$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft File: 9NCKHhy8kJJU6ea5yTn9haJoseE.mft (raw, json) Hash identifier: Qfy+gsWpc92I6podTBzo/+xnVipwbvNYeG8802Qh1BQ= Subject key identifier: 73:69:DA:B3:40:AA:B2:F5:98:1C:EF:24:59:70:B5:EB:F9:FA:95:87 Authority key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1 Certificate issuer: /CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1 Certificate serial: 019601BFE38C3479A0194CDD63943FC29A5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft Manifest number: 11CD Signing time: Fri 04 Apr 2025 17:01:14 +0000 Manifest this update: Fri 04 Apr 2025 17:01:14 +0000 Manifest next update: Sat 05 Apr 2025 17:01:14 +0000 Files and hashes: 1: 1-oV8wOxM52lFBAZelvlJ1ChLVhE.roa (hash: qQM4l/X3SkEZ4h6aGb2fizqmObGG55sXX+NpcuuHKmE=) 2: 5DRGkm67v3ztNtkmGE9CjHe6qkM.roa (hash: c8V8b8nhOphSZmzRUJQWFcuzVB0h+VPYqSuF8VwM49s=) 3: 7yxzEpwrPvkVtysBCZ9w3NvniME.roa (hash: myjWs4rYeOG9qs0FigCiX4CRWLx91cNiLYd0bOOlv14=) 4: 92YX8_mKsRYRDoG9l3vH6epU_24.roa (hash: R3F3U2oxwWbOLay+ACJCalTUQG9HKAHuMPfnBBPm6HM=) 5: 9NCKHhy8kJJU6ea5yTn9haJoseE.crl (hash: T5fv9y/hiDqADdBCTiiX39EKybviC1CIGGw9x+bewOE=) 6: KO2tMW1du9dekDI4Y-9_plcBYSk.roa (hash: L0Z21UNOLLnga8zui/KqFlS4YtgeuRJ/OBRssHd9hXE=) 7: MNDWfcZ7THpd1V-JitlFbJJvT2k.roa (hash: 8342ttspxabX1GCBeEK5LbRuFU+2GSg8qKL1eSDng9w=) 8: XST97aNGZZRqCU4Q2norfi4ndhI.roa (hash: Ej7Bdzjuir9bzqXEX3Za6erR0SRowgGxNRVnC/R3Coo=) 9: dDuXmy2-kOiyveIRPNO2zv9O6K4.roa (hash: dIZYpEJfOlH3jzzYUHlsUhacisdYiaRu3PDoh93lXCs=) 10: f-WBLlvCqU3gT2U4k2jp9nRYULc.roa (hash: SbHCNZepVf+SJT1VG5+nfS1tN9EtzQEtvMS4oCBecRI=) 11: fUyauZFzWLubSyadnmzbsZyl6iM.roa (hash: ZXpfbo2eejrS0yFMBL0ES1gh6HanTDFLIm85aYT7+bA=) 12: iGMhmXXBNt2s7l-0mx0YRvUMWSo.roa (hash: McOC3wl39qVTP2IvApkUHWGgt9CHnxQ9E9acv2S4LQA=) 13: jiF9vHMkWKJpjP76Gux54TKpnzc.roa (hash: CCXc0iW9MVKVYNnO0rxCM2yL2mQD+I1ttQ+9hGTDpvQ=) 14: jvpcLjBfXq2k1CyzEi-i4yMMJCg.roa (hash: d6CrkQWol3xr2PKuUL7zdsYsRYcblyvcCYZMvOC8fx8=) 15: nuAp8jQeL57cxcv-qMziP5TUwtY.roa (hash: vb4FRcaEF1fztUtawfL6ZNK658gxKBaRE6cvTVdZv2U=) 16: w1UWJINQiqIyHaTTFS0euILJR58.roa (hash: jXqC61xJbm2P2p00w1kBmanAbpZq6zjGJCspuExiIe4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Apr 2025 17:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:01:bf:e3:8c:34:79:a0:19:4c:dd:63:94:3f:c2:9a:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1 Validity Not Before: Apr 4 17:01:14 2025 GMT Not After : Apr 5 17:01:14 2025 GMT Subject: CN=7369dab340aab2f5981cef245970b5ebf9fa9587 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:68:77:f5:3f:84:32:42:96:1b:e3:80:2e:a1: 90:92:32:9a:fa:d5:52:6f:fe:ac:56:c1:2b:20:60: ab:ab:7d:61:de:b3:65:93:a6:65:02:e8:5e:70:9f: 88:20:47:38:6f:db:67:36:cf:1e:e8:2a:79:98:46: e2:ab:3a:14:fa:28:2d:83:f9:d5:c3:f3:9b:14:2b: 73:5e:3e:55:23:d8:1e:c5:aa:64:c0:e8:be:70:b4: 03:eb:31:66:54:df:2c:3e:b6:0c:da:04:04:99:49: f5:db:d9:6e:a2:77:fa:6e:3c:eb:83:46:6c:cd:d4: fd:66:72:92:90:ee:aa:7e:0c:45:14:0a:f2:89:af: 39:e9:bf:71:04:f7:5a:ab:39:03:58:f1:cc:32:46: 50:94:bd:ea:94:57:68:89:ff:5b:b5:4d:68:7a:aa: a4:74:17:75:d0:92:13:99:40:e9:66:99:27:31:fe: 3b:83:33:46:fe:b0:65:8f:6a:18:1c:c2:6d:e0:84: 0d:3c:c1:f9:cf:e1:f3:87:2a:76:d4:1e:09:6e:40: b2:d1:c4:18:0e:1d:ea:ec:77:1e:a3:a0:77:57:7e: ba:01:e1:0b:2c:d3:fb:ac:a4:43:da:44:90:9d:6b: 23:5a:14:71:8b:32:61:52:c0:84:ea:65:f3:61:ba: e7:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:69:DA:B3:40:AA:B2:F5:98:1C:EF:24:59:70:B5:EB:F9:FA:95:87 X509v3 Authority Key Identifier: keyid:F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:ee:32:9a:d7:5c:4c:0d:79:aa:a8:0b:8e:e3:6d:99:fc:42: 6f:29:f2:99:f9:c8:8a:5c:fd:1f:1b:a2:e2:12:b6:cc:50:f9: d6:00:9e:e0:37:33:08:e5:5e:24:2e:a8:94:8d:85:c8:1e:b6: 10:41:c2:20:01:2d:17:f2:33:52:87:dd:a6:1a:25:d7:64:62: 5c:e9:ca:43:bb:77:50:51:9b:bb:a3:7c:63:01:6e:e9:f8:08: c0:39:79:13:ca:98:90:64:89:50:81:c4:32:69:b3:18:9b:73: 79:e5:ad:f6:f9:5a:fc:6d:29:5d:c5:03:16:be:f4:58:6d:b5: 99:6f:09:dc:52:08:aa:96:22:cc:5e:4a:3b:46:c5:fc:a0:64: a5:91:69:ba:60:de:04:89:10:96:06:f1:de:f0:9e:46:7a:3f: 62:2f:70:90:15:34:21:dc:6e:af:23:a1:97:0e:87:60:7e:9d: f8:4a:26:de:13:a3:e4:23:8d:4d:15:c1:f1:67:16:d5:dd:fb: ba:cc:7a:60:33:83:d7:0b:08:3f:ce:fc:6f:3f:21:52:ff:31: 43:79:f3:a8:e0:f9:58:f8:11:61:fd:d6:f0:cc:43:e9:6a:f1: f6:88:dc:1f:13:47:92:89:8e:5d:98:8c:1b:d0:b7:4c:fa:68: 01:d6:12:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZYBv+OMNHmgGUzdY5Q/wppdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ZDA4YTFlMWNiYzkwOTI1NGU5ZTZiOWM5MzlmZDg1YTI2 OGIxZTEwHhcNMjUwNDA0MTcwMTE0WhcNMjUwNDA1MTcwMTE0WjAzMTEwLwYDVQQD Eyg3MzY5ZGFiMzQwYWFiMmY1OTgxY2VmMjQ1OTcwYjVlYmY5ZmE5NTg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWh39T+EMkKWG+OALqGQkjKa+tVS b/6sVsErIGCrq31h3rNlk6ZlAuhecJ+IIEc4b9tnNs8e6Cp5mEbiqzoU+igtg/nV w/ObFCtzXj5VI9gexapkwOi+cLQD6zFmVN8sPrYM2gQEmUn129luonf6bjzrg0Zs zdT9ZnKSkO6qfgxFFAryia856b9xBPdaqzkDWPHMMkZQlL3qlFdoif9btU1oeqqk dBd10JITmUDpZpknMf47gzNG/rBlj2oYHMJt4IQNPMH5z+Hzhyp21B4JbkCy0cQY Dh3q7Hceo6B3V366AeELLNP7rKRD2kSQnWsjWhRxizJhUsCE6mXzYbrnoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHNp2rNAqrL1mBzvJFlwtev5+pWHMB8GA1UdIwQY MBaAFPTQih4cvJCSVOnmuck5/YWiaLHhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NDlmZGMtMGQzYS00MWVjLWExY2Ut ZGNlOTQ3ZTI5NGI2LzEvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi82NDlmZGMtMGQzYS00MWVjLWExY2UtZGNlOTQ3ZTI5NGI2 LzEvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJe4ymtdc TA15qqgLjuNtmfxCbynymfnIilz9Hxui4hK2zFD51gCe4DczCOVeJC6olI2FyB62 EEHCIAEtF/IzUofdphol12RiXOnKQ7t3UFGbu6N8YwFu6fgIwDl5E8qYkGSJUIHE MmmzGJtzeeWt9vla/G0pXcUDFr70WG21mW8J3FIIqpYizF5KO0bF/KBkpZFpumDe BIkQlgbx3vCeRno/Yi9wkBU0IdxuryOhlw6HYH6d+Eom3hOj5CONTRXB8WcW1d37 usx6YDOD1wsIP878bz8hUv8xQ3nzqOD5WPgRYf3W8MxD6Wrx9ojcHxNHkomOXZiM G9C3TPpoAdYSTA== -----END CERTIFICATE-----Generated at Fri Apr 4 23:44:11 2025 by rpki-client