$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft File: MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft (raw, json) Hash identifier: 41HIL9D76NhrsbWkxjb9O0KcvS4D/nX/L6VWR9zAnyo= Subject key identifier: 84:25:BC:8A:59:79:1E:03:6B:0A:EF:06:FB:BD:12:02:5D:6B:F8:20 Authority key identifier: 32:50:8F:B7:81:CA:6D:BD:82:21:F2:C2:F9:54:A3:A7:44:6B:2B:42 Certificate issuer: /CN=32508fb781ca6dbd8221f2c2f954a3a7446b2b42 Certificate serial: 0196D9D3D3BD35873376135A5E83AC8DF96C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft Manifest number: 154F Signing time: Fri 16 May 2025 16:01:00 +0000 Manifest this update: Fri 16 May 2025 16:01:00 +0000 Manifest next update: Sat 17 May 2025 16:01:00 +0000 Files and hashes: 1: 7sUlQFo2i2sGz_Vst269K_D-c-U.roa (hash: awgZwYT2+l2C5RaRZHXtrmJNbZfubWqB+2+301bBQBU=) 2: MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl (hash: MyzKPzIkiXkCXSvXqsVZ/4vzeq2dc/egcQZFHpkD+zc=) 3: N6977Tm3BxtAWxQMZFqlxhSXVqI.roa (hash: avNpgfUO6xrr8rilL4FRK/J7Wxu+LI2r4IfOPlXIeJI=) 4: OqobHIZLFLbZk0OR9E-PF1zk1Lw.roa (hash: Op02L+M19/z5j79qbmcRNqPT6icOYzM0VJzQXj5mmv8=) 5: TEsKuOI8Wr3xLM61BToTHvaxLG0.roa (hash: rGoXl2FfQwurIyUgTu1Dn9mUe7pNqUYv/AJnXAkg28U=) 6: i7jWP6E6hcB7Kvbk4mThF2buTs8.roa (hash: OqH0B+K5eYlDv/BpS97jLxNiwQggexBzkbjaho23mP4=) 7: nqc-9YDKd79YsE90D6bPl2BpKgE.roa (hash: VLqSIZaMWc7sFSdSIdfn5EqqZNs2ezp2l6diOyM4sNY=) 8: rgeIy49dLmNJww9sp8JRWKXD-n8.roa (hash: L8MUX4zAy84NplfwfzJB7WI9HcrmosjCL1UuxDQCssQ=) 9: xZ2vcM-Bgt-peFWCq0zItN8_N0c.roa (hash: IJSnWW805B1m7rlymmTJG2w628sB6dalr9ieL5l/bMk=) 10: zZigjvCd6NcudatYLyfpsyOboFA.roa (hash: vGtEfaZy/GpSD6Vra1IvWRrERF5jpy55majvnW9xdMY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 17 May 2025 16:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:d9:d3:d3:bd:35:87:33:76:13:5a:5e:83:ac:8d:f9:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32508fb781ca6dbd8221f2c2f954a3a7446b2b42 Validity Not Before: May 16 16:01:00 2025 GMT Not After : May 17 16:01:00 2025 GMT Subject: CN=8425bc8a59791e036b0aef06fbbd12025d6bf820 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:d2:88:83:9a:5f:ce:0a:b2:43:ed:ce:f1:83: 65:3b:8c:d6:03:a4:40:08:07:15:6e:53:ff:44:6e: ff:94:6d:63:97:45:60:9c:15:e9:75:ab:31:b8:a7: 3c:b3:ea:35:82:11:ae:f3:68:22:b5:a0:de:1b:bb: f7:77:97:ea:f0:c5:16:6a:a5:a6:6c:e8:2e:4f:19: ef:41:1a:30:ca:8b:63:83:a1:68:0a:98:9e:42:44: b0:8a:21:c6:35:ef:40:d8:e8:4c:41:05:f5:9a:3a: ab:3e:fd:3a:a3:3b:58:d3:df:19:e9:12:68:49:dc: d3:b0:07:a1:89:13:12:d4:45:59:77:90:3b:00:4e: 10:ef:5d:bd:65:cb:15:f5:aa:44:ed:52:30:5d:4e: 7a:9d:30:4c:ff:44:80:1e:23:f4:02:54:0d:f9:f6: 87:e5:36:ed:ba:59:de:80:1d:59:a5:71:87:15:7c: 2a:db:25:31:55:43:7f:17:39:0e:73:1b:86:05:42: bd:ba:4f:c2:57:23:73:41:b5:52:94:6b:1e:69:53: 33:ea:26:ff:6c:19:e6:06:70:f5:ad:9f:a8:42:25: 75:9c:20:ec:53:6a:a9:29:cd:f8:3a:81:e6:cf:e4: e9:8d:70:c0:45:99:e4:76:a2:bc:9e:f6:b1:e5:94: 0c:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:25:BC:8A:59:79:1E:03:6B:0A:EF:06:FB:BD:12:02:5D:6B:F8:20 X509v3 Authority Key Identifier: keyid:32:50:8F:B7:81:CA:6D:BD:82:21:F2:C2:F9:54:A3:A7:44:6B:2B:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:bf:bd:b2:44:06:e1:a1:8c:1c:39:27:8a:f7:ba:fa:dd:28: 25:90:27:16:6e:4c:87:52:8c:3f:05:fc:ee:88:9d:73:96:2d: 42:c2:2b:8a:39:5b:83:5c:0e:d3:06:55:cc:71:a2:34:61:15: be:d1:55:1c:7c:7c:6c:ab:f2:90:fb:a8:5e:b0:2c:93:be:e6: d5:70:3a:df:28:e2:54:b8:35:a0:67:7f:ce:3f:16:82:b5:ca: cf:e9:cd:8b:b5:de:3d:87:d7:da:d3:db:94:a3:1d:ac:8d:07: e2:95:6f:7f:e3:dd:60:43:33:0c:15:f4:51:ef:e1:9b:bc:ed: 55:9c:11:5e:54:43:01:f6:b6:89:69:0e:1b:34:62:bf:25:29: 5f:28:00:95:da:7c:6c:9e:1b:75:1b:86:6e:2a:5a:3b:cc:fa: 52:7d:65:d8:c5:18:ad:80:b9:a3:b5:46:3a:6e:92:99:3b:b4: 46:05:6d:1d:af:9f:fe:0b:a6:15:e6:a6:06:90:d1:a8:bf:b8: 72:56:34:85:20:24:ef:73:8e:3f:47:e5:50:15:8a:26:4f:36: 9d:7f:18:dd:e2:22:32:69:2a:27:3c:04:04:01:57:38:bf:f3: 1f:80:43:65:5f:4b:bd:ef:3a:92:e3:d2:d2:8a:72:2c:56:5d: b0:33:80:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZbZ09O9NYczdhNaXoOsjflsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNTA4ZmI3ODFjYTZkYmQ4MjIxZjJjMmY5NTRhM2E3NDQ2 YjJiNDIwHhcNMjUwNTE2MTYwMTAwWhcNMjUwNTE3MTYwMTAwWjAzMTEwLwYDVQQD Eyg4NDI1YmM4YTU5NzkxZTAzNmIwYWVmMDZmYmJkMTIwMjVkNmJmODIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1tKIg5pfzgqyQ+3O8YNlO4zWA6RA CAcVblP/RG7/lG1jl0VgnBXpdasxuKc8s+o1ghGu82gitaDeG7v3d5fq8MUWaqWm bOguTxnvQRowyotjg6FoCpieQkSwiiHGNe9A2OhMQQX1mjqrPv06oztY098Z6RJo SdzTsAehiRMS1EVZd5A7AE4Q7129ZcsV9apE7VIwXU56nTBM/0SAHiP0AlQN+faH 5TbtulnegB1ZpXGHFXwq2yUxVUN/FzkOcxuGBUK9uk/CVyNzQbVSlGseaVMz6ib/ bBnmBnD1rZ+oQiV1nCDsU2qpKc34OoHmz+TpjXDARZnkdqK8nvax5ZQMGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIQlvIpZeR4DawrvBvu9EgJda/ggMB8GA1UdIwQY MBaAFDJQj7eBym29giHywvlUo6dEaytCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWxDUHQ0SEtiYjJDSWZMQy1WU2pwMFJySzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi82YzIwM2QtNjIyMS00NjBhLWFmNDkt YzEyMjE4NzY1MTU0LzEvTWxDUHQ0SEtiYjJDSWZMQy1WU2pwMFJySzBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi82YzIwM2QtNjIyMS00NjBhLWFmNDktYzEyMjE4NzY1MTU0 LzEvTWxDUHQ0SEtiYjJDSWZMQy1WU2pwMFJySzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg7+9skQG 4aGMHDknive6+t0oJZAnFm5Mh1KMPwX87oidc5YtQsIrijlbg1wO0wZVzHGiNGEV vtFVHHx8bKvykPuoXrAsk77m1XA63yjiVLg1oGd/zj8WgrXKz+nNi7XePYfX2tPb lKMdrI0H4pVvf+PdYEMzDBX0Ue/hm7ztVZwRXlRDAfa2iWkOGzRivyUpXygAldp8 bJ4bdRuGbipaO8z6Un1l2MUYrYC5o7VGOm6SmTu0RgVtHa+f/gumFeamBpDRqL+4 clY0hSAk73OOP0flUBWKJk82nX8Y3eIiMmkqJzwEBAFXOL/zH4BDZV9Lve86kuPS 0opyLFZdsDOAMQ== -----END CERTIFICATE-----Generated at Sat May 17 01:19:47 2025 by rpki-client