$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.mft File: EbabWdGfKYfknxhS1guxd3-AowE.mft (raw, json) Hash identifier: 9IO4DiHib2EGRoau3DAyNO+0YsSR5OVLhF6OF/m2s4E= Subject key identifier: 13:81:35:34:41:25:CD:B2:6F:F1:C2:E1:09:50:44:B8:B4:6E:EC:7C Authority key identifier: 11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01 Certificate issuer: /CN=11b69b59d19f2987e49f1852d60bb1777f80a301 Certificate serial: 0196C0B852FF8DD021D039552020E7D9ADF3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.mft Manifest number: 15FA Signing time: Sun 11 May 2025 19:00:27 +0000 Manifest this update: Sun 11 May 2025 19:00:27 +0000 Manifest next update: Mon 12 May 2025 19:00:27 +0000 Files and hashes: 1: 00MgoZoYQtZGwQrOezTGMFJxBeQ.roa (hash: yEhoJZzpLJl/SN7s0GnAIUxYjWxoW/1J4yfFxR29F7o=) 2: 1--WDAhFOBW7ncSoM8jfxu_x_aPA.roa (hash: 5hRd7iHG9OvxZkn9587WnUFx5p+RxhyhidWTwSlJ2mE=) 3: 9de0VEdjbWo-tUqmz8gijTg6IaE.roa (hash: f2qUpX3qXVm+Q2CbUSag5dNIyDCVc83yVIgmgfZphx0=) 4: EbabWdGfKYfknxhS1guxd3-AowE.crl (hash: ZHPMDUC+a6MWBX6TrgjWJoiEoYlu8sbKEWpV3MKgDTs=) 5: EiEIQCc_qMer4lOJnSDqRcuD1Lc.roa (hash: ijZabFruWckgrMPN8StTP6ptBpbQ5XdRowFLqAhy8V0=) 6: JIWcXiw5e-DMCtEQjl82_rCum6M.roa (hash: aum4OzbjHbjDqqRbPTuypoabo0V5INMyV5rJ/7+2kJk=) 7: OH_TFxB8Adh_MWI_JWnXBMovO0U.roa (hash: aa9DOmgpUfY05KEdouKC2X7Phd/w+IPtGM5tRzHgBHw=) 8: hh5gFEvny7iJIP363sERSCjh-rs.roa (hash: nHmDgAhsTOhkwPJGUNXsbu1PrrGNS0xivvoOwxQO9Og=) 9: jt8ykfPzdexzdtH3V3_LwQTLl18.roa (hash: yvUWrIP+ec/TCtulqNzO9gsSQMp29bXUtTWqzkaAto0=) 10: mpiw9JhQM7LKtUVCRbcJs0dukrY.roa (hash: 6u6djeisAdzHv9sPzUqJK6BMNgw7cN5OEZXaoLYZmKY=) 11: pJ5WVqz27sc4GN_2TdiId1RFRS8.roa (hash: G9CNm7jTF73M1GlxFCdHMqAq+/05g/o+kvhEPuf5Cdo=) 12: pgY7a6E6tgPcuDGaJ9In9AClvQU.roa (hash: LI5gLLz864YQ5E9OGWp9/KKXRdmX9ZlNd6zL73F9k74=) 13: s6245BSpSzcWZPXhhKwCZMQScpw.roa (hash: 9vqk2P5MRoYcq1ffMwRtQj5UZNW8ihP+AaaGzHPRYCA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.crl rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.mft rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 May 2025 16:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:c0:b8:52:ff:8d:d0:21:d0:39:55:20:20:e7:d9:ad:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11b69b59d19f2987e49f1852d60bb1777f80a301 Validity Not Before: May 11 19:00:27 2025 GMT Not After : May 12 19:00:27 2025 GMT Subject: CN=138135344125cdb26ff1c2e1095044b8b46eec7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:cd:81:4d:cb:35:1f:77:82:04:f1:06:c7:66: 85:23:ee:86:cc:c3:56:22:73:82:fb:6c:72:88:37: 24:d0:a1:e0:01:c8:a1:0c:56:a2:f5:67:78:35:6e: da:5e:b6:db:90:1d:59:a4:cf:60:a9:74:86:63:72: 24:06:3e:76:34:77:67:6e:ba:9c:bc:dc:6a:e6:35: 20:65:d0:67:e4:89:14:b7:27:5a:e5:61:36:96:76: 95:cd:2c:2b:5f:de:80:34:6f:b7:ab:76:b2:aa:7d: 52:36:55:f6:f3:19:a3:88:07:aa:f5:c0:6f:59:03: ca:0e:51:21:2b:dd:db:36:b1:e7:2b:c8:0a:d8:83: b2:ec:38:e1:e8:59:d5:9b:a5:9c:2d:79:65:22:ae: 10:ed:c1:84:1e:cf:df:35:46:4e:c7:e4:56:88:87: a4:f2:72:2d:36:ee:ec:8a:a1:54:7d:12:ae:30:00: 61:5a:e0:1f:c4:d2:2f:b4:c2:4f:18:a4:2f:06:d8: 0a:c6:ed:a3:77:e8:3a:80:53:c3:60:31:4d:51:cd: 3a:8a:37:2f:1b:41:02:bb:95:72:a9:e6:49:24:d6: 3b:fc:35:d9:73:4e:32:36:c9:4c:4a:ac:1d:ef:0f: e0:ee:33:be:7a:25:b7:ae:98:1b:44:69:8c:9a:51: c3:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:81:35:34:41:25:CD:B2:6F:F1:C2:E1:09:50:44:B8:B4:6E:EC:7C X509v3 Authority Key Identifier: keyid:11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:ec:ff:62:1a:fe:7e:73:a2:b9:fc:a4:fe:12:cd:b2:a6:0d: e6:ff:25:6f:72:e2:40:33:6e:52:15:f2:c3:26:0a:c4:aa:04: 97:28:a7:54:f0:b9:0e:54:05:35:62:c9:85:b1:12:b6:cc:59: 3f:21:5d:c2:74:b5:7f:65:4a:16:a4:05:82:76:87:96:61:74: c2:56:1d:ee:41:8b:93:ec:f6:de:b1:fb:7d:98:b0:4c:6b:6e: 2e:57:67:73:46:cf:11:7e:c8:97:a9:48:ea:82:d6:ab:d9:18: 1e:dc:de:11:d1:be:06:06:16:b9:95:8d:55:05:a6:a6:04:82: 09:da:77:51:b9:4d:a8:48:73:65:5d:75:ce:17:e4:d3:a2:91: a6:59:50:cb:97:e5:c1:79:c3:48:10:c2:04:25:f1:aa:ea:5b: 6d:5b:e0:00:26:c9:64:1e:ae:cc:b9:4f:aa:cb:2c:5f:33:fc: f0:b9:df:5a:ef:16:77:ca:f8:46:29:2d:20:88:d3:84:0d:a2: ae:b1:03:09:d0:ad:fb:6e:16:9a:49:f4:f2:ac:a7:70:4e:e7: b2:cb:78:a4:5e:f1:97:39:83:51:cb:2c:1e:7c:4f:78:d7:56: 65:f5:f7:f4:d4:1d:72:fd:9e:9f:f5:2e:bf:a1:7d:48:f5:19: 99:37:04:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZbAuFL/jdAh0DlVICDn2a3zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExYjY5YjU5ZDE5ZjI5ODdlNDlmMTg1MmQ2MGJiMTc3N2Y4 MGEzMDEwHhcNMjUwNTExMTkwMDI3WhcNMjUwNTEyMTkwMDI3WjAzMTEwLwYDVQQD EygxMzgxMzUzNDQxMjVjZGIyNmZmMWMyZTEwOTUwNDRiOGI0NmVlYzdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvc2BTcs1H3eCBPEGx2aFI+6GzMNW InOC+2xyiDck0KHgAcihDFai9Wd4NW7aXrbbkB1ZpM9gqXSGY3IkBj52NHdnbrqc vNxq5jUgZdBn5IkUtyda5WE2lnaVzSwrX96ANG+3q3ayqn1SNlX28xmjiAeq9cBv WQPKDlEhK93bNrHnK8gK2IOy7Djh6FnVm6WcLXllIq4Q7cGEHs/fNUZOx+RWiIek 8nItNu7siqFUfRKuMABhWuAfxNIvtMJPGKQvBtgKxu2jd+g6gFPDYDFNUc06ijcv G0ECu5VyqeZJJNY7/DXZc04yNslMSqwd7w/g7jO+eiW3rpgbRGmMmlHD1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBOBNTRBJc2yb/HC4QlQRLi0bux8MB8GA1UdIwQY MBaAFBG2m1nRnymH5J8YUtYLsXd/gKMBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWJhYldkR2ZLWWZrbnhoUzFndXhkMy1Bb3dFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC81ZWRmN2EtYWI5YS00NWU3LWE2MTIt ZDE2OWMwODhiNDEyLzEvRWJhYldkR2ZLWWZrbnhoUzFndXhkMy1Bb3dFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC81ZWRmN2EtYWI5YS00NWU3LWE2MTItZDE2OWMwODhiNDEy LzEvRWJhYldkR2ZLWWZrbnhoUzFndXhkMy1Bb3dFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASuz/Yhr+ fnOiufyk/hLNsqYN5v8lb3LiQDNuUhXywyYKxKoElyinVPC5DlQFNWLJhbEStsxZ PyFdwnS1f2VKFqQFgnaHlmF0wlYd7kGLk+z23rH7fZiwTGtuLldnc0bPEX7Il6lI 6oLWq9kYHtzeEdG+BgYWuZWNVQWmpgSCCdp3UblNqEhzZV11zhfk06KRpllQy5fl wXnDSBDCBCXxqupbbVvgACbJZB6uzLlPqsssXzP88LnfWu8Wd8r4RiktIIjThA2i rrEDCdCt+24Wmkn08qyncE7nsst4pF7xlzmDUcssHnxPeNdWZfX39NQdcv2en/Uu v6F9SPUZmTcEFg== -----END CERTIFICATE-----Generated at Sun May 11 23:01:40 2025 by rpki-client