$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.mft File: sMIK4drMoxgVsnRwKSfBpanbx7M.mft (raw, json) Hash identifier: PBRR/uJvHrsAR8lrR9X2TxlM35j/6UXx103VjHEPx9A= Subject key identifier: B0:74:5A:97:F6:39:2E:2A:DE:02:F0:6B:C7:E0:DC:E4:3F:C1:DA:FC Authority key identifier: B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3 Certificate issuer: /CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3 Certificate serial: 0196767A253E1A76EDF346CF3A6B68C3F8B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.mft Manifest number: 1522 Signing time: Sun 27 Apr 2025 09:00:38 +0000 Manifest this update: Sun 27 Apr 2025 09:00:38 +0000 Manifest next update: Mon 28 Apr 2025 09:00:38 +0000 Files and hashes: 1: BO-bzW2V5HfZnpDWCOZRREj0_aA.roa (hash: bBvM5GD33JW26g6UBHC38zwmrN/wxvFNIrA/ZVP1z3g=) 2: D2VP3boIbKOt_7fZmoGwBMd0j_E.roa (hash: 5B9i3Ekd388l3dq3yF+uoTeTOTbzf9g6nU3q4mHoYKI=) 3: KDntMwv7lfN57GwH3c-ooOZ7MV8.roa (hash: N8ZIBiU8gH7tSdeMv2oT8+5VHr8ZvOaPGXUGzn1qd6o=) 4: MKXE3l_kRrUK-SEa0SjlnZgrzOY.roa (hash: qB75ATBjq0bvGr3VuX9ZJkiNF1i/cky+GUiK1V7um9s=) 5: OMLGm3M8AukdVmECZgGAm5oBI6w.roa (hash: NhtCtzcMBYjPL2amj6HhHMrktNr+dPVzL27OzOSW9VY=) 6: QhEieVCa4VzXwRS2R-uT3VD69zA.roa (hash: g7EksG6Y5xUVpGTxJtSk1SiYEQY9x4uAiGIMcbCmQ/k=) 7: T_vGm-YR8rSAG_LKyG-LL0j3jZY.roa (hash: ctLCD3mPPm9ORV/MIVYXQC7GReMvIOdcov6IyRw8Un0=) 8: VT5Wd_pqOJ9dH5ke9coXfMElArk.roa (hash: fLcCO/2FWRaPE55k8VUjCjI94f4/oSwtLUtlY9+MVT8=) 9: ZwvgwSFitJnn0NI2TLMjAG1OYEI.roa (hash: 3EAQTTBdwC0en0ttbPcWmRtInqoUrBVPVbUH2J6E2Tg=) 10: i2Cr6PSWUcoNruWdbdR97Em0Dh4.roa (hash: kTy26coV3ftFQPHtpIaAlqr+Ns/2fmpdvjWPntGul4A=) 11: sMIK4drMoxgVsnRwKSfBpanbx7M.crl (hash: T8NEElZT9zGiJ+J2LVbZYwX2p4409TFwQ5lPgVnVmkU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.mft rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Apr 2025 07:29:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:76:7a:25:3e:1a:76:ed:f3:46:cf:3a:6b:68:c3:f8:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3 Validity Not Before: Apr 27 09:00:38 2025 GMT Not After : Apr 28 09:00:38 2025 GMT Subject: CN=b0745a97f6392e2ade02f06bc7e0dce43fc1dafc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:fc:6d:0a:39:5e:14:e1:ec:e5:da:f8:da:c7: 62:75:bc:4a:6c:ab:7c:f6:d1:a0:84:fb:13:ae:75: e6:3d:ee:1d:0c:62:a3:5d:e2:bb:b7:40:31:8a:ac: aa:25:97:f5:f8:0e:dc:db:9c:bb:a2:40:7b:c0:fe: 5c:3d:37:79:b7:5b:8a:4a:77:71:6f:e1:28:10:78: 07:9a:a9:8f:98:49:64:13:03:2b:87:c6:18:cd:25: 96:57:b1:cf:39:fd:31:f2:9c:67:f7:36:64:63:3e: 16:a0:e6:2d:ca:5b:46:a0:4a:9a:0e:a6:48:2d:2e: 59:fb:68:39:f7:cd:6b:c5:13:e5:8c:45:24:bb:65: 34:53:fb:07:12:8c:7b:08:a0:bf:8a:cf:dc:6c:af: 22:46:6b:2b:19:6e:97:64:61:48:91:99:f2:ac:bc: 23:69:e8:7a:2e:ec:b1:76:10:d0:8d:f1:78:fb:a3: 13:3a:dd:81:ff:4d:c7:95:0e:df:21:9e:44:d4:88: 94:2f:47:5b:cd:46:18:62:38:11:20:fd:79:3c:16: ea:82:c3:71:99:b5:d7:a1:c7:43:04:67:5a:3d:21: 28:fb:76:f1:8f:b6:70:53:e1:f8:ec:15:57:db:71: 21:2c:28:e0:d8:1c:08:15:55:63:c6:8c:fd:96:06: f3:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:74:5A:97:F6:39:2E:2A:DE:02:F0:6B:C7:E0:DC:E4:3F:C1:DA:FC X509v3 Authority Key Identifier: keyid:B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:0c:65:fc:4c:a8:00:97:b8:4b:69:9f:3a:32:89:0f:48:b5: c6:ec:6d:50:c7:4d:b7:a2:03:1f:f9:3d:55:8e:96:f4:b8:90: 50:bc:76:97:fa:8a:2d:a2:70:57:a5:ae:95:83:96:bd:ba:4d: a7:62:5d:d8:48:13:8d:67:8e:3b:81:27:81:f9:7d:35:db:f4: f9:35:90:ba:a7:f8:18:4c:21:f6:dd:12:11:35:68:c6:27:22: d1:69:11:82:a6:ba:9c:c0:88:89:dd:9e:3f:46:59:e5:a6:5c: 1c:98:46:fe:4d:06:59:56:3f:c4:9f:a1:54:25:ee:75:f2:ed: 6b:ef:a7:df:65:16:8f:e0:d6:83:ba:56:f1:59:fb:2c:a3:c2: fe:e2:3f:65:0b:58:4b:91:97:a2:27:92:03:92:03:17:c0:5c: 48:46:08:06:9c:88:8a:05:02:2e:65:ce:9c:79:06:b2:fa:a2: c6:03:a3:94:11:4d:6e:b7:41:69:0d:39:d7:79:dc:d0:dc:54: 82:3b:1b:72:05:13:d2:ee:3a:38:29:a0:f4:a7:d3:c5:40:fa: de:d2:f0:75:84:a4:61:cb:43:31:53:03:7c:32:5f:7f:07:7a: f6:b6:05:a7:8b:40:00:69:f2:78:56:3b:d1:c2:00:dc:cc:f8: bc:f6:35:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZ2eiU+Gnbt80bPOmtow/iwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwYzIwYWUxZGFjY2EzMTgxNWIyNzQ3MDI5MjdjMWE1YTlk YmM3YjMwHhcNMjUwNDI3MDkwMDM4WhcNMjUwNDI4MDkwMDM4WjAzMTEwLwYDVQQD EyhiMDc0NWE5N2Y2MzkyZTJhZGUwMmYwNmJjN2UwZGNlNDNmYzFkYWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfxtCjleFOHs5dr42sdidbxKbKt8 9tGghPsTrnXmPe4dDGKjXeK7t0AxiqyqJZf1+A7c25y7okB7wP5cPTd5t1uKSndx b+EoEHgHmqmPmElkEwMrh8YYzSWWV7HPOf0x8pxn9zZkYz4WoOYtyltGoEqaDqZI LS5Z+2g5981rxRPljEUku2U0U/sHEox7CKC/is/cbK8iRmsrGW6XZGFIkZnyrLwj aeh6LuyxdhDQjfF4+6MTOt2B/03HlQ7fIZ5E1IiUL0dbzUYYYjgRIP15PBbqgsNx mbXXocdDBGdaPSEo+3bxj7ZwU+H47BVX23EhLCjg2BwIFVVjxoz9lgbzQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLB0Wpf2OS4q3gLwa8fg3OQ/wdr8MB8GA1UdIwQY MBaAFLDCCuHazKMYFbJ0cCknwaWp28ezMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc01JSzRkck1veGdWc25Sd0tTZkJwYW5ieDdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84ODg4NjktN2E2NS00MTViLWI2OGYt NTQ4NDQwMmNlYjdhLzEvc01JSzRkck1veGdWc25Sd0tTZkJwYW5ieDdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS84ODg4NjktN2E2NS00MTViLWI2OGYtNTQ4NDQwMmNlYjdh LzEvc01JSzRkck1veGdWc25Sd0tTZkJwYW5ieDdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjAxl/Eyo AJe4S2mfOjKJD0i1xuxtUMdNt6IDH/k9VY6W9LiQULx2l/qKLaJwV6WulYOWvbpN p2Jd2EgTjWeOO4Engfl9Ndv0+TWQuqf4GEwh9t0SETVoxici0WkRgqa6nMCIid2e P0ZZ5aZcHJhG/k0GWVY/xJ+hVCXudfLta++n32UWj+DWg7pW8Vn7LKPC/uI/ZQtY S5GXoieSA5IDF8BcSEYIBpyIigUCLmXOnHkGsvqixgOjlBFNbrdBaQ0513nc0NxU gjsbcgUT0u46OCmg9KfTxUD63tLwdYSkYctDMVMDfDJffwd69rYFp4tAAGnyeFY7 0cIA3Mz4vPY1Bw== -----END CERTIFICATE-----Generated at Sun Apr 27 17:56:55 2025 by rpki-client