$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft File: NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft (raw, json) Hash identifier: gix26qFzrckyko40VWXlnwyh+feorgVLStOWri4t7ck= Subject key identifier: 40:53:27:DF:C4:AA:D1:00:EC:7B:6E:80:B9:C1:3C:F5:DB:5D:0F:7A Authority key identifier: 35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3 Certificate issuer: /CN=359f0f5ff620e0db5311f64736909973ac60f6f3 Certificate serial: 0194BAF248F1E4261A76D3A1F8FF19CC6D24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft Manifest number: 1441 Signing time: Fri 31 Jan 2025 06:00:27 +0000 Manifest this update: Fri 31 Jan 2025 06:00:27 +0000 Manifest next update: Sat 01 Feb 2025 06:00:27 +0000 Files and hashes: 1: 2UrKpNpXwQRG_RCEBy6jwKiUGY0.roa (hash: ga3NEHKHpZo6kUdfR8ZMTo0qgNot+btN7z+ZQk3zhiI=) 2: 4qMGWpgEfUvVfuYkCpl-cDfdOi8.roa (hash: 38HpzPTEyuA+scZwZQcFdTVJsXUC8CY1Kfy5zMrptq8=) 3: 77pFQYmLGFFV08L576oEHW3GDp0.roa (hash: w0kLGHk3jpcfZ/BQP6p+01FDOOb/LMYSuRYLEGuQI/g=) 4: Gc4moE6h-0LPBafiLK_GmYOfnf8.roa (hash: B7ulvc5vYjfcQvRj4GAOq2Tqzy61ptY6XfnMhYDDe+Y=) 5: IoRXomrFNDnoBIF4qoE29SIUorU.roa (hash: 1sHe1bcx24ru9glaxoxQWRHjWb8ipfsqMRJr8SbCC/s=) 6: NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl (hash: A6eVROowZINJQqz2mBfzbCfGAlvcyNj50ldknnv+UBY=) 7: PkUBswB6akpRoaWoY8idhiZO-0s.roa (hash: FTb6NXOjB3gAzHYZQp3OqT2aASeT3Lw8OwXcNy1cX04=) 8: SYmYEPxKLxZh6c3-MXblu3M5Kdk.roa (hash: uMOvwdNxylFgJ11y31h0VRFk89Sfs25xLoK9OyLbapc=) 9: TNCpqe-GffYO9Oy5tCERO1-eUvc.roa (hash: tEekWUTWURynqaTdFQTnecYYou9fV3Tv2zuhFon83g0=) 10: UDpK0uTH8ulfX-BRue_LxyYrybg.roa (hash: Dp6K5s4cXqR6PiC8AlLBrRSOz+xKT0xrh8fKR2pD1Ns=) 11: VFBedq1I_YG5NP5YD9No0ItCqAI.roa (hash: Cca2YTmO6sfJdE+XLr3wI40Aj8jX93VIto7rInwpMCo=) 12: WW-Eg4lD08WXRjKIyMf5a9JN3sI.roa (hash: 4fdk3ZCxEVJ8pj7G/mfXogiKk5sTyJuf3rTPCLrHXpA=) 13: Zj-6KAkyK5-uOxBzRulIBx_nCWw.roa (hash: 07kNnjyW7/TR0U85g69HMNgyJGZyH9KrbGOnY6jiV8c=) 14: aNywjk-hRURwFzlW2WgXo-tyI7k.roa (hash: 7GvPvCBbcDqco5BuG4uUSLpM+i4KeC8ZMy4qhRktBZ8=) 15: b1B34JvO-GcunbVTm8j4sBQw6MA.roa (hash: 0+rTmm2udmOGJ/v+UrcQLZyo966itB803WI6uUxjsqQ=) 16: d3a2WBeR1A3tJcpu4fWQBY6byfA.roa (hash: Zp2NY2sCUEQGxT621HkEtGngfanR7ZMZDlkAzEAeyIw=) 17: iFRYVznuoLn764Hzk0y8UncknZI.roa (hash: uIDffq/3bRoUd9ry3L4WiOXaxdw7ef/Tzoj8TcFGzHc=) 18: kUh2F-fVmltK7tW5jk5XUjsjxVQ.roa (hash: F9Uv120hAnV+E46AVbmB2sboaMIO2I3P8j+LmwLqm1M=) 19: rI3BUUNmmdz_A7GTMa-NmL7qtcI.roa (hash: aUp66qmmCZlHuRPbWVjj6jt7emRrai3ZD6hH/ipGctU=) 20: xX9yJEiYtOsEPk6D2Z_dgnJG6u8.roa (hash: brPlifO1VEl2vFMFC83o8IYbgEjTUIbuxorWEUgGfc8=) 21: ziTaHEBzu703E1AnoRdGaeDxKDM.roa (hash: eQUr4D3nQGW0Uu+rc2TbhNUKE96ryh4ra9nO6RUZ5yo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 01 Feb 2025 06:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:94:ba:f2:48:f1:e4:26:1a:76:d3:a1:f8:ff:19:cc:6d:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=359f0f5ff620e0db5311f64736909973ac60f6f3 Validity Not Before: Jan 31 06:00:27 2025 GMT Not After : Feb 1 06:00:27 2025 GMT Subject: CN=405327dfc4aad100ec7b6e80b9c13cf5db5d0f7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:1c:1d:53:6a:ee:36:37:fc:03:2e:b1:6c:06: 3b:df:29:bc:b8:19:4b:7c:88:d0:9d:63:fc:6e:0a: d3:ec:f0:ea:be:0d:db:ef:1e:4e:0d:0e:58:f8:99: 71:43:c2:44:cd:eb:2b:b9:dd:8f:33:94:ba:ef:d6: e8:f2:b7:28:c2:b6:ac:4b:15:5d:75:e1:9b:7d:ef: 6d:7b:58:cd:69:02:3e:45:e6:60:ce:61:f7:de:56: 90:ba:dd:9f:c6:7d:ee:7f:05:82:32:dc:a9:76:3e: 68:1a:48:5b:4a:b0:9a:b3:d7:fd:38:74:c7:01:10: 2e:4f:54:28:52:c6:95:9f:f0:d0:96:db:a3:c0:79: bd:52:59:bc:d0:26:3a:6c:16:e0:69:6f:94:4b:5b: 6a:94:15:e5:82:ca:e0:87:30:55:00:67:8d:23:d2: bb:58:be:f3:ad:eb:2e:ff:2b:df:57:6b:d3:37:61: 11:d4:13:7f:da:f6:1f:cd:cb:69:58:2b:50:82:5d: 56:b1:8f:0b:85:b4:a7:cb:21:ab:26:d7:de:cc:28: e9:09:c1:35:1b:41:d6:0f:d4:7b:97:ca:41:07:f5: fc:68:4d:bd:35:ee:30:4f:df:0f:cc:a0:e8:dc:ba: ac:eb:55:74:36:b9:a8:8d:44:8f:9e:c1:e8:3a:05: 7c:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:53:27:DF:C4:AA:D1:00:EC:7B:6E:80:B9:C1:3C:F5:DB:5D:0F:7A X509v3 Authority Key Identifier: keyid:35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:22:6f:91:6e:15:d1:69:fe:d4:97:f3:e4:04:c1:47:d7:47: c2:96:c2:ac:b0:4d:4d:68:98:eb:12:e6:a5:d6:21:b7:35:db: a9:3f:af:02:05:1f:66:69:68:99:6b:6a:15:2e:83:25:a2:61: 94:28:80:c7:1f:f2:b3:47:8f:4b:e2:df:e1:0d:5a:bf:07:90: ac:2e:a2:41:9b:58:43:f2:dd:f7:c3:d6:94:44:f6:45:dc:92: ce:05:c3:46:1f:fc:24:45:3b:5c:25:b9:57:62:a1:83:b0:12: 25:07:14:56:fc:32:2a:1c:7d:e0:bf:2c:8d:81:ce:0c:60:7e: e2:f6:22:7c:e4:fa:9d:93:29:09:6b:5e:8b:56:07:a0:4d:d8: a1:69:71:0f:37:3b:65:63:4d:2b:c9:c3:fa:f9:c2:4e:60:f7: 09:19:79:e1:78:ea:3e:18:5f:85:0a:e2:2e:8b:70:e5:3f:fd: 7f:d3:66:9d:6e:e0:10:82:8f:15:ad:7e:ae:c4:54:cc:6c:09: 1a:0c:98:5e:23:1c:cd:53:c2:97:5f:25:3a:81:e9:50:b1:9c: 46:d9:6b:a4:78:b4:0d:a8:f4:f0:6e:4a:bd:2e:80:a5:4a:8b: 4d:97:d7:dd:72:df:25:42:3a:ca:b5:35:66:d0:8d:d4:06:fb: c5:d2:65:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZS68kjx5CYadtOh+P8ZzG0kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1OWYwZjVmZjYyMGUwZGI1MzExZjY0NzM2OTA5OTczYWM2 MGY2ZjMwHhcNMjUwMTMxMDYwMDI3WhcNMjUwMjAxMDYwMDI3WjAzMTEwLwYDVQQD Eyg0MDUzMjdkZmM0YWFkMTAwZWM3YjZlODBiOWMxM2NmNWRiNWQwZjdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1hwdU2ruNjf8Ay6xbAY73ym8uBlL fIjQnWP8bgrT7PDqvg3b7x5ODQ5Y+JlxQ8JEzesrud2PM5S679bo8rcowrasSxVd deGbfe9te1jNaQI+ReZgzmH33laQut2fxn3ufwWCMtypdj5oGkhbSrCas9f9OHTH ARAuT1QoUsaVn/DQltujwHm9Ulm80CY6bBbgaW+US1tqlBXlgsrghzBVAGeNI9K7 WL7zresu/yvfV2vTN2ER1BN/2vYfzctpWCtQgl1WsY8LhbSnyyGrJtfezCjpCcE1 G0HWD9R7l8pBB/X8aE29Ne4wT98PzKDo3Lqs61V0NrmojUSPnsHoOgV8twIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEBTJ9/EqtEA7HtugLnBPPXbXQ96MB8GA1UdIwQY MBaAFDWfD1/2IODbUxH2RzaQmXOsYPbzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlo4UFhfWWc0TnRURWZaSE5wQ1pjNnhnOXZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS80MGQ5YTUtMjU2Ni00OWUxLWE1N2It ZDFhYmY0ZWUzMmNiLzEvTlo4UFhfWWc0TnRURWZaSE5wQ1pjNnhnOXZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS80MGQ5YTUtMjU2Ni00OWUxLWE1N2ItZDFhYmY0ZWUzMmNi LzEvTlo4UFhfWWc0TnRURWZaSE5wQ1pjNnhnOXZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuiJvkW4V 0Wn+1Jfz5ATBR9dHwpbCrLBNTWiY6xLmpdYhtzXbqT+vAgUfZmlomWtqFS6DJaJh lCiAxx/ys0ePS+Lf4Q1avweQrC6iQZtYQ/Ld98PWlET2RdySzgXDRh/8JEU7XCW5 V2Khg7ASJQcUVvwyKhx94L8sjYHODGB+4vYifOT6nZMpCWtei1YHoE3YoWlxDzc7 ZWNNK8nD+vnCTmD3CRl54XjqPhhfhQriLotw5T/9f9NmnW7gEIKPFa1+rsRUzGwJ GgyYXiMczVPCl18lOoHpULGcRtlrpHi0Daj08G5KvS6ApUqLTZfX3XLfJUI6yrU1 ZtCN1Ab7xdJlug== -----END CERTIFICATE-----Generated at Fri Jan 31 15:43:37 2025 by rpki-client on console-fra.rpki-client.org