$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft File: NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft (raw, json) Hash identifier: Orz4xv8cKEeroetvCK1zKqq1MRPMzBFtdmYxrymSTmc= Subject key identifier: 0B:5B:ED:65:C9:71:0C:48:79:21:A3:9F:BC:91:9D:BD:7B:E4:32:47 Authority key identifier: 35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4 Certificate issuer: /CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4 Certificate serial: 0196869219BE2467A3F40AF7C703D0C05DC3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft Manifest number: 1535 Signing time: Wed 30 Apr 2025 12:00:43 +0000 Manifest this update: Wed 30 Apr 2025 12:00:43 +0000 Manifest next update: Thu 01 May 2025 12:00:43 +0000 Files and hashes: 1: 4Kndf8f0K38NeByF4eDeojFEkWc.roa (hash: z9ZWxvxCc7vC5TAiLfa7y9gNN02jk+BIQEMSzkn78Bk=) 2: 6-2qTlMtEZPzOHSAtmdNhcbE1qQ.roa (hash: F+2AAW+4AfT1GQuiFRv0wVbwu5zq2uVmbs9qsl8++uA=) 3: 6wzCW0kCjyL7eOaN0tirv_V-3uw.roa (hash: S6kLaAfy9ySF66gowUatFPcaC1tWs6Nfr+BOUd2Yozo=) 4: 8sgH-ZOMo18VOXKP7ZiwbPqCqiQ.roa (hash: eGf/pzyBqq1cxIFxS42rOeSUvmat4xHxNvblptUlpg4=) 5: CSQPKu-qpPTqg1yhCPEmsJhRnzI.roa (hash: auSoLSfduR8C0x2bAUZMvWJdtjGO1f6pjFPhEJiTFRA=) 6: Fm18RFfmtw-ty_MOYt1iAF-NS08.roa (hash: pq2vFSrbuWCHpjKgD2s5D798cXhhJkM/C70Aaa/iCuA=) 7: GPRtp5xOkeL5cFbOcLZLwwHI9s8.roa (hash: qEFXixGocvZk8lkNUHp2R4rSCKUt6DKkNZt4rBzX0SY=) 8: HiKOjaGmDxpi59kezYj2Aw_UxJE.roa (hash: IDFiNaoIwOJrP6SVw5rUJ9NDJDF8ucwCpy8kzd1Ucqk=) 9: Lr0nKbirlPmBX-3lvJsCJOROKJM.roa (hash: TqdXd4s2N+H906Qbg6lObKToYZQaynILZEigcrAh59E=) 10: NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl (hash: KpmaOlmqLbmz/Gsb4j62oi4oT0WrEASgjINk6zQfPj4=) 11: QBb9KaF0cIXBem__XFHTxdHk0-g.roa (hash: /YyDhbAPnvtDPEPid9fWMtl8pnQeWOykKx8WROxiL+M=) 12: VWhVpICVoAdzB9EQIkXWDcCWifs.roa (hash: QRblW0tqls+p82T8xFTpIjMYlVKizBoeE6qJKM11/3k=) 13: VxIXaWwLkBGkjZQeWWd_ibEhp60.roa (hash: QCpkMwaTbzamZ/SOTvV5UxFRlb2vNax+YKBEOMySN+E=) 14: bmgQpI-VIkGKEdb2NDjhfJ-ov18.roa (hash: MOydOwWb+ZNvRmMLEPCFgu1thwKEQGRA70pBvfHH5qM=) 15: e-v0jP0Yr1s-j_LETXIOOzdyLGk.roa (hash: xcWMYa3OgNb5AY/zol6hl7sqGF74VxIwNPjPwmEIM7U=) 16: fKVs2lzJco8yky1RgsvfRpsERwg.roa (hash: RSt0/ulmpZFZg4SLAM6kZKlm2sOebMgPJyz/oV0nMGg=) 17: i9SX3nWo4NzvcKgFdy_Fb9U00JU.roa (hash: 1YuxocoriVhQ/l4n2Sas0LfPCL7SyxG7duq+UXS6TBU=) 18: lYSlQ-4feryLZZTaUJ-AJBOZotM.roa (hash: Z1Weo02vp6uD0aD+NKaCNak3b37ID56s/v4nECqj3gE=) 19: rOy5uy_NTIjdgXXxIju3UL-TKY4.roa (hash: ShPP3cFWgf+p1Ts/WZ7cZBJeKVFu0VhveaoD9AjxE14=) 20: vzHyhh5HbyybH8e2L2p6WLWrTAs.roa (hash: pemGMurs9tSXdm3CozX4NApOqx3owIuQ7I2ySxitcuA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 May 2025 12:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:86:92:19:be:24:67:a3:f4:0a:f7:c7:03:d0:c0:5d:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4 Validity Not Before: Apr 30 12:00:43 2025 GMT Not After : May 1 12:00:43 2025 GMT Subject: CN=0b5bed65c9710c487921a39fbc919dbd7be43247 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:83:48:af:34:4b:4a:cb:70:1f:1e:83:74:06: 8c:07:eb:2d:74:8a:4a:1b:46:af:67:7f:41:e2:4e: b6:0f:fa:93:71:d7:ff:b0:74:51:03:c9:bf:06:53: 56:ce:c8:e1:d7:42:50:28:c9:d7:40:59:e4:60:97: 76:0d:37:8a:89:82:be:94:e9:d8:d2:4d:b9:e2:d6: 94:64:c7:c7:b4:37:60:ec:76:58:c0:18:cd:75:78: 47:39:b3:fb:cc:7a:48:6a:6f:4a:72:fe:0f:27:64: 47:a1:c8:cd:e4:e7:6f:af:ff:18:db:34:e1:08:34: e5:bb:65:bc:39:3f:72:c0:be:2a:a6:72:7d:db:34: c3:81:3f:40:03:67:4d:30:1d:b6:95:ba:11:33:98: 51:4e:75:de:aa:9c:5c:1a:64:9f:a3:0c:0c:de:2c: ca:46:28:aa:56:5d:47:77:f5:36:8b:02:6d:25:ca: 6e:80:d5:e9:3e:44:d2:8a:ff:1b:cd:58:ec:f2:51: e2:39:57:f2:1b:fe:6a:28:d2:c9:1b:73:f9:6b:fb: 47:03:3a:98:80:6e:8e:30:5c:01:2a:29:65:1f:2f: 20:8e:5d:da:d0:08:cc:8c:de:ad:4d:6e:68:71:8a: ce:d7:63:61:e7:33:fc:76:bc:83:06:21:39:64:41: 9c:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:5B:ED:65:C9:71:0C:48:79:21:A3:9F:BC:91:9D:BD:7B:E4:32:47 X509v3 Authority Key Identifier: keyid:35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:f5:38:97:96:4c:87:26:ca:8c:b7:8f:4f:ca:63:11:1b:fa: 07:21:2d:c9:b1:ad:27:89:28:65:5d:b3:ff:4b:a0:6b:8c:24: 8b:15:a0:41:05:c3:46:b8:93:f8:b1:8d:86:ed:21:4c:3c:58: bc:d6:32:61:78:15:5d:f7:84:1c:f7:7e:da:ed:24:20:3e:0a: 91:3a:4f:cc:42:5c:98:ea:4c:5a:0c:94:18:e2:a5:1a:ec:5c: 94:87:a7:36:39:3c:7f:1c:6a:8f:e2:ea:a4:5e:a6:85:6a:f5: 92:41:1c:2a:75:f8:93:96:6b:d8:d9:ee:13:a3:f6:70:c6:a7: 0e:f4:61:0a:d1:1d:3b:76:d2:8b:33:98:f8:d7:ca:43:64:d4: f3:2f:de:3a:fd:47:cd:c7:6b:24:39:6b:db:e2:a4:1d:89:b1: 97:a1:8b:5b:83:d4:46:ba:10:a2:97:61:3f:8c:69:6f:ce:99: 95:c5:45:ed:6b:37:fe:f3:dd:be:3e:9c:fb:20:47:af:9a:d9: 94:43:88:ad:10:4b:91:a1:78:fd:f5:fa:78:e3:e7:92:bb:b6: 81:9f:79:18:96:b1:d8:c7:89:41:86:a9:03:c8:ce:c1:e3:8d: a2:85:94:22:d0:de:04:1d:65:6c:9c:0f:f5:ef:ef:60:11:8e: fa:d1:c9:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZaGkhm+JGej9Ar3xwPQwF3DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MWEyZmQ2ZjVlNWFmODdkNWNlYTA5NTA2NmZiY2MzZDNl NTQ2YTQwHhcNMjUwNDMwMTIwMDQzWhcNMjUwNTAxMTIwMDQzWjAzMTEwLwYDVQQD EygwYjViZWQ2NWM5NzEwYzQ4NzkyMWEzOWZiYzkxOWRiZDdiZTQzMjQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA34NIrzRLSstwHx6DdAaMB+stdIpK G0avZ39B4k62D/qTcdf/sHRRA8m/BlNWzsjh10JQKMnXQFnkYJd2DTeKiYK+lOnY 0k254taUZMfHtDdg7HZYwBjNdXhHObP7zHpIam9Kcv4PJ2RHocjN5Odvr/8Y2zTh CDTlu2W8OT9ywL4qpnJ92zTDgT9AA2dNMB22lboRM5hRTnXeqpxcGmSfowwM3izK RiiqVl1Hd/U2iwJtJcpugNXpPkTSiv8bzVjs8lHiOVfyG/5qKNLJG3P5a/tHAzqY gG6OMFwBKillHy8gjl3a0AjMjN6tTW5ocYrO12Nh5zP8dryDBiE5ZEGcSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAtb7WXJcQxIeSGjn7yRnb175DJHMB8GA1UdIwQY MBaAFDUaL9b15a+H1c6glQZvvMPT5UakMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9jZGRkZDUtODE3YS00MTEzLThiODIt MjMwNDllNGQyZjEyLzEvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9jZGRkZDUtODE3YS00MTEzLThiODItMjMwNDllNGQyZjEy LzEvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhvU4l5ZM hybKjLePT8pjERv6ByEtybGtJ4koZV2z/0uga4wkixWgQQXDRriT+LGNhu0hTDxY vNYyYXgVXfeEHPd+2u0kID4KkTpPzEJcmOpMWgyUGOKlGuxclIenNjk8fxxqj+Lq pF6mhWr1kkEcKnX4k5Zr2NnuE6P2cManDvRhCtEdO3bSizOY+NfKQ2TU8y/eOv1H zcdrJDlr2+KkHYmxl6GLW4PURroQopdhP4xpb86ZlcVF7Ws3/vPdvj6c+yBHr5rZ lEOIrRBLkaF4/fX6eOPnkru2gZ95GJax2MeJQYapA8jOweONooWUItDeBB1lbJwP 9e/vYBGO+tHJHw== -----END CERTIFICATE-----Generated at Wed Apr 30 21:27:51 2025 by rpki-client