$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft File: OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft (raw, json) Hash identifier: fsvdIknvj+EQpdRh40APBbovO7s5Ebp+lnDYCn6jPE4= Subject key identifier: A8:8A:BB:E6:02:5B:00:C7:92:9C:53:08:B5:6D:9F:80:9B:A6:DB:EA Authority key identifier: 38:20:34:63:EB:94:4B:25:C6:51:35:CA:47:BD:BD:AB:64:6F:39:84 Certificate issuer: /CN=38203463eb944b25c65135ca47bdbdab646f3984 Certificate serial: 019625CC904FFCF4AEED326F7BC9F9700F10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCA0Y-uUSyXGUTXKR729q2RvOYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft Manifest number: 1224 Signing time: Fri 11 Apr 2025 17:01:25 +0000 Manifest this update: Fri 11 Apr 2025 17:01:25 +0000 Manifest next update: Sat 12 Apr 2025 17:01:25 +0000 Files and hashes: 1: 0Fmh8eaTe-TA8TzJaqV0xDv1Pzo.roa (hash: ZxN3vaamtDqMo8xYPJBI33oBeaqJ8QIz0amzm/bnvtg=) 2: 3nej7O_5-sZXCWeuqPyGbja9XnQ.roa (hash: p+MNFJ74eHqjwkPNS5+3QDf8dfQpJUlMjkJWwIsIN5s=) 3: JpI0mKHoKJGb5HpwhqpgQJ-989w.roa (hash: +p1PcccuIrfXBOI8p25PVV972uHT5dceE6dg0Tn0L/g=) 4: OCA0Y-uUSyXGUTXKR729q2RvOYQ.crl (hash: LVWoQrGPDnI0mIVAAPQ3Q67yY7i6LFe/9HMXCg2GQR8=) 5: Q718Z9XRXwbb8eAv-JSYxNy8m3E.roa (hash: QwKiyK2H3mBEUzLEautBF28TXwWRoI+nh+WAF8i9ayk=) 6: eapLNVKWkPJvIKSSw8FvjnbqKM4.roa (hash: lQyg7ma6RsIJVyHbW0BuPsXW31hRi/B1a2UZgfzLbWY=) 7: flTVx8-F7E37FHcVoN5708sXexM.roa (hash: snTHoXZxUjfO9kURa3StUkh2LzhC8cP2m56/uoBtpVA=) 8: itNeHRmlhkmkLNFMeFLLpwNO4FY.roa (hash: iZAIvlpDGBx0E4icQgD8R/hQnWve6QmLhqITJu2cuoY=) 9: ktpnhSV94n1dgI9-LO5orxsroMo.roa (hash: HdTZITsdNE12a7HbwFoAmzx8Exmybo0iwACkTzBDWZ0=) 10: p6yu9K0prb-3wy95x-qc7KcMywQ.roa (hash: bNVvwouaPK4oyavhTkisO8oVhR1iolZntv1z6WFieUk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/OCA0Y-uUSyXGUTXKR729q2RvOYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 12 Apr 2025 14:34:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:25:cc:90:4f:fc:f4:ae:ed:32:6f:7b:c9:f9:70:0f:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38203463eb944b25c65135ca47bdbdab646f3984 Validity Not Before: Apr 11 17:01:25 2025 GMT Not After : Apr 12 17:01:25 2025 GMT Subject: CN=a88abbe6025b00c7929c5308b56d9f809ba6dbea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f3:02:80:db:5a:0f:9c:32:f7:55:22:aa:b9: c6:74:06:a9:0a:d5:71:e4:57:7b:9e:dc:da:54:22: 24:43:9c:72:2a:0b:78:a1:60:e2:89:81:a3:03:fe: 8a:40:9e:13:a3:ef:6f:13:c1:24:e7:05:e9:9e:54: 41:73:06:c1:8f:06:56:c8:5f:7b:1d:17:9c:6b:b5: 4c:b7:b4:0d:b0:ea:cc:46:ee:97:da:27:1d:4b:67: 99:c6:18:9b:55:b8:1b:29:a3:d2:c5:8e:c5:72:7f: a8:dc:b2:9c:46:5d:2b:f9:12:0b:1b:b1:d0:d3:08: 94:06:77:7b:72:07:1c:5f:eb:4e:0e:46:78:e1:bf: 1b:a4:95:3f:2c:db:06:62:2b:b2:76:c1:7d:75:db: ce:5e:61:62:a3:d1:c3:73:80:3c:22:52:2c:75:6f: e5:27:2a:60:55:fd:15:64:06:84:cc:ba:91:dc:f1: 94:55:03:08:a3:dd:ec:2d:56:56:e5:58:68:29:d0: ed:d3:d3:00:70:c3:73:1b:a2:93:f0:d1:62:15:ac: f0:2b:c8:e1:96:cd:ee:cc:1e:38:6b:cf:e8:7d:13: cc:c3:65:e7:af:10:27:f2:b0:b9:17:6e:4f:09:d6: 59:56:ba:29:ae:ef:7e:5b:e3:0c:1b:16:8a:2c:d7: 78:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:8A:BB:E6:02:5B:00:C7:92:9C:53:08:B5:6D:9F:80:9B:A6:DB:EA X509v3 Authority Key Identifier: keyid:38:20:34:63:EB:94:4B:25:C6:51:35:CA:47:BD:BD:AB:64:6F:39:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCA0Y-uUSyXGUTXKR729q2RvOYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:f2:5e:60:75:6e:e1:4d:2a:f3:ff:07:9e:47:2e:11:14:8f: d5:6b:34:70:d1:bf:d1:5d:b0:3a:0a:89:b0:55:d5:27:e2:d9: 0e:13:e1:bb:d8:3c:88:d9:65:26:7f:37:c8:df:d4:da:98:8b: a6:c1:0a:37:8f:37:a8:c8:0f:0c:5f:02:5d:89:69:7b:a0:28: 24:1e:e1:eb:2a:80:94:04:e4:16:d9:27:e2:e1:37:bf:03:b0: c0:ae:02:78:2d:a9:b4:a4:0e:98:fc:17:42:61:32:64:75:25: 45:d9:b6:e0:b8:36:75:eb:37:de:60:64:5b:41:e1:0c:42:73: ef:c3:c9:79:ff:97:34:44:5b:d1:f4:e2:c5:09:45:fd:f7:d7: 04:6a:9e:d2:63:22:f6:bd:ea:6f:22:55:32:32:60:bd:83:74: b5:59:23:22:34:24:04:68:36:14:ad:9c:9c:e8:48:69:20:f9: 65:1b:47:a4:ea:bc:16:92:38:97:32:cc:2d:ab:b8:3b:68:d4: e9:84:7c:57:ff:93:0f:80:92:37:6a:39:3d:26:b7:52:fe:0c: 36:e5:fd:4e:a4:e0:a9:b1:0a:a6:39:4a:28:9f:c4:15:54:d7: 36:1c:bc:2c:dd:ff:fe:fc:e9:f5:bc:e2:86:69:9b:6b:a7:6d: ad:21:db:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZYlzJBP/PSu7TJve8n5cA8QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4MjAzNDYzZWI5NDRiMjVjNjUxMzVjYTQ3YmRiZGFiNjQ2 ZjM5ODQwHhcNMjUwNDExMTcwMTI1WhcNMjUwNDEyMTcwMTI1WjAzMTEwLwYDVQQD EyhhODhhYmJlNjAyNWIwMGM3OTI5YzUzMDhiNTZkOWY4MDliYTZkYmVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/MCgNtaD5wy91UiqrnGdAapCtVx 5Fd7ntzaVCIkQ5xyKgt4oWDiiYGjA/6KQJ4To+9vE8Ek5wXpnlRBcwbBjwZWyF97 HReca7VMt7QNsOrMRu6X2icdS2eZxhibVbgbKaPSxY7Fcn+o3LKcRl0r+RILG7HQ 0wiUBnd7cgccX+tODkZ44b8bpJU/LNsGYiuydsF9ddvOXmFio9HDc4A8IlIsdW/l JypgVf0VZAaEzLqR3PGUVQMIo93sLVZW5VhoKdDt09MAcMNzG6KT8NFiFazwK8jh ls3uzB44a8/ofRPMw2XnrxAn8rC5F25PCdZZVropru9+W+MMGxaKLNd4DQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKiKu+YCWwDHkpxTCLVtn4CbptvqMB8GA1UdIwQY MBaAFDggNGPrlEslxlE1yke9vatkbzmEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0NBMFktdVVTeVhHVVRYS1I3MjlxMlJ2T1lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi8wYTI5ODQtYTg2OS00NDBkLWI1Nzgt NTg5MzUxNzliOTg1LzEvT0NBMFktdVVTeVhHVVRYS1I3MjlxMlJ2T1lRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi8wYTI5ODQtYTg2OS00NDBkLWI1NzgtNTg5MzUxNzliOTg1 LzEvT0NBMFktdVVTeVhHVVRYS1I3MjlxMlJ2T1lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh/JeYHVu 4U0q8/8HnkcuERSP1Ws0cNG/0V2wOgqJsFXVJ+LZDhPhu9g8iNllJn83yN/U2piL psEKN483qMgPDF8CXYlpe6AoJB7h6yqAlATkFtkn4uE3vwOwwK4CeC2ptKQOmPwX QmEyZHUlRdm24Lg2des33mBkW0HhDEJz78PJef+XNERb0fTixQlF/ffXBGqe0mMi 9r3qbyJVMjJgvYN0tVkjIjQkBGg2FK2cnOhIaSD5ZRtHpOq8FpI4lzLMLau4O2jU 6YR8V/+TD4CSN2o5PSa3Uv4MNuX9TqTgqbEKpjlKKJ/EFVTXNhy8LN3//vzp9bzi hmmba6dtrSHb2Q== -----END CERTIFICATE-----Generated at Fri Apr 11 23:34:38 2025 by rpki-client