$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.mft File: Nw5UUNFIZ4CrpU8EXsSALxnwtPc.mft (raw, json) Hash identifier: aFVasldYvEXCkuh+KyvN6H1Lx4i08BFLV5cVQ59VC14= Subject key identifier: 0B:2E:52:0D:A3:19:86:65:F3:82:D6:89:59:12:0E:47:8D:9E:AB:0E Authority key identifier: 37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7 Certificate issuer: /CN=370e5450d1486780aba54f045ec4802f19f0b4f7 Certificate serial: 0194BABB5FC343DCC2870B4338A0376D7E45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.mft Manifest number: 1048 Signing time: Fri 31 Jan 2025 05:00:29 +0000 Manifest this update: Fri 31 Jan 2025 05:00:29 +0000 Manifest next update: Sat 01 Feb 2025 05:00:29 +0000 Files and hashes: 1: 23auccAffXFIIKLeLwTIatRjFOA.roa (hash: sRXgVYq+gNWG3wMO4JxSXkBGXFHJVo6nx/QhFnrI+8c=) 2: 5KA65hOOKNz9EuX6YK-gfaOukrk.roa (hash: PdDTNbXgo67l0ruRP78o7mFUIKksbnBt24lH/mdrr9c=) 3: 6q1xtry3UGXs0T_pltIAsJ38AJM.roa (hash: 36dXFGQafr2SxWVio8b5w/WlRAp0fTB+m92yu6qO4iE=) 4: 7dKRnkH_61BL1vNIXpiNlOS77-4.roa (hash: ZND1wl0u3GvOFJlJYyjSu+QQ5WpYrODyfJd7rSZepHM=) 5: 89pL_6fhBybA-VoC0AWu1S10sdM.roa (hash: YxD0MYukYkke9dssLSiPBXYgNOj8+xJSU/U+9dumNwM=) 6: DqCqDJYVWeNEU8uvtBnd44bah3o.roa (hash: cwDXvD7pgfwaTfE6xUf+Y7JKXSqnFw71yOuOSjsqWt0=) 7: EJeuf5IKxfq2FL_pg77yzZErIzE.roa (hash: 31VL8gTmuVGQ+KVT4KHiciNe+A4vLtk11BvQkgqcfek=) 8: G8fzQDALPsZtnyHdyazBSsu_jP4.roa (hash: Tinb4DUHnkQV24tqJqcLOR12FUZvxkk2FsyWpCbsUHw=) 9: Gi54Bhv0-P18GzbUQKYTb3Z7UrE.roa (hash: yacRTMb8Xic0ggjn49H6OGvE9OcH0X0NeLEYae1qY9E=) 10: LeLgJwGr1MR3W3NE33dCf6uaBs4.roa (hash: Lz/GL+kozzcf25kN9WESY/yw/Ybku5tKLLKD4GsfUOk=) 11: M0tVy6uYHq6jqgC40RqmOtLK77c.roa (hash: jn9WvE7OjBrs2geBpc6UG+Davk/8M4j0RQmIP1Rm5SU=) 12: MpEivG697HSgboMFrW97Gh0ERrk.roa (hash: uDIEv1yFQXrRPLR88MRcozQnDHhbLOz0YK7ewF6y1MQ=) 13: Nw5UUNFIZ4CrpU8EXsSALxnwtPc.crl (hash: Oae3ZJB+45XAU7nOwTZMNswiB96aIekuX14cwdEaPhs=) 14: Qzv-yyZa_t5KSvpd82pXjgzU65k.roa (hash: 2Ux+ZEoS16pvpBElRLWENi+dUAhU2cszLKyDyiW+S9E=) 15: SYazyu-u8AaHOp_p4fYOBWFSAH4.roa (hash: 3uQHpIk+j5fI2QkTV41j3OdxVvxax0SOFnLvirIqlg0=) 16: UHKxbfyeZNA8vfYZxdgz-4yzkq4.roa (hash: Mb15+/01DxorNLvSHrlSh6ZQx9Xaj6QioFjrKFNgMm4=) 17: X4ndwPZxVFoSM5mmzVMfNdptKh0.roa (hash: tCokVtXtd8uC+H3+SOEz2ZoyOcZZQahkSDZ5fFvXH+g=) 18: cnlKi9qLrI6JaYoaIugGIbnBwcA.roa (hash: 5e0bB/hsZW7gYeqd0QyUdWIzUtk88cRCCy3/L5Xpu54=) 19: gX5iDf2KIrrm8gH7yW-NOlJpIDU.roa (hash: V+Voy7PF+yL9p1Cs0/J2s/9PaMgks3rVoNfkludYN2E=) 20: i6bd6fMorsRaNPo_y3O9YHa_JY8.roa (hash: pX7J+a/wu4lqfmaESboDo9lKDG2+T/BHYlZ6YrCC+SU=) 21: kHYyFPjohiyIQJY5w_HOlt1K3Fg.roa (hash: jgmI7LdVC9rYIzkr/aHKrpmNE8aaRzqVTYnNDaZBV5I=) 22: mgKZhUoMpQH8q6Mo5_XIt_2bVvU.roa (hash: QwiZdzG7fsDj3yDk/ZTVrAi+RRp5OlF5mISx98Ld+34=) 23: pQAmrx6o4CI4reP0N_Rh_MJDpX0.roa (hash: stB5xPGCbCcePFe21J8b8Kvsf/3aDbBAYH2/WR02NM0=) 24: pzp2YbmxKGY3emuRRda4ms43xXo.roa (hash: 4I2tGsjQKyzT+peCN2wHamWzkc5XPGqYKhwx6KO6mHM=) 25: yJQ2ykFk0I1TMUAp0pPthpkKxHM.roa (hash: D/m6ida6ggGK38dVlSeh1/tZx7jdED0sPxj/a7WruMo=) 26: zKcfq0ZG1LIJnD1TbRJYizV6RYo.roa (hash: cJKI9LfE9y2irNqCxCSKp9b8wQ7eetjvdoSxFjEBHuE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.mft rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 01 Feb 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:94:ba:bb:5f:c3:43:dc:c2:87:0b:43:38:a0:37:6d:7e:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=370e5450d1486780aba54f045ec4802f19f0b4f7 Validity Not Before: Jan 31 05:00:29 2025 GMT Not After : Feb 1 05:00:29 2025 GMT Subject: CN=0b2e520da3198665f382d68959120e478d9eab0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f9:7a:70:7a:b0:03:cf:57:2b:ac:6b:ad:23: 4b:42:a1:80:40:d0:bb:6b:3f:c4:6e:f3:0f:43:4a: 9b:56:67:22:ea:3c:51:27:e9:b0:e9:0f:b5:e0:39: eb:d3:2d:1c:4f:77:1e:98:a2:a7:d9:04:f2:a0:d8: 6e:95:72:93:11:f4:07:d1:92:62:00:94:3f:d5:8b: 53:6a:e5:28:1f:3d:2a:ba:66:c9:60:fb:67:f6:12: 1c:3f:d9:21:4f:74:35:39:1c:a7:d2:01:3d:3c:b6: 4d:03:d4:fb:b5:94:29:b6:5a:c5:53:23:8b:52:e6: 29:ef:d1:25:c9:3b:7b:dd:d3:06:93:70:a6:8b:73: f0:c4:a7:60:54:e8:27:e7:6a:dc:08:7a:9a:c9:8b: f9:0f:d3:2e:54:cc:c8:aa:3d:03:a0:f1:5a:99:0b: 0d:55:99:b6:cb:ff:fa:81:37:fb:96:a1:5d:ae:91: bd:63:8b:a8:c4:aa:6d:ec:9d:eb:91:71:99:0b:f1: 32:c8:6a:dd:34:a9:7a:7c:0e:31:22:a7:e8:a0:d3: 6a:c4:3f:c4:26:f2:31:70:8c:98:c4:36:f9:ba:3c: be:00:58:cc:56:39:df:6b:69:47:ba:b7:f8:94:c9: b6:1e:4a:20:5a:bf:a0:2d:fd:07:e9:03:66:00:31: a6:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:2E:52:0D:A3:19:86:65:F3:82:D6:89:59:12:0E:47:8D:9E:AB:0E X509v3 Authority Key Identifier: keyid:37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:e4:4a:cf:c4:85:7a:e8:3e:d3:84:0f:ec:3b:16:b5:01:09: 94:23:ea:f2:00:5d:ae:6b:f5:20:4a:46:73:4b:46:90:d0:98: e6:b2:3e:15:09:30:80:b8:ea:28:f3:38:ec:77:1c:8d:5d:79: f2:bc:77:99:88:86:fa:d2:19:f1:56:e4:3a:05:0a:40:9c:0f: 47:3c:46:93:b6:0f:c9:b6:00:5b:67:f4:d5:29:73:1d:6a:52: d9:03:25:43:8f:65:eb:ed:0b:12:4a:92:75:4f:f7:dd:44:ea: c2:89:74:b2:2f:1f:11:38:f0:0b:07:e8:c0:ba:37:9d:1d:94: 59:42:37:80:e7:ea:d9:99:24:6b:93:3b:cf:d1:74:8e:d9:3c: ab:d7:c7:b4:8b:94:16:af:14:2b:b6:e0:1b:78:55:40:9f:cf: 31:72:2c:0e:94:1d:e6:46:d1:42:03:68:8c:f1:b9:5b:2e:32: 8c:7f:3f:4d:06:bc:74:46:f8:99:d9:f0:a6:0a:2b:8b:18:70: 88:5e:bf:57:12:cc:c9:7d:4d:d5:87:92:94:6d:d7:94:44:ca: a2:26:f6:2c:48:7f:57:8b:6b:26:9c:cd:a1:0c:d0:04:4a:e6: 97:a9:46:fb:86:24:c7:9d:44:b0:ba:a4:58:e4:8b:65:4f:8c: bc:06:b4:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZS6u1/DQ9zChwtDOKA3bX5FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3MGU1NDUwZDE0ODY3ODBhYmE1NGYwNDVlYzQ4MDJmMTlm MGI0ZjcwHhcNMjUwMTMxMDUwMDI5WhcNMjUwMjAxMDUwMDI5WjAzMTEwLwYDVQQD EygwYjJlNTIwZGEzMTk4NjY1ZjM4MmQ2ODk1OTEyMGU0NzhkOWVhYjBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvl6cHqwA89XK6xrrSNLQqGAQNC7 az/EbvMPQ0qbVmci6jxRJ+mw6Q+14Dnr0y0cT3cemKKn2QTyoNhulXKTEfQH0ZJi AJQ/1YtTauUoHz0qumbJYPtn9hIcP9khT3Q1ORyn0gE9PLZNA9T7tZQptlrFUyOL UuYp79ElyTt73dMGk3Cmi3PwxKdgVOgn52rcCHqayYv5D9MuVMzIqj0DoPFamQsN VZm2y//6gTf7lqFdrpG9Y4uoxKpt7J3rkXGZC/EyyGrdNKl6fA4xIqfooNNqxD/E JvIxcIyYxDb5ujy+AFjMVjnfa2lHurf4lMm2HkogWr+gLf0H6QNmADGm5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAsuUg2jGYZl84LWiVkSDkeNnqsOMB8GA1UdIwQY MBaAFDcOVFDRSGeAq6VPBF7EgC8Z8LT3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnc1VVVORklaNENycFU4RVhzU0FMeG53dFBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9mMGY3MGMtMDZlNy00MWFjLWEyYjgt ODU4ZGNlNTdmY2RiLzEvTnc1VVVORklaNENycFU4RVhzU0FMeG53dFBjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi9mMGY3MGMtMDZlNy00MWFjLWEyYjgtODU4ZGNlNTdmY2Ri LzEvTnc1VVVORklaNENycFU4RVhzU0FMeG53dFBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ+RKz8SF eug+04QP7DsWtQEJlCPq8gBdrmv1IEpGc0tGkNCY5rI+FQkwgLjqKPM47HccjV15 8rx3mYiG+tIZ8VbkOgUKQJwPRzxGk7YPybYAW2f01SlzHWpS2QMlQ49l6+0LEkqS dU/33UTqwol0si8fETjwCwfowLo3nR2UWUI3gOfq2Zkka5M7z9F0jtk8q9fHtIuU Fq8UK7bgG3hVQJ/PMXIsDpQd5kbRQgNojPG5Wy4yjH8/TQa8dEb4mdnwpgorixhw iF6/VxLMyX1N1YeSlG3XlETKoib2LEh/V4trJpzNoQzQBErml6lG+4Ykx51EsLqk WOSLZU+MvAa0zQ== -----END CERTIFICATE-----Generated at Fri Jan 31 15:45:26 2025 by rpki-client on console-fra.rpki-client.org