$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft File: wsErUnpdH4uLzyMOthH1LxHVK78.mft (raw, json) Hash identifier: ppLUGkAb4GGzq4JV82FJDV0R9SSTqsEuJVNFqVm7YKY= Subject key identifier: BD:02:14:60:0C:95:3C:43:F7:80:FD:A2:9F:F5:F9:85:79:28:B4:4C Authority key identifier: C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF Certificate issuer: /CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf Certificate serial: 0196A088FAF06A5B43E0F64DD4177100813E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft Manifest number: 1543 Signing time: Mon 05 May 2025 13:00:53 +0000 Manifest this update: Mon 05 May 2025 13:00:53 +0000 Manifest next update: Tue 06 May 2025 13:00:53 +0000 Files and hashes: 1: 1-g043uZGbcoJpf0hDKUAK6KYjMY.roa (hash: oXh/AdBAL+hhAJ60ylz2T4fDifmqPlRHNnfI4LxfO4g=) 2: 4UV2kYJsBRO1Uo0sYaR8d-zWu7M.roa (hash: 4lr6xQLhcUwRUwjrbz/Q9ig+qZGJYjRtsOrl+llFTZI=) 3: 7Df7JRlOKH8gDykOMVukqaTvgiY.roa (hash: Uk5pTOJ/i2noBJtpzBqTt/F61tyL656kiSZXzf/FEP0=) 4: 8yYiY1YNwyk677GprCpY-cRpwSM.roa (hash: eqdijA/aHk9KZOfgIpUzQWlBgXMp62c/42Y4/ug1w4U=) 5: 9YFs85YsKGTIVDBM56breEqVtxA.roa (hash: qqV3B5vzjjlBmuMS8CdNVBF1exlyNiMWJZdCD+80Tlg=) 6: 9oF_YBPk2N7TBl4840GxsFnZQ7I.roa (hash: AlGFLtN9GjJwBPE0gCs6Q6TU04FkoUZ/Kroy0jMJUjM=) 7: BjjnvskFHojAmLtOcKHf6cIeor4.roa (hash: 68wQkVvr9s70ErwyewLwg/v+Sn8FP7xN+7ToSgJC2eQ=) 8: O82D9-Sl5TuPA51YDMjd3oEQ_Bw.roa (hash: GpWxPeguh9vxIQvIL/oOPSEMASvNh0GDzUvixDoM4bM=) 9: VklwYAMB76GdFlZEPkNhX4QuNYk.roa (hash: 8+ZNddyslsyHAQNuItAdRnRBvt4AbAN/VlPdsNqo93A=) 10: jQVct_I-Q9u8SJsbhp_aBJKmAO4.roa (hash: Goq6CQ+X0WEoVfwAUI4pBsxNxBCuYLwqrXAabZR3bPo=) 11: kxW1ACFlthp6zFliAhXG5aZtJrg.roa (hash: gl4ysipzIWR3k1Nea68+h+I7SDKD7ZPTCg44K0WQbck=) 12: nV6d6dYJokqR_WNJ0e5S9DIoVtk.roa (hash: ZHD4y/aBIOK9FnRbF/fVjipRuAyUMG3sRGTAcZNGLRk=) 13: pO3sjHr6a0aftr_c4hFnOCTpu-k.roa (hash: 0HEZ96PPuctS/ZloTVzx6CjdJPtvxwr82RYy3GTaOCE=) 14: ri2xAd-oHR-fT9LflEmMOZqy2Kw.roa (hash: hVv7MJmhWiXR3Iis6smsr081jaLjufwCt16mF67L6FU=) 15: wsErUnpdH4uLzyMOthH1LxHVK78.crl (hash: kuBClxLkkpQQKAQe03kGNl2Ul1i0nXDZ9QnJLcJUMPg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 May 2025 13:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:a0:88:fa:f0:6a:5b:43:e0:f6:4d:d4:17:71:00:81:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf Validity Not Before: May 5 13:00:53 2025 GMT Not After : May 6 13:00:53 2025 GMT Subject: CN=bd0214600c953c43f780fda29ff5f9857928b44c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:55:5b:2c:77:3f:23:9c:83:a7:3b:21:bf:80: 11:16:35:df:67:b1:90:50:5f:60:00:36:f9:23:d8: a9:13:c7:de:99:b7:0f:11:57:68:69:72:ae:04:1d: a6:dc:8e:a0:97:e1:5f:2e:6e:85:3a:01:b6:69:55: 55:90:a8:05:34:ea:bf:13:d6:dd:e4:bf:5b:5e:bb: a6:11:6c:74:4f:37:99:77:5e:34:b4:a8:30:cc:3b: 90:4f:99:13:4d:4d:f0:41:0d:17:80:1e:bc:bc:fc: 12:3c:24:c7:80:84:32:b2:bc:fa:eb:49:9e:88:5d: 64:f6:3d:36:36:d1:68:e3:10:a7:d8:19:1f:0a:92: 87:11:41:5a:d6:ca:dc:b4:8f:42:dd:cc:3d:34:1f: 74:48:2e:17:72:d8:49:d3:c3:a5:62:9e:a4:6a:2a: d4:bc:a3:02:8e:f5:27:20:a8:76:ff:fb:be:ac:0c: 96:15:72:c0:fa:d4:94:0b:ac:e3:a8:fd:ce:c1:af: 01:75:c6:bd:33:1e:2e:04:9c:c1:5e:8a:59:83:17: 7e:9c:dc:28:0a:aa:95:26:5e:33:d4:44:18:5b:12: bb:c5:d7:e0:8e:16:6b:a1:c0:b8:85:99:59:d0:60: 5e:13:60:62:32:1a:77:a1:85:e1:5c:85:b3:25:d6: a7:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:02:14:60:0C:95:3C:43:F7:80:FD:A2:9F:F5:F9:85:79:28:B4:4C X509v3 Authority Key Identifier: keyid:C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:7d:a5:10:e3:91:81:47:13:75:18:01:80:48:d7:65:7b:6d: 29:3b:7c:20:24:65:ad:37:04:fc:32:18:5b:35:d4:fb:5c:63: 57:b0:0e:a4:74:83:f2:a1:72:68:04:b5:5f:2d:70:6b:13:98: bb:ab:1b:df:c2:eb:e4:f0:30:d1:1c:57:a2:5f:fa:33:66:85: 47:6e:26:0c:45:2b:e0:e7:38:f0:5f:10:47:b8:9c:0c:a2:79: 10:89:8c:f2:6e:42:0e:c7:a6:49:e8:6c:d9:43:e9:d1:dc:3c: a1:5c:32:4b:b7:fe:a9:42:4c:b2:eb:53:41:95:a3:5a:7c:99: 3a:d1:ce:be:00:c4:10:5b:70:3d:81:f0:1a:3f:8f:a5:86:b8: 76:7f:15:28:0c:2e:ff:58:fc:72:99:24:0a:30:47:4c:c5:58: e1:4e:e1:d7:71:02:b4:7e:e0:f3:2b:c6:38:28:3c:70:65:d4: 36:44:5a:3c:bd:1c:0c:9c:43:12:bd:a1:df:0e:76:d8:7e:c7: 37:09:8b:0d:9b:07:a3:6d:5f:d4:f6:a0:1b:48:49:42:c1:70: 8f:9e:a7:87:a3:e8:83:ed:79:51:30:bc:d9:19:25:f8:a4:52: bf:ea:ac:c8:32:68:37:8b:53:78:8c:05:b0:52:e0:81:ae:26: c9:81:83:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZagiPrwaltD4PZN1BdxAIE+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyYzEyYjUyN2E1ZDFmOGI4YmNmMjMwZWI2MTFmNTJmMTFk NTJiYmYwHhcNMjUwNTA1MTMwMDUzWhcNMjUwNTA2MTMwMDUzWjAzMTEwLwYDVQQD EyhiZDAyMTQ2MDBjOTUzYzQzZjc4MGZkYTI5ZmY1Zjk4NTc5MjhiNDRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFVbLHc/I5yDpzshv4ARFjXfZ7GQ UF9gADb5I9ipE8fembcPEVdoaXKuBB2m3I6gl+FfLm6FOgG2aVVVkKgFNOq/E9bd 5L9bXrumEWx0TzeZd140tKgwzDuQT5kTTU3wQQ0XgB68vPwSPCTHgIQysrz660me iF1k9j02NtFo4xCn2BkfCpKHEUFa1srctI9C3cw9NB90SC4XcthJ08OlYp6kairU vKMCjvUnIKh2//u+rAyWFXLA+tSUC6zjqP3Owa8Bdca9Mx4uBJzBXopZgxd+nNwo CqqVJl4z1EQYWxK7xdfgjhZrocC4hZlZ0GBeE2BiMhp3oYXhXIWzJdanOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL0CFGAMlTxD94D9op/1+YV5KLRMMB8GA1UdIwQY MBaAFMLBK1J6XR+Li88jDrYR9S8R1Su/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zZWJiNDYtYjlkZC00Njk1LTgxNWMt NDZlZTU3OGEwYmZlLzEvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zZWJiNDYtYjlkZC00Njk1LTgxNWMtNDZlZTU3OGEwYmZl LzEvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl32lEOOR gUcTdRgBgEjXZXttKTt8ICRlrTcE/DIYWzXU+1xjV7AOpHSD8qFyaAS1Xy1waxOY u6sb38Lr5PAw0RxXol/6M2aFR24mDEUr4Oc48F8QR7icDKJ5EImM8m5CDsemSehs 2UPp0dw8oVwyS7f+qUJMsutTQZWjWnyZOtHOvgDEEFtwPYHwGj+PpYa4dn8VKAwu /1j8cpkkCjBHTMVY4U7h13ECtH7g8yvGOCg8cGXUNkRaPL0cDJxDEr2h3w522H7H NwmLDZsHo21f1PagG0hJQsFwj56nh6Pog+15UTC82Rkl+KRSv+qsyDJoN4tTeIwF sFLgga4myYGDyw== -----END CERTIFICATE-----Generated at Mon May 5 22:23:29 2025 by rpki-client