$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft File: c_IQ8SmaHgrucdwdeeX7EgktMKk.mft (raw, json) Hash identifier: ZiQPXWNOgMGoAbfdyQjXQ9Ire4gv+L+ITUydQ3jsN7c= Subject key identifier: C7:61:01:B4:DC:4B:CB:69:8D:93:A5:52:3F:21:6C:AC:2B:DC:38:33 Authority key identifier: 73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9 Certificate issuer: /CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9 Certificate serial: 0196BE92F7089C83847FE0FEDF13B514BA06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft Manifest number: 155A Signing time: Sun 11 May 2025 09:00:24 +0000 Manifest this update: Sun 11 May 2025 09:00:24 +0000 Manifest next update: Mon 12 May 2025 09:00:24 +0000 Files and hashes: 1: H74wGZKnnU6XEP7nVKoqw4XaEjE.roa (hash: zhm555s3zw/KlbcjZuumbYd6+z6n6717Q/inEo++9C0=) 2: JFyb9vOEShiklCUE-xhXQcKys24.roa (hash: yRt2GvdxkvGMHkQaqbdXsuANeN2IU6ZvnsT36x7jpNo=) 3: KFKPGq8CDIQff00UekrfFEmWWU4.roa (hash: pndCMKJbI0Ffrf6VYH3lHviYtYItndyotazCLP7aZyE=) 4: Qr2_pZwtUuuXPoMfySpHp2LFCzA.roa (hash: OPOydN0anKEX6vc+TeAzqMc5Umz77lHhXvSZK8OXrNs=) 5: TLCOp8VQQYT-sDLZMkb_dNE0wJI.roa (hash: 8TF1RbnrjzrAYcRglOW5PIK7TmKRhUoFu7HvQr3ZHoA=) 6: XfGBei_fvFP0LcnT4xlGOunfSHY.roa (hash: ApG5cEMi+MNJR6ahm8kTy/uN64zS0fv0zRdzd/i6biA=) 7: ZrwHnbp0cmRv-8Aq-3dTrUs96b8.roa (hash: laG521bBX3KOp9w13a5/N7g1SD2gsHS2KdTqelNAv1g=) 8: c_IQ8SmaHgrucdwdeeX7EgktMKk.crl (hash: ewi/fLWxqR3VEFW3Djs76+w9FXKjg4wDpTNqeOm7cCQ=) 9: h5UPb41WBJf3smLRT3WauyTJhZk.roa (hash: 7y7FascFoSESS5H+heHuGPqwY6CoIfeWFtJUfTaH8Lg=) 10: nT9Kl7qa4avyYi6PobndNFEx2JI.roa (hash: 4NhOocRVxQsq48Sjltw5zBhFh6NiUij1mxelAtmoUp0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 May 2025 07:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:be:92:f7:08:9c:83:84:7f:e0:fe:df:13:b5:14:ba:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9 Validity Not Before: May 11 09:00:24 2025 GMT Not After : May 12 09:00:24 2025 GMT Subject: CN=c76101b4dc4bcb698d93a5523f216cac2bdc3833 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:3c:b2:d4:7d:3b:fb:40:b5:6a:f8:cd:c7:81: f1:e1:bc:90:cc:35:ae:e5:e0:37:f8:f2:78:ca:60: 7b:33:18:76:65:4a:95:d4:7d:ab:3e:79:fd:18:63: f6:cf:fd:8b:46:d8:50:e3:04:b3:56:25:50:d3:63: 3b:c8:c8:e2:d1:23:9c:04:df:00:40:ef:e5:ee:10: f2:bd:e6:c2:b8:76:c2:70:dc:50:99:a1:a1:22:62: 0f:4d:35:3e:41:4a:6e:8e:27:94:8e:cf:41:a1:c0: 31:83:0c:9a:19:7e:ce:16:82:df:2e:02:08:47:94: 81:16:e6:12:ab:99:31:e6:19:f2:a7:3c:b1:54:bd: 6e:41:db:0c:ee:41:af:68:ed:e4:3a:3b:65:c1:03: 48:b0:6d:c4:b9:cd:dd:41:ea:de:c5:28:03:9e:8f: da:19:df:6d:fa:cb:ec:af:c6:b0:cd:29:d9:fc:8f: 52:f6:2b:37:22:c5:cc:ee:3e:af:ba:b0:72:32:03: ae:0b:a3:bf:42:b2:12:7e:43:d1:8c:11:49:89:ef: 39:d7:43:2f:a3:d4:49:ac:37:5a:a0:1b:91:2c:2a: 27:ce:73:04:92:bf:96:9a:71:1c:95:b5:57:e9:58: 5c:0e:c0:cd:b1:4d:0a:e1:34:9a:4e:81:fe:78:d3: 03:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:61:01:B4:DC:4B:CB:69:8D:93:A5:52:3F:21:6C:AC:2B:DC:38:33 X509v3 Authority Key Identifier: keyid:73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:b8:d5:ea:7c:32:fe:dc:c8:95:95:45:8a:4d:df:b7:4e:fe: cb:6f:60:b8:b5:a4:25:01:79:b5:a5:4c:39:87:10:63:4e:10: dc:69:46:94:86:8a:e1:9c:44:2c:6e:ca:8a:c5:57:a8:65:37: f9:45:c6:53:f5:01:ac:2c:16:a0:d4:44:b7:37:c0:a1:73:5e: b7:b3:98:d9:65:a1:6c:5e:c4:24:67:57:a7:a1:22:c0:10:ab: 34:b2:b9:3e:76:a5:f6:ca:47:91:b2:25:32:a0:7e:3f:45:f8: 74:64:ad:7a:9d:8c:78:7a:36:96:36:46:15:11:89:13:a0:59: ec:92:f0:2b:ad:12:f8:ce:eb:52:a3:14:f0:da:cd:40:8e:8a: 2c:fd:34:cf:1d:cb:3e:c6:e1:f0:2f:65:14:8a:ce:7a:b7:d4: b6:66:ed:55:02:37:ee:4d:6b:c5:a5:70:35:aa:1e:30:ca:15: 06:a5:61:93:0e:44:d8:38:aa:5c:ba:83:9c:84:f4:95:16:c4: ca:83:49:5a:ce:75:8e:87:29:64:2b:ae:de:2d:2a:99:e1:cf: 0e:39:d2:13:84:ac:ed:50:5b:e2:37:54:1b:c7:ea:9e:b7:48: 8b:46:79:42:fc:d0:ab:42:10:be:9d:bd:2a:a0:3e:60:44:46: 91:e5:6a:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZa+kvcInIOEf+D+3xO1FLoGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczZjIxMGYxMjk5YTFlMGFlZTcxZGMxZDc5ZTVmYjEyMDky ZDMwYTkwHhcNMjUwNTExMDkwMDI0WhcNMjUwNTEyMDkwMDI0WjAzMTEwLwYDVQQD EyhjNzYxMDFiNGRjNGJjYjY5OGQ5M2E1NTIzZjIxNmNhYzJiZGMzODMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Tyy1H07+0C1avjNx4Hx4byQzDWu 5eA3+PJ4ymB7Mxh2ZUqV1H2rPnn9GGP2z/2LRthQ4wSzViVQ02M7yMji0SOcBN8A QO/l7hDyvebCuHbCcNxQmaGhImIPTTU+QUpujieUjs9BocAxgwyaGX7OFoLfLgII R5SBFuYSq5kx5hnypzyxVL1uQdsM7kGvaO3kOjtlwQNIsG3Euc3dQerexSgDno/a Gd9t+svsr8awzSnZ/I9S9is3IsXM7j6vurByMgOuC6O/QrISfkPRjBFJie8510Mv o9RJrDdaoBuRLConznMEkr+WmnEclbVX6VhcDsDNsU0K4TSaToH+eNMDZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMdhAbTcS8tpjZOlUj8hbKwr3DgzMB8GA1UdIwQY MBaAFHPyEPEpmh4K7nHcHXnl+xIJLTCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY19JUThTbWFIZ3J1Y2R3ZGVlWDdFZ2t0TUtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kYjFiNDgtMWNjNS00ODMzLTkzZDkt Yjk0NjQ3MThiYTM3LzEvY19JUThTbWFIZ3J1Y2R3ZGVlWDdFZ2t0TUtrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9kYjFiNDgtMWNjNS00ODMzLTkzZDktYjk0NjQ3MThiYTM3 LzEvY19JUThTbWFIZ3J1Y2R3ZGVlWDdFZ2t0TUtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMLjV6nwy /tzIlZVFik3ft07+y29guLWkJQF5taVMOYcQY04Q3GlGlIaK4ZxELG7KisVXqGU3 +UXGU/UBrCwWoNREtzfAoXNet7OY2WWhbF7EJGdXp6EiwBCrNLK5Pnal9spHkbIl MqB+P0X4dGStep2MeHo2ljZGFRGJE6BZ7JLwK60S+M7rUqMU8NrNQI6KLP00zx3L Psbh8C9lFIrOerfUtmbtVQI37k1rxaVwNaoeMMoVBqVhkw5E2DiqXLqDnIT0lRbE yoNJWs51jocpZCuu3i0qmeHPDjnSE4Ss7VBb4jdUG8fqnrdIi0Z5QvzQq0IQvp29 KqA+YERGkeVqgw== -----END CERTIFICATE-----Generated at Sun May 11 16:04:49 2025 by rpki-client