$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft File: DJDDVuKGT0OJSFdENVXYtcA1KBk.mft (raw, json) Hash identifier: cX9GN7r3uBpuwj+OfQvpPmTMBAGt6qZCZoVrdyoEcK0= Subject key identifier: E6:42:35:24:1A:84:B4:3A:16:5B:36:12:3B:BD:AF:99:B9:E3:94:82 Authority key identifier: 0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19 Certificate issuer: /CN=0c90c356e2864f43894857443555d8b5c0352819 Certificate serial: 019686C89C304A74098221A144B198C9FC95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft Manifest number: 152E Signing time: Wed 30 Apr 2025 13:00:16 +0000 Manifest this update: Wed 30 Apr 2025 13:00:16 +0000 Manifest next update: Thu 01 May 2025 13:00:16 +0000 Files and hashes: 1: 7Pzqe98aO4BoBrbjEM8VyT6sS1M.roa (hash: njNZ21C9pluyh9z/aL31IWofBM1v+N+fPmyvHPndCq0=) 2: 90MmzVO4MvLdyb-AJQYr53vSOsE.roa (hash: 5J/pNqbP4sJI9fRD38vzW+V+FYiLCJKVNSYkNzbkDm4=) 3: 9GHN6GSMWh16APWbnq7wDsfKnn8.roa (hash: JH6A2KPyYk6kU9S+YXzBoAozjZCx1I1/FQIb22szn8c=) 4: A3yiMnUOTAMIYvHymHxcRRdl3pQ.roa (hash: stXGsXMD+FrQyZX4g7row6To+DPm5GuY/8GYAAv5+hY=) 5: DJDDVuKGT0OJSFdENVXYtcA1KBk.crl (hash: +/jyWS20gA1BRC/6MlwHZj0oPOjbaXQjr362c3Lotuw=) 6: QQRJC_YG8r-4Cm4-FiDTcyGseMs.roa (hash: v9L1LzSv9+QS9AJyAVCgrR0utN6Qk2ha4KHx/OIWRBY=) 7: Rtm2eqjMuokQbFDH0uOZXue46j0.roa (hash: i+SxWKbKu33HD+1YPJSxFNXcAddtYFx5sKVQShwTd24=) 8: _eU7wK7pdUxRG2CXsHdjbv2SOXc.roa (hash: ZAIXppKunQur0KGtFLAbnwIeXUabVYHwA+qIIq12IRo=) 9: aTMRrwo9_4SayQ9D7LTyaVFK_Xc.roa (hash: +IcvkZ/Lt7dooQvX8ekK5PfLV+YRr5hiDK4PBIh/lAA=) 10: cObImnIoQoiLVyP9x--GVap2GkM.roa (hash: bO+Q27weBg0SDz9xPqlXo6tY9cdxQ8Yt4y7PlrRbjHY=) 11: fYrpElZs1NsSNrkwEfo6WNxBdRU.roa (hash: w1Z5VCOxpqbNZVNnJiTQLVLUsMOtA4kiHusU/VADD9E=) 12: rytOjYktSxYttWQbNzKnWNHr8kE.roa (hash: yLxz3XA2NehPKva17aTVpf9d8xx7CPICWNJXYP6IG3U=) 13: wz4Rxi2T5RISNbtekZKZj5gg7co.roa (hash: ZkBZlEwEIE4xANMo9oJsaqTSQA+2tjjnLN93XVxIic4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 May 2025 13:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:86:c8:9c:30:4a:74:09:82:21:a1:44:b1:98:c9:fc:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c90c356e2864f43894857443555d8b5c0352819 Validity Not Before: Apr 30 13:00:16 2025 GMT Not After : May 1 13:00:16 2025 GMT Subject: CN=e64235241a84b43a165b36123bbdaf99b9e39482 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:24:d2:5d:6e:89:1d:13:f1:9c:7b:26:e0:49: 54:0c:ba:fd:ab:a2:19:e1:34:27:bd:33:de:7c:34: 09:57:2f:48:d5:a4:9c:b2:a9:06:2b:41:21:84:ed: cf:97:92:d3:03:98:76:37:a7:1f:95:5d:7c:89:d1: ec:54:88:7a:e7:30:1b:55:e9:64:0e:dc:c5:66:a0: 5a:56:9e:90:55:fe:1d:47:f9:ac:8d:61:61:6f:d2: 2e:9e:05:0f:74:6b:81:cf:77:7a:bb:bf:c4:b7:8f: ca:43:a4:31:ff:3a:f7:ca:20:91:cb:f2:64:fd:cd: 49:7c:a9:b6:48:4a:95:62:8e:3f:0a:b5:f7:57:53: 19:ba:79:f0:76:ac:03:e3:1b:c5:13:20:1a:33:76: ec:7c:d2:cf:18:ce:e3:4b:71:a5:92:47:4c:d9:3b: c0:ad:60:09:f9:65:7b:95:14:1d:98:57:3b:b4:0a: d9:a4:7b:e0:df:7a:76:4d:f3:d1:52:32:58:0a:5e: 30:38:8b:d8:42:43:a1:34:f3:02:7a:fb:d2:ce:78: 1b:79:b8:98:4f:22:e0:c8:7b:89:62:33:e2:71:f3: 13:07:ae:11:89:1f:00:db:b0:0b:b4:ab:7b:92:32: 4c:7d:2f:57:98:81:4a:44:02:31:cd:d1:2a:f1:02: 1e:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:42:35:24:1A:84:B4:3A:16:5B:36:12:3B:BD:AF:99:B9:E3:94:82 X509v3 Authority Key Identifier: keyid:0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:93:0e:05:63:c0:d3:57:d3:56:e1:64:e3:b3:0b:b9:89:27: 97:b7:58:8d:96:e6:c8:4a:3d:de:76:45:f6:74:b2:62:99:42: 64:b2:4a:fe:fc:3d:05:9e:a3:6a:28:eb:1f:52:07:db:84:26: bd:2d:07:e5:79:3f:4e:5a:e6:ee:9b:5e:4c:f7:09:41:3b:b2: a3:f7:11:df:ef:c1:2a:a7:22:e5:ab:d4:2b:1c:ed:4e:13:9d: cd:ed:ef:62:66:d8:8b:74:5f:4f:29:9f:66:0f:e0:53:a0:c1: 9b:79:77:40:e4:96:05:79:92:0c:fc:da:2f:a1:86:c1:ac:16: 90:df:6f:46:7d:80:71:1a:80:8d:43:15:c8:91:e2:29:6b:0b: 03:55:66:08:e7:60:23:c5:17:9c:55:b4:e8:f1:f9:cd:e1:46: 0f:bf:56:64:48:02:3b:c6:20:62:29:6a:9d:ef:ab:9f:02:de: de:6f:4e:8d:1d:95:3c:35:e1:d0:18:fe:7b:23:56:84:a6:31: a1:2a:32:ea:a1:ab:93:fa:f3:86:a1:7b:c5:f1:3e:e2:03:72: 30:bb:90:48:21:27:e9:be:8f:6d:b7:c0:ea:d6:f4:4a:2c:b6: 4b:69:76:f4:3b:d8:62:a0:37:22:6f:5f:dc:1f:1a:17:8e:50: c6:5a:f5:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZaGyJwwSnQJgiGhRLGYyfyVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjOTBjMzU2ZTI4NjRmNDM4OTQ4NTc0NDM1NTVkOGI1YzAz NTI4MTkwHhcNMjUwNDMwMTMwMDE2WhcNMjUwNTAxMTMwMDE2WjAzMTEwLwYDVQQD EyhlNjQyMzUyNDFhODRiNDNhMTY1YjM2MTIzYmJkYWY5OWI5ZTM5NDgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyTSXW6JHRPxnHsm4ElUDLr9q6IZ 4TQnvTPefDQJVy9I1aScsqkGK0EhhO3Pl5LTA5h2N6cflV18idHsVIh65zAbVelk DtzFZqBaVp6QVf4dR/msjWFhb9IungUPdGuBz3d6u7/Et4/KQ6Qx/zr3yiCRy/Jk /c1JfKm2SEqVYo4/CrX3V1MZunnwdqwD4xvFEyAaM3bsfNLPGM7jS3GlkkdM2TvA rWAJ+WV7lRQdmFc7tArZpHvg33p2TfPRUjJYCl4wOIvYQkOhNPMCevvSzngbebiY TyLgyHuJYjPicfMTB64RiR8A27ALtKt7kjJMfS9XmIFKRAIxzdEq8QIe9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOZCNSQahLQ6Fls2Eju9r5m545SCMB8GA1UdIwQY MBaAFAyQw1bihk9DiUhXRDVV2LXANSgZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hYzVhNTYtMTYzYS00OTdhLTk1NDct ZTM3OTlhZGU5ZGZlLzEvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hYzVhNTYtMTYzYS00OTdhLTk1NDctZTM3OTlhZGU5ZGZl LzEvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS5MOBWPA 01fTVuFk47MLuYknl7dYjZbmyEo93nZF9nSyYplCZLJK/vw9BZ6jaijrH1IH24Qm vS0H5Xk/Tlrm7pteTPcJQTuyo/cR3+/BKqci5avUKxztThOdze3vYmbYi3RfTymf Zg/gU6DBm3l3QOSWBXmSDPzaL6GGwawWkN9vRn2AcRqAjUMVyJHiKWsLA1VmCOdg I8UXnFW06PH5zeFGD79WZEgCO8YgYilqne+rnwLe3m9OjR2VPDXh0Bj+eyNWhKYx oSoy6qGrk/rzhqF7xfE+4gNyMLuQSCEn6b6PbbfA6tb0Siy2S2l29DvYYqA3Im9f 3B8aF45Qxlr1HA== -----END CERTIFICATE-----Generated at Wed Apr 30 21:26:16 2025 by rpki-client