$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.mft File: fKZDuzmcbYetxMfLpdK3L70A0EY.mft (raw, json) Hash identifier: y7CrEhDH3wwQWEDEtDuP9BYAyna9O/0J2PKTrbEssr8= Subject key identifier: 25:FA:CB:8D:C6:07:92:1E:32:B4:70:30:72:81:86:56:11:7D:FF:FE Authority key identifier: 7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46 Certificate issuer: /CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046 Certificate serial: 01969D50EBFFBD2D9E1CBA2B5DDA64BBE67C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.mft Manifest number: 0EF4 Signing time: Sun 04 May 2025 22:00:48 +0000 Manifest this update: Sun 04 May 2025 22:00:48 +0000 Manifest next update: Mon 05 May 2025 22:00:48 +0000 Files and hashes: 1: 70vKh_nRIlsGDeCCWIWnJDoMQow.roa (hash: 9/IlxykCR8D1ob5yM4nNThKcpH35vFsHMDpOK44EfG8=) 2: AuElns1VObrRDqT4NIwMY9EmyGk.roa (hash: 29nayPFK3cRbhQvKtMw0ZoiHbzL8FhraQfBFRLxRMzQ=) 3: E_fV2_-LSoXs8TNNVud176N90DM.roa (hash: pEduf01l+IkFgVqqHIULEF/rXEiD2nJYC04Z+8oaaWE=) 4: GV7-ktflUr2Jl9BuG4W6yIOWTC0.roa (hash: BfdX5BDfo9Z5mEIhjqpFA0KNYyZ0ceyNKC3cFcLwZOU=) 5: KZA4jnri-aL9nYHoTsoeJH-R8gI.roa (hash: ioRykNk5tHi0fFciV5Ce58v9OpltJE9aSwwdhuLkNB8=) 6: L8uCW7ekm32Krnf3ks9jQXZfbb8.roa (hash: SiCaRGvu/k2o4TpiftW9aHSETXjCe5Up3+wi7DpgEqg=) 7: NQWyj3dxX6rPs0y0BfF0ZFJuU6k.roa (hash: YbW4L3XomgDTTG2VVXMsP5shedyMXIrMiyf4jWJ1fEY=) 8: UhVjPeN5rpuwAHSinKlE_8JwegI.roa (hash: VDbFVWwq0zh0SzqRtSX72R3GUx9GyGy9DQZPLPYdjM8=) 9: ZZmhbXaiwnlvoTzrIPKT393zeQY.roa (hash: h/DL+p5qUcE0X2Aplnohyf125A4LIxDH/WhCa+Rudu4=) 10: bb5iI1WPbNppyqoKFGHl592smj4.roa (hash: dMEHaektgDSjptnb5y/mJH+mUC58u3E+XvJ+oyJwb/c=) 11: e6N6L0TksO19CdNdYB-tsG35AfY.roa (hash: 5Eq8sf7loiQQlTHE2kyCxUeEW9AcUU8hd5bLQ2BYbvg=) 12: fKZDuzmcbYetxMfLpdK3L70A0EY.crl (hash: cfMi4ECZsk7CcvOh/hL8155izWY+8xPtbOroWsrvQks=) 13: kyyUo6K8PDgAQyp4iZti_acVmX0.roa (hash: P5dyK+BgcQrXfvVfNCSYxNqLjNECInMEbMjQNhR6C5A=) 14: m8_r0VZgeMf9CD7ftR8A5KG9850.roa (hash: rBBdrLVM7ya1VIISU7w74srUfPPOKneCLGZB6/hqiV0=) 15: qhiL7bExacXUsCTM7Vb9ImRHg8c.roa (hash: S3bNWosVJfDx7XwIB4xM9qZIrywdYlw1VXpMCxOUW7Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.mft rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 May 2025 22:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:9d:50:eb:ff:bd:2d:9e:1c:ba:2b:5d:da:64:bb:e6:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046 Validity Not Before: May 4 22:00:48 2025 GMT Not After : May 5 22:00:48 2025 GMT Subject: CN=25facb8dc607921e32b4703072818656117dfffe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:fd:b2:bf:f5:a4:c1:79:9e:a1:35:91:1c:73: 38:88:5d:81:e4:73:81:1d:ec:06:11:bf:aa:80:33: b5:78:7a:83:8e:a4:93:c8:29:20:41:13:40:31:1e: c4:f8:5a:28:0d:07:dd:8a:80:26:37:0a:aa:e5:78: c5:37:8c:18:6f:b3:76:5d:30:24:24:7c:9a:27:3a: fd:8e:69:1e:74:13:05:d5:98:eb:23:ab:f9:10:75: ad:19:71:cb:9d:6b:4d:38:9b:6f:ec:16:e6:a5:49: ee:a0:38:29:ad:2b:c9:be:8a:07:ee:eb:28:d6:90: 52:b9:07:a4:a6:ae:7c:30:55:c3:65:d1:0a:dc:e4: b4:fa:a4:63:de:97:80:34:2b:ee:d7:56:a2:8c:b9: 2d:1b:2f:25:88:8d:b8:bf:58:9d:75:1f:6b:57:79: e3:d2:d9:26:7e:73:5d:98:45:93:b0:db:39:89:7d: cc:ae:76:74:0a:bc:68:73:3c:dc:2d:95:ff:65:9d: 47:91:b3:fb:ab:64:63:61:c6:01:96:93:61:27:b2: 4c:bb:69:c9:fe:e7:92:79:12:a1:00:f8:57:ea:36: 84:6a:a8:8a:9e:a9:0d:52:8a:09:46:9b:6f:ae:67: df:7c:8a:2a:ed:55:76:ad:a5:8d:98:64:82:5d:9e: 35:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:FA:CB:8D:C6:07:92:1E:32:B4:70:30:72:81:86:56:11:7D:FF:FE X509v3 Authority Key Identifier: keyid:7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:93:f2:b1:21:df:50:cd:ca:23:03:e7:a3:d6:94:b7:8d:28: 3e:e0:81:63:53:65:28:ae:9e:dd:e2:38:af:f1:3c:d0:f1:78: 6a:59:b4:08:c3:eb:bf:c7:2a:b6:83:02:24:7c:a5:d2:3e:68: 49:3c:50:d1:ff:12:28:d3:ca:e8:9f:81:28:78:82:5e:97:6c: 44:1c:98:4b:82:16:7b:c6:67:94:7c:61:f1:fa:41:68:ed:59: 74:93:45:23:99:9f:7a:97:3d:32:c7:56:42:dd:60:fe:f9:64: 7c:c1:67:29:3d:5e:94:b3:63:23:d4:ba:42:f5:7d:48:6a:e5: 01:eb:f2:ff:4c:6e:04:cc:0a:9f:7d:70:10:06:68:70:d6:14: 3c:8e:42:5e:27:31:c8:10:d6:ba:d1:f7:57:ae:ae:15:71:f5: 6b:24:0c:91:4d:14:1b:60:77:27:ca:9e:f4:92:45:df:9f:ed: 6f:0b:0d:36:48:f0:36:30:60:5e:36:a4:44:03:31:86:1f:27: 60:bd:e4:a5:59:6a:88:20:01:24:a7:5e:5a:3c:5c:b3:7f:f3: 35:cd:35:7f:1a:d7:41:25:d6:3e:cd:87:6f:27:1e:82:d6:0f: 0a:be:da:8a:35:bc:15:ab:5c:bf:62:d5:6d:cd:11:89:35:a4: 6e:ae:80:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZadUOv/vS2eHLorXdpku+Z8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjYTY0M2JiMzk5YzZkODdhZGM0YzdjYmE1ZDJiNzJmYmQw MGQwNDYwHhcNMjUwNTA0MjIwMDQ4WhcNMjUwNTA1MjIwMDQ4WjAzMTEwLwYDVQQD EygyNWZhY2I4ZGM2MDc5MjFlMzJiNDcwMzA3MjgxODY1NjExN2RmZmZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/2yv/WkwXmeoTWRHHM4iF2B5HOB HewGEb+qgDO1eHqDjqSTyCkgQRNAMR7E+FooDQfdioAmNwqq5XjFN4wYb7N2XTAk JHyaJzr9jmkedBMF1ZjrI6v5EHWtGXHLnWtNOJtv7BbmpUnuoDgprSvJvooH7uso 1pBSuQekpq58MFXDZdEK3OS0+qRj3peANCvu11aijLktGy8liI24v1iddR9rV3nj 0tkmfnNdmEWTsNs5iX3MrnZ0CrxoczzcLZX/ZZ1HkbP7q2RjYcYBlpNhJ7JMu2nJ /ueSeRKhAPhX6jaEaqiKnqkNUooJRptvrmfffIoq7VV2raWNmGSCXZ41rQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCX6y43GB5IeMrRwMHKBhlYRff/+MB8GA1UdIwQY MBaAFHymQ7s5nG2HrcTHy6XSty+9ANBGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZktaRHV6bWNiWWV0eE1mTHBkSzNMNzBBMEVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9jMDMwMWQtNTgwMS00YWM2LWI1MDMt NDRlYTY0NzIxYzllLzEvZktaRHV6bWNiWWV0eE1mTHBkSzNMNzBBMEVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi9jMDMwMWQtNTgwMS00YWM2LWI1MDMtNDRlYTY0NzIxYzll LzEvZktaRHV6bWNiWWV0eE1mTHBkSzNMNzBBMEVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL5PysSHf UM3KIwPno9aUt40oPuCBY1NlKK6e3eI4r/E80PF4alm0CMPrv8cqtoMCJHyl0j5o STxQ0f8SKNPK6J+BKHiCXpdsRByYS4IWe8ZnlHxh8fpBaO1ZdJNFI5mfepc9MsdW Qt1g/vlkfMFnKT1elLNjI9S6QvV9SGrlAevy/0xuBMwKn31wEAZocNYUPI5CXicx yBDWutH3V66uFXH1ayQMkU0UG2B3J8qe9JJF35/tbwsNNkjwNjBgXjakRAMxhh8n YL3kpVlqiCABJKdeWjxcs3/zNc01fxrXQSXWPs2HbycegtYPCr7aijW8Fatcv2LV bc0RiTWkbq6A/g== -----END CERTIFICATE-----Generated at Mon May 5 04:52:40 2025 by rpki-client