$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft File: 9NCKHhy8kJJU6ea5yTn9haJoseE.mft (raw, json) Hash identifier: M0OjApMXtXWnIH6cDSPPTaH6oesQjRTdmuqnpQNKduo= Subject key identifier: D3:92:BB:F6:79:83:23:DF:57:58:A5:DD:B1:07:1F:FF:CD:7C:CE:B5 Authority key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1 Certificate issuer: /CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1 Certificate serial: 01935162D1564A6BCE6B3CF274BD89EC1874 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft Manifest number: 1063 Signing time: Fri 22 Nov 2024 01:00:50 +0000 Manifest this update: Fri 22 Nov 2024 01:00:50 +0000 Manifest next update: Sat 23 Nov 2024 01:00:50 +0000 Files and hashes: 1: 1-HLnow8YPnb7n8q2iYEVeuNCVME.roa (hash: a0B+Ie02ue49b8pFY8vAsXh6IdGKnr2GGKUwRP2XgK0=) 2: 3AF3l0_OAiICtnnmuYpihsbA-0E.roa (hash: G7irVQR/vTfbb5UhxAhqF53HWRypwNBf9rjkbfse17w=) 3: 69onZAEwiiF_OhPu7q014cJh1DY.roa (hash: /MH3LcrQblGYm058p1YviX3ZzzvrFVMpFqQOdRekD8Y=) 4: 6TzWnsJp-Qc1yM3COpWH0bBBvGc.roa (hash: pFQ7lHuL0oUe9o+p59D0gUmks0k6NODjDAlTckSZGNI=) 5: 7aHzCYVq1XaxoMD2lkt2U7D0Qds.roa (hash: 5tV5B06PvDwyxxb2UC9TLNS9YcyfIK+t48AMeH+23Xo=) 6: 9NCKHhy8kJJU6ea5yTn9haJoseE.crl (hash: JdhNBy9bqrqLCIMAjz4+UCmwA4vGY52sZDnrRMEhjPs=) 7: M0pBiwAI9s00bcJnrb5wkgi3L1E.roa (hash: 5Yye35Ow7J6m+I08YjUydmBdFrHCvhcDBsliCy8Wspo=) 8: VqJkehjnYcv_lokftA4tJKWoiXA.roa (hash: lky9HyKVKEXWWJwR0E6FmyQDeSddeQ9oRq2/85cLKO0=) 9: Xj7m3t61iQce-lyanFEFL9KSmSw.roa (hash: dOQoGXwpJd6Tl1UNAeTDnn3BEA32FbK+enKNjWc4Jjg=) 10: ZO5WAngxOFjjh8ffeK72awuOG40.roa (hash: o1Lq0zR7+vTAYaclEorK9ppkvnu95lt+4vozeglOMcw=) 11: _N-SC-fVtybmowmxbq702Hn4ojw.roa (hash: jK0Nl1dfWTKYN1mvSTX6y7ioUz4JTzjisrgb00Digjc=) 12: egrXnCZznlXwJughdiEQDM2cFc0.roa (hash: IIQsIQIMXT60bw7unkgXDKkkFQDCtWRp6RFWlJEgsXI=) 13: nQAJ5_gG2ZnxATScR019iU0nMAg.roa (hash: IU+QRAXwv0LsY36Gk1Kv4OdajUAJlJLnpSE2V1Px7+U=) 14: ok42s4KJieMdnCoxSLC2_ANwv0c.roa (hash: h7c1nbFC5MKtOOdKRhjiU4neAHHGaTM5dY/tnnULad4=) 15: petAj8PCZfaB-YpzcaE9AYiq5B8.roa (hash: mOALGmbP7UHDk9R1IJQYSUM1QtF3L1UYKctxOF4kKSU=) 16: rCR0qoBqbxzNfOJzMB-ndpE3gt0.roa (hash: wV2MuxA/qnbYD8w8w9D5Mg5LU3LXaYLqYlNJF+AQsbU=) 17: wgsHRxg0TvaXYLyXJEpgUDoHkK8.roa (hash: zGY8sgGyqNuHM+Y8TKsJqs+yAkfthIWgi6VbMoZwC5c=) 18: wlkr4xZ2U4Hv5fyUslILAPrjwbU.roa (hash: 9KI0k0gAowP2Fbrp2FHXBNEODJTaUpDc8LLg/0BtJcQ=) 19: zbmP3kvVa0m65poGL2dw5DpPgcU.roa (hash: GTwY24T5THZrk4g/vPYalzL3LCatHL8UbyBEpGP8P2Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 18:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:51:62:d1:56:4a:6b:ce:6b:3c:f2:74:bd:89:ec:18:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1 Validity Not Before: Nov 22 01:00:50 2024 GMT Not After : Nov 23 01:00:50 2024 GMT Subject: CN=d392bbf6798323df5758a5ddb1071fffcd7cceb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:95:04:6e:0f:2c:fd:dd:76:6f:dc:5b:15:d5: df:80:cb:02:fb:9e:52:1b:55:d8:dc:bb:de:b0:f5: 50:5e:19:8f:04:68:c9:e0:93:08:49:0d:10:1e:49: 41:e4:bc:69:ac:65:14:62:db:7f:45:c1:c0:b2:09: 20:f5:d4:36:9c:c7:55:c4:6c:e8:9f:31:f0:3a:de: 59:58:8b:fc:7d:17:07:3a:90:28:e2:10:50:c4:5c: 90:2c:cc:3a:fd:3e:8b:ac:d7:4e:e9:5d:5b:a6:0c: 1f:0a:6d:62:7a:54:f9:25:1c:b3:d8:bc:6f:60:f2: 02:b7:71:03:99:71:c6:bf:58:88:94:53:85:14:a7: 00:ce:4f:78:0f:7d:dd:0d:62:c8:e5:bb:a7:35:49: 70:af:34:81:dd:f3:e0:4f:9f:8d:63:80:97:a3:49: 98:e5:d8:f7:60:93:07:68:ca:24:1a:91:e0:b8:14: 18:43:fa:14:da:6e:12:e5:fe:75:16:27:54:40:79: 53:f3:46:38:f3:a5:92:c3:f6:85:49:e7:38:1e:2e: 28:2f:68:23:00:87:0c:50:04:c3:dd:cd:96:59:ef: 6c:b1:04:eb:68:e5:10:49:5f:0f:da:3c:d3:70:97: 95:68:6c:ca:22:58:98:ec:21:c1:1e:1d:e9:67:30: 2d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:92:BB:F6:79:83:23:DF:57:58:A5:DD:B1:07:1F:FF:CD:7C:CE:B5 X509v3 Authority Key Identifier: keyid:F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:1a:fe:e8:a7:27:ce:30:51:13:a7:34:9c:b8:31:6b:1b:52: 77:e4:8b:f3:bd:9b:96:40:48:16:06:c9:e2:cc:de:a1:7e:c3: 53:52:49:60:bb:ef:ee:63:c8:36:33:81:09:aa:0a:80:e2:64: 9b:50:df:54:c8:f5:1f:83:77:fe:c0:1d:77:62:3a:c5:7c:f2: 5f:ec:3b:43:99:23:8a:54:62:76:42:68:d7:1e:17:d7:6a:b2: 11:f8:bd:16:96:fc:70:e3:ea:17:28:7a:ad:86:cd:75:d1:6e: 88:55:50:d5:91:20:60:e6:ec:43:ed:dc:5c:f2:cc:30:54:66: 8c:f7:b0:30:07:f7:d1:d4:db:ab:15:70:b3:32:56:a8:b1:0d: bf:e0:93:e0:d8:48:4b:7f:bd:ad:b8:d2:38:4f:31:28:96:e8: 56:16:d4:ed:1f:b8:8e:9c:68:e7:17:91:db:d8:bf:fd:cd:ee: 81:d2:26:dd:7e:ee:5a:c9:32:0e:14:bc:30:d5:e6:f5:e7:d8: 9d:bf:df:26:57:f2:44:07:f9:08:9f:af:ae:6a:6e:c4:be:d8: ea:50:aa:d8:b6:94:67:3f:56:44:93:53:94:7b:f6:0a:dd:07: f6:03:11:74:3d:d2:42:1a:31:81:df:cb:ef:1b:91:a4:ff:44: 3e:d0:27:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZNRYtFWSmvOazzydL2J7Bh0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ZDA4YTFlMWNiYzkwOTI1NGU5ZTZiOWM5MzlmZDg1YTI2 OGIxZTEwHhcNMjQxMTIyMDEwMDUwWhcNMjQxMTIzMDEwMDUwWjAzMTEwLwYDVQQD EyhkMzkyYmJmNjc5ODMyM2RmNTc1OGE1ZGRiMTA3MWZmZmNkN2NjZWI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJUEbg8s/d12b9xbFdXfgMsC+55S G1XY3LvesPVQXhmPBGjJ4JMISQ0QHklB5LxprGUUYtt/RcHAsgkg9dQ2nMdVxGzo nzHwOt5ZWIv8fRcHOpAo4hBQxFyQLMw6/T6LrNdO6V1bpgwfCm1ielT5JRyz2Lxv YPICt3EDmXHGv1iIlFOFFKcAzk94D33dDWLI5bunNUlwrzSB3fPgT5+NY4CXo0mY 5dj3YJMHaMokGpHguBQYQ/oU2m4S5f51FidUQHlT80Y486WSw/aFSec4Hi4oL2gj AIcMUATD3c2WWe9ssQTraOUQSV8P2jzTcJeVaGzKIliY7CHBHh3pZzAtXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNOSu/Z5gyPfV1il3bEHH//NfM61MB8GA1UdIwQY MBaAFPTQih4cvJCSVOnmuck5/YWiaLHhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NDlmZGMtMGQzYS00MWVjLWExY2Ut ZGNlOTQ3ZTI5NGI2LzEvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi82NDlmZGMtMGQzYS00MWVjLWExY2UtZGNlOTQ3ZTI5NGI2 LzEvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjRr+6Kcn zjBRE6c0nLgxaxtSd+SL872blkBIFgbJ4szeoX7DU1JJYLvv7mPINjOBCaoKgOJk m1DfVMj1H4N3/sAdd2I6xXzyX+w7Q5kjilRidkJo1x4X12qyEfi9Fpb8cOPqFyh6 rYbNddFuiFVQ1ZEgYObsQ+3cXPLMMFRmjPewMAf30dTbqxVwszJWqLENv+CT4NhI S3+9rbjSOE8xKJboVhbU7R+4jpxo5xeR29i//c3ugdIm3X7uWskyDhS8MNXm9efY nb/fJlfyRAf5CJ+vrmpuxL7Y6lCq2LaUZz9WRJNTlHv2Ct0H9gMRdD3SQhoxgd/L 7xuRpP9EPtAn2w== -----END CERTIFICATE-----Generated at Fri Nov 22 02:38:59 2024 by rpki-client on console-fra.rpki-client.org