$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft File: Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft (raw, json) Hash identifier: WVqw5lZWFDD66tmX1eErZb34gQotNgwzlGgslh7r/os= Subject key identifier: 93:A8:AB:BD:6F:71:94:42:E7:4C:52:87:5B:A3:50:0D:6A:FA:F0:A7 Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Certificate serial: 01950FEB26BD909CBC3E4A3BC49B21F03AEC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft Manifest number: 02B8 Signing time: Sun 16 Feb 2025 18:00:23 +0000 Manifest this update: Sun 16 Feb 2025 18:00:23 +0000 Manifest next update: Mon 17 Feb 2025 18:00:23 +0000 Files and hashes: 1: 4-YxyqPhUFOe02SEgYyRUrADEGw.roa (hash: BzgSygBFO6JBMF8nbeKVFMdy2LXXzo+Pz40oBu4qU+Q=) 2: 48LNmY8hFlc6h6XBwv-1lHo_wLI.roa (hash: AjQp32iGlB+1GsI+lJrVk1grrv63+W6EBzEdzr6CEC4=) 3: 5y1ushKBRUTrOJNUvJiYmUnqiXI.roa (hash: Ci2ppd440+9qMZk/kpg4OojmAw8zTwyC7q8Nf/pbCIw=) 4: 9Pm_asa_Vw3u27gaBRD7i8TL9EU.roa (hash: fYuTOl+DQOrzI8q7otm9pbe4I7lAFHKgzfWFOB4BuJE=) 5: CLpkAB9SkASnLi0bcVjlvibT8q0.roa (hash: h9ZbpSD1UKLYDhyFqL5vdv53fTWYJR5sayvIQP/wamo=) 6: DzbWdDNCGIO77N-Ogi-q-ujsrrc.roa (hash: JXy3wpgCmIL1KJ6V2fbPe71TEfjeAQIbVCR92SplqIo=) 7: MjpFn6xXLJeliOVrxE4LRSoZJq4.roa (hash: o0/RIF6R3143vKZ1QZaL2SQyD+pebwGTDPi1ZlSFxIg=) 8: Q5H4zjpo_lAY91GBCyDIMdF8Mfg.roa (hash: FO79Zf3B72qIbj4WPSUFNr5+RJyVJutt77kTaj0j5mo=) 9: Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl (hash: 0661puH/iaL07tC1vYCvq7ecrRd8yvYxtisWzb7wo6k=) 10: aBAcpt-NbSIhhNI8k3la6pjGmxY.roa (hash: 0ilv4mAJqQfbxZ/Y/Pq8eng8iKkBka04TcFPP4OoCjs=) 11: bSQ2KJkghyGNH1xM4L0qwKLgqKc.roa (hash: ferYAqATun5kAev+OYfREU8H5PWvsH+O2JxdN9vsL3s=) 12: d6jjIfZpoU5dviCc8eI-CowvAk0.roa (hash: +Apm0894AkkpHXh4slVvz3Yax14eHhFmKvTjWItkY6I=) 13: g7tURuUH3V3-cIb4_m5S3L6NgF0.roa (hash: BdP19LBcCTIkuafGLyFvqTdagspaIFMT4g3LWhFA5BM=) 14: gN99sgkdxP_y9Hc-HJG5nWya_kQ.roa (hash: z6+iBWzj4bvqP41UlSpacoaDGuJaxTNbgxZSqBGtsI4=) 15: hIsb24dWsZ8VsBWOEEjl3fdkCsE.roa (hash: A4XAyp6Fewl0t4Uxa5BTFhXjIGGvivyuEJQWo21WUn8=) 16: mKJqEI739B0iTvnzxCUb3biwris.roa (hash: sVTE7upEY8n0C5ZmEcrRs0tBB0vSxTNtRhmRlRax7Jo=) 17: pCE1baMGsmwCYXSEoEEcUwBkH8o.roa (hash: GsYlVdD3sX0x5By8y8crNFzjEYXJ2ZK0i/TeckVJ2AY=) 18: tQlk1mJ3Q57dUylH0cWwEXNsNO4.roa (hash: 88L8h3QT3LZj5nAWKf1psRrxbrTm+VcpE0c7xWTV8YA=) 19: wjjnppJ7-HKX51cklBGQrtzsilQ.roa (hash: 8AAaNfNvMGxOsnnO/hlvM1Sj4iPPxzZv5pf/HzW9AIM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:95:0f:eb:26:bd:90:9c:bc:3e:4a:3b:c4:9b:21:f0:3a:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Validity Not Before: Feb 16 18:00:23 2025 GMT Not After : Feb 17 18:00:23 2025 GMT Subject: CN=93a8abbd6f719442e74c52875ba3500d6afaf0a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0e:e4:aa:ea:12:e0:74:bc:8b:7a:8a:8e:1f: e9:4e:f6:fb:a3:79:5c:ec:10:a0:a2:b8:66:bf:50: 55:4e:0f:f9:4c:e3:bf:63:08:ce:5f:e4:e5:d9:7c: 4f:a2:55:6b:00:d9:69:8f:b7:d5:a0:de:19:85:f7: 03:83:6c:3b:ee:3a:8f:d4:a2:3b:e1:64:50:9b:17: 99:29:f0:d9:4c:6a:12:b2:9a:0d:b4:85:9b:d9:eb: 6e:b5:04:80:0a:21:e7:b0:b8:77:5e:33:d0:a6:b9: 36:4c:44:7d:cf:1f:d7:7f:be:b9:73:c5:d3:c9:08: 19:a9:ed:8c:2d:1c:58:88:92:ed:06:eb:57:71:73: d7:e4:25:15:c1:a6:55:2b:28:43:b7:a5:bb:9f:54: 4c:da:2d:87:f2:bd:7a:78:fe:25:3b:c9:b9:35:6d: dd:9c:ba:40:4a:04:bb:db:2e:a9:26:dc:ff:01:a9: 8d:36:11:66:2d:8b:f7:c4:f9:64:8a:2f:e9:2f:65: 17:7b:00:dc:03:b6:2e:d6:3c:f3:9b:be:c5:23:8b: 41:3d:00:91:7d:bc:b0:58:3b:52:8f:e4:f4:14:ad: 11:f9:9b:f0:7f:96:60:41:a4:eb:87:2b:33:e0:a1: 12:f3:b3:13:0e:61:aa:34:09:a4:fe:e8:2c:2c:b0: 6a:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:A8:AB:BD:6F:71:94:42:E7:4C:52:87:5B:A3:50:0D:6A:FA:F0:A7 X509v3 Authority Key Identifier: keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:1c:20:ba:ca:60:0e:0f:05:0c:49:71:94:d1:2e:65:0b:ef: 89:70:4d:42:98:11:3c:bb:0e:7f:be:47:32:bf:23:fb:9a:3c: b5:eb:7c:6f:84:79:66:dd:ab:c5:e5:2f:1d:0f:54:4d:2c:a5: 6a:45:b3:97:18:ae:d5:bb:3e:ec:ff:d3:ae:73:6d:9d:1a:31: f6:ef:af:e7:07:01:1d:d2:f3:b8:15:1c:c5:7c:c6:a7:fc:3e: a2:1f:ba:f3:61:55:1d:f2:ae:5d:00:4a:ba:e8:6f:72:c6:de: 18:d9:b9:61:77:58:a4:64:95:16:f4:39:0d:c7:b2:a0:2e:d9: 30:ce:64:80:da:a2:d6:a3:e3:97:71:ea:c0:db:1d:83:7a:29: 51:9c:fc:d3:94:00:ff:3b:23:92:35:4b:35:11:8d:09:de:ee: 8f:72:be:b6:d8:65:b3:7d:1f:ac:23:4e:89:bb:fb:ee:e2:dd: c5:4c:0f:c4:09:7e:29:82:d7:d1:c4:bd:09:b0:ec:70:0c:26: 5d:ff:4d:70:8f:07:5f:7d:46:77:50:8f:5a:0e:74:91:22:1e: db:e8:11:50:a2:7b:d7:f7:e9:33:b8:be:29:68:a7:fb:46:9d: c6:1e:3d:69:dd:69:13:4b:83:d6:ea:8a:2b:c6:78:8e:ad:8c: 3f:3d:2c:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZUP6ya9kJy8Pko7xJsh8DrsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZjMxYmRlNDY1MTYzNDdmNGVkZmNiZTMwZWRhYzlhMDll NGUwZTAwHhcNMjUwMjE2MTgwMDIzWhcNMjUwMjE3MTgwMDIzWjAzMTEwLwYDVQQD Eyg5M2E4YWJiZDZmNzE5NDQyZTc0YzUyODc1YmEzNTAwZDZhZmFmMGE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtw7kquoS4HS8i3qKjh/pTvb7o3lc 7BCgorhmv1BVTg/5TOO/YwjOX+Tl2XxPolVrANlpj7fVoN4ZhfcDg2w77jqP1KI7 4WRQmxeZKfDZTGoSspoNtIWb2etutQSACiHnsLh3XjPQprk2TER9zx/Xf765c8XT yQgZqe2MLRxYiJLtButXcXPX5CUVwaZVKyhDt6W7n1RM2i2H8r16eP4lO8m5NW3d nLpASgS72y6pJtz/AamNNhFmLYv3xPlkii/pL2UXewDcA7Yu1jzzm77FI4tBPQCR fbywWDtSj+T0FK0R+Zvwf5ZgQaTrhysz4KES87MTDmGqNAmk/ugsLLBqlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJOoq71vcZRC50xSh1ujUA1q+vCnMB8GA1UdIwQY MBaAFGfzG95GUWNH9O38vjDtrJoJ5ODgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYt ZjZjYzRlZjBmN2RmLzEvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYtZjZjYzRlZjBmN2Rm LzEvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvRwguspg Dg8FDElxlNEuZQvviXBNQpgRPLsOf75HMr8j+5o8tet8b4R5Zt2rxeUvHQ9UTSyl akWzlxiu1bs+7P/TrnNtnRox9u+v5wcBHdLzuBUcxXzGp/w+oh+682FVHfKuXQBK uuhvcsbeGNm5YXdYpGSVFvQ5DceyoC7ZMM5kgNqi1qPjl3HqwNsdg3opUZz805QA /zsjkjVLNRGNCd7uj3K+tthls30frCNOibv77uLdxUwPxAl+KYLX0cS9CbDscAwm Xf9NcI8HX31Gd1CPWg50kSIe2+gRUKJ71/fpM7i+KWin+0adxh49ad1pE0uD1uqK K8Z4jq2MPz0sCA== -----END CERTIFICATE-----Generated at Sun Feb 16 21:47:02 2025 by rpki-client