$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.mft File: 1DdYFDRN8L9tAXczrNxIjwAmMbI.mft (raw, json) Hash identifier: c+hdw++cRMcuukVK7xSfwZUSZPoBgz2/dVo7+Ghuu0Y= Subject key identifier: 6D:7D:22:1A:A6:27:79:E1:C6:7E:72:DE:45:81:7D:A1:31:F0:5B:21 Authority key identifier: D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2 Certificate issuer: /CN=d4375814344df0bf6d017733acdc488f002631b2 Certificate serial: 0196722FBC0011F25003231A3BA709700705 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.mft Manifest number: 1527 Signing time: Sat 26 Apr 2025 13:00:52 +0000 Manifest this update: Sat 26 Apr 2025 13:00:52 +0000 Manifest next update: Sun 27 Apr 2025 13:00:52 +0000 Files and hashes: 1: 1DdYFDRN8L9tAXczrNxIjwAmMbI.crl (hash: 24QbTmygbDQlgv6Vn+ETjAC8KnBpcYeR37NEr2kFBwI=) 2: 7WUe1OIDFV5kxBPo0HKHzpAJGIo.roa (hash: WsZzNwmqMFC0S07uwjPiOGdW6xFAM6P2UDYRF9bqkfM=) 3: Dx5FhBrZZELGzOEoOYjOQgEtqO0.roa (hash: KCgCEgctUS7Rpr5Y2lyKXbnXeeBrDbnuOsvXdWPfJZo=) 4: GIkjsAXUOqBrfR8icMDdstxYHT8.roa (hash: A3W3v0v+GEkuTCUXdEtyG/Iegv8/6YkqWT1oUSnMlYY=) 5: GZYeFwr_EjxFupfkHCuHE44i-Z8.roa (hash: /pJZmmG3eMN+VmdP7ZhmWeO1LyfYh7Z1IZDpJE0dX54=) 6: H7JO-gIl0Bj6nh86Gb0TRMhGuHE.roa (hash: u0r0yHY4gAZVAdL4EDi0zIhNAGCD50ehh395WT6RxT0=) 7: KQPVZjd8uXoJ_0dV4AjDeWiqQQI.roa (hash: 9hWXYGll9zn/YFmZU7mBxZ+s82nTPV++un3qIDJzhn0=) 8: KiHM655f38tlRDuTKUKhZarH3cQ.roa (hash: DesJG/l9Po0CCy0ULE0mL9VGWvENzCQXp94ltpb8KIE=) 9: TU-pNgBZBmjZJy6cvCLq3hsqXqo.roa (hash: IurjiHHpmFVL5GOkWmRoizqX2Oq069GXNpmvPbK0lRE=) 10: TdwQSdeGQg2ugcxpO1AP2GfXn0U.roa (hash: f0mEQiS5i+mR/Gnog4CsEhetaN/Ho/U9O1363juyGeM=) 11: Ud14hab_xfWtv2WkBDXSH2-QoMU.roa (hash: 0ea62yGnePCW0r+KNb+hoNpVhcyuwn9Yu4ztOYep1SU=) 12: Xd8H7uVNDL51ed4Oq_HvJ22OpPQ.roa (hash: 4NgEnnhnf136EJjCMsSbZEgbQK+ojDJtfBKT9bYHAcE=) 13: ZxN8lhLxsa-NEEjNRgSh0RzU_EI.roa (hash: fEuA0PwrOwgLw9P6gOyOKfV/2HxY/omynBjOr24eKBM=) 14: atn5vU-LUDLVuG9_jCJwAEGbEYc.roa (hash: Se1mBbI1MkbJDFobm6H8aQSyPPadkVuTf7O6JGFke8o=) 15: brY4nnZyBTnIJY3z6C6ymKubOY0.roa (hash: pc5OYc6oXnHxBvDdnE06MSd2CPJ6fIkq22aelBFfNl8=) 16: eG6lGs3HW3538S6xf6efhbiNBwU.roa (hash: EljzBa62R9WVgp11mW3s0fULx5478xnOUnHVwm+wE7Y=) 17: ejfO3AZKzBlwPba6xQO59n7NRLo.roa (hash: Q1Bfu/BU+a9BBUsFm1fFIAH1wgLPZBcZZuq0YCOjgew=) 18: mj62OgAoVLcXYhLujPeU1dz3p5E.roa (hash: yfaMi4yebTiRiJOBekXgnPGZjuzMXzxDPEzEgjH0cEM=) 19: oE_1AgPCtnaFaMCLevKrq6JA6ow.roa (hash: qBy55DjJrOCIYzSWpauOd8y7YqJPRSHESdiDPcLUS5A=) 20: p9KEvv1SRqyOhb5R1ZKX1AGCgRE.roa (hash: bVQz/2xz2S32nVIu+lGPNjoEvazAi2xi/WmxffFGB5U=) 21: v4_YG88zposklrRNZ6jmi0HNy0E.roa (hash: GKK/DbNbzy+sBCdZidvrcVXsJtwZe198c3YPcA5R1vU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.crl rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.mft rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 11:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:72:2f:bc:00:11:f2:50:03:23:1a:3b:a7:09:70:07:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4375814344df0bf6d017733acdc488f002631b2 Validity Not Before: Apr 26 13:00:52 2025 GMT Not After : Apr 27 13:00:52 2025 GMT Subject: CN=6d7d221aa62779e1c67e72de45817da131f05b21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:36:2e:4a:ab:57:6d:f8:e0:be:cf:1b:8e:b4: 9b:0c:49:53:2a:2b:40:e4:98:8c:51:fd:b6:2d:b2: 93:07:47:14:41:33:44:e0:32:91:4f:79:db:8e:59: 89:e9:c7:5f:d6:62:22:36:80:00:88:db:ef:42:d1: c7:29:8b:b9:31:11:84:4e:ae:6f:98:ae:fe:60:ce: 1f:aa:9d:fb:6c:c0:f2:da:dd:08:65:8c:1b:ca:ee: 32:75:49:34:03:f9:ac:b3:8d:61:a9:64:06:14:a4: 35:e8:2e:3f:5b:72:db:a6:c7:c1:1c:8b:79:f1:aa: 78:8e:63:e1:5f:12:18:bc:42:57:14:ab:28:65:30: f9:d9:6a:90:d7:b5:8e:b3:1d:8c:3d:14:fd:d4:f4: ea:ca:e4:01:dc:cf:5e:ff:e7:4c:07:6d:ce:5c:99: d2:f5:40:18:c1:a7:b3:58:c4:58:79:ec:a8:35:05: be:ad:65:fd:9f:11:10:56:80:d7:08:29:f6:cc:86: a3:90:67:eb:1b:1f:3c:8b:3f:05:ce:6f:e7:72:50: 51:b1:d2:7d:85:08:fe:c2:d7:d9:49:e6:04:b4:46: da:ab:81:aa:9a:8b:44:10:f9:a2:66:46:3a:bf:30: 34:30:74:51:20:96:fa:9a:d7:56:d7:cf:77:5a:b6: 67:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:7D:22:1A:A6:27:79:E1:C6:7E:72:DE:45:81:7D:A1:31:F0:5B:21 X509v3 Authority Key Identifier: keyid:D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:c8:83:71:80:6b:3c:b5:cd:33:02:7e:da:b8:9e:fb:d0:df: 74:9f:35:4b:05:92:5a:33:81:9b:ee:1a:14:1f:f4:b6:54:89: 6b:4c:51:d7:71:b1:8b:32:2a:99:18:2c:49:c2:27:ed:87:0c: f9:59:e5:ba:40:1d:02:fb:c8:11:ae:9f:46:73:ae:00:ce:04: f8:64:42:12:e4:e0:a0:98:bb:ac:93:51:f4:c1:f6:d6:55:ae: d4:b0:d5:e9:ca:77:ff:98:3c:d4:ba:15:b8:31:1e:94:51:e6: a4:0c:74:5e:23:fc:37:fe:ad:fe:3d:83:e0:8f:fc:c0:d2:f2: 1b:c0:03:e2:8c:9c:ad:35:88:2e:23:6a:de:2c:ed:03:2e:86: f7:99:32:63:81:88:75:b3:9d:b4:99:f7:f9:02:a0:bb:77:5e: c5:90:8f:78:ae:e8:44:f2:8c:1d:2c:79:82:de:5e:e9:15:73: e1:d8:48:2f:23:03:23:88:27:d8:36:54:68:cd:b1:2e:bb:01: 65:fb:42:7d:5e:db:36:c6:79:f4:c9:62:d7:36:8b:2a:d6:18: ab:4a:d8:aa:7d:97:53:02:f7:1b:f2:13:4f:80:58:f2:56:87: 55:0e:39:68:6a:f1:18:cd:11:15:13:9b:56:27:f7:a3:ea:fa: 7d:8f:d9:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZyL7wAEfJQAyMaO6cJcAcFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0Mzc1ODE0MzQ0ZGYwYmY2ZDAxNzczM2FjZGM0ODhmMDAy NjMxYjIwHhcNMjUwNDI2MTMwMDUyWhcNMjUwNDI3MTMwMDUyWjAzMTEwLwYDVQQD Eyg2ZDdkMjIxYWE2Mjc3OWUxYzY3ZTcyZGU0NTgxN2RhMTMxZjA1YjIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzYuSqtXbfjgvs8bjrSbDElTKitA 5JiMUf22LbKTB0cUQTNE4DKRT3nbjlmJ6cdf1mIiNoAAiNvvQtHHKYu5MRGETq5v mK7+YM4fqp37bMDy2t0IZYwbyu4ydUk0A/mss41hqWQGFKQ16C4/W3LbpsfBHIt5 8ap4jmPhXxIYvEJXFKsoZTD52WqQ17WOsx2MPRT91PTqyuQB3M9e/+dMB23OXJnS 9UAYwaezWMRYeeyoNQW+rWX9nxEQVoDXCCn2zIajkGfrGx88iz8Fzm/nclBRsdJ9 hQj+wtfZSeYEtEbaq4GqmotEEPmiZkY6vzA0MHRRIJb6mtdW1893WrZn5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG19IhqmJ3nhxn5y3kWBfaEx8FshMB8GA1UdIwQY MBaAFNQ3WBQ0TfC/bQF3M6zcSI8AJjGyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMURkWUZEUk44TDl0QVhjenJOeElqd0FtTWJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9iMjRiMmQtMzUyMy00MjJlLTliY2Yt MzY3MWQ2N2ViOWY4LzEvMURkWUZEUk44TDl0QVhjenJOeElqd0FtTWJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9iMjRiMmQtMzUyMy00MjJlLTliY2YtMzY3MWQ2N2ViOWY4 LzEvMURkWUZEUk44TDl0QVhjenJOeElqd0FtTWJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeciDcYBr PLXNMwJ+2rie+9DfdJ81SwWSWjOBm+4aFB/0tlSJa0xR13GxizIqmRgsScIn7YcM +VnlukAdAvvIEa6fRnOuAM4E+GRCEuTgoJi7rJNR9MH21lWu1LDV6cp3/5g81LoV uDEelFHmpAx0XiP8N/6t/j2D4I/8wNLyG8AD4oycrTWILiNq3iztAy6G95kyY4GI dbOdtJn3+QKgu3dexZCPeK7oRPKMHSx5gt5e6RVz4dhILyMDI4gn2DZUaM2xLrsB ZftCfV7bNsZ59Mli1zaLKtYYq0rYqn2XUwL3G/ITT4BY8laHVQ45aGrxGM0RFROb Vif3o+r6fY/Z5A== -----END CERTIFICATE-----Generated at Sat Apr 26 19:30:15 2025 by rpki-client