$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.mft File: gci3Ore963b_SLLKCZYW7b5xxCY.mft (raw, json) Hash identifier: rZRJrJ+EDu69UF/LTl6os5XcXdz1rxb7Qaa2eh8Ps+I= Subject key identifier: 29:6C:06:B4:EE:E8:DD:0E:B8:B4:D7:AF:AA:4F:C6:F1:77:D6:90:BE Authority key identifier: 81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26 Certificate issuer: /CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426 Certificate serial: 0194BB2921A7D849823C0A23D177237851C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.mft Manifest number: 1389 Signing time: Fri 31 Jan 2025 07:00:22 +0000 Manifest this update: Fri 31 Jan 2025 07:00:22 +0000 Manifest next update: Sat 01 Feb 2025 07:00:22 +0000 Files and hashes: 1: 1-VPDuonC2Hi8dBlT4tvnOiHdYOg.roa (hash: WJKUvuV0JjUpEwzD0WN1y14bM/NihUUNvR+FCbd/Y2g=) 2: 5_qbUTNJTKmDx-VPoCyg5GiF_44.roa (hash: upLH1FeLhYFLc3B1AG7zDO/VAd2waobao5HIF19Yrvo=) 3: 72hcj4wbVqPsCBOmP2-2q0gKVwk.roa (hash: JVI3uRWBk247N9J10ej5wPC2kk3iQ5bErEc04hMDgSI=) 4: InIRujvheMSnuntsvHJjTs5su2U.roa (hash: IqMDfUGWehH9FGcRRehcGH1gUKY9FO7UHo3vHht1RFY=) 5: bisZmugf51fFiNN6YWGGrPqgXYQ.roa (hash: BsDXBQRKA+YlTdhj0M6iZrZPLuyWYaWlAfXVfKfViZo=) 6: dQWEtMXACcbFK-O5sfKYo_f8Y4o.roa (hash: vHyoYTb8eVOfU/syk4YrhtN9pnkC2H/rIICxrgnsNBI=) 7: gci3Ore963b_SLLKCZYW7b5xxCY.crl (hash: tnKxkNdvSIhn2Q4FYkbIMvxFKkT5JzMIXGFzcYgXSmM=) 8: gio6F55GO42GZsRq8FQUo7P8nrk.roa (hash: 80TfPfy6fsm8Hf2Ac1l9Gq3x9An3ECfANZIa/nM0IVY=) 9: hPi3Yz-IQfnghVcK_tG22EcMbZk.roa (hash: eBUVvaZgDfjhvtgjU9lOaAKzUUmY7IXYS3AoPIKzIbQ=) 10: ipyYMMpWH0Tjg9MMcWcxDVXBhDI.roa (hash: jwUnq34H3x2DDYiun7O3jFMVM618SNic53iAmXCX+Z4=) 11: lWJoF_swBr2Lu5mO-Q5os-z2oAU.roa (hash: GwiPt4R6jhk5qWspCacWYlKa/6jGmdnZmiVjiKnYhHQ=) 12: sL_8jT6F9be0gHpzuWYJ5NRFk7Y.roa (hash: tTSTzWjgCJKHY0qcH5mPggHS+UBYeFmuuzH6UrgFPas=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.crl rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.mft rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 01 Feb 2025 07:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:94:bb:29:21:a7:d8:49:82:3c:0a:23:d1:77:23:78:51:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426 Validity Not Before: Jan 31 07:00:22 2025 GMT Not After : Feb 1 07:00:22 2025 GMT Subject: CN=296c06b4eee8dd0eb8b4d7afaa4fc6f177d690be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:dc:a7:62:29:ef:ad:5d:34:a1:05:95:35:2f: 5b:f8:0d:c4:bc:5e:61:8f:14:a5:d4:30:17:87:56: 75:8b:5c:af:1e:2e:86:86:5c:65:65:54:c3:d9:f7: e4:d5:fc:80:96:06:7f:4f:da:81:21:00:d6:5e:1a: 8b:1f:d0:de:7d:8a:f8:ac:1c:af:b0:df:52:a6:ef: 9a:b6:17:70:f4:9b:02:56:d4:51:3f:84:d6:9a:fb: 52:48:67:e9:ca:5b:8a:01:e6:3f:de:48:2b:73:14: 2b:46:ac:00:58:3f:ad:76:38:1d:a2:8a:b3:f8:95: 68:d9:6d:b1:af:b0:b5:fb:93:55:9b:d5:fb:77:67: ac:4b:26:22:0f:5c:c3:7f:79:0a:b2:86:9b:bd:0b: 23:57:4a:99:d2:4c:0c:95:2e:a3:82:30:e3:64:2d: 43:53:8b:73:8d:55:b7:e1:5c:ad:42:55:d3:96:81: f4:9d:84:55:16:0e:59:08:02:55:3c:de:80:85:3f: 15:0d:46:34:a3:98:8b:6f:ef:c4:76:78:c9:43:b1: c4:d9:9b:e2:3b:19:85:f7:ee:e7:26:4b:21:94:c1: 6c:4b:54:5e:d0:f1:40:ad:87:f4:40:b1:cb:47:23: df:47:77:f5:ae:8a:0c:e9:c3:53:ed:1f:05:ad:32: 3f:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:6C:06:B4:EE:E8:DD:0E:B8:B4:D7:AF:AA:4F:C6:F1:77:D6:90:BE X509v3 Authority Key Identifier: keyid:81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:25:c8:c0:ad:26:95:2e:5b:72:c9:d1:60:66:c9:28:ca:ab: 87:99:1a:95:07:2e:82:f5:69:7f:81:91:c2:8d:01:5e:c6:c2: 7a:99:65:31:a7:c9:3c:ac:10:46:cc:e2:a1:61:6a:93:6a:89: 75:20:3a:e4:1f:55:88:11:01:30:7c:20:6c:1d:65:4c:b3:84: eb:34:fd:f4:e3:0c:bc:48:ab:00:26:0d:2a:80:19:0f:b2:64: b5:2b:ec:3f:9d:ed:fb:fd:08:1b:2c:c8:df:98:e4:2e:44:13: b9:23:d7:8f:df:52:b7:b7:4d:22:fc:6f:a4:6b:90:84:d4:31: 8a:44:25:3b:12:43:23:93:e1:d3:34:7e:8b:85:2b:98:60:99: 4f:c6:b5:cb:f6:d0:e3:5a:9a:05:b2:5d:60:fa:92:01:ac:08: ba:37:98:ed:1d:f3:d1:c6:88:c5:0f:ac:d7:28:0d:4f:c0:a6: 2b:4d:2a:ac:da:f4:13:ac:5f:18:9c:cb:29:d5:cb:2f:ca:a5: a3:83:28:98:16:e0:ef:ad:d3:fb:ab:52:07:3f:29:42:17:10: e9:e0:bf:05:29:f9:8f:e5:ce:89:c7:6d:76:7a:8e:f5:05:58: cc:f6:15:e4:b3:35:d0:a3:79:2f:5f:7f:ee:ab:21:a5:bd:fa: 52:dd:3d:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZS7KSGn2EmCPAoj0XcjeFHBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxYzhiNzNhYjdiZGViNzZmZjQ4YjJjYTA5OTYxNmVkYmU3 MWM0MjYwHhcNMjUwMTMxMDcwMDIyWhcNMjUwMjAxMDcwMDIyWjAzMTEwLwYDVQQD EygyOTZjMDZiNGVlZThkZDBlYjhiNGQ3YWZhYTRmYzZmMTc3ZDY5MGJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdynYinvrV00oQWVNS9b+A3EvF5h jxSl1DAXh1Z1i1yvHi6GhlxlZVTD2ffk1fyAlgZ/T9qBIQDWXhqLH9DefYr4rByv sN9Spu+athdw9JsCVtRRP4TWmvtSSGfpyluKAeY/3kgrcxQrRqwAWD+tdjgdooqz +JVo2W2xr7C1+5NVm9X7d2esSyYiD1zDf3kKsoabvQsjV0qZ0kwMlS6jgjDjZC1D U4tzjVW34VytQlXTloH0nYRVFg5ZCAJVPN6AhT8VDUY0o5iLb+/EdnjJQ7HE2Zvi OxmF9+7nJkshlMFsS1Re0PFArYf0QLHLRyPfR3f1rooM6cNT7R8FrTI/wwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFClsBrTu6N0OuLTXr6pPxvF31pC+MB8GA1UdIwQY MBaAFIHItzq3vet2/0iyygmWFu2+ccQmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2NpM09yZTk2M2JfU0xMS0NaWVc3YjV4eENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8yMDc5MzQtOWVkYy00YTg5LTgyMGUt ZDg0ODhiM2FiNDJmLzEvZ2NpM09yZTk2M2JfU0xMS0NaWVc3YjV4eENZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC8yMDc5MzQtOWVkYy00YTg5LTgyMGUtZDg0ODhiM2FiNDJm LzEvZ2NpM09yZTk2M2JfU0xMS0NaWVc3YjV4eENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYCXIwK0m lS5bcsnRYGbJKMqrh5kalQcugvVpf4GRwo0BXsbCepllMafJPKwQRszioWFqk2qJ dSA65B9ViBEBMHwgbB1lTLOE6zT99OMMvEirACYNKoAZD7JktSvsP53t+/0IGyzI 35jkLkQTuSPXj99St7dNIvxvpGuQhNQxikQlOxJDI5Ph0zR+i4UrmGCZT8a1y/bQ 41qaBbJdYPqSAawIujeY7R3z0caIxQ+s1ygNT8CmK00qrNr0E6xfGJzLKdXLL8ql o4MomBbg763T+6tSBz8pQhcQ6eC/BSn5j+XOicdtdnqO9QVYzPYV5LM10KN5L19/ 7qshpb36Ut09JA== -----END CERTIFICATE-----Generated at Fri Jan 31 15:42:22 2025 by rpki-client on console-fra.rpki-client.org