$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft File: GstjdqFkjUnVXk17ATcTZ7DcKvk.mft (raw, json) Hash identifier: q9aXGLs8Z2cpiibRf34Te6L6a1KNb0/0p63J7zGRJgQ= Subject key identifier: 54:01:FE:62:DD:55:A1:C2:0A:04:0F:24:7C:C3:B5:85:25:BA:0C:D3 Authority key identifier: 1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9 Certificate issuer: /CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9 Certificate serial: 01960ED6D5A1AD62B93E00A298FD6966CB7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft Manifest number: 0913 Signing time: Mon 07 Apr 2025 06:01:22 +0000 Manifest this update: Mon 07 Apr 2025 06:01:22 +0000 Manifest next update: Tue 08 Apr 2025 06:01:22 +0000 Files and hashes: 1: 2qbv-Pz4jvP3wMojh-nzxxXsgEA.roa (hash: 6+tOpgdGlSlIz8zd2wwUoB5CJwy5U+RYKeXiB03sSqI=) 2: 4iz3Hu7F2tbrDoJ4Ra5IwOQBcc8.roa (hash: IuX1GQGX1ljfGB12u2KgCWJaKWaeRSMtVHGJgPlmubc=) 3: CIdrqclZnSmjRFuSBAbdKW19zw4.roa (hash: 9geTO1Fm8NuZG2BgvP5/MT++gloTQfJHuTiZpCoTKho=) 4: FK7ySAm15wLL-A5orFXHLmT_3-4.roa (hash: euYKdJ6l4Q6ZCJVn8FSzuiK3t+z0DHSmXlQqQRNIQAA=) 5: GstjdqFkjUnVXk17ATcTZ7DcKvk.crl (hash: V19s7QoYde80Poy06YNG7dmZk7rdrVX5+zeN+aX3wTI=) 6: m8Tdxvep8gBoC6AvkeleXRfcmoc.roa (hash: JYOwdAc9iDDM7jQ9HDSgVBqUbsa0fTnhwbYX6eo7TMw=) 7: mgJS3W7Q1z7oQKmX5lJZfvASfdU.roa (hash: txXvckVXMlcgRykwLcE07dh3QNh7v2yueF/O/NOTi+w=) 8: r0MpZWGF2my5L4ptog2DrTmu7No.roa (hash: z4pivdKzari5mOdXF7fYltYsmUc2SDlRQvzzFytcUVQ=) 9: r1Iga4svRdXgkzzcH3Kg0RXZCVM.roa (hash: JeLfIM6nAeSe3Dl7vi7FqJjfcjK2HshwWCY2+gwSDpU=) 10: xdWwTqIEbBWD-ayZaCrJQr7xhvk.roa (hash: XVK45wg0nZbg1ksXLgfN8TmYvrajdIvWajx9rGkrzcs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 08 Apr 2025 06:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:0e:d6:d5:a1:ad:62:b9:3e:00:a2:98:fd:69:66:cb:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9 Validity Not Before: Apr 7 06:01:22 2025 GMT Not After : Apr 8 06:01:22 2025 GMT Subject: CN=5401fe62dd55a1c20a040f247cc3b58525ba0cd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:e0:55:c2:70:d5:8f:2e:05:42:94:83:79:0c: 96:05:6a:24:18:90:30:a9:78:a5:29:12:4b:ab:6d: f0:50:85:f8:bf:af:cf:e7:b7:8a:0f:5a:ab:e2:45: 20:9a:4d:e5:f4:90:29:bd:d4:e4:eb:eb:19:e2:a3: 97:d8:c1:a9:c7:70:5c:63:37:af:f1:7a:70:f6:89: 6d:38:55:77:0f:c4:d7:dc:ee:2f:18:da:b8:69:33: b9:99:f5:9d:1c:cf:fc:4b:0a:09:f4:e8:6f:58:79: 42:6b:62:25:bd:4b:84:e2:cf:62:89:a6:86:12:90: bf:6d:38:f4:1d:c9:2b:87:c7:ea:e3:d4:7c:f4:2b: da:2d:5a:61:78:a7:25:a6:24:fa:ab:e1:3a:da:0d: ac:22:fe:b5:00:fb:f6:10:92:40:28:2a:90:e0:11: 1a:b2:16:72:6b:ff:99:00:d2:c1:ff:25:88:82:60: c3:39:2d:fe:4e:3a:0f:6f:2f:56:f5:e8:51:ab:e2: 27:43:c9:2e:62:6c:36:50:f8:20:5c:99:46:16:de: 59:a2:7f:7c:02:3f:5e:90:1c:e9:cf:a9:a7:7c:5d: 74:61:a6:8e:a1:e0:96:ed:5f:c2:ce:77:4c:3e:d4: c6:4f:aa:cc:4b:e5:9f:8f:e0:95:b3:3b:55:67:fa: fe:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:01:FE:62:DD:55:A1:C2:0A:04:0F:24:7C:C3:B5:85:25:BA:0C:D3 X509v3 Authority Key Identifier: keyid:1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d2:7b:d8:2a:95:7d:83:30:26:76:8f:94:9b:2c:65:09:0c:30: 65:b8:d9:bf:68:7b:4a:e4:c1:1e:35:9c:7a:98:8c:ce:8a:d3: 98:97:2a:c2:26:67:3d:cc:4b:02:83:59:58:be:24:ba:70:d0: d7:ea:f2:df:d6:27:53:5f:a6:99:1a:a0:7a:5d:73:1e:1c:4e: fd:78:33:65:43:aa:90:16:c2:aa:4c:c1:26:04:61:17:91:3a: 39:10:a6:32:f0:d9:2e:f9:16:b3:d5:77:f5:e0:a2:ba:2a:41: f1:23:7e:a0:b9:9e:52:88:07:6b:47:8d:f0:55:93:d5:a5:e9: c2:2a:e5:5b:e4:9d:9c:1a:9b:a3:17:26:ac:6b:80:d6:98:ae: 46:6e:65:5a:b4:94:5d:2d:c6:3c:64:6d:16:4c:f6:f8:3c:70: 1f:0e:b6:bc:d2:53:be:b2:af:b3:19:dd:21:47:ee:dc:ea:6a: e1:49:e2:3f:3c:99:f8:8f:65:de:03:3a:96:42:47:eb:53:9f: 5f:a1:2e:bc:38:e9:4d:72:34:0b:aa:ac:16:9b:6e:f7:15:84: 5c:58:96:67:7f:ee:da:73:0d:01:d7:45:d5:45:ec:f1:35:ff: b5:19:d8:d4:3c:25:47:d9:f8:92:30:f7:03:25:07:1f:c3:0e: ad:81:0f:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZYO1tWhrWK5PgCimP1pZst7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhY2I2Mzc2YTE2NDhkNDlkNTVlNGQ3YjAxMzcxMzY3YjBk YzJhZjkwHhcNMjUwNDA3MDYwMTIyWhcNMjUwNDA4MDYwMTIyWjAzMTEwLwYDVQQD Eyg1NDAxZmU2MmRkNTVhMWMyMGEwNDBmMjQ3Y2MzYjU4NTI1YmEwY2QzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2eBVwnDVjy4FQpSDeQyWBWokGJAw qXilKRJLq23wUIX4v6/P57eKD1qr4kUgmk3l9JApvdTk6+sZ4qOX2MGpx3BcYzev 8Xpw9oltOFV3D8TX3O4vGNq4aTO5mfWdHM/8SwoJ9OhvWHlCa2IlvUuE4s9iiaaG EpC/bTj0Hckrh8fq49R89CvaLVpheKclpiT6q+E62g2sIv61APv2EJJAKCqQ4BEa shZya/+ZANLB/yWIgmDDOS3+TjoPby9W9ehRq+InQ8kuYmw2UPggXJlGFt5Zon98 Aj9ekBzpz6mnfF10YaaOoeCW7V/CzndMPtTGT6rMS+Wfj+CVsztVZ/r+jQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFQB/mLdVaHCCgQPJHzDtYUlugzTMB8GA1UdIwQY MBaAFBrLY3ahZI1J1V5NewE3E2ew3Cr5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3N0amRxRmtqVW5WWGsxN0FUY1RaN0RjS3ZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS83MjQ3YjAtNDk4OS00M2VhLTkzNTAt N2E5MzY3NTFkYjFiLzEvR3N0amRxRmtqVW5WWGsxN0FUY1RaN0RjS3ZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS83MjQ3YjAtNDk4OS00M2VhLTkzNTAtN2E5MzY3NTFkYjFi LzEvR3N0amRxRmtqVW5WWGsxN0FUY1RaN0RjS3ZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0nvYKpV9 gzAmdo+UmyxlCQwwZbjZv2h7SuTBHjWcepiMzorTmJcqwiZnPcxLAoNZWL4kunDQ 1+ry39YnU1+mmRqgel1zHhxO/XgzZUOqkBbCqkzBJgRhF5E6ORCmMvDZLvkWs9V3 9eCiuipB8SN+oLmeUogHa0eN8FWT1aXpwirlW+SdnBqboxcmrGuA1piuRm5lWrSU XS3GPGRtFkz2+DxwHw62vNJTvrKvsxndIUfu3Opq4UniPzyZ+I9l3gM6lkJH61Of X6EuvDjpTXI0C6qsFptu9xWEXFiWZ3/u2nMNAddF1UXs8TX/tRnY1DwlR9n4kjD3 AyUHH8MOrYEPOQ== -----END CERTIFICATE-----Generated at Mon Apr 7 13:57:49 2025 by rpki-client