$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.mft File: bOl89NjQvBezrx1ixNcUiGYb0hI.mft (raw, json) Hash identifier: AoqSN2KeYu55n1gTRjlWx8x6MXhSpIbfi38AXV+tjPE= Subject key identifier: EC:84:E7:D1:BE:1C:C5:92:6B:E8:B5:53:9B:19:21:25:07:3D:15:92 Authority key identifier: 6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12 Certificate issuer: /CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212 Certificate serial: 0196C45E692798A3562BCB3E68630D96B77E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.mft Manifest number: 1541 Signing time: Mon 12 May 2025 12:00:43 +0000 Manifest this update: Mon 12 May 2025 12:00:43 +0000 Manifest next update: Tue 13 May 2025 12:00:43 +0000 Files and hashes: 1: Af8LoP7Lc3Ri1EjEl2aPSimN8N8.roa (hash: K3jq+ZPDX3ZWFw5k3Zz+FhB98xNgrxje9TzL4q7xQ84=) 2: F2A4Y0MrgEztwlWitJZvMyHSYcU.roa (hash: w50mpPDFrcclMXuIaVxZ4+xtSUk5AU18fPWu5EoX+LA=) 3: HDwNTyOMXjdcFIbI5Dg8ZGceIPc.roa (hash: xGqkyX+qZQ75xb5Nb+DtuxrBcbMbXYywOv/jqNzFE9U=) 4: J1CKtsXx9r_LHHrlYsJGTJF509U.roa (hash: Wy6xl+FAMDx5u89yFxnteVYqnAsEeBLLKMZFfJdUW6I=) 5: Uh2lETEq8E5x-jAu-VnjQrM5VGg.roa (hash: SoBuut5hx6X/4eMmfxkxmJvGDUdRqdsnwXxbmDCgQsE=) 6: V9Tcb7av_dVNBRfc9o8N4UA1rso.roa (hash: grBhVeV/JDROWekOKeK0iGvKNav3Jg9ZyJda99GGyG4=) 7: Vv7xuEIJNPkNiS2jgKXFiJ0hO5o.roa (hash: 0tBte5YJPRScKJDnL/xskQjq4j0+cjIuEo3Z5S4On/k=) 8: YY5vnq-WY3ttKAPBwWUwZDNoZ94.roa (hash: otf25hemgRYV3JPKjRYvJ8q5HrlB5I1ctES0TPSG1ck=) 9: _sq0c5GTAFHDkK0kB1xS-FJEkxE.roa (hash: 0/aQ7T6vcLRIStkXpDsfCFlQb8OkLcG1wf2/+Q//xZk=) 10: bOl89NjQvBezrx1ixNcUiGYb0hI.crl (hash: maDPArQGlXIukX6dpq3OEHj8JqAf2ZVN9hUOB1zazlw=) 11: bgndW0CmBQuiHxQFDGV1p4kfQ0w.roa (hash: 69wNM6Nj33ysdv0n+TRiRf/aZRUnSe2bA4XmQXvr6Ug=) 12: nRXz0JWuVzTuqgJJowbVl480fPU.roa (hash: 8yilskVPxe2I/+785iQCSlJBQxLK7FQ+9fHJRaIbBIk=) 13: ok2coLlZfCNf012-KQnTYpk7lZE.roa (hash: jPQ1+YObpchvAlB5pc4INo3tzPPIYQQgACezxT56CVQ=) 14: s3CD24AurNDhU5l0KzX89OIgsIY.roa (hash: j74AELSwt2VeN/kZd/dKyAyFPFjNPOflv3KMrplCA7M=) 15: whbNPX7xpImhIktrpipKoQzAFZo.roa (hash: Jtvnk0ncEqCQ/ZQ9F0sCk3O4UoG6D0dlD2s9B3IWjbk=) 16: y2chyLi0MiNw5kPgCGuG_lAJm6E.roa (hash: aBY4sS6r8TuI74TUuwhLmDR0B3e0KyzhgW6eBiCSGXY=) 17: yCCs4shbMfXFkRbB-dbVm3aK1dE.roa (hash: ERGKfWwqWpDoNIV4hNRq6bDPGoH2AztZvrPKQ4MnRxU=) 18: yqrbohxedJqZYRfOM_ZbeFgbUDk.roa (hash: 5D+jOOYzSjHZwRxIJ5GcJlLwrz/EOLrzaFXp3+Dosvg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.mft rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 May 2025 12:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:c4:5e:69:27:98:a3:56:2b:cb:3e:68:63:0d:96:b7:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212 Validity Not Before: May 12 12:00:43 2025 GMT Not After : May 13 12:00:43 2025 GMT Subject: CN=ec84e7d1be1cc5926be8b5539b192125073d1592 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:00:87:bb:90:38:83:3d:78:c5:b5:ad:59:55: 21:06:d9:7f:11:96:86:12:16:86:6b:e3:48:a5:f7: b9:ed:f7:da:06:41:19:40:8f:fc:25:52:dd:b3:ad: 97:47:a9:54:35:c5:fd:9a:e5:d2:1e:17:7d:9d:a3: b4:1a:78:77:d5:b8:ca:33:2b:26:a6:6f:a4:6e:8a: 52:96:3a:e3:df:dc:08:09:03:9f:9b:37:7b:8f:15: 6c:70:b5:c7:03:ae:25:b1:aa:85:e4:27:53:ce:8d: 20:71:97:1c:6f:f5:5e:cd:46:8f:b1:c9:06:6a:14: 33:1a:7e:4b:3e:93:0e:e9:66:41:7f:16:ee:27:68: 2f:ab:92:59:df:f2:a9:93:6d:ed:c1:df:1e:fe:bb: f8:ac:cd:32:b3:9f:f8:55:4d:65:00:9a:cc:0f:d4: 47:d4:8d:c1:41:bf:53:fd:67:4c:08:40:c8:9d:b9: a9:b1:40:5e:33:ed:a6:42:81:2b:1f:36:d5:69:35: 67:68:b2:9e:30:0e:ad:0a:51:a7:7b:06:0f:d7:f4: 94:a3:27:fa:8d:61:b4:3a:16:68:4a:22:d2:70:5d: 17:2c:17:10:a0:59:a6:46:2f:97:ac:05:67:80:5b: 82:08:72:e4:90:e8:bc:bb:2e:5b:2c:69:90:fa:01: 7b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:84:E7:D1:BE:1C:C5:92:6B:E8:B5:53:9B:19:21:25:07:3D:15:92 X509v3 Authority Key Identifier: keyid:6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:55:62:e1:f0:ab:5f:3c:16:c0:f3:4f:53:93:d5:03:ad:2c: 10:05:ae:46:a0:89:ee:8e:30:23:70:26:15:40:75:62:e7:23: ae:50:a6:5a:36:83:da:c0:ad:78:78:21:09:1b:3f:b0:91:a2: 8a:f3:0c:29:1c:b0:a7:4a:88:a5:70:d3:83:29:df:ea:69:5e: 0c:b4:e7:cb:eb:ec:01:4e:68:04:6b:33:81:a7:a7:3d:8e:6d: 6c:6c:cc:03:b9:fc:d8:4e:89:0c:27:2e:0f:c5:7e:5e:a0:e5: 82:be:a8:91:db:88:01:32:a3:33:a6:d5:4f:5a:15:f3:07:96: 33:69:15:b1:54:09:49:9e:49:11:1b:3a:b3:c9:35:49:b1:1f: bf:48:62:ee:83:7b:0b:df:df:2a:70:6f:67:f5:0b:e3:54:79: 90:34:c3:86:4e:d8:ce:7c:06:76:a1:dd:65:34:e3:5c:bc:77: 2c:d2:8e:2e:1f:25:f5:95:9c:83:32:2f:2f:72:cc:e5:ca:57: 44:c7:9e:02:a4:4c:e1:d0:8a:30:a9:1d:9a:00:41:65:66:18: eb:3d:e5:40:c9:90:3d:7c:56:c6:02:f7:30:77:18:5a:54:6a: b2:22:83:29:ab:b4:3f:f2:56:10:0e:48:5e:0b:ba:58:e7:e1: 67:0d:ac:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZbEXmknmKNWK8s+aGMNlrd+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjZTk3Y2Y0ZDhkMGJjMTdiM2FmMWQ2MmM0ZDcxNDg4NjYx YmQyMTIwHhcNMjUwNTEyMTIwMDQzWhcNMjUwNTEzMTIwMDQzWjAzMTEwLwYDVQQD EyhlYzg0ZTdkMWJlMWNjNTkyNmJlOGI1NTM5YjE5MjEyNTA3M2QxNTkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuACHu5A4gz14xbWtWVUhBtl/EZaG EhaGa+NIpfe57ffaBkEZQI/8JVLds62XR6lUNcX9muXSHhd9naO0Gnh31bjKMysm pm+kbopSljrj39wICQOfmzd7jxVscLXHA64lsaqF5CdTzo0gcZccb/VezUaPsckG ahQzGn5LPpMO6WZBfxbuJ2gvq5JZ3/Kpk23twd8e/rv4rM0ys5/4VU1lAJrMD9RH 1I3BQb9T/WdMCEDInbmpsUBeM+2mQoErHzbVaTVnaLKeMA6tClGnewYP1/SUoyf6 jWG0OhZoSiLScF0XLBcQoFmmRi+XrAVngFuCCHLkkOi8uy5bLGmQ+gF7FwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOyE59G+HMWSa+i1U5sZISUHPRWSMB8GA1UdIwQY MBaAFGzpfPTY0LwXs68dYsTXFIhmG9ISMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYk9sODlOalF2QmV6cngxaXhOY1VpR1liMGhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9lNGNjYjEtY2EyNS00MDk5LTgyNzMt Mzk5M2FhMzI0ZTFmLzEvYk9sODlOalF2QmV6cngxaXhOY1VpR1liMGhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS9lNGNjYjEtY2EyNS00MDk5LTgyNzMtMzk5M2FhMzI0ZTFm LzEvYk9sODlOalF2QmV6cngxaXhOY1VpR1liMGhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeVVi4fCr XzwWwPNPU5PVA60sEAWuRqCJ7o4wI3AmFUB1YucjrlCmWjaD2sCteHghCRs/sJGi ivMMKRywp0qIpXDTgynf6mleDLTny+vsAU5oBGszgaenPY5tbGzMA7n82E6JDCcu D8V+XqDlgr6okduIATKjM6bVT1oV8weWM2kVsVQJSZ5JERs6s8k1SbEfv0hi7oN7 C9/fKnBvZ/UL41R5kDTDhk7YznwGdqHdZTTjXLx3LNKOLh8l9ZWcgzIvL3LM5cpX RMeeAqRM4dCKMKkdmgBBZWYY6z3lQMmQPXxWxgL3MHcYWlRqsiKDKau0P/JWEA5I Xgu6WOfhZw2sgw== -----END CERTIFICATE-----Generated at Mon May 12 19:55:40 2025 by rpki-client