$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft File: CK8JGFi7mWUXZDmcZWXfegg0260.mft (raw, json) Hash identifier: wfmGaoTCvwfwTfbbdPCTe2yrZQ29jckZ+2p8mNOoQ7Y= Subject key identifier: D9:7E:E8:0C:B3:AE:1E:F7:E9:FD:12:E0:6C:06:2E:91:5D:2A:35:CE Authority key identifier: 08:AF:09:18:58:BB:99:65:17:64:39:9C:65:65:DF:7A:08:34:DB:AD Certificate issuer: /CN=08af091858bb99651764399c6565df7a0834dbad Certificate serial: 0196165976594F399052603E0554CBDC31F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft Manifest number: 07AA Signing time: Tue 08 Apr 2025 17:01:23 +0000 Manifest this update: Tue 08 Apr 2025 17:01:23 +0000 Manifest next update: Wed 09 Apr 2025 17:01:23 +0000 Files and hashes: 1: 1YffucAnrX0zrPGVUVBeyKH78tE.roa (hash: F+0MkZW1rwniUkgJEFMqZDUVPzIQlWc77ANUG11yVk0=) 2: CK8JGFi7mWUXZDmcZWXfegg0260.crl (hash: uIzO4B63rC+PD0dayp0Rz4KLZ/K16IFQ8GsQboQ+EDE=) 3: HHgp5sq5yc4_sgJa6AXu1wOFQNM.roa (hash: 7azvHrY82JhsqK3mxuoAki0dX0VXyY18Oolw0K+QPEw=) 4: QIYUcsbQNAYJ49MS9GSzg6HzMws.roa (hash: 25Ipjti12DAizEBm/x19xImh3kKTX0L8ySHToWXRDaw=) 5: b6ZEK46tBFQpFeGihP04dAsRVEs.roa (hash: QgioZFeGRbfakufTGnBIdfmvDS/FUhl+3OYWyWgTaL4=) 6: dntaOaxuIDGd8pI8wGTFAJRgyN0.roa (hash: ZmPkwqzAaYGLrLg5+RqVjoLEOwPFE1N2kmesXzCCUwI=) 7: pM8VKNSiqXyxvrYM2CF2U0Iw0pw.roa (hash: fs4sKC29dVzpn86XWfZbe24a1J4GrvjTCH4XsQbkw6c=) 8: qQrVFVU2zYEeKI_c1sPfgRBsdws.roa (hash: Q0Q6+jTPsyoLSIpvRXxP/rur4NZVUawp72Ly9Y4IL/A=) 9: tstTYn_D9Pn-4nRlBfI2UB_WSGg.roa (hash: ZjiObePgXbEPhVg4yY+Q8sRWmDFO/c82OdQ5TNgpPAM=) 10: zEb6SCNh9IA2ZcmgZWwsmTznbFk.roa (hash: tgHdlVCEN4GvD5zc3JRTYHWhACpqWoQ7O4VCFRbyik4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 09 Apr 2025 13:43:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:16:59:76:59:4f:39:90:52:60:3e:05:54:cb:dc:31:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08af091858bb99651764399c6565df7a0834dbad Validity Not Before: Apr 8 17:01:23 2025 GMT Not After : Apr 9 17:01:23 2025 GMT Subject: CN=d97ee80cb3ae1ef7e9fd12e06c062e915d2a35ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:01:dd:70:25:65:5b:bf:cc:5d:eb:03:81:e0: 8e:a9:84:24:b3:45:c3:56:4c:44:89:00:15:d4:70: 90:50:c8:bd:3e:ee:55:92:0a:60:af:ae:b0:5d:e6: 9f:94:98:7f:4b:67:77:e4:37:d4:c4:74:60:b8:69: 9b:44:99:9e:0f:2d:2a:13:27:29:26:68:cd:37:2a: c3:f3:a8:4a:c5:c8:c1:26:ae:95:31:bc:fc:64:ce: 36:06:f3:8c:16:1f:ca:2c:9a:3f:ad:f5:26:8f:9f: 6c:99:eb:e9:6a:b5:98:26:1b:0d:55:87:eb:50:b4: f6:9a:d7:db:c5:f5:95:8c:37:16:d0:7e:3d:8b:d9: 13:1e:5b:b4:4c:25:e1:e8:63:f3:30:45:4a:0e:f0: 67:83:3f:04:75:8d:6a:ef:0f:f4:4e:65:46:c4:ed: 80:73:85:5c:e3:4b:e2:ae:c2:80:26:2d:87:96:f5: 2b:ad:39:07:98:11:ce:ea:b8:6d:72:6d:a9:e3:18: 39:82:f7:8d:70:78:68:9b:f5:d5:ae:e7:fe:5e:d0: 48:2f:c0:d1:8a:d2:65:b0:54:4e:f0:18:d8:ea:0e: f2:11:3a:75:d5:28:59:1c:df:a0:96:72:8d:71:f8: 5e:f2:c9:a5:bb:59:f2:78:22:60:80:82:4d:95:fd: cf:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:7E:E8:0C:B3:AE:1E:F7:E9:FD:12:E0:6C:06:2E:91:5D:2A:35:CE X509v3 Authority Key Identifier: keyid:08:AF:09:18:58:BB:99:65:17:64:39:9C:65:65:DF:7A:08:34:DB:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:2a:45:ac:97:ea:fa:e8:77:0e:73:1b:6a:2f:4e:3e:f8:4c: ff:3d:e4:9b:4a:3a:94:76:46:bb:cf:23:32:5c:23:bc:c3:d3: 89:27:60:a8:0e:2a:e5:90:0d:87:25:56:09:8a:98:86:88:ef: 8e:20:f5:96:9b:8b:97:7f:38:66:4b:99:b3:a2:be:7b:fc:ea: c7:12:1d:d0:a2:da:19:6d:e2:95:92:97:56:a4:64:1d:61:60: 81:0e:4e:85:0e:c3:fd:6b:40:4f:c1:c8:0e:53:aa:9e:03:64: c6:03:a1:fa:aa:00:79:f1:c3:9c:fd:aa:1e:b1:84:9f:55:3c: e1:6f:cf:7a:07:3f:40:42:b6:72:a7:24:1b:4d:0f:fd:ea:19: 84:3c:8e:da:09:39:28:5b:bf:04:0f:6f:e2:e4:c9:dc:14:d5: 7c:aa:4e:44:ba:a6:5b:2c:14:91:db:9e:7d:51:cf:73:0d:ae: e7:0f:10:05:42:fc:1c:9c:94:4b:89:66:87:2f:cd:fc:d7:7e: 81:f4:e5:43:d5:4c:e7:54:62:0b:90:c7:94:2a:f6:90:29:b7: a5:50:49:3b:b4:fd:96:a2:31:5f:bc:9e:f6:20:56:4d:fe:4e: 02:57:84:1f:fd:b5:de:73:0c:5e:71:77:b2:2b:5d:1f:ad:d3: d3:1c:97:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZYWWXZZTzmQUmA+BVTL3DHxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4YWYwOTE4NThiYjk5NjUxNzY0Mzk5YzY1NjVkZjdhMDgz NGRiYWQwHhcNMjUwNDA4MTcwMTIzWhcNMjUwNDA5MTcwMTIzWjAzMTEwLwYDVQQD EyhkOTdlZTgwY2IzYWUxZWY3ZTlmZDEyZTA2YzA2MmU5MTVkMmEzNWNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5AHdcCVlW7/MXesDgeCOqYQks0XD VkxEiQAV1HCQUMi9Pu5Vkgpgr66wXeaflJh/S2d35DfUxHRguGmbRJmeDy0qEycp JmjNNyrD86hKxcjBJq6VMbz8ZM42BvOMFh/KLJo/rfUmj59smevparWYJhsNVYfr ULT2mtfbxfWVjDcW0H49i9kTHlu0TCXh6GPzMEVKDvBngz8EdY1q7w/0TmVGxO2A c4Vc40virsKAJi2HlvUrrTkHmBHO6rhtcm2p4xg5gveNcHhom/XVruf+XtBIL8DR itJlsFRO8BjY6g7yETp11ShZHN+glnKNcfhe8smlu1nyeCJggIJNlf3PnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNl+6Ayzrh736f0S4GwGLpFdKjXOMB8GA1UdIwQY MBaAFAivCRhYu5llF2Q5nGVl33oINNutMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0s4SkdGaTdtV1VYWkRtY1pXWGZlZ2cwMjYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS83MDBmZDMtYzM2MC00OGFiLThhMDYt NTYxMjliN2RjMDE4LzEvQ0s4SkdGaTdtV1VYWkRtY1pXWGZlZ2cwMjYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS83MDBmZDMtYzM2MC00OGFiLThhMDYtNTYxMjliN2RjMDE4 LzEvQ0s4SkdGaTdtV1VYWkRtY1pXWGZlZ2cwMjYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAySpFrJfq +uh3DnMbai9OPvhM/z3km0o6lHZGu88jMlwjvMPTiSdgqA4q5ZANhyVWCYqYhojv jiD1lpuLl384ZkuZs6K+e/zqxxId0KLaGW3ilZKXVqRkHWFggQ5OhQ7D/WtAT8HI DlOqngNkxgOh+qoAefHDnP2qHrGEn1U84W/Pegc/QEK2cqckG00P/eoZhDyO2gk5 KFu/BA9v4uTJ3BTVfKpORLqmWywUkduefVHPcw2u5w8QBUL8HJyUS4lmhy/N/Nd+ gfTlQ9VM51RiC5DHlCr2kCm3pVBJO7T9lqIxX7ye9iBWTf5OAleEH/213nMMXnF3 sitdH63T0xyX5A== -----END CERTIFICATE-----Generated at Tue Apr 8 19:01:22 2025 by rpki-client