$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft File: 1gR16-fwfXQVPLHMozjBbYAfRfc.mft (raw, json) Hash identifier: qYN33VdFZOPcDsNxKdETQ9/JFbU08EoSB3ohrFsXzoU= Subject key identifier: 87:12:7A:A4:B6:78:36:C6:0F:4C:DA:0D:B7:8C:F0:6A:F4:DD:4A:FA Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7 Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7 Certificate serial: 019350F492A8B060FDF5566E3365F604FD23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft Manifest number: 13E2 Signing time: Thu 21 Nov 2024 23:00:25 +0000 Manifest this update: Thu 21 Nov 2024 23:00:25 +0000 Manifest next update: Fri 22 Nov 2024 23:00:25 +0000 Files and hashes: 1: 1gR16-fwfXQVPLHMozjBbYAfRfc.crl (hash: yVA4SAKP59cm/UOe56s5zyY+shPVw+R8djICMQ8dNKM=) 2: 48uPEurPgSALH0LbZUPOR68wy_U.roa (hash: J/fW5io5h7uYUjmVy7Q6nf8eAXy2MA1smGgNjABO2VU=) 3: 7f1Wfma3S1jcviiVtx5pWgtMU1M.roa (hash: IyEtV/ZlN2S6nL2dUZ1BEipcro3Cma7lBWJL+35FnD4=) 4: AQdPylVlTzkVjN0Cdg2ULxaFYVA.roa (hash: F0Q1HDImjPfreQV2wya8Zr54J4+7A1jluDY1bf11Qa8=) 5: BTW-MiA0M_LErBUIK0cyldXiIWo.roa (hash: h+xLiBS5mauo014CW6NpeJEpQMst5C5uzLXk2DE0lGA=) 6: LmHyNnccfewvP0yavxTGiWcfoO4.roa (hash: FvHkFRi2F3ZemDaN5LIII28lnmqqLwziTZKLFsw8v0o=) 7: ZWXRdsaXrREmROIKyClX9_e5QJ4.roa (hash: Upd8mc3L9xNVJYLWcP/eji2N/Y38AZTlP0rYXbzzZUA=) 8: c5hiYMhs_r_H_DfxqH1-Rpraldk.roa (hash: +1T6fzvvhTxtBC6PHdOAmeEty1gSOHiaqkCh+g+K5Hs=) 9: eWOJ7eiefIdR2HPIYDl-NschQDI.roa (hash: 7YufwDUMbTeC+at1f7nds1kvVzcDyWYD2xVvq15LO3s=) 10: gbH6HcKKBlmZtU4rXumDA2xre6I.roa (hash: mTwiNx0B1ajMybwPn5EhsJaS+TdNmLuKPGPut0aYFjs=) 11: pW7KIsBt7f2hEqOzfFiEgWKE5o4.roa (hash: 59Eb3QpvZQ9ZgzAavZpX85dCTyqfsHFsFyV3MyL78tQ=) 12: qc1P8jUMrd_Llx18tNb9WbbfBqM.roa (hash: B3bOcxEZBOOzv7EcodCnzKwcyWMMuhkpMmq0HwY7Qjk=) 13: tTn2a4EfOB87DVoiwyGdRQGEb68.roa (hash: jSYbgESY4rL5W0g341w3kcz3TE03xi/L2Nbvqw7bC5I=) 14: w2C_sn15EhNWUpZ7U8NZtqtKjqc.roa (hash: N64XJKfoNDykE2QIFyzum+5/QYsamKYA2btoR/Wbmj0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 18:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:50:f4:92:a8:b0:60:fd:f5:56:6e:33:65:f6:04:fd:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7 Validity Not Before: Nov 21 23:00:25 2024 GMT Not After : Nov 22 23:00:25 2024 GMT Subject: CN=87127aa4b67836c60f4cda0db78cf06af4dd4afa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:47:c5:5a:6a:c3:70:8d:18:75:e7:ab:0b:fc: 6c:b8:d3:77:c0:aa:26:10:bf:14:61:5b:c5:ce:a6: 7a:e3:b4:22:02:0f:f1:5e:04:7c:8a:aa:ea:ae:37: 50:75:fd:3b:8a:00:47:c5:1b:d5:02:e3:97:b8:31: 4e:98:8a:c5:3f:9c:3d:3e:a7:52:55:0f:12:fa:aa: 54:2b:41:ab:de:97:75:2a:d2:67:6c:5f:c0:b9:ee: 54:16:86:f8:6e:ad:45:94:83:81:5f:e9:43:34:05: a4:31:20:a5:c8:61:4f:e3:88:b2:a4:f3:af:d8:05: 24:f8:03:28:36:d3:9d:d6:28:74:38:33:30:0a:30: 88:3a:78:f9:fc:55:29:63:93:f6:7e:0b:fb:81:f8: 13:34:fe:8c:27:85:90:7d:fc:19:29:c1:d1:1f:9c: ec:a9:1d:0c:48:36:c7:b5:e8:cc:b5:d1:95:6b:35: 25:39:32:55:1c:a2:a2:d4:4c:39:0b:d5:8c:46:e5: 6d:94:8a:d8:ce:32:ff:44:6a:6e:33:66:79:f5:c8: 10:a0:01:c8:2c:c9:42:9a:65:df:c6:e5:eb:04:41: ab:50:a7:50:20:b3:40:aa:0b:b9:da:12:77:3d:fa: c0:fe:df:75:db:6a:10:93:20:f1:ef:17:fe:e7:e5: f3:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:12:7A:A4:B6:78:36:C6:0F:4C:DA:0D:B7:8C:F0:6A:F4:DD:4A:FA X509v3 Authority Key Identifier: keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:7b:fa:ab:a7:c0:70:3a:5d:80:69:b1:d7:76:a8:22:20:5e: 6b:cd:dc:2f:a2:c3:e3:dc:d9:94:24:8d:52:d9:da:ba:0b:f4: 5c:01:cd:55:c4:08:f2:58:4e:76:76:20:c8:e6:8b:3d:af:77: cd:06:41:74:34:4d:de:03:9c:9e:58:ea:a7:b6:05:d0:85:2d: 4d:e6:16:5e:0b:4a:2e:36:61:4d:1f:2e:96:a3:89:e6:17:60: 65:0f:4a:4e:11:b7:7b:1a:90:0a:bf:68:ec:59:f1:7e:74:a4: a9:eb:11:b7:48:f8:8a:58:42:b4:c7:9f:16:7e:60:61:8a:98: 55:08:7d:d7:69:c7:43:0b:71:7e:cf:63:ae:f4:0f:50:97:2e: be:97:2f:c7:8b:fb:7c:38:fd:f4:f4:93:31:7e:8f:06:8c:0b: 13:b2:01:93:76:85:3c:43:83:65:ca:71:3d:f4:0e:b2:1b:01: 01:ba:0a:c2:4c:21:2b:ba:1f:23:d7:ce:a4:c4:ad:96:ff:9e: 17:dd:65:60:66:55:51:2d:94:4a:a1:6f:19:fd:ab:fb:50:e8: 0e:2b:69:5c:8c:46:da:d7:62:c7:11:f7:e7:28:cb:1a:bb:56: 63:f1:8d:a6:74:18:5c:35:64:82:9e:df:f8:bc:ac:e4:91:ab: 67:16:d3:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZNQ9JKosGD99VZuM2X2BP0jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2MDQ3NWViZTdmMDdkNzQxNTNjYjFjY2EzMzhjMTZkODAx ZjQ1ZjcwHhcNMjQxMTIxMjMwMDI1WhcNMjQxMTIyMjMwMDI1WjAzMTEwLwYDVQQD Eyg4NzEyN2FhNGI2NzgzNmM2MGY0Y2RhMGRiNzhjZjA2YWY0ZGQ0YWZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0fFWmrDcI0YdeerC/xsuNN3wKom EL8UYVvFzqZ647QiAg/xXgR8iqrqrjdQdf07igBHxRvVAuOXuDFOmIrFP5w9PqdS VQ8S+qpUK0Gr3pd1KtJnbF/Aue5UFob4bq1FlIOBX+lDNAWkMSClyGFP44iypPOv 2AUk+AMoNtOd1ih0ODMwCjCIOnj5/FUpY5P2fgv7gfgTNP6MJ4WQffwZKcHRH5zs qR0MSDbHtejMtdGVazUlOTJVHKKi1Ew5C9WMRuVtlIrYzjL/RGpuM2Z59cgQoAHI LMlCmmXfxuXrBEGrUKdQILNAqgu52hJ3PfrA/t9122oQkyDx7xf+5+XzRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIcSeqS2eDbGD0zaDbeM8Gr03Ur6MB8GA1UdIwQY MBaAFNYEdevn8H10FTyxzKM4wW2AH0X3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2Mt NDk2ZjhlYmIyZDYxLzEvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2MtNDk2ZjhlYmIyZDYx LzEvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY3v6q6fA cDpdgGmx13aoIiBea83cL6LD49zZlCSNUtnaugv0XAHNVcQI8lhOdnYgyOaLPa93 zQZBdDRN3gOcnljqp7YF0IUtTeYWXgtKLjZhTR8ulqOJ5hdgZQ9KThG3exqQCr9o 7FnxfnSkqesRt0j4ilhCtMefFn5gYYqYVQh912nHQwtxfs9jrvQPUJcuvpcvx4v7 fDj99PSTMX6PBowLE7IBk3aFPEODZcpxPfQOshsBAboKwkwhK7ofI9fOpMStlv+e F91lYGZVUS2USqFvGf2r+1DoDitpXIxG2tdixxH35yjLGrtWY/GNpnQYXDVkgp7f +Lys5JGrZxbTfw== -----END CERTIFICATE-----Generated at Fri Nov 22 00:29:11 2024 by rpki-client on console-fra.rpki-client.org