$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft File: JXdsd_jr5wlMoAes4anAv9wrOuw.mft (raw, json) Hash identifier: Ojoger7QHCPvOtTeWVroUUBW+HfeV/imXq5S8XEbaCw= Subject key identifier: BC:42:D6:73:74:DA:2B:29:B5:A6:EF:2A:05:F4:3B:E4:E9:B5:30:FD Authority key identifier: 25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC Certificate issuer: /CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec Certificate serial: 0196BDEEC2E5588C5762EC181C09A40BA307 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft Manifest number: 127A Signing time: Sun 11 May 2025 06:01:03 +0000 Manifest this update: Sun 11 May 2025 06:01:03 +0000 Manifest next update: Mon 12 May 2025 06:01:03 +0000 Files and hashes: 1: 3vNWcma8J3Yvm292bxcQMk9IMAg.roa (hash: 9vjWGwLIurMfDLhl3LmcOyaHZd6c7cfwMEUeIRekeL8=) 2: AIXPYVOLD4vG7-idW3xSmEYba3M.roa (hash: 0OO+kwQPJqN6G5I1BOBQWzk/kW2juMQTjTkhmJKwZ20=) 3: JXdsd_jr5wlMoAes4anAv9wrOuw.crl (hash: s8xorGpH9UQU51i52tgDAmjxmEfUYcALZV+5EOyY/EE=) 4: Um1PZhGXZ7KzU5zkJ2mBWgRYing.roa (hash: r8yw/kx6PR2QiDWv/zH9T6r2Gmbp9EAyZ7zdCGmWEQY=) 5: YhneglxU-YMRltelD3FSRlJ3Zwc.roa (hash: Ncwlfcg8RLjA+nxHVjFBtQFwEe7HoERaw1MC4MeS+rw=) 6: hkaTE_7fhGUYELRP9AaJ9bAo5bk.roa (hash: KOzsqvok3H5PfVWyF9U8nn9XFXetQgaoM4WrEbmzfjU=) 7: iDjdph5PLZc9UolFIQRqVji6vII.roa (hash: iBRRjrv+DLQQpa8QabPAetjWPrtLGlWJ6l98+13EMEw=) 8: mUfMEaQY8q1gZSjzSxi9XIGiseQ.roa (hash: gaddKtYUZyG4gzalDVZzomDqdepgC8Jfd8AVgvRc31g=) 9: sF1coaLwpjJ9ERbX0K6NN9sGsfY.roa (hash: yKfJfqMuiWBIftmEax6OGMuhlaUME2Z3bSqwXVLFaTk=) 10: vk6LGZMNcC3KaiIa5C3dnYSKUhg.roa (hash: 7Gr8EYP5E5UsMRFGLJUElOUxKJpCvyrgvk2k+QyN1AE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 May 2025 06:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:bd:ee:c2:e5:58:8c:57:62:ec:18:1c:09:a4:0b:a3:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec Validity Not Before: May 11 06:01:03 2025 GMT Not After : May 12 06:01:03 2025 GMT Subject: CN=bc42d67374da2b29b5a6ef2a05f43be4e9b530fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:72:81:27:05:25:50:1c:c8:c5:82:90:43:91: 36:26:b5:7d:c5:ca:86:a1:d1:35:90:79:73:52:1b: 61:d0:fc:67:83:61:7f:76:2e:c8:f6:68:9a:ae:19: 1a:a3:54:16:e7:d2:0d:15:ef:ab:4e:48:70:3a:41: 1c:ed:8b:df:3a:19:7b:03:f0:ae:c2:cb:14:d2:b2: bd:b3:94:b3:c6:52:1c:2d:0c:5d:3d:4c:37:84:cd: 3d:69:77:27:1d:81:22:8a:1e:fe:9e:3c:7e:f9:00: 95:a8:f8:43:77:13:4c:05:58:32:7a:1f:a6:a0:d5: 29:01:b7:0d:f3:5b:ca:22:97:9d:0b:d4:f4:a4:58: 17:c8:b5:d1:3f:7d:02:44:d2:66:37:0b:27:2e:03: 8b:73:97:33:dd:63:5e:37:a9:30:15:be:15:5d:25: 9e:61:13:a9:69:e1:c2:8f:0d:ca:2f:0a:45:b9:78: 67:c3:cc:b1:92:2e:b8:33:4b:fe:09:5b:84:80:e9: fa:1d:06:79:68:86:d3:2d:66:ab:16:24:06:38:63: c3:33:f5:ef:55:f2:f1:1e:81:90:30:28:c3:a9:92: 72:99:5d:f0:a5:1e:a5:f7:30:fb:65:1e:dd:c3:62: 7d:05:b7:3a:72:ac:e1:34:2a:d5:6e:c3:5d:f5:23: 7d:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:42:D6:73:74:DA:2B:29:B5:A6:EF:2A:05:F4:3B:E4:E9:B5:30:FD X509v3 Authority Key Identifier: keyid:25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:32:b2:58:e7:db:24:df:dd:db:f5:de:ce:d4:e6:7d:6c:5b: 50:e0:0c:a7:af:0c:17:4f:42:1a:8e:2e:27:9f:7b:96:17:6f: dd:ff:0f:b6:ee:13:75:4e:ca:2b:47:a7:45:a4:6d:e7:b5:3c: ca:68:2c:0c:af:da:c2:53:47:c3:71:dc:8d:b1:61:18:70:12: c9:72:53:7b:1e:40:58:bf:53:46:24:43:2b:4f:16:3c:13:3d: 51:fd:3b:a0:14:66:9d:66:a7:f7:fc:62:29:ed:bc:b2:0d:7e: 1b:2d:47:4a:f2:ab:42:64:92:ca:a6:0b:9b:c3:41:3f:5f:c1: f5:63:d6:46:bc:33:23:97:ac:bf:00:11:a5:90:4e:a8:a6:c1: 21:d5:43:59:3c:59:ba:18:3d:c2:f1:3e:8c:5f:17:b4:a4:42: 06:1a:d2:8f:1b:a1:22:56:f3:92:69:b7:0c:0c:8a:9f:cd:2b: 4f:96:22:a5:ed:91:5f:c9:b1:3f:62:95:09:e0:c8:33:ac:2b: d3:78:82:ce:96:72:08:fd:ef:77:38:2d:58:76:2b:1a:51:05: 5b:0d:9a:29:92:b8:d4:79:73:28:3e:a1:f9:55:2f:be:89:82: f8:e3:5c:98:0d:b5:3f:cf:ed:9e:06:91:11:7b:0b:3a:24:ab: 25:1f:1f:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZa97sLlWIxXYuwYHAmkC6MHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1Nzc2Yzc3ZjhlYmU3MDk0Y2EwMDdhY2UxYTljMGJmZGMy YjNhZWMwHhcNMjUwNTExMDYwMTAzWhcNMjUwNTEyMDYwMTAzWjAzMTEwLwYDVQQD EyhiYzQyZDY3Mzc0ZGEyYjI5YjVhNmVmMmEwNWY0M2JlNGU5YjUzMGZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3KBJwUlUBzIxYKQQ5E2JrV9xcqG odE1kHlzUhth0Pxng2F/di7I9miarhkao1QW59INFe+rTkhwOkEc7YvfOhl7A/Cu wssU0rK9s5SzxlIcLQxdPUw3hM09aXcnHYEiih7+njx++QCVqPhDdxNMBVgyeh+m oNUpAbcN81vKIpedC9T0pFgXyLXRP30CRNJmNwsnLgOLc5cz3WNeN6kwFb4VXSWe YROpaeHCjw3KLwpFuXhnw8yxki64M0v+CVuEgOn6HQZ5aIbTLWarFiQGOGPDM/Xv VfLxHoGQMCjDqZJymV3wpR6l9zD7ZR7dw2J9Bbc6cqzhNCrVbsNd9SN9pQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLxC1nN02isptabvKgX0O+TptTD9MB8GA1UdIwQY MBaAFCV3bHf46+cJTKAHrOGpwL/cKzrsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlhkc2RfanI1d2xNb0FlczRhbkF2OXdyT3V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS81N2UwOGMtY2EzYS00MDk5LWFlNzQt ZTdkYWVjMTk0YTY5LzEvSlhkc2RfanI1d2xNb0FlczRhbkF2OXdyT3V3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS81N2UwOGMtY2EzYS00MDk5LWFlNzQtZTdkYWVjMTk0YTY5 LzEvSlhkc2RfanI1d2xNb0FlczRhbkF2OXdyT3V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAATKyWOfb JN/d2/XeztTmfWxbUOAMp68MF09CGo4uJ597lhdv3f8Ptu4TdU7KK0enRaRt57U8 ymgsDK/awlNHw3HcjbFhGHASyXJTex5AWL9TRiRDK08WPBM9Uf07oBRmnWan9/xi Ke28sg1+Gy1HSvKrQmSSyqYLm8NBP1/B9WPWRrwzI5esvwARpZBOqKbBIdVDWTxZ uhg9wvE+jF8XtKRCBhrSjxuhIlbzkmm3DAyKn80rT5Yipe2RX8mxP2KVCeDIM6wr 03iCzpZyCP3vdzgtWHYrGlEFWw2aKZK41HlzKD6h+VUvvomC+ONcmA21P8/tngaR EXsLOiSrJR8f9Q== -----END CERTIFICATE-----Generated at Sun May 11 15:35:45 2025 by rpki-client