$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft File: bqtTZAsJMZJLc_dgklhFFQpszKU.mft (raw, json) Hash identifier: mKcopUNlXte+j28QPULW43ZjujRGWFSvRETHWEJYmCs= Subject key identifier: 55:7C:13:3F:E3:ED:7B:10:A6:32:5B:DD:29:0D:FC:10:88:76:0E:8E Authority key identifier: 6E:AB:53:64:0B:09:31:92:4B:73:F7:60:92:58:45:15:0A:6C:CC:A5 Certificate issuer: /CN=6eab53640b0931924b73f760925845150a6ccca5 Certificate serial: 01963D65EF94872D2F54AD79ABC83673D46D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft Manifest number: 1212 Signing time: Wed 16 Apr 2025 07:00:12 +0000 Manifest this update: Wed 16 Apr 2025 07:00:12 +0000 Manifest next update: Thu 17 Apr 2025 07:00:12 +0000 Files and hashes: 1: 8XP3ZgnWsREYJBKcesUxqlAiBzw.roa (hash: 93nQXtqveQCPNFB8WMMDnrZZqMqXxfvNqmfuaH03fA0=) 2: 8pTSByKVza64jkbt4hbsEAO28Po.roa (hash: IzdhXMkwThfgAeGPav6gn/KwCRJU1NuroumbqzfO91Y=) 3: CxyrKhIU4wUjCyyDEEHiNFsAVKo.roa (hash: r2NmcWhzLqIMUTXKUcVkr9QimRuBHkQkM5CtC3DIO3o=) 4: Hue0K_1DeFYDqJy6zcHqeoZ0mR4.roa (hash: JxkXhvESVr0gpJ5A+RwjR+mj0QCHmZARXbAtOttPvl4=) 5: SkYEMyHTHbyT6JuzWYh18fPiI9c.roa (hash: FukE0hqzUf5c2DeRumeIUjq12YCt/dC1j5vfYlFcAyo=) 6: TF6vPvFxs5WUrrHSqmKpxsQvB18.roa (hash: skdmvC6iLpguLmAUBf5CQp9okNf5/hjKRW8eNCLvcbU=) 7: UCwT6CL5WW3mYzoKNlTk2SOU8IA.roa (hash: N87SKU9+C8nd7bvGxIGpUOdKdK4qImbFhv+zWkYw2Wc=) 8: X4Z-v2DjsEUNaJu74fV0VmppsH4.roa (hash: k4XLe4zYKZ+4ca/ODa7pVIqXxRj2X5fNogYmHGTYuzM=) 9: bqtTZAsJMZJLc_dgklhFFQpszKU.crl (hash: zS+Nv4shweYT8Hme5rvsUAsIzSao7bBOChhzO9m+EpQ=) 10: hq7jtf5ICa4EJEy0wPEdH54LMsQ.roa (hash: hQZHACaQ0GwdOVsEe6YRTXBBd0Cnu1k3R9qsNp1994s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 17 Apr 2025 07:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:3d:65:ef:94:87:2d:2f:54:ad:79:ab:c8:36:73:d4:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6eab53640b0931924b73f760925845150a6ccca5 Validity Not Before: Apr 16 07:00:12 2025 GMT Not After : Apr 17 07:00:12 2025 GMT Subject: CN=557c133fe3ed7b10a6325bdd290dfc1088760e8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:be:3c:75:d8:c8:8e:da:66:c7:79:1c:b4:28: ab:b2:2a:e6:f8:15:a7:1a:ad:15:e7:46:c6:de:f4: ff:9b:9d:d8:6e:05:d6:4d:79:1a:b2:35:1e:c4:dd: e5:f4:50:db:c7:0d:4d:c7:2b:e0:9e:40:00:df:8b: 19:38:b8:c1:e8:61:94:7f:de:26:b4:67:42:77:8b: 29:e8:68:ee:f8:4d:01:84:bc:c1:4b:f2:2f:88:25: d9:13:f0:eb:71:68:84:77:20:76:6b:2a:cb:ef:cf: de:37:52:f0:a2:7a:cc:bf:68:24:4a:80:ad:08:d2: 27:3d:33:87:81:33:c5:c2:52:42:8f:f4:91:90:7a: 83:f2:9c:5a:ce:3d:70:6b:e3:d2:6b:7e:b8:f5:b5: 8f:6d:79:3d:9f:e5:98:b8:22:98:22:b1:6a:01:e5: 21:18:f8:a5:c9:79:fb:a6:05:d9:64:e6:d3:6c:8c: ed:f1:b6:4d:62:dd:60:e1:d6:cc:2a:d5:ba:d0:73: 6e:92:b9:50:f0:1e:35:c8:7b:c3:47:44:e7:ef:d6: b1:9a:e1:c9:13:f8:d5:2a:32:2c:c4:99:17:67:32: 72:e8:aa:0d:51:b5:1f:71:39:3a:d0:c5:9e:10:f5: 9d:a1:5e:63:40:10:0e:01:4c:3e:0b:f4:3c:ed:29: e9:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:7C:13:3F:E3:ED:7B:10:A6:32:5B:DD:29:0D:FC:10:88:76:0E:8E X509v3 Authority Key Identifier: keyid:6E:AB:53:64:0B:09:31:92:4B:73:F7:60:92:58:45:15:0A:6C:CC:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:3c:df:a2:68:19:0c:47:ac:05:f1:ef:1d:01:2b:d8:51:2b: 5c:9f:19:2b:6c:f0:29:3f:9e:46:7c:95:7f:81:ea:a4:24:3e: f9:ea:6b:a9:fc:4d:b8:eb:ce:3c:27:33:62:fd:0c:2b:2f:0c: 52:7c:c8:33:48:a3:89:bf:eb:e8:3a:6d:e5:54:53:2c:94:34: 7c:26:e5:28:8a:05:1e:03:cb:33:bb:75:04:ed:3b:19:39:4d: 4c:89:25:30:88:ea:92:77:20:00:13:6f:a4:76:25:83:e4:a4: c5:21:ff:6e:d5:66:8e:08:05:e9:28:44:ef:3d:cf:8e:a5:52: f9:ce:3f:db:bf:1a:ed:04:0c:22:25:00:b8:fb:21:40:8a:27: b1:13:c2:be:2d:63:84:e4:fe:a8:c3:c4:47:a0:d4:9a:80:08: 0c:c1:37:88:5d:4c:ff:67:4c:0b:e6:5b:e2:71:7d:48:0c:56: b7:4f:55:2b:83:7d:f3:28:19:23:94:a5:5b:e0:45:7e:01:1f: 62:9f:bd:4e:77:28:8d:ab:9a:bd:dd:36:8c:23:0d:fe:4e:b9: 23:d4:96:35:9f:77:1f:0f:6b:85:d2:a7:ba:36:8f:ac:01:46: dc:73:50:78:83:09:b1:a9:3b:62:fb:14:24:eb:97:36:ff:71: 15:45:a3:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZY9Ze+Uhy0vVK15q8g2c9RtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlYWI1MzY0MGIwOTMxOTI0YjczZjc2MDkyNTg0NTE1MGE2 Y2NjYTUwHhcNMjUwNDE2MDcwMDEyWhcNMjUwNDE3MDcwMDEyWjAzMTEwLwYDVQQD Eyg1NTdjMTMzZmUzZWQ3YjEwYTYzMjViZGQyOTBkZmMxMDg4NzYwZThlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlr48ddjIjtpmx3kctCirsirm+BWn Gq0V50bG3vT/m53YbgXWTXkasjUexN3l9FDbxw1NxyvgnkAA34sZOLjB6GGUf94m tGdCd4sp6Gju+E0BhLzBS/IviCXZE/DrcWiEdyB2ayrL78/eN1LwonrMv2gkSoCt CNInPTOHgTPFwlJCj/SRkHqD8pxazj1wa+PSa3649bWPbXk9n+WYuCKYIrFqAeUh GPilyXn7pgXZZObTbIzt8bZNYt1g4dbMKtW60HNukrlQ8B41yHvDR0Tn79axmuHJ E/jVKjIsxJkXZzJy6KoNUbUfcTk60MWeEPWdoV5jQBAOAUw+C/Q87SnpdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFV8Ez/j7XsQpjJb3SkN/BCIdg6OMB8GA1UdIwQY MBaAFG6rU2QLCTGSS3P3YJJYRRUKbMylMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnF0VFpBc0pNWkpMY19kZ2tsaEZGUXBzektVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8yYTM4ZTYtMjk0ZS00ZmEzLWE1YTAt NTMwNDYzMjM5NTFmLzEvYnF0VFpBc0pNWkpMY19kZ2tsaEZGUXBzektVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC8yYTM4ZTYtMjk0ZS00ZmEzLWE1YTAtNTMwNDYzMjM5NTFm LzEvYnF0VFpBc0pNWkpMY19kZ2tsaEZGUXBzektVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvzzfomgZ DEesBfHvHQEr2FErXJ8ZK2zwKT+eRnyVf4HqpCQ++eprqfxNuOvOPCczYv0MKy8M UnzIM0ijib/r6Dpt5VRTLJQ0fCblKIoFHgPLM7t1BO07GTlNTIklMIjqkncgABNv pHYlg+SkxSH/btVmjggF6ShE7z3PjqVS+c4/278a7QQMIiUAuPshQIonsRPCvi1j hOT+qMPER6DUmoAIDME3iF1M/2dMC+Zb4nF9SAxWt09VK4N98ygZI5SlW+BFfgEf Yp+9Tncojauavd02jCMN/k65I9SWNZ93Hw9rhdKnujaPrAFG3HNQeIMJsak7YvsU JOuXNv9xFUWjRA== -----END CERTIFICATE-----Generated at Wed Apr 16 13:21:22 2025 by rpki-client