$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft File: DnX7T1KoKdE24pqaAlxjbRmuMo4.mft (raw, json) Hash identifier: ljkR1Lcw5wsNm7vi20IxtLny89sZ6cO0x6JPuQCn88g= Subject key identifier: 2B:87:53:E9:84:99:E4:32:37:C9:A9:72:94:58:32:07:CC:61:A3:13 Authority key identifier: 0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E Certificate issuer: /CN=0e75fb4f52a829d136e29a9a025c636d19ae328e Certificate serial: 0196B6A25542B524FA914C325BE33D1EBC7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft Manifest number: 0878 Signing time: Fri 09 May 2025 20:00:13 +0000 Manifest this update: Fri 09 May 2025 20:00:13 +0000 Manifest next update: Sat 10 May 2025 20:00:13 +0000 Files and hashes: 1: 1-tZ-_ZPNdEW8nGiklKLy_dzCcxo.roa (hash: C9mL+3dmJIKqXn6cMGUOUKCxkweotb2jX+Kt+pk9v3c=) 2: 2i2Vy05Tg_e1ak_1Uk12CnilxHg.roa (hash: NqduqZJuAkmB6MV5SKQihh3yDbwkeeFnfpDnTNMY130=) 3: 73x2Y8rtkrW56QrQQDyvuiFLG40.roa (hash: oxRcUfzeJXkoQZbB0gN4SvScUE5rLGzaBI9pXSTycUY=) 4: 9V0vcgO-bdJZakQILqcfcNUVDzs.roa (hash: rTVAfA+3goVyX4gfp8i16RQoEb4IWxA+yVUwUEUJp9c=) 5: 9wVDQpp0z04zwfoESc_S5u9etZ0.roa (hash: +x8r2JMNLKJOL0pGTh/MSwGY9V5+DOeggrdlCFNLMkg=) 6: DnX7T1KoKdE24pqaAlxjbRmuMo4.crl (hash: hiTY1vwDub5v3cC3zVPYP1DPoRrWRVI8I7QfbFGKxpQ=) 7: GZgpng6Ot_FGRMQou9o62VcEekY.roa (hash: LX9b2Js5i118pOJ0Nzr+pm+rZAe5EZDelGHWiSHQOWA=) 8: IMCXlUTocnP6LWCCx7gfztxQNcc.roa (hash: +XHnIPHSKBflFi/9H98lirNDAUIYQTBC6I0oSezZ3zU=) 9: KX36I7dSkLFi2aH0eqBcDdn1RlA.roa (hash: uMMjk83OkXZQb4cTo6pJ1weYcZ0/vJkq+xb1gidjyYA=) 10: OjaH7K6CfyojVS6c46fulaH1p-M.roa (hash: +oZE9RnQm2ybyt6c5+lMZS7HBhz+F/aKH1dTBent0OM=) 11: fkiMonxbwz3kZc8YkJyvn2qIywM.roa (hash: fqrrGCyxmQcRYifeeyyNsSENvJ1MUubmLT6QjBEi5nc=) 12: hirG0wCdPPp74UU2BJCRBx2I3xI.roa (hash: NoA4bfTe2eDgcbMz4bkkr7hReCXWcPMZ0ab/qV2+EuU=) 13: veJEUJlOM2CviEnGl10A91ot5GY.roa (hash: /hB3dvMinNmS8ydpLK9fobmCgmadtOoHLY0n+FVP1Cw=) 14: yohJslaqJeqxG9ZdmhfVBivAGaE.roa (hash: SxCXBWVxQCB+hqHsFFhyla2B81f/O/PjbQmRobaYZP8=) 15: ysUV6fsy7g-qGWKc6ABtuhp7U8A.roa (hash: EZNxj/CC4nQ1eQFZYbt+q0R6zd6ZtVvLPs7qesRb/BU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 May 2025 20:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:b6:a2:55:42:b5:24:fa:91:4c:32:5b:e3:3d:1e:bc:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e75fb4f52a829d136e29a9a025c636d19ae328e Validity Not Before: May 9 20:00:13 2025 GMT Not After : May 10 20:00:13 2025 GMT Subject: CN=2b8753e98499e43237c9a97294583207cc61a313 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:c8:25:48:4d:0a:90:d7:07:8e:c2:1d:2b:7a: 1f:f2:c1:7e:99:3d:64:9a:06:b3:c6:7c:20:ce:72: e3:e0:cc:db:e3:d0:77:f5:30:f7:4a:88:9d:f8:28: 33:9c:9c:62:a7:11:7d:2f:cd:7f:ec:c8:29:45:1b: 2e:54:70:02:e0:54:13:6d:f0:8c:2f:b6:0d:8a:1c: 21:87:cc:2b:05:35:6d:1f:32:8c:e1:01:d0:09:e9: 59:a0:91:4f:f0:3d:45:40:18:2a:39:ec:e8:b7:19: 02:cf:c2:6c:a0:ed:d0:9f:de:42:e3:85:62:31:aa: 58:5f:50:a5:f5:05:7e:6b:a9:77:6e:21:35:47:99: 83:fe:a4:5e:0e:1a:e8:4e:b7:94:97:86:54:e9:5f: 2f:55:59:9c:1e:39:b1:31:ad:67:e3:f7:a3:5e:29: 5f:1a:a5:21:75:0c:cd:f9:3a:2e:99:a9:f8:19:5d: a5:d0:ca:34:66:f5:bf:f4:ee:1a:17:14:4f:0c:f0: e6:96:8f:f3:f4:2a:84:d2:fa:c8:cf:c8:24:c1:b8: a3:5a:c6:05:78:be:7c:e1:46:a3:64:b3:45:0e:1f: b7:77:2e:ef:87:71:fb:ad:1a:b1:23:c6:26:1b:69: 02:c2:f3:6b:3f:f5:c2:3f:29:d7:12:46:45:af:85: 1c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:87:53:E9:84:99:E4:32:37:C9:A9:72:94:58:32:07:CC:61:A3:13 X509v3 Authority Key Identifier: keyid:0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:37:52:03:98:07:10:72:71:74:6e:42:48:40:02:84:ff:23: 7f:15:5e:d8:91:e9:21:95:ba:3b:5e:65:04:89:b0:3b:05:8e: cf:55:21:d8:ef:d1:ff:c4:f8:bb:82:9a:eb:5d:0b:f4:85:d8: fa:00:f4:93:28:33:98:69:6e:31:fb:ef:4d:63:cd:70:f4:c1: 2f:fc:5d:44:aa:34:18:d3:00:a0:52:f8:3f:cd:6a:97:2f:12: 03:0c:54:19:83:db:eb:01:bf:c8:65:62:54:bf:e4:9b:d1:cb: 60:54:74:38:55:c3:21:88:68:d0:48:b0:0c:38:40:bc:82:99: ed:24:c6:1e:37:a7:39:6f:f0:65:ab:bb:96:16:e6:f3:9d:7f: 1b:f4:6c:18:8f:7e:39:71:33:78:71:14:e8:5c:af:d3:00:39: d4:d5:f9:20:c7:da:9c:3b:e9:6a:cc:e7:e0:6f:fa:5d:25:66: 38:95:d0:73:5f:14:7b:37:db:61:2d:c0:f6:a3:c7:ef:82:3d: cc:7d:b3:93:a0:bc:e3:17:29:2e:9a:f2:f2:af:bc:17:f1:79: e8:53:96:f9:40:c4:bd:52:73:b1:d4:72:0e:46:30:d1:b1:d5: 34:b6:b4:4d:2d:e2:d1:af:d2:a3:36:6b:d0:f3:ed:32:8b:c7: 66:98:31:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZa2olVCtST6kUwyW+M9Hrx/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlNzVmYjRmNTJhODI5ZDEzNmUyOWE5YTAyNWM2MzZkMTlh ZTMyOGUwHhcNMjUwNTA5MjAwMDEzWhcNMjUwNTEwMjAwMDEzWjAzMTEwLwYDVQQD EygyYjg3NTNlOTg0OTllNDMyMzdjOWE5NzI5NDU4MzIwN2NjNjFhMzEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1cglSE0KkNcHjsIdK3of8sF+mT1k mgazxnwgznLj4Mzb49B39TD3Soid+CgznJxipxF9L81/7MgpRRsuVHAC4FQTbfCM L7YNihwhh8wrBTVtHzKM4QHQCelZoJFP8D1FQBgqOezotxkCz8JsoO3Qn95C44Vi MapYX1Cl9QV+a6l3biE1R5mD/qReDhroTreUl4ZU6V8vVVmcHjmxMa1n4/ejXilf GqUhdQzN+Touman4GV2l0Mo0ZvW/9O4aFxRPDPDmlo/z9CqE0vrIz8gkwbijWsYF eL584UajZLNFDh+3dy7vh3H7rRqxI8YmG2kCwvNrP/XCPynXEkZFr4UcIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCuHU+mEmeQyN8mpcpRYMgfMYaMTMB8GA1UdIwQY MBaAFA51+09SqCnRNuKamgJcY20ZrjKOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRG5YN1QxS29LZEUyNHBxYUFseGpiUm11TW80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC81NzU5ZjYtOTNlMi00MDI5LWE0OWYt MzViYTI2N2RlZDNiLzEvRG5YN1QxS29LZEUyNHBxYUFseGpiUm11TW80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC81NzU5ZjYtOTNlMi00MDI5LWE0OWYtMzViYTI2N2RlZDNi LzEvRG5YN1QxS29LZEUyNHBxYUFseGpiUm11TW80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdzdSA5gH EHJxdG5CSEAChP8jfxVe2JHpIZW6O15lBImwOwWOz1Uh2O/R/8T4u4Ka610L9IXY +gD0kygzmGluMfvvTWPNcPTBL/xdRKo0GNMAoFL4P81qly8SAwxUGYPb6wG/yGVi VL/km9HLYFR0OFXDIYho0EiwDDhAvIKZ7STGHjenOW/wZau7lhbm851/G/RsGI9+ OXEzeHEU6Fyv0wA51NX5IMfanDvpaszn4G/6XSVmOJXQc18UezfbYS3A9qPH74I9 zH2zk6C84xcpLpry8q+8F/F56FOW+UDEvVJzsdRyDkYw0bHVNLa0TS3i0a/SozZr 0PPtMovHZpgxxg== -----END CERTIFICATE-----Generated at Sat May 10 06:25:13 2025 by rpki-client