$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft File: Njdp-GRKWnGK5isFjdH7YstaPCA.mft (raw, json) Hash identifier: 1y2RRhM4nbzExB8319IG8/DopnRR3zjUnFJEOrIfmzI= Subject key identifier: F3:6F:8B:F7:92:68:27:EB:12:85:F1:64:37:31:55:12:55:02:D2:58 Authority key identifier: 36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20 Certificate issuer: /CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20 Certificate serial: 0196A0BF5211E84F0673D44BFBC1AE3D5ACC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft Manifest number: 1176 Signing time: Mon 05 May 2025 14:00:14 +0000 Manifest this update: Mon 05 May 2025 14:00:14 +0000 Manifest next update: Tue 06 May 2025 14:00:14 +0000 Files and hashes: 1: 6KojKGt8m1JZYflLectBk9G6KyQ.roa (hash: f7oRXtNmZrUg7ECYCX58KaB9kZ/BYKNvyNqrr7ZA0pg=) 2: 9_VTzPNMtq6bRoN_2gQPbFirB_4.roa (hash: GFcx39JAffdglXqipIFTeQRGB4wpQ89alaTRPqJNkCk=) 3: 9d7-oiu-mBjw4z1zBB1dh7CSH94.roa (hash: NSPVHDDpPzrpqQjtgOJxVDl+4YeQklgmMnIIlaE/zH4=) 4: BxI-z_iKAoRv-KkoQfmyFBd2rBU.roa (hash: azqV4pSZAum5oUwc2nR9O4azmHBN9hS6/dWIvs6n6Yk=) 5: I9XUisFoxGtL5nlEyDkRm9SxnHU.roa (hash: CRR3lDaaR4JHFLVIWiAceY/tOhJb5JmxYXyKyqN2k7o=) 6: JwtLcTu5YVfj_v6EYmBkVEJOCSk.roa (hash: Z/uV55YxgNv0N3LLBrV+q7AxLOdh39PbZ8CIfU7Xb24=) 7: Njdp-GRKWnGK5isFjdH7YstaPCA.crl (hash: A6BrLQVPh2qzwxI0Bnj/iIeC2oE+c9U08nHCFDg5ZW4=) 8: UB0nHtcN2JqEpsBiE2dgnMbsFmA.roa (hash: /6u2jCfdxJpMMlfUjlpcIXqMInwiMRNkGcmBxEuYZxo=) 9: lVLXkjE5u336DUNe5-yOssKJPTU.roa (hash: LZfaMzNKKI5KTD1Ka0mwOqPdg88OEyiRswrf9PDppVQ=) 10: mMGXQdchjm-1k_0cqBgKyEDxRR4.roa (hash: 3upgVfgQw3wj9y0X5oDRyiDppWmgLqIOtqf6K+MUlIM=) 11: nI4pg8TJwdBGvcOSMEwiKdACRgY.roa (hash: e4fjV36QQP3EEWEcje1wCzIbRILO6c8V4Bt3WpH8Zcc=) 12: o5rwtBSGBeueFoqXJnECfg6cmYA.roa (hash: TLPcNxEKVGJq+q8J97N3QnvxQz4N/IjsjG2sJIGRFeA=) 13: okDig36WatgfOljJ7YAQ7f4qAwI.roa (hash: 9F0Jk3aBVBsMc/BBPP2ZGmKOPXIvDvI2DUUSrfyHD70=) 14: pVY_FGIDhlEf6vs7MShMAVBNlQk.roa (hash: 36C0/NjrkK4EvhEr+5+ZgIKhG5JQMFDTmhg9XNYss9Q=) 15: snSvPYVkGepL_9GgsNIGnoIWw44.roa (hash: T0HMAvigAIpTuY/J9VuaKFj34+4Tc7VdD2Bhy8snzbA=) 16: uiYUyTWWE4PZpkpKN5LB2EKpPu0.roa (hash: z03Urv4xQycLb08btj7gfHzMCKzXb1kRu0QwraJJBFQ=) 17: xZ2Mzu_3c40aDFLd62CdvQWebug.roa (hash: xKY3AuHc8X/lxha18soPYIUuGtqbxocRZavr4da/On8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 May 2025 14:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:a0:bf:52:11:e8:4f:06:73:d4:4b:fb:c1:ae:3d:5a:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20 Validity Not Before: May 5 14:00:14 2025 GMT Not After : May 6 14:00:14 2025 GMT Subject: CN=f36f8bf7926827eb1285f164373155125502d258 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f0:c6:06:dc:ca:48:c5:3c:39:26:7e:36:35: 3f:8c:19:d2:41:7f:41:30:ab:86:8d:a9:1d:dd:d3: 0f:0d:52:60:6c:79:9b:2d:de:77:15:b4:54:72:bc: f4:59:26:60:7d:3e:39:88:a4:8d:f3:0a:b9:94:02: c4:34:d8:be:2a:38:1c:f1:1f:ba:5b:41:55:75:52: 9d:6e:50:37:8f:81:f1:c4:74:e6:42:0a:3b:1b:c4: 64:d1:58:95:74:fb:fe:79:58:5c:e7:cd:34:06:5a: 11:f0:dd:d1:35:b3:9b:8f:35:d4:d9:dc:89:39:2f: 9f:e0:4d:c8:01:6b:b5:c5:a4:85:c1:2b:31:f2:fc: 0c:d7:04:31:e3:77:49:39:f3:a7:fb:f5:0a:6f:81: 7f:bf:dd:8b:c7:ff:f6:cb:89:82:95:a2:d5:6d:6f: 71:ab:e2:7b:34:c4:93:dd:25:a9:e2:55:d8:a9:d1: fa:c8:6b:d9:fa:3c:05:d9:98:f1:b3:fa:47:5e:19: 42:e2:0c:0b:14:d2:97:23:b6:e3:99:e9:5d:47:85: f3:cc:66:6a:33:a9:70:92:59:44:ae:bf:8f:ed:57: b2:a8:73:07:0a:e6:16:fe:76:f3:c7:97:0e:e1:8c: 94:83:c7:6c:d4:39:6a:ba:f5:a4:48:18:bd:94:6f: 5e:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:6F:8B:F7:92:68:27:EB:12:85:F1:64:37:31:55:12:55:02:D2:58 X509v3 Authority Key Identifier: keyid:36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:ac:ff:3f:3c:d6:3c:7e:9f:10:a1:5a:e9:d3:35:19:c5:99: b0:44:a1:c2:2e:4a:ec:cc:2d:2c:54:ed:93:5a:fc:09:4b:9d: f6:f5:02:fe:f8:43:b3:d9:d9:1c:5c:5c:d3:62:77:f7:19:5c: a1:4e:d6:ca:78:c7:b9:b7:fb:b2:fd:45:0a:6f:70:74:39:b8: 83:b5:bf:01:25:af:9c:0a:f0:7f:70:e3:9d:56:c4:d3:01:99: 0f:69:44:ec:67:34:d1:12:a5:2f:76:65:b0:3d:6a:99:df:89: 25:ab:c9:00:86:fd:e0:1f:ad:c2:6d:b5:10:2d:7c:02:cb:34: b9:2c:7f:5c:97:5a:e7:1f:a2:f1:a0:e5:aa:27:da:c4:6b:db: 3d:ea:dc:e7:71:8e:eb:78:1c:6e:21:7a:4d:f6:d6:e8:34:8f: e3:d1:07:6b:62:5f:50:88:02:d9:0c:63:84:3a:6f:65:96:9d: db:db:a3:7d:20:50:8c:51:44:5a:eb:25:ed:da:96:d1:9b:97: 27:84:33:17:22:9c:53:f7:64:bd:29:51:17:40:a5:3a:80:62: b9:c0:c9:f8:0f:f2:77:3c:f9:03:a8:00:89:3d:95:2b:c8:c9: 49:0b:92:a3:1f:5e:f3:36:99:fa:1c:65:ad:18:a5:fc:d3:cf: dd:e6:7f:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZagv1IR6E8Gc9RL+8GuPVrMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2Mzc2OWY4NjQ0YTVhNzE4YWU2MmIwNThkZDFmYjYyY2I1 YTNjMjAwHhcNMjUwNTA1MTQwMDE0WhcNMjUwNTA2MTQwMDE0WjAzMTEwLwYDVQQD EyhmMzZmOGJmNzkyNjgyN2ViMTI4NWYxNjQzNzMxNTUxMjU1MDJkMjU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvDGBtzKSMU8OSZ+NjU/jBnSQX9B MKuGjakd3dMPDVJgbHmbLd53FbRUcrz0WSZgfT45iKSN8wq5lALENNi+Kjgc8R+6 W0FVdVKdblA3j4HxxHTmQgo7G8Rk0ViVdPv+eVhc5800BloR8N3RNbObjzXU2dyJ OS+f4E3IAWu1xaSFwSsx8vwM1wQx43dJOfOn+/UKb4F/v92Lx//2y4mClaLVbW9x q+J7NMST3SWp4lXYqdH6yGvZ+jwF2Zjxs/pHXhlC4gwLFNKXI7bjmeldR4XzzGZq M6lwkllErr+P7VeyqHMHCuYW/nbzx5cO4YyUg8ds1DlquvWkSBi9lG9etQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPNvi/eSaCfrEoXxZDcxVRJVAtJYMB8GA1UdIwQY MBaAFDY3afhkSlpxiuYrBY3R+2LLWjwgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmpkcC1HUktXbkdLNWlzRmpkSDdZc3RhUENBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8wZjhmZWEtZjAwYS00NDE1LWIzOTYt Mzk5ZmM5NjkzYjIyLzEvTmpkcC1HUktXbkdLNWlzRmpkSDdZc3RhUENBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8wZjhmZWEtZjAwYS00NDE1LWIzOTYtMzk5ZmM5NjkzYjIy LzEvTmpkcC1HUktXbkdLNWlzRmpkSDdZc3RhUENBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ6z/PzzW PH6fEKFa6dM1GcWZsEShwi5K7MwtLFTtk1r8CUud9vUC/vhDs9nZHFxc02J39xlc oU7WynjHubf7sv1FCm9wdDm4g7W/ASWvnArwf3DjnVbE0wGZD2lE7Gc00RKlL3Zl sD1qmd+JJavJAIb94B+twm21EC18Ass0uSx/XJda5x+i8aDlqifaxGvbPerc53GO 63gcbiF6TfbW6DSP49EHa2JfUIgC2QxjhDpvZZad29ujfSBQjFFEWusl7dqW0ZuX J4QzFyKcU/dkvSlRF0ClOoBiucDJ+A/ydzz5A6gAiT2VK8jJSQuSox9e8zaZ+hxl rRil/NPP3eZ/1g== -----END CERTIFICATE-----Generated at Mon May 5 20:33:57 2025 by rpki-client