$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft File: DdRBw_-ugphCJJ6USwOFEIH02eA.mft (raw, json) Hash identifier: 1cgXZSroVfTMf5b7j8L804ZhhETAzwn5iX2sU81VvBc= Subject key identifier: 7C:20:CB:EB:60:6B:02:6B:EA:C7:57:D5:4F:E4:B0:A4:8B:A0:15:24 Authority key identifier: 0D:D4:41:C3:FF:AE:82:98:42:24:9E:94:4B:03:85:10:81:F4:D9:E0 Certificate issuer: /CN=0dd441c3ffae829842249e944b03851081f4d9e0 Certificate serial: 01962F06BF6C7F0C1E68C9F94F0E1617257A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft Manifest number: 0D57 Signing time: Sun 13 Apr 2025 12:01:33 +0000 Manifest this update: Sun 13 Apr 2025 12:01:33 +0000 Manifest next update: Mon 14 Apr 2025 12:01:33 +0000 Files and hashes: 1: 1-16UNdr39GQR6WgTD6_itgdgXrc.roa (hash: zJk3e0ik342Ah/cCpBqTYO3BgJOewuzuYG0mEAa3aYU=) 2: 60kez5E8tU1qx0TTvLpwwOmqJPM.roa (hash: ooRDWi6UfD8+CXLZ4F0Bs69z57BBzf7Yu441rhOqEKs=) 3: 9bAJqgVHnvRdYInB5oZXujQ5XoQ.roa (hash: qWJO+gO+X6NUIcqwJsrxmMcrEAIF+s1Wskr1UuY7rv8=) 4: CECuYLKJKay-_DTUpRvjJ6e9Xok.roa (hash: Bww9jwaRvi6o6HabYuvr08y2yEYkanNlup4j1yRDv98=) 5: DdRBw_-ugphCJJ6USwOFEIH02eA.crl (hash: wEolIfgaNnBVwZl0/LlxJcJiy9ZQ5XzwYQPTbfg1E2M=) 6: I1TR6PkHLqcK9JhqQozTxA2F8dM.roa (hash: pz5C+r8mg2AZGBZBVvOWJslEqCo+j9NeWY7YNXwFyuM=) 7: isGhiPrIPc7CYukDYcPX4YgodMI.roa (hash: yF67JZGe1yAdufc/s5j5+72AF3mRhIY4Nwz+CqDvDoY=) 8: kwXEh1Xh-2K2CVYqtcC-AT6Gb_U.roa (hash: dIfLEvdyhBW74zPx42unz5ShPnUU/ehc/8slF8xgQRY=) 9: rd8NnydFpZY9VMF7rki6mDfX1OE.roa (hash: Fdl4wWRM/i0XUBMw6ya79MvwrhVDeixQdqpTA/MdgWc=) 10: ub-f3sQpeZFIR7bmv9inv38i9hc.roa (hash: d/wCuYvq40CEhT6+Gf00rW0og+1XZHNfdNwE4g4ibIk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.crl rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 14 Apr 2025 08:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:2f:06:bf:6c:7f:0c:1e:68:c9:f9:4f:0e:16:17:25:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dd441c3ffae829842249e944b03851081f4d9e0 Validity Not Before: Apr 13 12:01:33 2025 GMT Not After : Apr 14 12:01:33 2025 GMT Subject: CN=7c20cbeb606b026beac757d54fe4b0a48ba01524 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:66:78:37:4c:47:17:a2:8c:35:98:21:fb:49: 15:94:75:51:3d:d4:13:05:02:aa:78:0f:47:4d:61: 07:9c:51:1a:4b:c4:a5:fb:84:70:ba:92:24:0f:04: 99:fb:24:1e:db:84:1c:4f:37:e8:7e:62:b4:ab:84: 15:a3:a3:d7:99:84:04:01:3b:ff:89:8a:a4:a0:59: 75:a1:8d:41:32:91:08:37:a1:38:c4:c9:00:0c:b6: f2:58:7a:b0:b7:d0:dc:b4:61:f6:8c:9d:e4:08:7f: 12:6e:5d:c7:81:85:54:14:ba:6a:12:c4:a2:d0:a3: aa:16:78:a2:06:fa:7c:5c:27:9c:82:83:08:18:9c: be:32:2e:8b:73:a3:49:ca:21:94:4f:c9:64:6c:d2: 97:de:11:d8:25:f9:e7:98:66:a1:51:8a:c1:63:1a: 4e:04:6c:ff:d5:0d:dc:f0:ad:14:b0:6d:03:f0:3a: a8:21:25:78:08:c9:e6:18:69:60:12:b8:a4:6a:77: 68:86:ab:2f:62:57:8f:89:27:f8:9e:69:66:32:a5: 50:c3:cf:96:14:64:c8:6b:8f:35:7a:32:87:36:3a: 7a:96:bd:c4:57:9e:4f:46:54:99:c7:f1:4f:ec:54: 90:2f:d7:7d:75:b6:07:d6:b9:22:fd:4a:0c:f8:74: 37:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:20:CB:EB:60:6B:02:6B:EA:C7:57:D5:4F:E4:B0:A4:8B:A0:15:24 X509v3 Authority Key Identifier: keyid:0D:D4:41:C3:FF:AE:82:98:42:24:9E:94:4B:03:85:10:81:F4:D9:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:ab:88:08:30:6f:bf:26:b7:7a:61:61:39:f2:f9:99:15:00: 80:1d:29:21:16:cb:d4:c4:bc:2d:69:db:c9:cb:33:ae:85:b8: 24:cf:ad:3e:0d:31:4b:fd:3d:55:26:98:97:9a:3e:38:0e:54: bd:fa:97:7f:d3:7b:60:41:1a:eb:d0:e2:54:76:62:f4:af:ba: 43:a2:a6:2e:bd:70:2d:3a:15:cd:96:a9:d8:a3:9c:fa:ad:e6: 50:42:89:71:b0:7d:4d:24:4e:ca:d7:0d:6c:22:c0:a3:bb:8a: f5:38:d7:41:62:6b:0f:f9:f3:de:ad:ad:14:51:7a:7e:7b:7b: db:6a:c6:4f:b6:a0:4f:8a:71:64:c4:3a:51:90:21:b3:4e:9c: 11:28:1f:c9:ff:b9:dd:9c:75:b3:ac:1c:77:4d:0a:c1:ad:18: 58:7b:1b:50:30:65:92:3a:4e:a1:b0:1a:10:3f:e5:6d:a1:02: fd:8d:be:0f:6a:90:7c:76:12:49:cf:52:ce:79:9c:d4:7f:c5: 43:46:2b:11:a7:08:3e:32:48:ae:84:4d:09:7d:1b:1d:71:d9: ca:cf:fd:1e:5c:0d:08:27:45:40:47:04:9a:8d:41:0e:e2:80: 66:ab:26:37:72:d9:3f:fa:fb:0c:47:ee:64:b9:09:e3:0a:20: 3e:f2:7e:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZYvBr9sfwweaMn5Tw4WFyV6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkZDQ0MWMzZmZhZTgyOTg0MjI0OWU5NDRiMDM4NTEwODFm NGQ5ZTAwHhcNMjUwNDEzMTIwMTMzWhcNMjUwNDE0MTIwMTMzWjAzMTEwLwYDVQQD Eyg3YzIwY2JlYjYwNmIwMjZiZWFjNzU3ZDU0ZmU0YjBhNDhiYTAxNTI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmZ4N0xHF6KMNZgh+0kVlHVRPdQT BQKqeA9HTWEHnFEaS8Sl+4RwupIkDwSZ+yQe24QcTzfofmK0q4QVo6PXmYQEATv/ iYqkoFl1oY1BMpEIN6E4xMkADLbyWHqwt9DctGH2jJ3kCH8Sbl3HgYVUFLpqEsSi 0KOqFniiBvp8XCecgoMIGJy+Mi6Lc6NJyiGUT8lkbNKX3hHYJfnnmGahUYrBYxpO BGz/1Q3c8K0UsG0D8DqoISV4CMnmGGlgErikandohqsvYlePiSf4nmlmMqVQw8+W FGTIa481ejKHNjp6lr3EV55PRlSZx/FP7FSQL9d9dbYH1rki/UoM+HQ3VwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHwgy+tgawJr6sdX1U/ksKSLoBUkMB8GA1UdIwQY MBaAFA3UQcP/roKYQiSelEsDhRCB9NngMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGRSQndfLXVncGhDSko2VVN3T0ZFSUgwMmVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9hN2VmNGQtZGM0NC00ZmFmLTk1MTMt ZTljOTEzMjgzNmZmLzEvRGRSQndfLXVncGhDSko2VVN3T0ZFSUgwMmVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9hN2VmNGQtZGM0NC00ZmFmLTk1MTMtZTljOTEzMjgzNmZm LzEvRGRSQndfLXVncGhDSko2VVN3T0ZFSUgwMmVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwKuICDBv vya3emFhOfL5mRUAgB0pIRbL1MS8LWnbycszroW4JM+tPg0xS/09VSaYl5o+OA5U vfqXf9N7YEEa69DiVHZi9K+6Q6KmLr1wLToVzZap2KOc+q3mUEKJcbB9TSROytcN bCLAo7uK9TjXQWJrD/nz3q2tFFF6fnt722rGT7agT4pxZMQ6UZAhs06cESgfyf+5 3Zx1s6wcd00Kwa0YWHsbUDBlkjpOobAaED/lbaEC/Y2+D2qQfHYSSc9Sznmc1H/F Q0YrEacIPjJIroRNCX0bHXHZys/9HlwNCCdFQEcEmo1BDuKAZqsmN3LZP/r7DEfu ZLkJ4wogPvJ+qQ== -----END CERTIFICATE-----Generated at Sun Apr 13 16:11:24 2025 by rpki-client