$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.mft File: 5llvGxY8qwxFqE7rEyYbZfGiKWI.mft (raw, json) Hash identifier: l83qiq4uc9RiL83LnwljwsxjGYHnR6OvAznmALt8zGs= Subject key identifier: 8E:D7:70:2C:33:3A:5C:B5:62:48:49:EB:DB:D1:F1:91:BD:2E:26:3C Authority key identifier: E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62 Certificate issuer: /CN=e6596f1b163cab0c45a84eeb13261b65f1a22962 Certificate serial: 0194BABB3FD67B70B15BCC4FFFC6C8F15490 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.mft Manifest number: 143B Signing time: Fri 31 Jan 2025 05:00:21 +0000 Manifest this update: Fri 31 Jan 2025 05:00:21 +0000 Manifest next update: Sat 01 Feb 2025 05:00:21 +0000 Files and hashes: 1: 5llvGxY8qwxFqE7rEyYbZfGiKWI.crl (hash: IwQz4Qs4HxNWcO7smg48GoTAsRF672M3YBV6HIgWrCM=) 2: EPrKtO_Wui_AIcoB1IjnBBpjTA0.roa (hash: Ns7k+bsMT28IYTUvIKM9gdNIwjEuXm0xT0/L3x28CpU=) 3: GSrzoMsqdrffXvz8XfRbb06cdoU.roa (hash: qO16W1LJUB1Sf5kzJO7kSt5JrIHbHWcZRaQOTtkSO+c=) 4: UY47b1nKTBymo-_2aL9oMC7vX38.roa (hash: bK73SZPBKj3iAjuEKmNGnIADIWNE9D/9YsMH7QmUlZ0=) 5: boEXbjNEx33wzw6E6JRbWglAiOc.roa (hash: 3yrH5bI0y5QY0oSIFS2nNUKvCD7KcuqU8IZY651c2PM=) 6: c9pIRKumzJnPv6L0_0S99z5-7Pw.roa (hash: JszoDngQwRDEsojUMs8/qjNo60rDhfYCdak0Z9nn2Bg=) 7: ffZavXQaQNIwwKVW84vxnOTS_2k.roa (hash: oA0RmBJXJ8Iaj/uIUokVdX89kZuQ0WJjVTCDBbmztv8=) 8: g7knCJ57jgLAS24rI4X3btb-M4c.roa (hash: 3UFtXY+vf3X8W6kWA8FvJJwhkGk4KqYw38fo24s58Sk=) 9: gFreThJqNlHPvyHQ79dnfJgTPWo.roa (hash: L3hMFyzcKxYUiA62qUifu4SJz3107QolnvNpa2edIOo=) 10: qZ2rbeeUwV9WnVFloyx-2WLLaic.roa (hash: PyKdiPPGb3idbj43k0xja1+Mj7fQbqPrKGkBwHfZq1c=) 11: tCNgCc7S1ewGtgMhWiXaNGTqwZ8.roa (hash: 0ar853JOpvsnmzIOleciC89u2nN3g3yWX8hEwIiz39U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.crl rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.mft rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 01 Feb 2025 05:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:94:ba:bb:3f:d6:7b:70:b1:5b:cc:4f:ff:c6:c8:f1:54:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6596f1b163cab0c45a84eeb13261b65f1a22962 Validity Not Before: Jan 31 05:00:21 2025 GMT Not After : Feb 1 05:00:21 2025 GMT Subject: CN=8ed7702c333a5cb5624849ebdbd1f191bd2e263c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:df:ae:fd:40:6e:71:c5:9f:2d:72:fa:3f:67: b3:de:f5:ee:86:dd:de:ab:e3:8e:e3:1b:15:09:17: 59:e0:41:37:a3:d3:e4:a6:da:a6:17:ee:42:b1:5c: 27:9e:c7:b7:ed:3c:1b:a6:a3:8a:05:b0:f3:4e:3c: 9f:1f:99:fe:82:19:e9:b4:59:c7:ce:e7:db:5a:e1: ed:6c:d0:57:c6:6e:15:f8:66:38:f0:fe:44:fc:34: 9f:7a:1c:2b:28:a9:c9:5e:e8:bd:c2:dc:ee:31:23: 6d:f5:42:d1:07:57:fa:ba:e7:fd:80:1d:50:2e:23: d9:a9:f0:9f:89:55:e1:85:e1:2e:cf:4c:fe:13:15: f4:47:3f:5c:c0:7f:09:63:87:7c:f6:f2:41:c0:43: 87:74:90:13:0f:45:92:e0:53:c4:90:c9:b6:a6:27: cd:cb:10:6f:b4:2a:a6:1f:f3:06:68:c1:62:19:cb: 77:59:d5:ed:96:28:47:a9:99:b6:46:f8:3f:d5:9e: 89:f5:f3:51:0e:1e:1a:f4:d0:ed:e5:18:68:a5:3e: 19:3c:3a:89:65:a5:93:89:69:be:03:3c:2d:87:af: 5d:e9:db:38:1c:ca:ad:f5:8c:5a:79:9c:13:c0:1d: ee:3c:15:8f:b5:f4:fa:8c:05:9d:31:6d:73:87:c5: ff:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:D7:70:2C:33:3A:5C:B5:62:48:49:EB:DB:D1:F1:91:BD:2E:26:3C X509v3 Authority Key Identifier: keyid:E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:6a:b5:e5:0c:04:a7:b1:e0:37:fd:dc:76:db:47:2e:7d:7c: 2a:bc:fa:38:e6:c9:86:be:14:97:e0:5d:a6:1b:07:a7:0b:ac: b4:c2:6e:76:f1:10:f7:50:86:d0:b1:6f:e3:16:01:b4:17:03: 6e:49:f7:df:15:ed:37:98:df:ee:bd:86:2f:44:22:9c:c8:71: 4e:ae:bf:56:ff:71:ae:91:be:b6:5a:ea:0b:46:38:d7:17:c5: 39:7d:d1:4f:ba:f8:e5:3b:3e:11:60:bf:27:39:b5:35:d6:43: e6:84:d9:d2:11:c4:03:49:93:5d:53:f1:81:b0:71:86:bd:b9: 8f:14:8b:ac:2e:f0:e1:d9:53:97:da:0d:96:99:fa:44:cd:5b: 77:51:1d:20:e0:6b:09:4e:93:c9:4a:96:8a:7a:5c:84:90:9f: b3:68:ea:4e:b3:47:2e:0b:64:1a:81:1b:0b:b2:98:e2:2c:40: 3f:e7:ec:8d:65:a1:25:58:64:12:39:7b:b1:6c:fc:cf:a8:49: f4:73:e7:a7:86:d3:7f:7b:b7:7d:bf:97:91:94:da:86:ea:a6: 91:b4:1d:bf:fd:b0:0f:a0:40:7d:2f:15:72:60:b4:6e:47:cd: 1c:39:f1:fa:ee:a1:70:6a:00:e0:79:04:2d:78:70:5f:2d:2a: 02:37:6c:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZS6uz/We3CxW8xP/8bI8VSQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2NTk2ZjFiMTYzY2FiMGM0NWE4NGVlYjEzMjYxYjY1ZjFh MjI5NjIwHhcNMjUwMTMxMDUwMDIxWhcNMjUwMjAxMDUwMDIxWjAzMTEwLwYDVQQD Eyg4ZWQ3NzAyYzMzM2E1Y2I1NjI0ODQ5ZWJkYmQxZjE5MWJkMmUyNjNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzd+u/UBuccWfLXL6P2ez3vXuht3e q+OO4xsVCRdZ4EE3o9PkptqmF+5CsVwnnse37TwbpqOKBbDzTjyfH5n+ghnptFnH zufbWuHtbNBXxm4V+GY48P5E/DSfehwrKKnJXui9wtzuMSNt9ULRB1f6uuf9gB1Q LiPZqfCfiVXhheEuz0z+ExX0Rz9cwH8JY4d89vJBwEOHdJATD0WS4FPEkMm2pifN yxBvtCqmH/MGaMFiGct3WdXtlihHqZm2Rvg/1Z6J9fNRDh4a9NDt5RhopT4ZPDqJ ZaWTiWm+Azwth69d6ds4HMqt9YxaeZwTwB3uPBWPtfT6jAWdMW1zh8X/XwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI7XcCwzOly1YkhJ69vR8ZG9LiY8MB8GA1UdIwQY MBaAFOZZbxsWPKsMRahO6xMmG2XxoiliMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWxsdkd4WThxd3hGcUU3ckV5WWJaZkdpS1dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9lZGU5NGUtYmEyYS00MWVlLWIxMmMt ZTA1MzRlMjM4NTliLzEvNWxsdkd4WThxd3hGcUU3ckV5WWJaZkdpS1dJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS9lZGU5NGUtYmEyYS00MWVlLWIxMmMtZTA1MzRlMjM4NTli LzEvNWxsdkd4WThxd3hGcUU3ckV5WWJaZkdpS1dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm2q15QwE p7HgN/3cdttHLn18Krz6OObJhr4Ul+BdphsHpwustMJudvEQ91CG0LFv4xYBtBcD bkn33xXtN5jf7r2GL0QinMhxTq6/Vv9xrpG+tlrqC0Y41xfFOX3RT7r45Ts+EWC/ Jzm1NdZD5oTZ0hHEA0mTXVPxgbBxhr25jxSLrC7w4dlTl9oNlpn6RM1bd1EdIOBr CU6TyUqWinpchJCfs2jqTrNHLgtkGoEbC7KY4ixAP+fsjWWhJVhkEjl7sWz8z6hJ 9HPnp4bTf3u3fb+XkZTahuqmkbQdv/2wD6BAfS8VcmC0bkfNHDnx+u6hcGoA4HkE LXhwXy0qAjdspQ== -----END CERTIFICATE-----Generated at Fri Jan 31 15:35:19 2025 by rpki-client on console-fra.rpki-client.org