$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.mft File: dGOVwSZyrZWJIbYrncmyvNimip8.mft (raw, json) Hash identifier: Yz8RjSj2On+7X0RtAn2/jlxr9KbPSES6TfFtuKnCRb4= Subject key identifier: 2C:BD:A6:0E:28:23:8A:71:F6:F6:6E:12:46:92:0C:F4:58:11:5F:14 Authority key identifier: 74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F Certificate issuer: /CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f Certificate serial: 0196C26FB9EB771F4E1EFAA1C06ABCC96B74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.mft Manifest number: 0D7A Signing time: Mon 12 May 2025 03:00:24 +0000 Manifest this update: Mon 12 May 2025 03:00:24 +0000 Manifest next update: Tue 13 May 2025 03:00:24 +0000 Files and hashes: 1: 49__1Mb6TJOq1lBE39sK0MqptNw.roa (hash: mUbErI4yr16L9KeXw+m7dZ8Q/W3G3H5gFLIPV4hSK+w=) 2: 5dh_b1RBPEedGPoH5jPrifwFpjk.roa (hash: FiUlLPDPpSS4NO4ecP0itIgJ8SGlTnSQQXsonHz0nWs=) 3: 9JRK7EwR6Rg_h37a1uMH5kLd-FE.roa (hash: seSeyyGJGHJLolRBA5CPiq9g6rFjmIDsp1xxdhmozxQ=) 4: D_DMWXe-SCxub8zdYhqregtOfgc.roa (hash: YdgWjYi7meP25wOXjFPlW12dueNlMrHsgbDj5lqUC/U=) 5: Gtrnpnu2EuvTaSZcq-k7Wc8SQpo.roa (hash: Ozf4xst6zqysHFFPHqPk6t9V4R5ZCQl3Sl9vytAN8Vc=) 6: LdIbymxNIXROKdCHKP82tGDACeU.roa (hash: kQyQUPIfVzFwJ1Jq+tF49xJ69eCwQR/ZkbVWbjv5vAI=) 7: SChPZPj9fTG0LMgBHiZShGaGesk.roa (hash: yiFf6ekegDw5R3MvDUcGOwB0KMvQ6EjjT4IN1JKBmzE=) 8: TBnbIzlh-BKbahkJ3E7jSuQuQaY.roa (hash: wANue+0BieEbIbGU0PO+SRCogjBRNdJwQ6IIP6xIdvM=) 9: dGOVwSZyrZWJIbYrncmyvNimip8.crl (hash: BvFgqIbU6CFiT2eyYvBsHpeKaOw1aYNEAcaEo6ZDDp0=) 10: h1ukNoxF9DJUl37AyGab6Erc1Gg.roa (hash: ZJoHXOQXc61UY5FcS2k+Dk9a8RGGZKOXsXXbXlt54JQ=) 11: py6UVbnGSCFD9UnKceZ9kgRxFEA.roa (hash: bcsPoMQcphhUQSwMWLfV++Vj4Ps638fSjd2kseADRTg=) 12: r1KzO2xl8ICSO7mqxB698PRuZNw.roa (hash: kEobsRqs12mPpmxJMO043I+VfPOn+9gNzHlkxfMSy8w=) 13: sji6IRKMxoDbfzOHSYIJXQ44kMU.roa (hash: J7ZKFCKuQD4fFS/N1oH5CYaWP7urJ+aNVO6F4VGrJVY=) 14: t5XPQX_yMIvCtklbQrF1q82oTKI.roa (hash: 7XrFoeiXGnOydV2Y9F7H+zsIgDxk1pwJqNALV9hG41A=) 15: zn28wDGOw3qBz9OqZJzgWf1QCv0.roa (hash: IFT8wg4FnvyKYbJvM5hiahqsDRtzob17zeYuwyl/UlM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.crl rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.mft rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 May 2025 01:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:c2:6f:b9:eb:77:1f:4e:1e:fa:a1:c0:6a:bc:c9:6b:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f Validity Not Before: May 12 03:00:24 2025 GMT Not After : May 13 03:00:24 2025 GMT Subject: CN=2cbda60e28238a71f6f66e1246920cf458115f14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:90:21:33:b2:b0:8a:3d:f5:6d:35:16:a2:32: 9e:19:f5:68:1f:ed:76:e1:4a:12:ff:73:73:66:c3: ec:cb:fd:e3:03:26:c6:04:f8:81:f8:d0:d6:dc:82: 9f:5d:9b:57:85:2d:e4:54:01:e2:70:1b:05:c1:0d: c5:b3:c8:ec:a4:fe:dd:17:cc:f6:ea:d1:bd:96:35: 0d:08:17:8f:0e:b3:eb:de:f1:6b:d2:fb:f1:5d:e7: 6a:53:b0:f3:32:f5:4c:0b:e7:6f:57:16:bc:74:e8: 10:02:2a:75:b7:7b:f0:9a:e6:73:2c:14:6c:e5:35: f7:2d:d3:eb:78:75:94:13:37:be:06:db:82:16:11: f3:78:ae:9a:73:b6:34:39:8b:25:52:3e:ef:96:65: e9:6c:38:2a:1f:d9:00:24:04:e1:05:94:36:eb:e0: ae:87:20:a8:74:b9:1e:90:c3:da:44:ce:e5:0f:b4: 04:34:b5:fa:e7:dc:44:0d:db:c5:4c:e6:6e:71:60: e6:ff:de:30:81:99:e4:7f:4b:2d:31:25:68:6e:d3: 06:9b:4e:53:83:f6:4d:73:c8:64:9e:6c:12:f1:b0: 81:0f:95:cb:11:93:b3:2d:39:fc:89:32:96:d7:ce: b8:c2:9b:d1:72:98:e1:0b:d3:a2:16:fb:29:00:a2: 5e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:BD:A6:0E:28:23:8A:71:F6:F6:6E:12:46:92:0C:F4:58:11:5F:14 X509v3 Authority Key Identifier: keyid:74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:b5:ac:e6:1e:46:c7:91:65:bd:fc:02:aa:66:75:38:33:9d: 60:80:e3:12:c4:e8:76:65:e6:bd:a4:f4:c0:c3:0e:c0:2b:c4: cd:f5:e2:56:06:e0:57:06:4b:d6:5e:7d:c7:b9:ec:a8:22:fd: 36:a2:b9:f5:75:3e:29:72:45:04:b1:e6:98:cb:e4:26:73:fd: 6d:e6:2a:53:b4:fb:ab:2c:98:0c:69:ef:1f:bc:58:a8:26:8d: e8:83:fa:f7:f3:d0:8f:b0:be:16:4e:d8:9f:1d:e0:6f:0f:e7: c9:4f:a3:c6:12:78:c3:f1:07:f9:c2:54:5b:b1:03:88:e7:13: 23:5f:4b:2d:db:c9:06:1b:8a:d5:c8:0a:62:f9:0b:1e:70:38: b9:4c:aa:9e:ed:de:b5:48:c3:b2:3e:51:96:f5:9b:9c:d2:94: 8c:a7:1d:2c:85:3d:42:f7:b3:19:9a:15:f2:98:60:f2:d7:79: 61:92:7a:04:fa:90:f8:9f:08:3d:e4:20:40:e7:0d:d8:38:fc: f5:ea:ef:96:39:a2:88:3e:8e:fe:c0:f2:91:45:8d:85:4c:dc: b7:13:0d:80:83:5a:51:f2:61:79:dc:6b:74:c0:4f:36:7f:02: 78:9f:e7:e7:7b:35:3b:e5:4a:60:b1:09:87:4f:bf:8a:b0:1c: 65:3b:b0:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZbCb7nrdx9OHvqhwGq8yWt0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0NjM5NWMxMjY3MmFkOTU4OTIxYjYyYjlkYzliMmJjZDhh NjhhOWYwHhcNMjUwNTEyMDMwMDI0WhcNMjUwNTEzMDMwMDI0WjAzMTEwLwYDVQQD EygyY2JkYTYwZTI4MjM4YTcxZjZmNjZlMTI0NjkyMGNmNDU4MTE1ZjE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5AhM7Kwij31bTUWojKeGfVoH+12 4UoS/3NzZsPsy/3jAybGBPiB+NDW3IKfXZtXhS3kVAHicBsFwQ3Fs8jspP7dF8z2 6tG9ljUNCBePDrPr3vFr0vvxXedqU7DzMvVMC+dvVxa8dOgQAip1t3vwmuZzLBRs 5TX3LdPreHWUEze+BtuCFhHzeK6ac7Y0OYslUj7vlmXpbDgqH9kAJAThBZQ26+Cu hyCodLkekMPaRM7lD7QENLX659xEDdvFTOZucWDm/94wgZnkf0stMSVobtMGm05T g/ZNc8hknmwS8bCBD5XLEZOzLTn8iTKW1864wpvRcpjhC9OiFvspAKJeZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCy9pg4oI4px9vZuEkaSDPRYEV8UMB8GA1UdIwQY MBaAFHRjlcEmcq2ViSG2K53JsrzYpoqfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEdPVndTWnlyWldKSWJZcm5jbXl2TmltaXA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi85ZTIzNTEtOGRkMC00YjcwLWE1ZmMt ZmI3NzRhYmRmYWMyLzEvZEdPVndTWnlyWldKSWJZcm5jbXl2TmltaXA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi85ZTIzNTEtOGRkMC00YjcwLWE1ZmMtZmI3NzRhYmRmYWMy LzEvZEdPVndTWnlyWldKSWJZcm5jbXl2TmltaXA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV7Ws5h5G x5FlvfwCqmZ1ODOdYIDjEsTodmXmvaT0wMMOwCvEzfXiVgbgVwZL1l59x7nsqCL9 NqK59XU+KXJFBLHmmMvkJnP9beYqU7T7qyyYDGnvH7xYqCaN6IP69/PQj7C+Fk7Y nx3gbw/nyU+jxhJ4w/EH+cJUW7EDiOcTI19LLdvJBhuK1cgKYvkLHnA4uUyqnu3e tUjDsj5RlvWbnNKUjKcdLIU9QvezGZoV8phg8td5YZJ6BPqQ+J8IPeQgQOcN2Dj8 9ervljmiiD6O/sDykUWNhUzctxMNgINaUfJhedxrdMBPNn8CeJ/n53s1O+VKYLEJ h0+/irAcZTuwBw== -----END CERTIFICATE-----Generated at Mon May 12 07:31:35 2025 by rpki-client