$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft File: 1gR16-fwfXQVPLHMozjBbYAfRfc.mft (raw, json) Hash identifier: sMVBRglcfzt97kOU3rp19l/iyFpeE6oNY8Bgrzby3Yg= Subject key identifier: 61:98:B0:ED:1C:E4:77:79:2B:38:EF:19:C5:E0:8A:9C:52:A7:BA:BC Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7 Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7 Certificate serial: 018FA21B41E9AD19FCADF1BEE8540B768E14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft Manifest number: 11EF Signing time: Wed 22 May 2024 21:00:46 +0000 Manifest this update: Wed 22 May 2024 21:00:46 +0000 Manifest next update: Thu 23 May 2024 21:00:46 +0000 Files and hashes: 1: 1gR16-fwfXQVPLHMozjBbYAfRfc.crl (hash: Bgsz5ujSqr2BJWV3EPhoeeQiSlttlGkIjZERbBpF9Yc=) 2: 48uPEurPgSALH0LbZUPOR68wy_U.roa (hash: J/fW5io5h7uYUjmVy7Q6nf8eAXy2MA1smGgNjABO2VU=) 3: 9hrEP9ohLwAQ8nwdpkvSXD9ijNs.roa (hash: 6AuuMrDn4OcwDCpaicyWZxHKI/HtMqJb32itQAFF7rQ=) 4: B0GnjcxlBc4li-pG6Y4EB6IAtuM.roa (hash: aO3K2ljlPTe+vGDEfzt84wGSQDcGUbJln83528yJXlw=) 5: HJifVw97a3n8s8VkYVZmiMosUf4.roa (hash: 3Z3uKB/n7J4n6bx18YauprN4Tm8IH7x76UxmbvrnCXg=) 6: YCmoAV6Mjdj8mUQPtUb9Hf5AdoE.roa (hash: cVZ5QG/U9fqxrEU7TsSFdxlb0qAYa7jlZpm5ph7eOys=) 7: ZWXRdsaXrREmROIKyClX9_e5QJ4.roa (hash: Upd8mc3L9xNVJYLWcP/eji2N/Y38AZTlP0rYXbzzZUA=) 8: eWOJ7eiefIdR2HPIYDl-NschQDI.roa (hash: 7YufwDUMbTeC+at1f7nds1kvVzcDyWYD2xVvq15LO3s=) 9: gbH6HcKKBlmZtU4rXumDA2xre6I.roa (hash: mTwiNx0B1ajMybwPn5EhsJaS+TdNmLuKPGPut0aYFjs=) 10: i7LSLsEWF3AxMCtaWE4iCk1ojAE.roa (hash: YN+WQnQfME3bso5X2k7eh7+1n97CGEBy/iC4GEoUlzE=) 11: pW7KIsBt7f2hEqOzfFiEgWKE5o4.roa (hash: 59Eb3QpvZQ9ZgzAavZpX85dCTyqfsHFsFyV3MyL78tQ=) 12: tTn2a4EfOB87DVoiwyGdRQGEb68.roa (hash: jSYbgESY4rL5W0g341w3kcz3TE03xi/L2Nbvqw7bC5I=) 13: yrGjfsVMGNjzRPTuNdJujG_pwDw.roa (hash: 73P8+/SsLTg9YAISn9L9FSbDLn7SRpl3TN2zEmeKSGQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 23 May 2024 21:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:a2:1b:41:e9:ad:19:fc:ad:f1:be:e8:54:0b:76:8e:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7 Validity Not Before: May 22 21:00:46 2024 GMT Not After : May 23 21:00:46 2024 GMT Subject: CN=6198b0ed1ce477792b38ef19c5e08a9c52a7babc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:5c:c5:fc:da:c7:07:aa:76:e2:08:bc:62:1c: 0c:1f:9f:e0:83:9c:e2:e9:d5:3a:48:3c:b1:c5:30: 83:23:89:15:c8:fa:47:9a:19:75:1a:44:3f:84:2b: f2:d8:24:2c:23:0b:8b:af:79:97:0d:d9:35:98:41: 87:3f:e0:a5:92:6b:ac:42:c0:7d:4d:f1:b0:ff:8e: ea:97:0c:de:96:20:ff:b6:02:34:d1:5a:d9:4a:49: 60:bd:6a:01:01:f6:54:3a:87:eb:5c:27:cb:f2:cb: f7:81:fb:3f:44:c5:51:33:28:54:4f:f1:ab:fb:2c: f1:2b:ec:f3:a4:b2:19:06:ac:ec:f5:e2:a6:c9:40: 1f:93:5c:0d:2a:a2:06:6c:15:13:24:cc:49:70:ff: 70:e5:ff:98:16:2f:02:df:e5:61:33:a5:dd:1a:ea: d2:a6:af:ae:dd:e2:b8:41:e3:6e:c8:e7:a6:d1:e0: 92:8b:db:6c:63:1f:34:bd:66:4d:66:fc:48:8d:9d: 16:f3:ea:49:d5:dd:12:94:36:45:98:42:e2:3a:51: c3:a1:94:ea:b9:40:42:b5:e8:0e:93:79:0e:ef:2f: cb:c3:31:3e:cb:16:0c:0b:56:32:56:b3:38:c9:c4: b1:40:57:a7:95:88:06:96:c1:10:1e:ab:a3:1f:ec: d5:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:98:B0:ED:1C:E4:77:79:2B:38:EF:19:C5:E0:8A:9C:52:A7:BA:BC X509v3 Authority Key Identifier: keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:c7:e0:cb:5e:89:77:ea:0a:59:92:fa:ff:03:d1:b5:90:d7: 92:af:0a:42:77:2e:9a:fe:75:a9:b4:52:f1:7e:25:21:46:16: 28:90:c8:63:cb:1b:5c:32:5d:1d:03:d7:bd:2b:cc:60:83:b0: 9b:fe:c6:5a:d6:c7:33:8e:6f:5c:3f:bf:7a:17:37:ec:c8:5f: 2a:52:ad:f5:0f:96:0d:13:0b:53:cf:8c:a2:72:29:b7:fb:90: 8e:b7:cf:23:4e:13:f1:6c:60:66:f8:25:52:10:2b:ab:e9:46: 4b:cd:f8:ea:0c:0b:68:ef:33:15:6f:b4:54:fb:6b:07:1f:94: ff:79:17:95:ef:10:a9:10:ca:13:47:d5:3c:d3:5f:8d:29:9d: 44:41:36:58:52:30:94:c3:96:f1:11:dc:54:3b:f8:78:34:a1: c8:30:0e:61:aa:f6:99:9c:62:82:f4:9c:7d:68:9c:9e:f3:4f: fb:79:8a:1a:78:fc:37:13:fa:2d:ca:9c:df:8c:05:9e:56:3f: d8:02:7e:f2:1c:55:4c:2d:b3:8a:58:6b:c5:68:3e:de:cd:f8: 7a:25:9f:0f:9a:6f:db:94:3d:b1:7a:9c:48:42:ab:b4:f9:88: 6f:81:27:92:4a:b0:68:5a:49:69:54:59:fe:b1:48:48:8b:1d: 20:a5:48:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY+iG0HprRn8rfG+6FQLdo4UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2MDQ3NWViZTdmMDdkNzQxNTNjYjFjY2EzMzhjMTZkODAx ZjQ1ZjcwHhcNMjQwNTIyMjEwMDQ2WhcNMjQwNTIzMjEwMDQ2WjAzMTEwLwYDVQQD Eyg2MTk4YjBlZDFjZTQ3Nzc5MmIzOGVmMTljNWUwOGE5YzUyYTdiYWJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVzF/NrHB6p24gi8YhwMH5/gg5zi 6dU6SDyxxTCDI4kVyPpHmhl1GkQ/hCvy2CQsIwuLr3mXDdk1mEGHP+ClkmusQsB9 TfGw/47qlwzeliD/tgI00VrZSklgvWoBAfZUOofrXCfL8sv3gfs/RMVRMyhUT/Gr +yzxK+zzpLIZBqzs9eKmyUAfk1wNKqIGbBUTJMxJcP9w5f+YFi8C3+VhM6XdGurS pq+u3eK4QeNuyOem0eCSi9tsYx80vWZNZvxIjZ0W8+pJ1d0SlDZFmELiOlHDoZTq uUBCtegOk3kO7y/LwzE+yxYMC1YyVrM4ycSxQFenlYgGlsEQHqujH+zVbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGGYsO0c5Hd5KzjvGcXgipxSp7q8MB8GA1UdIwQY MBaAFNYEdevn8H10FTyxzKM4wW2AH0X3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2Mt NDk2ZjhlYmIyZDYxLzEvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2MtNDk2ZjhlYmIyZDYx LzEvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM8fgy16J d+oKWZL6/wPRtZDXkq8KQncumv51qbRS8X4lIUYWKJDIY8sbXDJdHQPXvSvMYIOw m/7GWtbHM45vXD+/ehc37MhfKlKt9Q+WDRMLU8+MonIpt/uQjrfPI04T8WxgZvgl UhArq+lGS8346gwLaO8zFW+0VPtrBx+U/3kXle8QqRDKE0fVPNNfjSmdREE2WFIw lMOW8RHcVDv4eDShyDAOYar2mZxigvScfWicnvNP+3mKGnj8NxP6Lcqc34wFnlY/ 2AJ+8hxVTC2zilhrxWg+3s34eiWfD5pv25Q9sXqcSEKrtPmIb4EnkkqwaFpJaVRZ /rFISIsdIKVIsQ== -----END CERTIFICATE-----Generated at Wed May 22 23:47:57 2024 by rpki-client on console-fra.rpki-client.org