$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft File: 09VvB74YTLpS9v3ASegRTSYWwyo.mft (raw, json) Hash identifier: IOfJ87+ioqN8o9h8TeCv3u/hqq6UY2yfLtSebnz1hMw= Subject key identifier: 75:F3:79:FE:14:45:47:5D:1B:41:F1:D8:97:47:D6:06:9F:8F:EB:EF Authority key identifier: D3:D5:6F:07:BE:18:4C:BA:52:F6:FD:C0:49:E8:11:4D:26:16:C3:2A Certificate issuer: /CN=d3d56f07be184cba52f6fdc049e8114d2616c32a Certificate serial: 0196748B8D066508EF2A1EF20D9367ECEB81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft Manifest number: 1514 Signing time: Sun 27 Apr 2025 00:00:24 +0000 Manifest this update: Sun 27 Apr 2025 00:00:24 +0000 Manifest next update: Mon 28 Apr 2025 00:00:24 +0000 Files and hashes: 1: 09VvB74YTLpS9v3ASegRTSYWwyo.crl (hash: AtBDkQT/W6aAYg9+AfPdOrbG0afcOaWj6iWeQsks2NY=) 2: 4c68WXa89S9GaEZ3betWtfOynEI.roa (hash: fVAp1PUxEqPq1PXw46ujCE/Pw+4uzGlNeTIsndTtQ4g=) 3: 7kfcYNNoB5VB3-_80xlsWN3weyk.roa (hash: 1wJop1mQ6qBQDepGqT5ANO4tx0iRC5GqiIyWQqeZxiY=) 4: KidN7PJCXFwqwby4fVpHaeAhpFY.roa (hash: rFMoYmqrD8lR5TajeeUqUicyuRT28K2jKIN4IFZHnsU=) 5: Q0hrJvd7i8cfM3L6pUxrhnE1ZtE.roa (hash: hvO0OTnIGIVunaf7/zvrYJ2CBHE0j5nUl5E6OrK/DUM=) 6: RIPl0ZcnNzCRnoJoRMQdo7FatJo.roa (hash: V51bdAbDUbCCdG4ap1IngeKOzNBFdbTp51TPAvBkqrE=) 7: WgHSs4gRde9Esu_hc-x9rRmkPIU.roa (hash: +VkjckdDEgGwECvmTIytXqs9Few6AaepnvobAqBXX3M=) 8: eKmkaw2M8tueZ_tzxfDI9F6CNcc.roa (hash: fg34CUb41rhu+065E2VZ9qaIx2X2iqQ2jxGQO4GwQe4=) 9: pq2QS5SBDS3pAxrbz1jylBKYb1c.roa (hash: kdt9b8eHxviCcBXo3alD6ToqY7JvOLmYwFiRPu6twu8=) 10: tpxzfABwHA4uTKjODgtKlvT10t8.roa (hash: /uiIY+OMfjw8MyTKZlNYbS4i9kHVxO0uNCEe4Op3YPE=) 11: xz6DVtU3-Ra9kwVQS1hT5B1NgIk.roa (hash: L6obqobAUv8Kf3w8kISkegiNvXZC3M7YbdVJnQVDNRA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 17:20:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:74:8b:8d:06:65:08:ef:2a:1e:f2:0d:93:67:ec:eb:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3d56f07be184cba52f6fdc049e8114d2616c32a Validity Not Before: Apr 27 00:00:24 2025 GMT Not After : Apr 28 00:00:24 2025 GMT Subject: CN=75f379fe1445475d1b41f1d89747d6069f8febef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:99:bb:19:3a:d8:dd:8b:3d:73:11:25:92:7f: 6d:79:e4:13:7d:0c:c9:5b:46:1c:da:b8:23:e9:58: 26:c5:6d:7b:2e:15:43:70:c1:42:35:05:9b:39:ae: 04:d4:9f:e1:bb:bf:a8:3b:2b:27:42:b5:f1:6c:de: 70:90:87:32:55:e8:1b:ff:ec:e7:36:7f:da:0a:8f: e0:8a:36:1b:93:9a:df:d6:be:a5:96:01:53:0c:52: a2:77:7e:b4:a6:b2:1d:df:e2:28:3d:5b:af:fb:0a: 17:bb:f5:64:e7:96:07:f6:5d:02:cd:23:8c:73:6f: 40:fe:a0:d8:64:fb:88:d2:9f:82:00:76:3d:91:f0: 21:21:d9:76:67:56:7c:7a:fe:da:18:50:e9:23:40: 0b:c5:9d:7b:01:04:4f:7e:bf:80:ae:25:25:a5:40: 7a:a3:3e:34:9c:56:59:25:cb:fd:16:ed:24:f6:de: 77:a7:29:06:3c:fa:9b:42:91:81:bf:63:46:e2:4b: 98:d9:ed:b9:8c:ae:7e:e0:19:6a:dd:d5:3e:db:c2: 59:8d:28:f1:67:f0:0a:09:7c:d1:73:57:58:25:60: 83:c4:de:eb:10:a2:63:ae:43:37:5a:9b:7e:9c:58: f6:5a:6e:72:84:62:91:45:13:97:e7:b0:09:a4:a3: c7:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:F3:79:FE:14:45:47:5D:1B:41:F1:D8:97:47:D6:06:9F:8F:EB:EF X509v3 Authority Key Identifier: keyid:D3:D5:6F:07:BE:18:4C:BA:52:F6:FD:C0:49:E8:11:4D:26:16:C3:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:89:0b:95:16:79:ce:35:a0:8a:8e:94:0d:3c:f4:56:4f:1c: f9:79:cb:ef:45:a4:44:c9:5b:7a:d9:15:af:f6:98:21:14:38: 27:2a:a8:80:a1:6b:4f:5c:b5:5c:a8:5f:6e:c9:1f:79:52:21: d8:72:09:ac:ce:9a:2b:d9:f6:86:8f:c1:ca:dd:ce:fc:4a:c3: b0:76:83:62:4c:c9:71:c6:49:0b:b6:ff:27:39:ed:28:f8:45: 11:f1:42:48:69:73:28:fb:8d:e0:64:71:b3:c3:ed:eb:90:58: d7:0c:3c:4a:4f:d4:18:73:cb:2c:2f:a8:5a:d5:fd:60:d4:e9: 4a:a4:10:e7:2b:48:51:57:1d:68:e1:f7:44:b4:72:e8:b1:e9: 6a:af:a9:eb:b9:dc:4f:28:57:1b:3c:69:cd:49:e1:f3:3c:61: cb:c4:4f:e3:30:cd:0f:81:9f:cf:b4:70:6d:82:8e:a1:f0:6a: 61:c2:b5:37:ab:57:97:6a:4b:67:15:94:dd:f6:1e:ef:f5:53: ca:e9:8e:64:92:bd:4b:65:b3:3d:db:21:12:71:2f:0c:81:16: 17:1b:9e:c1:cb:64:33:29:e7:46:b5:8e:4e:82:9f:fd:e4:a3: aa:92:09:28:08:68:f8:61:d9:f6:74:7b:30:dc:fd:dd:96:e4: 87:33:41:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZ0i40GZQjvKh7yDZNn7OuBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzZDU2ZjA3YmUxODRjYmE1MmY2ZmRjMDQ5ZTgxMTRkMjYx NmMzMmEwHhcNMjUwNDI3MDAwMDI0WhcNMjUwNDI4MDAwMDI0WjAzMTEwLwYDVQQD Eyg3NWYzNzlmZTE0NDU0NzVkMWI0MWYxZDg5NzQ3ZDYwNjlmOGZlYmVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6pm7GTrY3Ys9cxElkn9teeQTfQzJ W0Yc2rgj6VgmxW17LhVDcMFCNQWbOa4E1J/hu7+oOysnQrXxbN5wkIcyVegb/+zn Nn/aCo/gijYbk5rf1r6llgFTDFKid360prId3+IoPVuv+woXu/Vk55YH9l0CzSOM c29A/qDYZPuI0p+CAHY9kfAhIdl2Z1Z8ev7aGFDpI0ALxZ17AQRPfr+AriUlpUB6 oz40nFZZJcv9Fu0k9t53pykGPPqbQpGBv2NG4kuY2e25jK5+4Blq3dU+28JZjSjx Z/AKCXzRc1dYJWCDxN7rEKJjrkM3Wpt+nFj2Wm5yhGKRRROX57AJpKPHswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHXzef4URUddG0Hx2JdH1gafj+vvMB8GA1UdIwQY MBaAFNPVbwe+GEy6Uvb9wEnoEU0mFsMqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDlWdkI3NFlUTHBTOXYzQVNlZ1JUU1lXd3lvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC81Nzg2YWItMDY3ZS00NDBjLWIyNzYt MWIwNmQxYzcwNGMxLzEvMDlWdkI3NFlUTHBTOXYzQVNlZ1JUU1lXd3lvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC81Nzg2YWItMDY3ZS00NDBjLWIyNzYtMWIwNmQxYzcwNGMx LzEvMDlWdkI3NFlUTHBTOXYzQVNlZ1JUU1lXd3lvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUYkLlRZ5 zjWgio6UDTz0Vk8c+XnL70WkRMlbetkVr/aYIRQ4JyqogKFrT1y1XKhfbskfeVIh 2HIJrM6aK9n2ho/Byt3O/ErDsHaDYkzJccZJC7b/JzntKPhFEfFCSGlzKPuN4GRx s8Pt65BY1ww8Sk/UGHPLLC+oWtX9YNTpSqQQ5ytIUVcdaOH3RLRy6LHpaq+p67nc TyhXGzxpzUnh8zxhy8RP4zDND4Gfz7RwbYKOofBqYcK1N6tXl2pLZxWU3fYe7/VT yumOZJK9S2WzPdshEnEvDIEWFxuewctkMynnRrWOToKf/eSjqpIJKAho+GHZ9nR7 MNz93ZbkhzNB2g== -----END CERTIFICATE-----Generated at Sun Apr 27 03:22:49 2025 by rpki-client