$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft File: VCltI970yFIcZH3Giss8Ej9hHYk.mft (raw, json) Hash identifier: 2Hc9QWhNcneF4axbTEoADgSzM4ExZ+pxPtMXlF65UUo= Subject key identifier: C1:F1:A3:4A:F2:C3:1C:B3:AE:A8:BB:C6:BC:1C:76:AE:02:11:89:65 Authority key identifier: 54:29:6D:23:DE:F4:C8:52:1C:64:7D:C6:8A:CB:3C:12:3F:61:1D:89 Certificate issuer: /CN=54296d23def4c8521c647dc68acb3c123f611d89 Certificate serial: 019674FA0F9E2D8E1B03CB2BC98CF4B942CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft Manifest number: 1158 Signing time: Sun 27 Apr 2025 02:01:06 +0000 Manifest this update: Sun 27 Apr 2025 02:01:06 +0000 Manifest next update: Mon 28 Apr 2025 02:01:06 +0000 Files and hashes: 1: 1SldOKbELOjKigiDwKOX9yrln5w.roa (hash: fmEO0ohhPTmh26Uu49kFiwQxzt5GJqHO94Hmm4ImaNw=) 2: 7CzbNrtp5RtnUa0QvVDrCiB4-GQ.roa (hash: MSGYg43Lpi2l9kj2jvxvbrmtu1KoOP76L+2QcLwRLTY=) 3: 9lCeO4TUjBNc1nJhioNR2Srwqjc.roa (hash: Fg6u79AASkerccVWXjCGzoOYhRTs135qG7S8Ln7z22s=) 4: HIGaJFZVTqANpoUrum_XWo9Khps.roa (hash: 2mkcqMxs62ge1s9tiYFXxw5tu5EZ+UKfCmkGRyd/frI=) 5: HeuY-063QK_nNTZBJsl2N9nPT0Y.roa (hash: cNW0QUKkOECAhom7mEwINa2XXTLvyYriHy+M/7EUYUc=) 6: LorY4n0U-aZMcbhTfwzw87yq2Uc.roa (hash: +fw8Kk7QrRma5kjO6L7XYIo8vAhLOEhcDfP55yYODiI=) 7: VCltI970yFIcZH3Giss8Ej9hHYk.crl (hash: rnX0+ax9+EZt+xe9KH8X+jLRJWPw9mT93S/UeyqoXvY=) 8: WPkCAe56qcayLw7OSJ39BmQs3dc.roa (hash: aYDDBvFy7ps2t01cjyeWqbWteq/VAxNlg5mzuMH4OGk=) 9: eZijdgAhwuy-ZHRdobMyGcqAvoA.roa (hash: S0x+KVIu+g/l2rZQeyvQLaSq7XxKaGP3nRvfj6m7jNs=) 10: j6WIbMvfpSuER9TZDV1ZY6J-TKg.roa (hash: ObBYTSyTFGBKG+ev+DE2prDLFfsdLKDktKAoj4ncZrw=) 11: t74IIjbKINA8KWETbMX1Yua90lo.roa (hash: g1G25OsuDaHKu2krUemJKYVo40kgh5xmhUKpIWtaI5M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:74:fa:0f:9e:2d:8e:1b:03:cb:2b:c9:8c:f4:b9:42:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54296d23def4c8521c647dc68acb3c123f611d89 Validity Not Before: Apr 27 02:01:06 2025 GMT Not After : Apr 28 02:01:06 2025 GMT Subject: CN=c1f1a34af2c31cb3aea8bbc6bc1c76ae02118965 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d3:23:32:8a:dd:58:8c:71:7e:b1:b7:c5:2e: 18:b7:45:88:34:c1:cb:ae:cc:76:5f:65:35:bf:48: 15:af:b2:06:34:97:38:14:02:ba:18:f0:0b:27:13: 98:72:d5:32:86:44:c2:c8:c2:31:61:57:fc:b0:26: 66:22:21:e2:5a:8b:db:88:22:c7:b4:d5:7e:bb:fe: cd:bc:68:1f:24:b1:f5:17:3b:0b:76:60:4a:a4:eb: 49:6e:ff:40:3b:e6:3a:5f:fb:75:95:7f:c8:98:72: 78:bc:5b:77:91:03:40:ab:82:90:2a:82:ab:04:4f: 6f:2a:66:b3:f3:67:c5:bb:ca:5b:87:ba:2d:87:70: 34:ee:1e:aa:1f:76:04:81:e1:75:a2:5f:a2:0b:0a: 0a:da:de:f2:c0:d3:7f:4b:ad:6e:c0:90:66:74:bc: 6f:47:e1:a5:6c:5c:7e:9b:83:64:63:c3:31:f6:ab: 7f:8c:20:45:be:f6:3c:90:6b:d0:c0:83:ed:05:de: 63:cf:78:6a:d7:f1:df:06:ec:f9:84:26:36:c7:4d: de:22:da:0b:2f:48:c9:fc:90:c5:22:28:63:43:a6: c8:5d:c1:23:ec:94:fb:5e:23:a2:c0:2a:a9:25:27: 03:7b:b5:44:3b:55:5c:62:5d:56:d9:79:a7:10:38: d6:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:F1:A3:4A:F2:C3:1C:B3:AE:A8:BB:C6:BC:1C:76:AE:02:11:89:65 X509v3 Authority Key Identifier: keyid:54:29:6D:23:DE:F4:C8:52:1C:64:7D:C6:8A:CB:3C:12:3F:61:1D:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:d0:1d:cf:45:3b:cf:29:75:f8:97:3f:15:b0:02:19:49:ec: cf:0f:29:47:49:9d:cf:cb:d2:36:07:4c:cf:83:2a:96:41:f9: 3c:47:d4:2d:9b:71:3d:37:b4:91:a7:ee:08:23:df:9f:22:88: c1:48:5f:72:5c:94:db:03:7d:bb:97:b8:8d:43:e7:f9:dc:bb: 12:9e:37:b0:53:ce:0d:26:81:3e:35:6e:30:08:54:2e:34:a3: ab:b3:db:a0:f1:2d:78:d5:87:08:45:81:ae:53:96:b8:19:66: ea:87:2c:be:ed:14:22:b0:5f:f1:05:5a:33:8a:b7:d5:90:28: b6:65:a2:4a:f8:80:32:4a:8a:f2:0a:6d:b6:ef:27:28:8a:02: cd:6e:9d:81:9c:c8:c6:55:eb:86:a3:e4:91:76:a3:46:91:45: d2:c2:2d:31:95:5f:bd:d8:c9:b0:aa:56:9c:ef:0f:47:86:42: 2a:b5:d0:e8:02:ec:c2:5e:7e:74:06:55:51:94:ed:d9:30:50: 57:04:e0:a1:5f:31:18:6f:7c:2a:26:d5:52:f4:9c:e0:4f:34: b6:bb:66:90:a9:6e:16:1e:fd:95:d4:99:12:8c:99:73:93:68: 0f:af:4e:4c:82:4b:51:31:45:a8:a0:00:b6:80:3b:0a:f2:42: e0:2f:6e:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZ0+g+eLY4bA8sryYz0uULOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0Mjk2ZDIzZGVmNGM4NTIxYzY0N2RjNjhhY2IzYzEyM2Y2 MTFkODkwHhcNMjUwNDI3MDIwMTA2WhcNMjUwNDI4MDIwMTA2WjAzMTEwLwYDVQQD EyhjMWYxYTM0YWYyYzMxY2IzYWVhOGJiYzZiYzFjNzZhZTAyMTE4OTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9MjMordWIxxfrG3xS4Yt0WINMHL rsx2X2U1v0gVr7IGNJc4FAK6GPALJxOYctUyhkTCyMIxYVf8sCZmIiHiWovbiCLH tNV+u/7NvGgfJLH1FzsLdmBKpOtJbv9AO+Y6X/t1lX/ImHJ4vFt3kQNAq4KQKoKr BE9vKmaz82fFu8pbh7oth3A07h6qH3YEgeF1ol+iCwoK2t7ywNN/S61uwJBmdLxv R+GlbFx+m4NkY8Mx9qt/jCBFvvY8kGvQwIPtBd5jz3hq1/HfBuz5hCY2x03eItoL L0jJ/JDFIihjQ6bIXcEj7JT7XiOiwCqpJScDe7VEO1VcYl1W2XmnEDjWBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMHxo0rywxyzrqi7xrwcdq4CEYllMB8GA1UdIwQY MBaAFFQpbSPe9MhSHGR9xorLPBI/YR2JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkNsdEk5NzB5RkljWkgzR2lzczhFajloSFlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy81Y2I0NTQtN2JlZS00ZTVkLWIyOTUt OTQyNDgyZjhkMmVhLzEvVkNsdEk5NzB5RkljWkgzR2lzczhFajloSFlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy81Y2I0NTQtN2JlZS00ZTVkLWIyOTUtOTQyNDgyZjhkMmVh LzEvVkNsdEk5NzB5RkljWkgzR2lzczhFajloSFlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZdAdz0U7 zyl1+Jc/FbACGUnszw8pR0mdz8vSNgdMz4MqlkH5PEfULZtxPTe0kafuCCPfnyKI wUhfclyU2wN9u5e4jUPn+dy7Ep43sFPODSaBPjVuMAhULjSjq7PboPEteNWHCEWB rlOWuBlm6ocsvu0UIrBf8QVaM4q31ZAotmWiSviAMkqK8gpttu8nKIoCzW6dgZzI xlXrhqPkkXajRpFF0sItMZVfvdjJsKpWnO8PR4ZCKrXQ6ALswl5+dAZVUZTt2TBQ VwTgoV8xGG98KibVUvSc4E80trtmkKluFh79ldSZEoyZc5NoD69OTIJLUTFFqKAA toA7CvJC4C9u5w== -----END CERTIFICATE-----Generated at Sun Apr 27 04:13:15 2025 by rpki-client