$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.mft File: dBX-xK52sk5PApkWSZF7mbdABEo.mft (raw, json) Hash identifier: 5gqBj/jZ2FvtRcGrpY6liRH4BkLqB57F3lHrss4I+pw= Subject key identifier: 95:EE:2A:11:54:38:10:8D:C0:CE:45:45:1B:96:95:67:0D:8B:89:01 Authority key identifier: 74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A Certificate issuer: /CN=7415fec4ae76b24e4f02991649917b99b740044a Certificate serial: 019671537CA2E1D53E6B2EC980705F9D2B2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.mft Manifest number: 0957 Signing time: Sat 26 Apr 2025 09:00:18 +0000 Manifest this update: Sat 26 Apr 2025 09:00:18 +0000 Manifest next update: Sun 27 Apr 2025 09:00:18 +0000 Files and hashes: 1: 3aAwQAY_N8bJ-jiNbQ0Jgbd0SFU.roa (hash: /atkRRmMgNiPu2/5kdqV4e2JQpDAysugX/6C23Gx3gw=) 2: 7hJlVvAGbCOpuMIAbRPmhI1LyJk.roa (hash: kwYrJ2B8iMONESsXhh99M7N/9TNCRx/vPINN+t9MxVk=) 3: BPmOKccK3wxsyXop4Fdn5FojVoQ.roa (hash: c0AjkjhURWDz0MoTRfs5io6YXuUePztpcaDJ7boNtz0=) 4: DWUjzTTvFWKI6_KZxYcJUZ-6dbs.roa (hash: p+mIlB1T2bs+wFLe4PrmziLDMKor0sVWbkBm3gWKFRI=) 5: O0UzHhFGCl7MpEtScqSF8DkIhuo.roa (hash: gWniLHrWTALZLXw7wNfozSyoEiuaomcRyb8Mrg+Cc/4=) 6: XfXYE2n3ELZ7eIeoL9PKepcHwZA.roa (hash: ut79u4UtHuRrzodBIel85yFEnEYdSmRF8b/BMJ7pJ+c=) 7: _FZRXOMw8cJ5_jns8AW1s_1FtCE.roa (hash: tvzyoc9Jq37JTxjl0iHcbwfaS6YqsrLUixFkGTWwE0I=) 8: d36kyNbN24ym68fKEusesMWNdB8.roa (hash: 4gSej8V31X+CtNOzp6ONLx41Eof9eDCO7tOWp+L9w8M=) 9: dBX-xK52sk5PApkWSZF7mbdABEo.crl (hash: 4j0TAyNdZZRUmcYUysr9QgW3soV3JedFFMWJFWr+FwE=) 10: gpd7OTySBF88_ieGeC5xgwx4qHQ.roa (hash: RdN9I6MEx1szFl28V6LeCBYwwmv66RX788uJxkiR1Mc=) 11: j9h-3RCYA4GR973gJlvT0ea106k.roa (hash: lz+NUP8jcmTPiXhlt9xOtXKaOts84TsRJsY+TEWUVuU=) 12: jUEYHb-GuhXwiI1SopLXVRt5GiY.roa (hash: N8zIemkmgk5a0TVxAU9OTz5oZOkNeALYs1e0nI4AZAE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.mft rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 09:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:71:53:7c:a2:e1:d5:3e:6b:2e:c9:80:70:5f:9d:2b:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7415fec4ae76b24e4f02991649917b99b740044a Validity Not Before: Apr 26 09:00:18 2025 GMT Not After : Apr 27 09:00:18 2025 GMT Subject: CN=95ee2a115438108dc0ce45451b9695670d8b8901 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:90:d6:cc:d6:f1:9a:4f:f2:e7:3a:03:ab:f9: 8a:aa:35:05:8c:85:75:35:9c:ee:6f:0d:02:1f:fd: 14:af:2e:c7:92:e6:3c:72:b5:61:f7:10:ec:84:b1: 5b:b2:54:e7:4d:5f:af:5c:5a:cb:5c:82:aa:89:b0: df:83:e5:69:bb:1e:f0:33:3c:23:4d:fb:51:27:e4: d5:0c:ba:f4:01:86:c6:19:21:dc:1c:c5:80:95:3b: 82:fd:fd:85:23:ee:e4:94:a7:f1:c1:87:07:7e:b9: e5:6a:9f:21:c4:bf:23:dd:5f:13:c7:03:50:7e:bd: f6:bf:62:f3:1a:6d:86:81:8f:3c:c6:93:53:b6:b2: ac:2d:b0:a2:eb:ef:5d:a6:54:e5:53:39:57:cd:78: eb:c1:19:4f:95:f7:6c:39:33:9f:7a:0b:18:ae:e1: d6:68:b8:be:a4:f7:f4:52:68:92:1d:17:94:1f:ee: 87:a8:83:24:78:83:3b:c3:05:aa:1e:c1:44:3e:75: 54:05:07:04:b6:ef:64:93:66:98:91:e3:ea:f7:04: 0c:64:9c:f4:38:52:78:6b:0f:e2:72:71:0f:b2:cd: 3d:d1:ce:08:7a:f4:7f:11:38:23:cf:0b:66:47:e4: ea:ac:b6:f2:26:27:94:6a:8f:e7:d0:b0:6f:64:a9: c7:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:EE:2A:11:54:38:10:8D:C0:CE:45:45:1B:96:95:67:0D:8B:89:01 X509v3 Authority Key Identifier: keyid:74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:fe:75:d6:9b:32:04:25:76:7b:43:8e:35:3a:87:32:cd:e0: 46:7a:51:5b:d6:81:c8:98:4e:2c:c8:c6:7b:ff:68:87:34:bf: 94:94:15:89:cc:c2:49:96:03:ab:c5:0a:c2:a1:5b:4a:9e:6d: 90:1b:3e:0a:92:dc:19:71:a0:f3:95:4d:c4:f9:05:a9:11:7c: da:af:84:66:5d:ad:10:69:d1:fe:7f:4c:3b:b8:6e:bf:23:05: 9a:db:2c:63:9f:9d:51:9c:60:91:0c:81:16:92:e0:0d:2d:93: b5:73:d8:21:dc:af:89:6c:c1:dd:d6:3d:f5:de:87:e0:7a:79: 00:6c:bf:7d:97:8a:13:e9:58:87:ab:29:d0:ae:5d:71:8a:39: fc:51:4b:80:2a:18:5a:dd:f2:c3:82:8b:19:88:5f:5d:d5:63: 19:25:4e:e3:39:8c:f2:92:3f:5c:e4:d7:74:2d:30:5a:a5:a8: eb:31:9b:92:1b:8b:a7:7b:58:c8:55:ec:1e:45:22:31:db:0f: 1d:83:a5:f5:ae:38:39:16:23:b8:16:71:b7:96:39:ad:06:2f: 25:b2:e4:ba:88:57:41:76:b2:58:06:85:3c:d3:ff:fa:87:85: 97:3b:44:36:6f:e5:cf:e8:be:8d:95:ff:f9:ad:dc:da:5c:4e: 81:96:18:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZxU3yi4dU+ay7JgHBfnSsqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0MTVmZWM0YWU3NmIyNGU0ZjAyOTkxNjQ5OTE3Yjk5Yjc0 MDA0NGEwHhcNMjUwNDI2MDkwMDE4WhcNMjUwNDI3MDkwMDE4WjAzMTEwLwYDVQQD Eyg5NWVlMmExMTU0MzgxMDhkYzBjZTQ1NDUxYjk2OTU2NzBkOGI4OTAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJDWzNbxmk/y5zoDq/mKqjUFjIV1 NZzubw0CH/0Ury7HkuY8crVh9xDshLFbslTnTV+vXFrLXIKqibDfg+Vpux7wMzwj TftRJ+TVDLr0AYbGGSHcHMWAlTuC/f2FI+7klKfxwYcHfrnlap8hxL8j3V8TxwNQ fr32v2LzGm2GgY88xpNTtrKsLbCi6+9dplTlUzlXzXjrwRlPlfdsOTOfegsYruHW aLi+pPf0UmiSHReUH+6HqIMkeIM7wwWqHsFEPnVUBQcEtu9kk2aYkePq9wQMZJz0 OFJ4aw/icnEPss090c4IevR/ETgjzwtmR+TqrLbyJieUao/n0LBvZKnHZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJXuKhFUOBCNwM5FRRuWlWcNi4kBMB8GA1UdIwQY MBaAFHQV/sSudrJOTwKZFkmRe5m3QARKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEJYLXhLNTJzazVQQXBrV1NaRjdtYmRBQkVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy85ODc5NzktOTY5My00NWUzLTg1YmEt ZWQ1MzU4YjZkYTMxLzEvZEJYLXhLNTJzazVQQXBrV1NaRjdtYmRBQkVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy85ODc5NzktOTY5My00NWUzLTg1YmEtZWQ1MzU4YjZkYTMx LzEvZEJYLXhLNTJzazVQQXBrV1NaRjdtYmRBQkVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzf511psy BCV2e0OONTqHMs3gRnpRW9aByJhOLMjGe/9ohzS/lJQViczCSZYDq8UKwqFbSp5t kBs+CpLcGXGg85VNxPkFqRF82q+EZl2tEGnR/n9MO7huvyMFmtssY5+dUZxgkQyB FpLgDS2TtXPYIdyviWzB3dY99d6H4Hp5AGy/fZeKE+lYh6sp0K5dcYo5/FFLgCoY Wt3yw4KLGYhfXdVjGSVO4zmM8pI/XOTXdC0wWqWo6zGbkhuLp3tYyFXsHkUiMdsP HYOl9a44ORYjuBZxt5Y5rQYvJbLkuohXQXayWAaFPNP/+oeFlztENm/lz+i+jZX/ +a3c2lxOgZYYcQ== -----END CERTIFICATE-----Generated at Sat Apr 26 19:57:01 2025 by rpki-client