$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft File: DdRBw_-ugphCJJ6USwOFEIH02eA.mft (raw, json) Hash identifier: nRbcJzEKAacrTb8d5ECsVe13ex/re+vTcIoHtz0+r5A= Subject key identifier: DA:93:DD:0B:8D:AA:02:BA:DA:3A:A1:D3:45:F0:9B:AB:AB:10:37:A2 Authority key identifier: 0D:D4:41:C3:FF:AE:82:98:42:24:9E:94:4B:03:85:10:81:F4:D9:E0 Certificate issuer: /CN=0dd441c3ffae829842249e944b03851081f4d9e0 Certificate serial: 0196C5A84C781F9BCDF607E72254202F844F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft Manifest number: 0DA5 Signing time: Mon 12 May 2025 18:01:03 +0000 Manifest this update: Mon 12 May 2025 18:01:03 +0000 Manifest next update: Tue 13 May 2025 18:01:03 +0000 Files and hashes: 1: 1-16UNdr39GQR6WgTD6_itgdgXrc.roa (hash: zJk3e0ik342Ah/cCpBqTYO3BgJOewuzuYG0mEAa3aYU=) 2: 60kez5E8tU1qx0TTvLpwwOmqJPM.roa (hash: ooRDWi6UfD8+CXLZ4F0Bs69z57BBzf7Yu441rhOqEKs=) 3: 9bAJqgVHnvRdYInB5oZXujQ5XoQ.roa (hash: qWJO+gO+X6NUIcqwJsrxmMcrEAIF+s1Wskr1UuY7rv8=) 4: CECuYLKJKay-_DTUpRvjJ6e9Xok.roa (hash: Bww9jwaRvi6o6HabYuvr08y2yEYkanNlup4j1yRDv98=) 5: DdRBw_-ugphCJJ6USwOFEIH02eA.crl (hash: brG1yNmLPpw3N8DhTmHptFCvhWn9Q6fDcopjQ9FoUrQ=) 6: I1TR6PkHLqcK9JhqQozTxA2F8dM.roa (hash: pz5C+r8mg2AZGBZBVvOWJslEqCo+j9NeWY7YNXwFyuM=) 7: isGhiPrIPc7CYukDYcPX4YgodMI.roa (hash: yF67JZGe1yAdufc/s5j5+72AF3mRhIY4Nwz+CqDvDoY=) 8: kwXEh1Xh-2K2CVYqtcC-AT6Gb_U.roa (hash: dIfLEvdyhBW74zPx42unz5ShPnUU/ehc/8slF8xgQRY=) 9: rd8NnydFpZY9VMF7rki6mDfX1OE.roa (hash: Fdl4wWRM/i0XUBMw6ya79MvwrhVDeixQdqpTA/MdgWc=) 10: ub-f3sQpeZFIR7bmv9inv38i9hc.roa (hash: d/wCuYvq40CEhT6+Gf00rW0og+1XZHNfdNwE4g4ibIk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.crl rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 May 2025 14:31:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:c5:a8:4c:78:1f:9b:cd:f6:07:e7:22:54:20:2f:84:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dd441c3ffae829842249e944b03851081f4d9e0 Validity Not Before: May 12 18:01:03 2025 GMT Not After : May 13 18:01:03 2025 GMT Subject: CN=da93dd0b8daa02bada3aa1d345f09babab1037a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ce:44:47:35:3e:ea:b4:f3:23:b5:1e:e8:d3: 09:6b:2b:e4:f8:fd:25:22:73:40:10:73:fd:29:cc: b2:ed:cd:36:c7:1b:9f:9e:a7:10:4e:23:d4:da:cc: 12:f3:f6:4b:0b:b9:e7:0a:4f:02:0f:6c:b3:a7:ad: 6a:d0:89:b3:0f:53:f4:e7:e1:26:6c:69:ea:2e:be: 5b:39:44:6f:51:e0:56:d7:8b:e4:8b:0f:d9:b7:58: 4b:97:8e:6a:75:56:a6:fd:04:56:9c:20:ec:6c:7c: 76:e7:b5:9b:49:fa:06:3a:8d:00:74:03:66:99:5f: fb:d6:28:3d:f4:6f:6f:e7:26:cd:92:67:3a:fd:d5: 53:5c:bd:e0:0c:af:b0:be:c5:e5:27:e4:c8:cd:a8: 75:3f:d0:c4:5b:24:b1:6c:c2:f0:78:b7:e0:3a:d8: d8:ef:61:42:7c:c7:c1:e0:a2:61:6d:5a:ae:ae:95: f2:ea:a1:07:fd:5d:fa:5d:c6:9a:d5:e8:01:42:17: 86:97:9e:48:08:09:80:18:5e:ad:c9:32:27:97:d4: c1:15:03:4b:6f:7f:10:10:5e:49:52:79:6b:7d:d6: d9:1f:09:5d:10:fd:e4:e0:8d:fe:26:f6:ed:3e:05: 7f:46:eb:3d:01:7c:9d:23:40:42:f3:8e:11:4d:63: 4b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:93:DD:0B:8D:AA:02:BA:DA:3A:A1:D3:45:F0:9B:AB:AB:10:37:A2 X509v3 Authority Key Identifier: keyid:0D:D4:41:C3:FF:AE:82:98:42:24:9E:94:4B:03:85:10:81:F4:D9:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:49:eb:a3:64:8e:98:a9:dc:c5:44:41:b6:9e:56:08:63:c7: fa:9b:89:c9:0f:aa:45:43:0c:7a:1f:7e:fd:fd:97:38:70:21: 94:fb:ea:f8:59:99:fa:e3:69:5d:e1:6d:bf:1b:c6:d0:97:62: 4d:a2:39:33:e6:e0:1d:0c:1c:d8:da:58:63:f2:23:14:03:b2: 51:a4:a2:15:43:c2:a9:9f:5c:cb:4b:62:b8:7b:e3:23:a7:06: df:28:9a:9b:69:78:ac:6a:96:71:28:ca:bd:6c:36:d8:f9:a6: 58:43:9d:3d:f2:08:4d:59:76:e1:f2:6f:4d:37:2a:c8:2f:60: e1:f4:34:c9:60:bb:ac:9e:1a:48:30:e6:0a:6c:5a:05:a7:b5: ea:e6:cf:24:85:f6:d5:66:9a:ca:13:16:ed:78:2e:f8:cf:45: 5b:dc:e9:f4:05:81:70:cf:45:bd:d1:0e:f5:17:38:b2:76:0f: 53:58:c0:db:d8:27:6b:9f:b8:d4:46:94:02:16:c8:0c:93:2f: bb:ed:c1:e7:a6:ab:2d:70:b1:56:a7:d9:8e:fd:89:87:7e:bb: f8:05:e0:45:67:58:95:40:f2:74:5c:88:2d:d2:42:f7:64:b9: ed:6f:89:cc:0b:d0:73:c4:d0:00:b5:19:0e:be:a4:df:40:37: 25:d7:f3:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZbFqEx4H5vN9gfnIlQgL4RPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkZDQ0MWMzZmZhZTgyOTg0MjI0OWU5NDRiMDM4NTEwODFm NGQ5ZTAwHhcNMjUwNTEyMTgwMTAzWhcNMjUwNTEzMTgwMTAzWjAzMTEwLwYDVQQD EyhkYTkzZGQwYjhkYWEwMmJhZGEzYWExZDM0NWYwOWJhYmFiMTAzN2EyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnM5ERzU+6rTzI7Ue6NMJayvk+P0l InNAEHP9Kcyy7c02xxufnqcQTiPU2swS8/ZLC7nnCk8CD2yzp61q0ImzD1P05+Em bGnqLr5bOURvUeBW14vkiw/Zt1hLl45qdVam/QRWnCDsbHx257WbSfoGOo0AdANm mV/71ig99G9v5ybNkmc6/dVTXL3gDK+wvsXlJ+TIzah1P9DEWySxbMLweLfgOtjY 72FCfMfB4KJhbVqurpXy6qEH/V36Xcaa1egBQheGl55ICAmAGF6tyTInl9TBFQNL b38QEF5JUnlrfdbZHwldEP3k4I3+JvbtPgV/Rus9AXydI0BC844RTWNLMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNqT3QuNqgK62jqh00Xwm6urEDeiMB8GA1UdIwQY MBaAFA3UQcP/roKYQiSelEsDhRCB9NngMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGRSQndfLXVncGhDSko2VVN3T0ZFSUgwMmVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9hN2VmNGQtZGM0NC00ZmFmLTk1MTMt ZTljOTEzMjgzNmZmLzEvRGRSQndfLXVncGhDSko2VVN3T0ZFSUgwMmVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9hN2VmNGQtZGM0NC00ZmFmLTk1MTMtZTljOTEzMjgzNmZm LzEvRGRSQndfLXVncGhDSko2VVN3T0ZFSUgwMmVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPUnro2SO mKncxURBtp5WCGPH+puJyQ+qRUMMeh9+/f2XOHAhlPvq+FmZ+uNpXeFtvxvG0Jdi TaI5M+bgHQwc2NpYY/IjFAOyUaSiFUPCqZ9cy0tiuHvjI6cG3yiam2l4rGqWcSjK vWw22PmmWEOdPfIITVl24fJvTTcqyC9g4fQ0yWC7rJ4aSDDmCmxaBae16ubPJIX2 1WaayhMW7Xgu+M9FW9zp9AWBcM9FvdEO9Rc4snYPU1jA29gna5+41EaUAhbIDJMv u+3B56arLXCxVqfZjv2Jh367+AXgRWdYlUDydFyILdJC92S57W+JzAvQc8TQALUZ Dr6k30A3Jdfzow== -----END CERTIFICATE-----Generated at Mon May 12 23:00:21 2025 by rpki-client