$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft File: bds4s0PaLRGTCe2qGceniHAyfr4.mft (raw, json) Hash identifier: sZsiRh5xIxaigc9653lRdSg9EwRrThiILUr7Kk1am74= Subject key identifier: 3B:4A:1A:1C:67:EF:5D:01:D9:69:5D:B4:C0:55:75:89:24:4E:4B:56 Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe Certificate serial: 01969DBE79D658734243F986446E0DC1B75E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft Manifest number: 15B2 Signing time: Mon 05 May 2025 00:00:27 +0000 Manifest this update: Mon 05 May 2025 00:00:27 +0000 Manifest next update: Tue 06 May 2025 00:00:27 +0000 Files and hashes: 1: 1-VZuIwVkRgo619APRmiGobLEe2k.roa (hash: ELMJnBOGAspkS2EKJPUzCE4JjiJqCGzZz4I7y3MQK0c=) 2: 1FgAgOKAkv5XcCRQ3J7QkwpKT98.roa (hash: 6Mdiww8rup10ctjHqTpOD/Pwd3nyKO+layuU1TvTAHQ=) 3: 1KSTcjfpj__vPQBzVR0gREvKCgI.roa (hash: krwqztLoM8dprHPPwGWlxTOoAu6g8UN+QTRn1+Fw/ho=) 4: 1tP6HbCLfJQolIJff1meJLf4HpI.roa (hash: Jqq8+MBFvN33b5MWz0+bttdbA5gDNeaR+L9jbZUqu6E=) 5: 2oRdoUK9GK8mawBu6_rEnXW2PpU.roa (hash: 8KF1r3nJb84n4UjY6JtL5gphBhQBLKVTdmdNqZHiv9U=) 6: 6F9y36lZeoE4bfjGXC_Ufk2fjfI.roa (hash: FZsvLuR+Gv0TTTTehRc9baUO0MbvwTK+elKj7u0SA+A=) 7: DiJuQ_kG7WvUzBjzRy7osCFiLa0.roa (hash: ZZdF3mZX0+NSB3GzJXDHjRpoKegOrxgL6WcAfOKZIVo=) 8: I2NZbRR37shFYjdW5-JMKhSMXtU.roa (hash: GcOLL2TL23qlIweIa9Lvj8OiuFWXtj95gxIIL30IAyg=) 9: UkwQ5P4K-6hNdEb9fPfnCQvn8Cg.roa (hash: 3YnYR2wJLHM5g/DZxwAp32GCtIPF1553r3/M3FEeh+s=) 10: X57-ZKJiC7pX1z2IhDWI4_Vb_x4.roa (hash: rQu7xdiT+nmHcmLVj2/49bWlcYuEeveWXCKAsMSKvZs=) 11: _iGFugOP1tiOEaPOTqAHoHJWFQc.roa (hash: 8esaTWX6gTmO0Sy1HkL3uRDiAwcID3fH35AmBjVF024=) 12: _qAPGYVD_1gJgljuSDHPl3Z-xK8.roa (hash: mSFnXP7nj9WP4ezEw+z517FTzVwTAKGKRj7RSpQ5oaI=) 13: bZwjzP4gjKnjcT_SMEdSZH0cpus.roa (hash: Ae2HLoEm9GipjYsypJz84+I8/D7aRxBKdkOkxmref+c=) 14: bds4s0PaLRGTCe2qGceniHAyfr4.crl (hash: FmefYoVZuEtCr2aDc3QRP7JzQS2s3Kk8PkxNSOf/JX0=) 15: c0uyAIlGOn0vO5piSysUF2Ju-aw.roa (hash: 4XHETRLKmMi8IPLG6uXis4YdiB+OZfWGhUxOMU23gnE=) 16: gwp5niXb2n6kZ0Mq0bpku5SIvP8.roa (hash: /emCX8fFJ82IKSnaJ3WhnFd0eFSX5hHN32PEtlHldBE=) 17: mazjpEOiTRGyO0IL263f_3CQd1U.roa (hash: MKiEFvVqubL0G1YHY988sj28nrhwlcgHnMA3zXfPogY=) 18: qTL2vom_vyIqp140e3YMb3TYkng.roa (hash: RtSgcYHtgwTUFsVw/jT+61N3Xf/BMJsIvs/rqgIjnvI=) 19: qqAWUHoLAk_vsyL2Er1OBeRgPDg.roa (hash: aQVfFUAR5nktoMvGRzuDLJIaffEsPJN3cf/1slGBVc4=) 20: tPfqUbopBFQbBdX02jX2a3pGE5U.roa (hash: iYgcgk+sZG1Q+yO+oyQmYDmVBD8gFKtXK51vp12qGqA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 May 2025 00:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:9d:be:79:d6:58:73:42:43:f9:86:44:6e:0d:c1:b7:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe Validity Not Before: May 5 00:00:27 2025 GMT Not After : May 6 00:00:27 2025 GMT Subject: CN=3b4a1a1c67ef5d01d9695db4c0557589244e4b56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:2c:10:f3:61:f0:df:5d:b8:80:7a:64:6e:16: 2a:f6:69:0c:72:05:32:52:1d:2a:af:c6:2d:fe:ec: 20:96:53:0e:bc:b6:15:98:b2:0c:1c:f3:42:4f:08: d2:1d:51:e0:67:db:49:a8:be:c3:57:5a:1c:84:57: 71:10:ba:91:7b:bb:b3:0e:e1:80:56:37:39:a2:14: a3:da:56:b7:45:8d:d9:81:52:21:c8:fe:35:42:12: 78:e5:bd:8e:a8:3c:64:47:aa:e6:ef:81:0c:1a:c0: b3:01:3e:63:99:39:18:10:a0:09:69:f8:e7:bd:24: fe:45:df:55:c8:87:bd:c8:f8:c0:47:30:d8:f4:5e: 73:05:8b:5b:dd:56:fd:cf:c9:5f:77:f9:99:4d:15: f5:17:ad:b8:59:84:b7:ac:eb:c6:c8:6b:a2:5f:8a: 2d:83:76:2a:34:3b:d7:b9:46:1d:03:07:2b:3e:02: b8:2a:98:a9:1b:39:5f:51:9c:89:77:4d:78:f1:7e: a3:db:10:9e:35:bb:77:47:9d:f2:fa:62:60:a6:19: fe:c4:b3:27:17:6e:d4:d1:ca:43:7e:84:bf:e9:69: 7e:7f:f6:b8:83:48:2c:ba:12:10:76:09:78:1d:86: 32:3a:00:30:34:9a:05:f9:eb:59:a1:50:54:6d:9d: 30:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:4A:1A:1C:67:EF:5D:01:D9:69:5D:B4:C0:55:75:89:24:4E:4B:56 X509v3 Authority Key Identifier: keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:16:f4:e5:f7:55:dd:71:44:bb:fc:f9:83:da:67:72:26:26: 0d:a5:fb:5f:bc:30:e8:3f:be:06:22:bb:9c:ef:19:88:db:38: 5e:d0:27:61:0e:71:c7:7b:5e:c6:d6:fc:14:4d:a9:fc:34:fa: 7d:fb:7a:4a:e3:03:8e:4e:70:87:11:15:e9:e2:52:88:f2:e6: 2c:4c:35:41:28:46:d8:df:91:c9:e8:00:76:5a:9f:f3:1e:40: e2:04:fe:38:89:50:87:85:53:dd:66:f3:9c:a2:7e:27:5d:0b: 0a:96:cb:82:71:31:88:ef:c0:4b:b5:bc:a0:7f:e9:a2:0c:39: 3b:54:7f:6d:1a:05:d3:1e:bb:40:36:9a:1a:c7:77:1a:ff:40: 21:1a:27:e9:3b:d9:87:28:61:0b:64:14:76:cb:69:a9:46:e7: d8:ae:99:db:7d:33:77:81:e1:0d:2b:7f:41:76:51:73:f4:1b: ab:44:5c:63:5b:48:8e:c9:cf:41:a7:d1:4e:2b:df:4a:66:ff: 75:45:85:a5:67:4d:4b:cb:f2:15:4c:56:21:5c:0a:70:9e:9f: f7:ae:5a:1a:70:20:8a:61:36:d5:5e:49:71:9b:fa:e9:88:24: cb:d8:2f:51:7e:2b:3d:59:a2:9e:51:0c:1c:47:21:b3:a4:71: 9f:1b:35:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZadvnnWWHNCQ/mGRG4NwbdeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkZGIzOGIzNDNkYTJkMTE5MzA5ZWRhYTE5YzdhNzg4NzAz MjdlYmUwHhcNMjUwNTA1MDAwMDI3WhcNMjUwNTA2MDAwMDI3WjAzMTEwLwYDVQQD EygzYjRhMWExYzY3ZWY1ZDAxZDk2OTVkYjRjMDU1NzU4OTI0NGU0YjU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCwQ82Hw3124gHpkbhYq9mkMcgUy Uh0qr8Yt/uwgllMOvLYVmLIMHPNCTwjSHVHgZ9tJqL7DV1ochFdxELqRe7uzDuGA Vjc5ohSj2la3RY3ZgVIhyP41QhJ45b2OqDxkR6rm74EMGsCzAT5jmTkYEKAJafjn vST+Rd9VyIe9yPjARzDY9F5zBYtb3Vb9z8lfd/mZTRX1F624WYS3rOvGyGuiX4ot g3YqNDvXuUYdAwcrPgK4KpipGzlfUZyJd0148X6j2xCeNbt3R53y+mJgphn+xLMn F27U0cpDfoS/6Wl+f/a4g0gsuhIQdgl4HYYyOgAwNJoF+etZoVBUbZ0w3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDtKGhxn710B2WldtMBVdYkkTktWMB8GA1UdIwQY MBaAFG3bOLND2i0RkwntqhnHp4hwMn6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9jOTYxYTAtNGY1My00MjJhLWI3ZGQt M2RmYTUxMGQ2YjE2LzEvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi9jOTYxYTAtNGY1My00MjJhLWI3ZGQtM2RmYTUxMGQ2YjE2 LzEvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdRb05fdV 3XFEu/z5g9pnciYmDaX7X7ww6D++BiK7nO8ZiNs4XtAnYQ5xx3textb8FE2p/DT6 fft6SuMDjk5whxEV6eJSiPLmLEw1QShG2N+RyegAdlqf8x5A4gT+OIlQh4VT3Wbz nKJ+J10LCpbLgnExiO/AS7W8oH/pogw5O1R/bRoF0x67QDaaGsd3Gv9AIRon6TvZ hyhhC2QUdstpqUbn2K6Z230zd4HhDSt/QXZRc/Qbq0RcY1tIjsnPQafRTivfSmb/ dUWFpWdNS8vyFUxWIVwKcJ6f965aGnAgimE21V5JcZv66Ygky9gvUX4rPVminlEM HEchs6Rxnxs1tQ== -----END CERTIFICATE-----Generated at Mon May 5 09:57:21 2025 by rpki-client