$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft File: LvlXq6LvADUoUOICRkxx0zyoFEg.mft (raw, json) Hash identifier: p+9LuHug0bgMtcHRvyBJ24rz/opc3t1PtCg0Mp1NOcU= Subject key identifier: 2F:96:49:48:67:36:41:43:EC:41:43:2B:31:8D:E7:C5:04:B8:29:77 Authority key identifier: 2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48 Certificate issuer: /CN=2ef957aba2ef00352850e202464c71d33ca81448 Certificate serial: 01967DFCDF4625CE73722F4ECBDB82F1FD83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft Manifest number: 1518 Signing time: Mon 28 Apr 2025 20:00:46 +0000 Manifest this update: Mon 28 Apr 2025 20:00:46 +0000 Manifest next update: Tue 29 Apr 2025 20:00:46 +0000 Files and hashes: 1: 1-YLitnkBbXXsQAFgwq_VXNT0JiU.roa (hash: AJ3gimUDCGBcWcTGkG9GHuWdzHVsFaaNIwm4c/UaNKI=) 2: EgAgobnZWpD4wDoqIoxyr3MZA5Y.roa (hash: mjozCBG8d8a1a9rxk2/WXOhv1sAeajKVlJoBmpCTphI=) 3: JJeVt7UZqNUEt2c6x7hNRcOI6xI.roa (hash: MfyInY8zOEg6qrPZH5fZlCQbjzWyB7B/O95gOPgwBK8=) 4: JRPXqjHWLaWnIuSL8g9IeICp1DA.roa (hash: 2iPE1VbPS86vB8xHzmkYPiMJ/2pRuAO+4Eo+0e52CUU=) 5: KCNwgf6PeVKuiUUhuKfKXnLgLFQ.roa (hash: v+IFmLklJP0SF039aJ72TNFUXKdUB+t1BQfemj0rrwE=) 6: LvlXq6LvADUoUOICRkxx0zyoFEg.crl (hash: j0LaYMWZ6oho9x2S/CNL/cLZ44ySQaBXeyW3TTyd0EI=) 7: PKP5a34KkATdKIYJt-5YPdlCScc.roa (hash: DIduPrIRFwlPmmTvgmnIOUqFQ2p2Urxx9bdsVWJtVNQ=) 8: URdHpLliQS0f_xW89x43dy03NFM.roa (hash: slk/BTTaKKDTHH1yknm1NTv+Ov77fSUjZtooH73b8sg=) 9: gEEujvRXufmsjgTmstu1Zbbnfs0.roa (hash: P5YHH8ETd3YFKeI8j0ogt9xk/9FEVi5SrSm44Y95yWk=) 10: koANhf94Ms7kfxsa0LrqViexTxU.roa (hash: n1usXJi4k9IdIFnEicQPzyVEwnESkffY6S41/7XDahM=) 11: lsyqD2gTgikkDZqsbqed-AvQOFE.roa (hash: 2f7aOq0K3Z5tB/Bm8elLHTKPwyM1VQt3iTAgGQr0kUA=) 12: m-IIE152ao_pZE4Wt42YO_x1XlM.roa (hash: muFT1Obe9mEevORUc6UEy/Cz3RKhk79/nUEvl5PDZM4=) 13: nZHdV3WJYYopwUGJLwL5bZm3VpI.roa (hash: yZFjAsboNvT9P5DWXdZp8gsxk1AZMOxeZfK2Mq9pQEU=) 14: oJy5Ih3Wi9poj-CApp9bi93q2-8.roa (hash: UiKgdsncZ7pajJ8yDf76t7tbkfWUzikpYtARnAAsGHo=) 15: riI-pOFWNLX8839TKqYFfWOwpZ8.roa (hash: fqG5C98P6l1daY/xcAV9OUvehrdtHt6AHPVOzurPOBw=) 16: sr_tDwJkHkj-JXNMt0Zy5ypCJ7g.roa (hash: btOhuVo5qzp7IyhUfnRzrwSPzaIUCOIvSAfRoFrawl8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:7d:fc:df:46:25:ce:73:72:2f:4e:cb:db:82:f1:fd:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ef957aba2ef00352850e202464c71d33ca81448 Validity Not Before: Apr 28 20:00:46 2025 GMT Not After : Apr 29 20:00:46 2025 GMT Subject: CN=2f96494867364143ec41432b318de7c504b82977 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:09:6f:87:a1:7b:71:96:80:12:a0:2b:c0:f0: 0c:e1:25:c3:24:59:d7:0c:00:75:13:1e:0d:8b:3e: 9a:1c:a9:9a:6b:c2:10:c4:25:03:ab:1c:75:03:6f: ec:a7:04:17:ac:ab:34:bc:71:a6:c3:c5:d5:05:4c: 25:17:93:4a:64:a1:96:3f:e7:05:45:58:7e:09:fe: 9c:ef:e3:67:18:d6:a4:f9:ea:75:50:c4:77:4b:2f: b6:3c:c3:e1:31:ae:41:ce:a8:51:60:60:18:57:8c: c4:60:4f:4d:35:51:f5:66:b9:83:9b:91:3e:5c:e0: 6b:63:72:95:bd:67:3f:62:4c:44:07:7f:06:56:ad: e1:d6:41:2d:d1:92:66:a9:c0:f1:f1:c3:83:2a:18: dc:3f:9f:60:74:2b:0b:31:b3:1f:f8:19:25:3a:65: 08:ed:e7:80:20:c5:8f:23:fa:18:de:b9:72:3d:e4: 46:9c:38:f1:ec:ce:e1:0e:7e:b0:7e:f8:9c:65:4b: d5:d0:02:ac:72:df:8a:ed:a7:4c:30:2e:71:27:be: 67:31:45:a2:42:b0:c0:21:a6:6c:15:6b:82:bc:57: 81:91:63:6e:6c:3a:a6:0e:e5:c5:85:95:3e:1e:3c: de:78:cd:52:3d:1c:ba:7e:0f:8c:71:91:cb:c2:5f: b8:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:96:49:48:67:36:41:43:EC:41:43:2B:31:8D:E7:C5:04:B8:29:77 X509v3 Authority Key Identifier: keyid:2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:62:7b:2a:6e:5d:d1:92:3d:82:7f:d2:c7:90:ad:92:53:26: 3a:82:4a:be:5b:be:b0:bc:38:2a:80:9d:ea:5b:81:3c:09:3d: aa:5a:2e:1e:54:38:5b:59:25:1c:15:70:99:62:8b:2a:08:52: f8:bf:a6:3f:88:b5:e9:73:87:44:5d:47:57:d0:da:5f:b5:07: 72:f6:9a:87:23:a2:9b:02:dc:0c:ed:cf:d3:4b:0d:08:05:80: f5:91:11:db:c1:8f:40:ce:62:29:0c:97:3f:1c:db:8c:b7:fc: 07:1b:24:f8:31:01:ab:ae:68:be:5d:5d:9f:b0:7d:17:d8:1c: f4:56:03:b0:33:e9:36:dc:eb:9a:2f:2d:3a:5c:09:fd:a8:7d: 44:7b:6d:10:3b:ed:01:81:05:d3:5b:9c:6e:55:a8:f8:59:d2: 46:9f:eb:d8:dc:7a:fb:01:63:43:58:b1:b8:ef:72:22:04:37: 70:c6:36:27:6a:09:0e:11:b3:20:68:c6:e5:43:0a:89:ee:63: dc:da:63:02:60:b7:7a:13:47:5d:58:46:ad:82:b2:46:9a:fd: ff:c8:66:5f:4a:ae:4a:16:7e:16:60:42:1d:e7:61:c2:0a:82: 20:e5:6e:fb:6a:87:43:f0:9e:d4:3d:c5:f1:61:36:b4:b9:96: e9:c4:8a:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZ9/N9GJc5zci9Oy9uC8f2DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlZjk1N2FiYTJlZjAwMzUyODUwZTIwMjQ2NGM3MWQzM2Nh ODE0NDgwHhcNMjUwNDI4MjAwMDQ2WhcNMjUwNDI5MjAwMDQ2WjAzMTEwLwYDVQQD EygyZjk2NDk0ODY3MzY0MTQzZWM0MTQzMmIzMThkZTdjNTA0YjgyOTc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Alvh6F7cZaAEqArwPAM4SXDJFnX DAB1Ex4Niz6aHKmaa8IQxCUDqxx1A2/spwQXrKs0vHGmw8XVBUwlF5NKZKGWP+cF RVh+Cf6c7+NnGNak+ep1UMR3Sy+2PMPhMa5BzqhRYGAYV4zEYE9NNVH1ZrmDm5E+ XOBrY3KVvWc/YkxEB38GVq3h1kEt0ZJmqcDx8cODKhjcP59gdCsLMbMf+BklOmUI 7eeAIMWPI/oY3rlyPeRGnDjx7M7hDn6wfvicZUvV0AKsct+K7adMMC5xJ75nMUWi QrDAIaZsFWuCvFeBkWNubDqmDuXFhZU+HjzeeM1SPRy6fg+McZHLwl+4NQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC+WSUhnNkFD7EFDKzGN58UEuCl3MB8GA1UdIwQY MBaAFC75V6ui7wA1KFDiAkZMcdM8qBRIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9hNTg0ZTQtY2NkNC00YzRmLTlkMTYt MDRhMjdjNGQ1NDUzLzEvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9hNTg0ZTQtY2NkNC00YzRmLTlkMTYtMDRhMjdjNGQ1NDUz LzEvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgGJ7Km5d 0ZI9gn/Sx5CtklMmOoJKvlu+sLw4KoCd6luBPAk9qlouHlQ4W1klHBVwmWKLKghS +L+mP4i16XOHRF1HV9DaX7UHcvaahyOimwLcDO3P00sNCAWA9ZER28GPQM5iKQyX PxzbjLf8Bxsk+DEBq65ovl1dn7B9F9gc9FYDsDPpNtzrmi8tOlwJ/ah9RHttEDvt AYEF01ucblWo+FnSRp/r2Nx6+wFjQ1ixuO9yIgQ3cMY2J2oJDhGzIGjG5UMKie5j 3NpjAmC3ehNHXVhGrYKyRpr9/8hmX0quShZ+FmBCHedhwgqCIOVu+2qHQ/Ce1D3F 8WE2tLmW6cSKUQ== -----END CERTIFICATE-----Generated at Tue Apr 29 02:28:49 2025 by rpki-client