJpsEgkrtomz4vU Zuf6K1Hto6/msDvSWqQZHA4/9Nhyo+hZ/to6SwQ2T50sDqSzIi7zth81P2eVVf25 kuFhlh7BioN7cFB4kgOYzZQ9aMamM6k4ZrbF6LWHK03oQrQ27bnBWmracrNTCPqQ 1tzJOTW+NvRsHTkKoJlhNAe8ZwB9Ssts4Z1ZV+Gg41xijpZd90Je0RaB0uI4WQ8o 4MmDfQ4y8f+eaBXvCFdmpGGOrVkGpPYEjk7BTNui7Rj5l8tPlYyt1dzFWmJXp1vh qJlDmJhIX6m6ro4msiZ6yZuzsSH2wsX1XYg9He7eF+4rW9r8QViPxv1CRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN/AQY7Ahy8VaKw3B6zcGQ6M0YDBMB8GA1UdIwQY MBaAFLC1qApxBuCkuFRcgVC7csaZ/MmgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0xXb0NuRUc0S1M0VkZ5QlVMdHl4cG44eWFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9mMTUzZGMtY2JmYi00YTRmLTgwZDIt NzQ1ZTA4ZmU1OGM2LzEvc0xXb0NuRUc0S1M0VkZ5QlVMdHl4cG44eWFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi9mMTUzZGMtY2JmYi00YTRmLTgwZDItNzQ1ZTA4ZmU1OGM2 LzEvc0xXb0NuRUc0S1M0VkZ5QlVMdHl4cG44eWFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcuaCvN4M B7ZZrg3CKfhqorCxFI3Sf2++3kEWW7ohNdRTqa++uKz1EZ9cHqQTKexfNMC6vJev uM+/YNOPKXSvNMmwZiDdsvOnkKwlOXXfxH0sf9kNHYVu00T46fXTeC8w3n6e5KNI j5vhJIpJd3S5qR8o24T6w3urB9eRRcuPYMoBWoVywV+Gm2HTvRZEw7Ice5cQREjn /CAaF5VHD9W6gfNqqLTv41pmszDLIMzjbxGSwPzwizEFYOQdnf8cKS9Ly6OQQO72 rd6bRb659FwpIECLqIAdEpgftX6lfYsrThe0KY/UlERMO0E8tgP35ILoDoUkbYGe q8qXOWq1Rcn4dQ== -----END CERTIFICATE-----Generated at Sun Apr 27 04:17:12 2025 by rpki-client