$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft File: cPmxat8v0xmIhZkitEV0gd1-70A.mft (raw, json) Hash identifier: MwhCwhM0rS3+dcMmTvmBCRkXRlxYHRAIFzlGml/eYAQ= Subject key identifier: E1:9A:E7:C1:13:2B:3A:29:BC:10:4E:39:EF:2E:96:E1:4A:77:E5:69 Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40 Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40 Certificate serial: 01969E632B940669F8C8BE5619B5D298A28D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft Manifest number: 12BC Signing time: Mon 05 May 2025 03:00:21 +0000 Manifest this update: Mon 05 May 2025 03:00:21 +0000 Manifest next update: Tue 06 May 2025 03:00:21 +0000 Files and hashes: 1: 5WpWrypca4XGx0ISHtuZYRT_cno.roa (hash: R8ZoU8UZw1Z3gy7t3IJTFumdlDzgJjWSubPKAJkbvV0=) 2: 6Tq_leUsVpFgI85zp_wIyChN4WA.roa (hash: //rXy+p6IdrQ6jHZrRlFQGf563PHiLpmYBPTnbSHBxk=) 3: 8wA7Z8R93JqOIr4nUCX1S5SLIf0.roa (hash: 8DXy5Yj333BXczsMQt5oYuiRo4BwLMddhajfUUPGovk=) 4: JOBERo-vgg6dldBoWViTCfV7X-A.roa (hash: ce+d5taUPY+G9x5sjcA70ndAe38v7dhbZx0JrAG/CD4=) 5: T1V76bxlhezLMl4Tzlvgqgk0pcg.roa (hash: Hk9kWyBSS3VZQ3ORtc2F2qsaXDclUxsqlus/HDJzLds=) 6: Z5phhVwVfpK6dkc5C1-vYmhcYUU.roa (hash: iIyIPk2NBxkdVR06TYJeH+vh01QOalQb+F2tpumtM+w=) 7: cPmxat8v0xmIhZkitEV0gd1-70A.crl (hash: MtFg7J116ZXrJYAzlOyaLmvh+ksYKhUJZrHs7PTdOL8=) 8: ezMLdhISIqr2PAqGoulAf-qQ6FY.roa (hash: MoVmtNQ9G0A/NJidABkGuBmF42AfIIukbBtAhp8lY68=) 9: fzgvAzBES9DhwTo6u6SN4owqYx8.roa (hash: ebeVXRf9dvIAPgx9J1qvCv4edHYcpsRkpP0sc9lWn2M=) 10: mA4IEAHXR0LDJS0AO7AgvdyymfA.roa (hash: B62czMPy2pKQJ5FL2R2C5ZUZdywtpL+Cj+O5hZ16Rv4=) 11: oRkSggV9QKx0oJ3OFOU3lTUbpJA.roa (hash: dsFJ+p7cSuuD/yRs6tiO6cmJEQV8X+kp74SQnDt2xcY=) 12: qQMnV_AHkaoypfzXBStNqOIC8i4.roa (hash: 8/gHPP6AgbL3NuW+OG2JLB+jSLFsV5WrdZq7Of0LMpg=) 13: t-GC4kGf7lvSnOYAiTpgmlkKEL4.roa (hash: 9rNbslHDQxGg0Ew50MQa2Fk3HC4+vs4VNNeusuZLYr8=) 14: x9Pa4FjGFuSawk-SEv2Ok6k19yY.roa (hash: KV0RsDBtETgbugEI2r4ib263Vs08/yFDjc5KML8G+A0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 May 2025 22:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:9e:63:2b:94:06:69:f8:c8:be:56:19:b5:d2:98:a2:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40 Validity Not Before: May 5 03:00:21 2025 GMT Not After : May 6 03:00:21 2025 GMT Subject: CN=e19ae7c1132b3a29bc104e39ef2e96e14a77e569 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:32:5f:1e:c9:8d:f7:fe:32:d1:2b:22:02:3d: 73:67:e9:e4:57:09:ec:c0:1f:59:01:5d:8d:80:b2: 62:34:92:73:df:90:af:6f:60:3e:53:99:c0:d0:ea: 99:e6:9a:66:5e:9d:a3:b5:64:6b:0a:3c:bc:9b:79: 52:06:9e:73:d4:6d:f6:8f:24:60:fe:42:c4:d5:35: 22:68:9c:99:ea:f8:55:86:d7:0b:0d:04:70:2f:32: 5d:59:cb:53:ae:09:a5:0e:b8:ae:5a:2b:75:13:87: df:35:8c:1b:3e:c5:21:f5:ad:3a:67:37:14:32:49: 32:b7:02:7b:c2:8b:c8:db:9e:b9:e3:60:a4:20:77: a9:65:75:07:06:75:1a:84:aa:e1:5a:81:25:b1:74: f8:2e:14:21:e0:06:3f:6f:16:6e:0e:e1:ed:66:d5: cf:73:8c:1d:f0:e2:bc:6f:6a:c9:f0:fb:48:14:31: 45:a0:4a:26:16:0e:77:02:26:ce:12:04:bf:0c:b8: 30:55:b3:4e:f7:a7:2f:fb:79:e5:98:ce:35:b1:86: f2:e9:47:9e:46:25:f2:d3:59:5e:59:e4:55:d8:c7: 12:24:79:d1:bf:e8:e3:68:d3:1a:92:c2:b1:92:88: 4c:c0:bd:26:fd:1c:14:97:0d:8c:04:b0:bf:ef:17: 7d:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:9A:E7:C1:13:2B:3A:29:BC:10:4E:39:EF:2E:96:E1:4A:77:E5:69 X509v3 Authority Key Identifier: keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:1e:38:1d:8d:d6:54:a6:4a:77:5b:c7:48:8a:9a:cd:01:9b: 5f:d1:b0:7c:ea:5c:35:17:d2:33:b9:60:1f:07:f8:74:cd:b7: 3c:9e:a7:2a:fb:45:1b:7f:0a:15:29:61:d1:0c:6c:b6:26:0a: e7:7b:ff:01:3d:bd:bc:be:0e:c1:f7:db:a2:a7:5e:49:ab:87: 3a:a4:d5:51:08:54:05:92:16:23:74:e3:35:ee:5d:8e:d3:4f: 3d:76:e0:e6:f4:78:58:e9:eb:61:6f:d3:c4:c6:41:5b:7d:e9: 92:fe:af:3c:c1:17:22:2a:4b:bc:27:fe:ef:ec:b6:70:7b:bc: 7f:f4:28:68:9b:fb:8f:06:59:09:3b:e3:4e:e2:aa:ec:aa:11: 16:6e:f6:f4:3e:aa:73:12:fe:3b:2b:72:a5:b6:d4:1e:dc:ee: 21:cd:19:17:1f:5a:e3:fc:11:ac:ee:87:ab:9c:5f:3d:30:77: 8f:3b:9b:70:6b:fd:74:d5:87:17:dc:9f:f4:f8:76:75:a2:f8: 6e:bb:17:68:60:77:d0:54:b9:1f:2b:b1:a2:05:db:5a:1e:c2: ac:38:9d:04:d6:2b:71:c2:9a:19:58:07:9b:34:e6:41:5a:aa: 26:51:20:67:db:ab:96:b9:14:b3:79:89:71:ff:bb:fb:ab:81: 4f:97:88:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZaeYyuUBmn4yL5WGbXSmKKNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwZjliMTZhZGYyZmQzMTk4ODg1OTkyMmI0NDU3NDgxZGQ3 ZWVmNDAwHhcNMjUwNTA1MDMwMDIxWhcNMjUwNTA2MDMwMDIxWjAzMTEwLwYDVQQD EyhlMTlhZTdjMTEzMmIzYTI5YmMxMDRlMzllZjJlOTZlMTRhNzdlNTY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5zJfHsmN9/4y0SsiAj1zZ+nkVwns wB9ZAV2NgLJiNJJz35Cvb2A+U5nA0OqZ5ppmXp2jtWRrCjy8m3lSBp5z1G32jyRg /kLE1TUiaJyZ6vhVhtcLDQRwLzJdWctTrgmlDriuWit1E4ffNYwbPsUh9a06ZzcU MkkytwJ7wovI256542CkIHepZXUHBnUahKrhWoElsXT4LhQh4AY/bxZuDuHtZtXP c4wd8OK8b2rJ8PtIFDFFoEomFg53AibOEgS/DLgwVbNO96cv+3nlmM41sYby6Uee RiXy01leWeRV2McSJHnRv+jjaNMaksKxkohMwL0m/RwUlw2MBLC/7xd9ewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOGa58ETKzopvBBOOe8uluFKd+VpMB8GA1UdIwQY MBaAFHD5sWrfL9MZiIWZIrRFdIHdfu9AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUt YmM2ZGI3MjQ4YWRkLzEvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUtYmM2ZGI3MjQ4YWRk LzEvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIh44HY3W VKZKd1vHSIqazQGbX9GwfOpcNRfSM7lgHwf4dM23PJ6nKvtFG38KFSlh0QxstiYK 53v/AT29vL4OwffboqdeSauHOqTVUQhUBZIWI3TjNe5djtNPPXbg5vR4WOnrYW/T xMZBW33pkv6vPMEXIipLvCf+7+y2cHu8f/QoaJv7jwZZCTvjTuKq7KoRFm729D6q cxL+OytypbbUHtzuIc0ZFx9a4/wRrO6Hq5xfPTB3jzubcGv9dNWHF9yf9Ph2daL4 brsXaGB30FS5HyuxogXbWh7CrDidBNYrccKaGVgHmzTmQVqqJlEgZ9urlrkUs3mJ cf+7+6uBT5eIOw== -----END CERTIFICATE-----Generated at Mon May 5 08:23:16 2025 by rpki-client