$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft File: 8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft (raw, json) Hash identifier: R/OmmItV+dkgJrVFw2yCQ06VmNAgh4r7/g9iOS9iXV0= Subject key identifier: B4:83:C8:26:7E:C9:7B:07:F5:F5:5D:D6:7D:74:A8:60:7D:E5:CF:7A Authority key identifier: F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43 Certificate issuer: /CN=f0ff2c6229af763a99f5349a32510df4a4526143 Certificate serial: 0196B17C411165F9FB4BF9FD9A1A1D7A2A4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft Manifest number: 1532 Signing time: Thu 08 May 2025 20:00:32 +0000 Manifest this update: Thu 08 May 2025 20:00:32 +0000 Manifest next update: Fri 09 May 2025 20:00:32 +0000 Files and hashes: 1: 00x2a7vYcUP_RgzqZlJDShLq9Do.roa (hash: cq08qt5t6pt7+g4zB6xtHZuctjeJqy9pw/L/lk8TYFo=) 2: 8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl (hash: oxrOPXtwJcfw9W9LI9kICrVWZaZaFlpXKhIpPcqJ5Rc=) 3: KVMzJG-tiBiXKGfDbX7s-fqSUcs.roa (hash: izdiO/l04uY0Tl9GP7xbaa4HsWMYkrOgbs0SiG0a1K8=) 4: OBC2jp5FIHT7G9c2m1xsJUD2ivs.roa (hash: DrwuyysosoB70lBjSllnHo3rVU0U0NusilzO8tRi9Q0=) 5: OxF-ngX6YGUArZrbAYmh9hpGzkU.roa (hash: zhEaR7GNPbf+2lOaH8uFUPJFKzbpuLS5x4CvU7dkxPs=) 6: Q2Pg2GNHELVKyFoNgxOuT8YFvLY.roa (hash: DsyRU7FSw+3XDKbBM9HrtgkzYSVPnqWwqknbD6CWVSU=) 7: RO-InVXPYoHaB1ZpM-19yr94dQs.roa (hash: 8Y6VcUcgO4alufdIJ4djN2KAnB4AyYetp1VZzDDuyNk=) 8: TbcAJ-7kgZbLEMeBArn-aI2s0Oc.roa (hash: ebCgIhbDpPxtlRtDjitUarjC0W1nxe0ujpocy11Koxs=) 9: _gM5SG_4QQqKocZtcQPCR80SAmI.roa (hash: ee8TJS3VrEj5YXrt15hISXpN3dVXM3P5ROyjlVEMHSs=) 10: fG6If6WZh4pXAVRu1gEQ7wbPbEs.roa (hash: OIBSpF8oXZotrR8RVX6KacBPnJZCoNiFLIZ7aWyayQU=) 11: gfQeyx6Q7sjS4Xpny9IUQ8tQxLY.roa (hash: zrq/geD7ajZHxMLm7OvFbnGGXeIS14GfMNfAscurlR8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 May 2025 15:42:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:b1:7c:41:11:65:f9:fb:4b:f9:fd:9a:1a:1d:7a:2a:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0ff2c6229af763a99f5349a32510df4a4526143 Validity Not Before: May 8 20:00:32 2025 GMT Not After : May 9 20:00:32 2025 GMT Subject: CN=b483c8267ec97b07f5f55dd67d74a8607de5cf7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:9d:fa:39:52:ce:58:7a:30:85:3f:3c:1f:b2: ff:66:8d:04:b9:45:d4:f4:7c:8a:b0:4b:b1:02:d7: 02:5c:16:20:b9:44:57:14:e0:8a:03:24:e3:7a:fe: 63:d8:fd:4a:b5:5b:ed:7e:f7:57:9b:60:4e:3d:f1: c8:b6:a6:10:bd:fd:8f:68:5f:c3:a6:e9:4a:e5:38: cc:4d:c4:34:de:72:53:af:2c:42:a6:5b:80:23:50: 87:b3:a4:44:22:3d:87:cf:08:52:93:77:dd:ec:ef: f2:c1:a2:b1:bb:50:3b:b5:66:f9:e8:e4:e6:2b:56: 43:09:92:fd:b0:81:31:23:b6:58:0c:eb:67:ce:26: 3a:62:fc:b8:92:93:f2:76:1c:56:fa:c6:90:80:16: 64:68:6c:5b:67:92:ec:df:aa:a0:33:c3:34:9d:71: 6e:41:0d:cd:77:30:46:41:df:08:72:6e:2e:af:6a: da:34:98:e9:28:16:01:73:5c:40:2f:ce:8f:33:89: b1:ce:ae:84:3c:88:98:63:33:6b:4d:6a:67:77:f2: 4a:9d:94:0f:8f:cd:ff:7a:13:29:35:50:77:df:ac: 98:08:4e:07:37:a2:68:3c:b3:21:dd:c1:29:aa:de: 5d:2a:a9:8a:86:ed:02:5b:e8:2d:53:7e:14:80:18: c2:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:83:C8:26:7E:C9:7B:07:F5:F5:5D:D6:7D:74:A8:60:7D:E5:CF:7A X509v3 Authority Key Identifier: keyid:F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:f4:e2:ca:65:40:91:b6:ae:4c:2f:14:40:95:b8:5e:96:71: c1:d2:6a:3f:8b:c6:ff:88:1c:77:94:42:37:10:04:ad:7f:63: f4:58:22:1e:be:75:d2:6e:66:a8:ca:6f:40:72:0d:57:65:dd: 71:56:05:04:d4:6b:02:8b:a0:5e:39:48:cf:3f:3d:3d:5f:f3: 92:01:02:35:af:4e:53:39:84:09:e8:f7:eb:d1:67:94:2a:d0: c7:56:08:31:bd:0b:17:fd:6f:eb:da:10:e9:03:1d:07:e3:c3: 4a:f2:71:b2:61:a2:e1:44:47:e1:ab:04:d8:30:f9:4c:0a:73: 86:68:15:44:7d:07:76:d9:59:f3:c9:c1:b9:80:89:85:08:e7: a5:d4:4b:83:5e:9a:15:b3:8b:5d:9b:6b:bb:1c:58:7d:c4:47: 0a:2c:26:48:a7:48:3e:3f:0c:7a:5a:df:86:97:15:e0:45:55: d4:8c:1e:32:a8:23:89:d7:c2:37:af:3d:09:9a:7c:1c:91:79: 1c:33:da:ae:52:82:17:63:0e:be:f7:bc:0d:21:02:6b:98:67: bc:b4:a8:2a:99:64:63:17:81:35:4f:49:f1:4a:c7:ca:62:ef: 0c:07:1c:26:cb:1f:9b:80:b1:a3:bc:21:d6:fc:fe:14:d2:80: ee:1e:41:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZaxfEERZfn7S/n9mhodeipMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwZmYyYzYyMjlhZjc2M2E5OWY1MzQ5YTMyNTEwZGY0YTQ1 MjYxNDMwHhcNMjUwNTA4MjAwMDMyWhcNMjUwNTA5MjAwMDMyWjAzMTEwLwYDVQQD EyhiNDgzYzgyNjdlYzk3YjA3ZjVmNTVkZDY3ZDc0YTg2MDdkZTVjZjdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZ36OVLOWHowhT88H7L/Zo0EuUXU 9HyKsEuxAtcCXBYguURXFOCKAyTjev5j2P1KtVvtfvdXm2BOPfHItqYQvf2PaF/D pulK5TjMTcQ03nJTryxCpluAI1CHs6REIj2HzwhSk3fd7O/ywaKxu1A7tWb56OTm K1ZDCZL9sIExI7ZYDOtnziY6Yvy4kpPydhxW+saQgBZkaGxbZ5Ls36qgM8M0nXFu QQ3NdzBGQd8Icm4ur2raNJjpKBYBc1xAL86PM4mxzq6EPIiYYzNrTWpnd/JKnZQP j83/ehMpNVB336yYCE4HN6JoPLMh3cEpqt5dKqmKhu0CW+gtU34UgBjC3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLSDyCZ+yXsH9fVd1n10qGB95c96MB8GA1UdIwQY MBaAFPD/LGIpr3Y6mfU0mjJRDfSkUmFDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFA4c1lpbXZkanFaOVRTYU1sRU45S1JTWVVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wNTFmYTItYzU4MC00YTAyLWExODYt ZTY5ZjdhNWQyZDkwLzEvOFA4c1lpbXZkanFaOVRTYU1sRU45S1JTWVVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8wNTFmYTItYzU4MC00YTAyLWExODYtZTY5ZjdhNWQyZDkw LzEvOFA4c1lpbXZkanFaOVRTYU1sRU45S1JTWVVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj/TiymVA kbauTC8UQJW4XpZxwdJqP4vG/4gcd5RCNxAErX9j9FgiHr510m5mqMpvQHINV2Xd cVYFBNRrAougXjlIzz89PV/zkgECNa9OUzmECej369FnlCrQx1YIMb0LF/1v69oQ 6QMdB+PDSvJxsmGi4URH4asE2DD5TApzhmgVRH0HdtlZ88nBuYCJhQjnpdRLg16a FbOLXZtruxxYfcRHCiwmSKdIPj8MelrfhpcV4EVV1IweMqgjidfCN689CZp8HJF5 HDParlKCF2MOvve8DSECa5hnvLSoKplkYxeBNU9J8UrHymLvDAccJssfm4Cxo7wh 1vz+FNKA7h5B7A== -----END CERTIFICATE-----Generated at Fri May 9 01:04:48 2025 by rpki-client