$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.mft File: 6QnuPWGJdNoMvYBaLagEEKSYmIE.mft (raw, json) Hash identifier: eSE6+ObpI4I8AbZ3JzvJmnt5dfvsdhaRSnLOVo6wUM8= Subject key identifier: A4:72:67:97:98:24:01:B7:03:70:F1:69:1B:DE:99:DD:89:9B:C0:15 Authority key identifier: E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81 Certificate issuer: /CN=e909ee3d618974da0cbd805a2da80410a4989881 Certificate serial: 019610206C6334548FD0476AC1DDCEEE7ABA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.mft Manifest number: 14F1 Signing time: Mon 07 Apr 2025 12:01:22 +0000 Manifest this update: Mon 07 Apr 2025 12:01:22 +0000 Manifest next update: Tue 08 Apr 2025 12:01:22 +0000 Files and hashes: 1: 0zBI85AWMPV8-ZPv3GQ1JdHs6Mg.roa (hash: a8ZOlpawdj+woIZuCvEmwdR4gKs6qg0nNvaIeVFf0+o=) 2: 2CQTLj6fuGjOR9JqoMEFFGGMUVs.roa (hash: yLn6kJw+CqbZW1dUkXz+GBQNhC9c3L10tkD4MEgQTUE=) 3: 3UXfxzBUjpd2dvq5bafsNogmKlM.roa (hash: bA7f58jlZlzveYNtUmlKVRtEpQ5Dv4hyfzeaC10VHb8=) 4: 6QnuPWGJdNoMvYBaLagEEKSYmIE.crl (hash: 70R8pL5E+DxQwK5CSoldQcE1b8bx2hw15ccC5i2t7DA=) 5: 8ibxOb8BwHmuPqKPmrFWhpd2pk4.roa (hash: umQ/9CNn6Js/eenCZk/Xl2NFKYyEEBiHrADkOmEjW94=) 6: AQNsOCUz19Ut0W2SGuiyLeTI2FM.roa (hash: Jv1vanIsUJEv2fbabmogBnj/mQ6LDnoYHz1QpK/aP2I=) 7: LzX9ElOnhGp_nPRgTmHqftx_RQw.roa (hash: WQnCNTmDNCYbVxX/RpMfdPSYlE7UFVrF2G8SgVlhVgg=) 8: NBTd6QujxD8vAm2y0tIory9u3RA.roa (hash: rM5YyydF6/qNks6DTzpTX8oZeL5PVUffE7pPyESdmdc=) 9: NKJIp8rLjTzUHtc_q7lIxFwpZOQ.roa (hash: njHyZER619olyoCLyEsYxiQZ9O5R4Bwt0OUnGB7OSF8=) 10: XRdx4-cIrvk-JOF2uvY-KKlqKBg.roa (hash: BYuJQzP7XF7y4zE0IMqDWIkw1HAyxFsUKQS4bmdvnys=) 11: k45M8B18zZq30kOscm_b2rNT_ps.roa (hash: IhynRM67pfZo8vAgxdL8T+Jmt4rzWlErc8AX7Hnu46c=) 12: kpBYvA7pyyD3z1jcuA_oTRs_124.roa (hash: Ob8UloqnH6bNNxpYRDCFPpSnvfiM9GWnQYENZrL5zNk=) 13: mxkIV_Neo21FW6vGUNgK8GUqr0c.roa (hash: xTxbqlyb8zL223PmZKQqMD79EKE/LVN8cFepCSvVq/s=) 14: rEwdtSFulCnCTL77TKt0RBsUn6E.roa (hash: VPfndTEDwAp0qhkIRKhD44IChBdT1Sb9UFTa2MCZt1k=) 15: riyVfj9WFlBDKl-Qj0DtS9wD2I4.roa (hash: xkrhRcr1V0HCNzi2kFeVes+0hk2/Q9wIVrWF5EQxFxg=) 16: rmIDVlAjnT_mAqmz4uAYcRi_oOg.roa (hash: CRdPsY1AifRgb2WD2TVMbcBGWygLvjbfoRTaCemUtQ0=) 17: vfTvVQLzVDSt2LoN2TQJu6sHHkY.roa (hash: yF0HorR81LSF/NhH8Gd9GDZfF8ulu3VIOHSR4xRaNIQ=) 18: xAuy4WKwAiWwyWz_74f0hDIYmYU.roa (hash: cySMwsU48nXQT4v9lmbqhzw+DBOqWz9D22FydLNc6Sk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.mft rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 08 Apr 2025 12:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:10:20:6c:63:34:54:8f:d0:47:6a:c1:dd:ce:ee:7a:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e909ee3d618974da0cbd805a2da80410a4989881 Validity Not Before: Apr 7 12:01:22 2025 GMT Not After : Apr 8 12:01:22 2025 GMT Subject: CN=a4726797982401b70370f1691bde99dd899bc015 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:9d:5c:21:f9:42:70:85:4e:52:d8:e7:29:80: 91:29:5a:50:5e:b0:86:f5:81:bb:51:e9:ef:73:7c: 30:3e:11:c4:90:18:e2:cc:33:88:2d:eb:3a:eb:6b: e2:fc:6e:72:ee:3c:54:c5:74:c7:5a:d2:00:9e:36: ed:fa:64:4e:0e:b8:f5:ae:be:6c:8a:53:e1:dc:df: d8:cd:87:fd:55:49:67:8a:fe:55:0b:22:bd:68:32: 98:fc:39:c6:0a:c0:9e:2c:e0:4b:6b:40:6f:c1:99: f3:be:af:01:6c:f7:9d:70:c4:5d:db:90:ec:5c:df: 98:47:d0:40:d4:78:35:49:b1:b9:3d:11:b0:f1:cf: b2:78:3e:06:6a:e7:cd:82:28:39:79:dd:3b:94:81: 07:aa:77:cc:a9:47:c9:b3:93:42:c0:ef:ca:c4:11: 9c:d1:fb:d7:ef:63:db:df:58:1a:a5:46:9e:b4:c4: 8e:0d:48:b5:13:53:10:a8:c7:d9:0f:c6:96:6a:aa: ed:d7:c6:0f:48:bc:8e:77:08:ab:29:71:b6:2b:5a: 09:df:6c:45:9c:5a:c4:f2:a6:d4:59:56:10:41:09: cd:cc:de:e9:fc:d4:6a:b4:f6:ce:9c:84:aa:35:68: ad:5d:4f:6c:15:41:3a:e9:e1:fd:e6:bb:75:8d:0c: cf:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:72:67:97:98:24:01:B7:03:70:F1:69:1B:DE:99:DD:89:9B:C0:15 X509v3 Authority Key Identifier: keyid:E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:ce:70:8c:67:a1:ff:d5:c8:4e:b3:93:55:9b:f2:d1:33:43: 31:52:83:31:0e:32:a5:96:09:3b:e0:39:13:59:28:80:94:33: e3:56:3f:fb:8b:db:3e:ef:d2:8e:eb:9b:51:43:53:80:9b:71: 58:0d:f1:27:e7:02:f4:c8:a8:4c:be:d0:8e:eb:f0:dd:a2:93: c4:d4:36:da:61:b6:fc:83:da:f5:8d:4f:33:d1:16:36:25:69: 78:3f:1e:c7:02:4b:48:d5:a7:6d:5c:40:48:3e:a2:88:02:4a: 96:67:c7:13:1c:f1:04:10:07:4e:77:9c:7f:2d:f2:85:44:4a: ca:7f:37:d3:a6:75:58:65:20:a9:e9:77:4e:8d:97:18:d9:f7: 26:fc:d6:80:2d:95:4d:7d:4b:ef:56:64:23:f1:5f:b5:99:57: 1f:74:fc:14:71:fa:f7:5e:60:cf:47:64:1f:1a:57:6c:88:c7: f3:62:b0:16:58:08:ac:98:a0:fb:07:81:d2:61:63:8e:cf:17: 06:67:6e:ca:b6:02:07:85:0c:61:ba:e8:23:c9:1e:2d:4e:29: 25:17:19:07:bb:33:07:d2:85:a2:48:9e:09:02:00:21:75:b7: 3f:fd:3b:b6:ce:6a:fc:d5:74:d3:0e:2c:ae:3f:3d:02:ef:50: ea:0f:bb:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZYQIGxjNFSP0Edqwd3O7nq6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5MDllZTNkNjE4OTc0ZGEwY2JkODA1YTJkYTgwNDEwYTQ5 ODk4ODEwHhcNMjUwNDA3MTIwMTIyWhcNMjUwNDA4MTIwMTIyWjAzMTEwLwYDVQQD EyhhNDcyNjc5Nzk4MjQwMWI3MDM3MGYxNjkxYmRlOTlkZDg5OWJjMDE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4p1cIflCcIVOUtjnKYCRKVpQXrCG 9YG7Uenvc3wwPhHEkBjizDOILes662vi/G5y7jxUxXTHWtIAnjbt+mRODrj1rr5s ilPh3N/YzYf9VUlniv5VCyK9aDKY/DnGCsCeLOBLa0BvwZnzvq8BbPedcMRd25Ds XN+YR9BA1Hg1SbG5PRGw8c+yeD4GaufNgig5ed07lIEHqnfMqUfJs5NCwO/KxBGc 0fvX72Pb31gapUaetMSODUi1E1MQqMfZD8aWaqrt18YPSLyOdwirKXG2K1oJ32xF nFrE8qbUWVYQQQnNzN7p/NRqtPbOnISqNWitXU9sFUE66eH95rt1jQzPGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKRyZ5eYJAG3A3DxaRvemd2Jm8AVMB8GA1UdIwQY MBaAFOkJ7j1hiXTaDL2AWi2oBBCkmJiBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlFudVBXR0pkTm9NdllCYUxhZ0VFS1NZbUlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8yYjVmNWYtYmI5Ni00YjMxLThhNmEt ZGQxMTVmOWUzMzAxLzEvNlFudVBXR0pkTm9NdllCYUxhZ0VFS1NZbUlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8yYjVmNWYtYmI5Ni00YjMxLThhNmEtZGQxMTVmOWUzMzAx LzEvNlFudVBXR0pkTm9NdllCYUxhZ0VFS1NZbUlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH85wjGeh /9XITrOTVZvy0TNDMVKDMQ4ypZYJO+A5E1kogJQz41Y/+4vbPu/SjuubUUNTgJtx WA3xJ+cC9MioTL7Qjuvw3aKTxNQ22mG2/IPa9Y1PM9EWNiVpeD8exwJLSNWnbVxA SD6iiAJKlmfHExzxBBAHTnecfy3yhURKyn8306Z1WGUgqel3To2XGNn3JvzWgC2V TX1L71ZkI/FftZlXH3T8FHH6915gz0dkHxpXbIjH82KwFlgIrJig+weB0mFjjs8X BmduyrYCB4UMYbroI8keLU4pJRcZB7szB9KFokieCQIAIXW3P/07ts5q/NV00w4s rj89Au9Q6g+7cw== -----END CERTIFICATE-----Generated at Mon Apr 7 18:00:45 2025 by rpki-client