$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft File: 2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft (raw, json) Hash identifier: 0KK2Cn+J3L49G8r6cfVNg9mrhqCJi+dVzFUFeuRT9qI= Subject key identifier: BD:85:CD:46:45:75:D6:AA:E4:0D:DB:D5:25:76:9D:62:FE:EB:30:E3 Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA Certificate issuer: /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda Certificate serial: 0196A389F8AFB8D2B1ABCF72EBF8FB2CC52E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft Manifest number: 0F2D Signing time: Tue 06 May 2025 03:00:50 +0000 Manifest this update: Tue 06 May 2025 03:00:50 +0000 Manifest next update: Wed 07 May 2025 03:00:50 +0000 Files and hashes: 1: 2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl (hash: 4itMYHDj1AMNOmPSOaUqVeAHonDb0hfLBJynVzOKNR4=) 2: 7KfLp6tWihAhdW_ZCJGaxH-KxhA.roa (hash: TNNFwSmMyWVi4jN+jvMQ3wmmO3p3q2BXU7y9CZpeBFo=) 3: 7MXqFmSDn9CysMo06FTHgJQ2_0c.roa (hash: pRJZ+O4KaYUVDmpuGbM8GWj2rTmrhgZ1My3xSIZT8Yk=) 4: 8GeGNNzjzZvJIEAAhJi9tW2bbrA.roa (hash: Eto9TySCaxnkkdyIGeX6PMXh8s89OGTNecNbv02FHmY=) 5: AqLYl2EEpDBKLe2KxdidB5eosFo.roa (hash: S1zKj5giVP11rpPOQyfM7On1gt71F+Z2ArRuS6GfdUA=) 6: BinZKeyg5gKkO8gwYJ0Ze8CeRxs.roa (hash: y9nENbUlBNsJYj+Cw11EQBzVD35m8OwMSWBUyRfdWao=) 7: CWwZKtjic8hgoUqW8Q2C2AbAOcg.roa (hash: kwrireSUCM8B5X7b/jFwe6owVISrGhqj47+KxFuhlXE=) 8: IEo8sRaltfiW8RiH-ZK4ayHgV4k.roa (hash: QI22bjJaEKnKFlLmf7Ahb8HfuSs1xMjqWqMhsfHybVI=) 9: JS3mwrKoM_bu1YlMg44SqBJyzi4.roa (hash: FctYPf15GQv8egu27KZUZZfAkIishBp5/PDkotJF9Wg=) 10: ZH0QvaHOPvJPYEbUbSGF-chYfuI.roa (hash: GNpLUKAR49JusHGuTxHkn0FssgkY3qDBV+p8eW6v2dA=) 11: biowetcg3ehch8_ZT-Bjgdr3xVQ.roa (hash: +3UkGpMA2we3DWKym0QAg124Kd/FTF+tUn4YLgIyHpE=) 12: gmGmlBXuT4XMadwFIMM_Ru7A8rY.roa (hash: C02/amx+lTSpWSc0IFfRlXGRMUsC7V5LK9TrUNGhpXk=) 13: j0duG-Ijddau9Fj9XQZGhj9d5E0.roa (hash: jAtA5pws2q4wQ+M2hNZZyClsEg5rjHmu2VOiOpDAE88=) 14: mP8Qz54E01SquciLEGB10XN2R-M.roa (hash: TdXFl7ZveLTgT4OrOlqkJ84pFNT0T+LUDZ5933YP0mE=) 15: suXcRzS6-_4AE_w0ZJlYPW8wMRM.roa (hash: +PBYO+10etR0ZMMQ1FwMVF/GjPtirIZFSfWGb9cD2rU=) 16: yRlATHfw4VPtk07WpZ6YJCL0ujk.roa (hash: qFhl3+M+zqPL0w/p5+UX5EFi+fLod6eaZpO9ZGTbXcw=) 17: yVFu2BG-2jPO42o54RBasvcduFQ.roa (hash: 6xPh274P2CTFpVhbpm7wdZ5x4IvYPBNr1EUV4XIfsgM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 May 2025 03:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:a3:89:f8:af:b8:d2:b1:ab:cf:72:eb:f8:fb:2c:c5:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda Validity Not Before: May 6 03:00:50 2025 GMT Not After : May 7 03:00:50 2025 GMT Subject: CN=bd85cd464575d6aae40ddbd525769d62feeb30e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:ca:db:2f:e3:85:88:00:b9:14:ab:d4:8f:17: b1:a2:21:f2:7e:a9:70:63:d7:b6:3b:ec:47:6c:81: 1e:44:49:7e:8e:d2:2a:d9:95:77:e1:11:d8:b1:61: a3:66:b3:32:5f:cb:b9:12:8c:27:83:a0:a7:f2:6c: c6:44:3f:80:50:1d:ca:c1:86:3b:84:14:1b:6e:67: 78:eb:d2:ec:34:cf:a8:1a:70:17:ce:6b:87:9a:5b: ec:eb:c6:95:6c:b0:21:21:22:3f:ce:dd:ce:9f:57: e8:73:13:b0:e2:78:11:3d:5d:53:e1:1a:dd:04:e3: 3f:03:20:d0:29:b4:f0:7f:f5:df:90:a8:1d:8b:b9: 03:9c:c0:a2:0e:0f:2b:5a:ff:a0:09:a2:41:84:af: b4:ce:62:5f:87:4b:4b:0c:ab:d6:06:a9:7a:6d:aa: c8:03:f2:e1:0b:77:09:12:c8:13:e3:cd:98:d1:53: 7d:85:78:17:50:05:db:3d:18:5e:27:ab:8b:7c:f8: 1d:45:1f:d2:91:ff:fe:ad:5d:b1:c9:cf:fa:87:c1: bb:8c:ef:8f:87:a6:1f:fd:23:90:07:b8:4e:1e:1a: 56:b8:56:15:bf:db:65:8c:d9:10:60:9b:a5:ad:b9: af:b8:e0:f5:ec:94:d7:3f:b2:50:42:f0:be:b4:82: 9e:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:85:CD:46:45:75:D6:AA:E4:0D:DB:D5:25:76:9D:62:FE:EB:30:E3 X509v3 Authority Key Identifier: keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:70:74:ce:0f:d4:8e:16:2c:76:c1:99:75:13:77:77:b4:70: fe:03:eb:ce:a8:74:69:ff:f5:c3:68:02:ee:49:cd:bc:ea:34: a5:af:7a:ac:6a:fb:e9:71:dc:3a:56:3a:74:ca:67:38:47:fd: 2e:3f:08:50:dd:54:ba:46:d0:d4:bf:b7:e3:c7:01:74:52:5a: 5e:00:91:0f:45:ff:bb:4b:be:4b:9a:12:f1:ed:e6:53:4f:9b: fc:68:32:9b:01:e8:64:d0:7a:e5:ee:c0:d5:03:8d:08:bf:20: 95:75:bc:b2:1b:e7:3b:d7:b8:13:be:e4:0e:0c:21:ac:fd:5c: ef:c6:8c:b3:e3:a6:18:20:79:fa:f3:1d:fe:17:39:d5:1b:fd: f3:a3:df:0e:31:86:a2:23:bb:e4:e5:a3:b6:a7:33:6e:24:40: 0b:03:ef:16:91:ee:2b:40:b1:c4:9e:cf:e4:b2:c5:b0:11:d0: e2:4c:99:b0:79:54:ed:7a:ef:f2:d9:cd:f1:e4:a6:4e:29:a6: 57:d0:d2:c9:f3:d3:8e:c6:ec:66:1d:d1:f3:0d:d4:24:ac:ba: b7:08:9e:1e:6c:2c:99:bd:16:26:75:ae:d0:30:26:8d:61:63: 36:c3:08:d8:3d:e3:ef:ef:4d:95:78:91:7f:26:04:df:23:4b: 87:10:86:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZajifivuNKxq89y6/j7LMUuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4YzYwYTBkMmQ3MGE5MzM3ZDBiZGE1NmQxYWQ1OTZhYzFm NjljZGEwHhcNMjUwNTA2MDMwMDUwWhcNMjUwNTA3MDMwMDUwWjAzMTEwLwYDVQQD EyhiZDg1Y2Q0NjQ1NzVkNmFhZTQwZGRiZDUyNTc2OWQ2MmZlZWIzMGUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5srbL+OFiAC5FKvUjxexoiHyfqlw Y9e2O+xHbIEeREl+jtIq2ZV34RHYsWGjZrMyX8u5Eowng6Cn8mzGRD+AUB3KwYY7 hBQbbmd469LsNM+oGnAXzmuHmlvs68aVbLAhISI/zt3On1focxOw4ngRPV1T4Rrd BOM/AyDQKbTwf/XfkKgdi7kDnMCiDg8rWv+gCaJBhK+0zmJfh0tLDKvWBql6barI A/LhC3cJEsgT482Y0VN9hXgXUAXbPRheJ6uLfPgdRR/Skf/+rV2xyc/6h8G7jO+P h6Yf/SOQB7hOHhpWuFYVv9tljNkQYJulrbmvuOD17JTXP7JQQvC+tIKeCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL2FzUZFddaq5A3b1SV2nWL+6zDjMB8GA1UdIwQY MBaAFNjGCg0tcKkzfQvaVtGtWWrB9pzaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9iNTFhODUtZjk5Zi00MjNmLTlmYWUt ZGQyOTRjMzc4ZjZjLzEvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9iNTFhODUtZjk5Zi00MjNmLTlmYWUtZGQyOTRjMzc4ZjZj LzEvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcHB0zg/U jhYsdsGZdRN3d7Rw/gPrzqh0af/1w2gC7knNvOo0pa96rGr76XHcOlY6dMpnOEf9 Lj8IUN1UukbQ1L+348cBdFJaXgCRD0X/u0u+S5oS8e3mU0+b/GgymwHoZNB65e7A 1QONCL8glXW8shvnO9e4E77kDgwhrP1c78aMs+OmGCB5+vMd/hc51Rv986PfDjGG oiO75OWjtqczbiRACwPvFpHuK0CxxJ7P5LLFsBHQ4kyZsHlU7Xrv8tnN8eSmTimm V9DSyfPTjsbsZh3R8w3UJKy6twieHmwsmb0WJnWu0DAmjWFjNsMI2D3j7+9NlXiR fyYE3yNLhxCG/w== -----END CERTIFICATE-----Generated at Tue May 6 13:40:37 2025 by rpki-client