$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft File: NPFybqS9bTyAka4MitGgPpHjWaI.mft (raw, json) Hash identifier: SIPK06cqd7KRHIqu24OOzUNfkRrJA0xP8nVULYpSQPg= Subject key identifier: E8:0A:7C:65:1E:C4:40:F5:58:7A:EC:5C:70:E2:1F:D2:2B:CD:C8:35 Authority key identifier: 34:F1:72:6E:A4:BD:6D:3C:80:91:AE:0C:8A:D1:A0:3E:91:E3:59:A2 Certificate issuer: /CN=34f1726ea4bd6d3c8091ae0c8ad1a03e91e359a2 Certificate serial: 01962E98EEEC12E7F1D78AF4A28C1853D67B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft Manifest number: 1225 Signing time: Sun 13 Apr 2025 10:01:36 +0000 Manifest this update: Sun 13 Apr 2025 10:01:36 +0000 Manifest next update: Mon 14 Apr 2025 10:01:36 +0000 Files and hashes: 1: 1-QRYDCk4GRkhhK94MTs5nmWBy_E.roa (hash: 0DMmysmCmz5ptQIzT31buoWW9naDewY16lMSk6nyNPM=) 2: 4_hN70Gn93YtNqyU6RsNlMbDtXc.roa (hash: peVwC9DiY5O5MpDM5td7h9VpXZKdL2e2Hkif7cNRbJM=) 3: 6RKHwkUGkLRE0nOS7i-phv0Y7b8.roa (hash: YNCF/KzAqV3Fo+hsWHR3r0AQecfE2O/ljxIxKeerc6E=) 4: NPFybqS9bTyAka4MitGgPpHjWaI.crl (hash: N+2lOwVrZWmUpiHhumIJG8BQCakK819kEml+nytwnec=) 5: RZB6hhj_LzY-DO3DfmavoIAg3K8.roa (hash: 8fSztyIXmdrydCA2Hwo+fzHNQuQ8HachHnXLTdni/F4=) 6: V-ziVBTzF3yW8Qn17SkTQka0Z1w.roa (hash: dzI5Exw0Cav9WTDJa9bU3vaVrx3/DEAhAyNHw9d0Q+M=) 7: f9J3fcUkkHHcn80-VJtEBd6Rau4.roa (hash: JDi8khg5idPehoZbbOnLzz9O6Dz2cHDlR75V8A55UBk=) 8: m26Z4EdJjPTeKqQP4bLFsm0qZJo.roa (hash: NWpdZVKoDOS9cnbyZWpfcC92E8AFSl1SI5HiCmg5+Gg=) 9: mI_12gpPA1x4m56hwYP082Ar3JU.roa (hash: nTAzRPzpRleX8rbBjz+dEflffb+oOGW6DVQuLBf/K4c=) 10: oHw7wrhs1qz9tzh4TUZjM8oea6k.roa (hash: IIsyfj8tmjqckisgTytL6hssPf4b/V3+My7Zj1/h7d0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.crl rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 14 Apr 2025 10:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:2e:98:ee:ec:12:e7:f1:d7:8a:f4:a2:8c:18:53:d6:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34f1726ea4bd6d3c8091ae0c8ad1a03e91e359a2 Validity Not Before: Apr 13 10:01:36 2025 GMT Not After : Apr 14 10:01:36 2025 GMT Subject: CN=e80a7c651ec440f5587aec5c70e21fd22bcdc835 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:f2:09:a4:fa:3c:ec:90:77:1f:be:82:ba:39: 7b:ca:ea:0e:61:65:63:25:d4:9b:d3:81:1b:09:c9: 82:53:36:03:4f:b0:81:db:5a:9b:6a:0a:48:95:d2: 10:49:53:4c:9d:a9:be:60:00:bf:54:41:eb:0a:79: 9c:c8:fc:19:82:d3:8f:b1:99:7e:b1:71:37:dd:22: 3e:79:bc:1e:ae:5d:42:b4:7d:7b:4a:d1:e9:13:ca: 0f:c6:de:87:16:18:40:59:7f:bd:63:e3:fe:86:ec: 23:60:eb:c5:42:a4:71:6e:54:e1:e9:17:e2:71:61: 98:9f:fb:38:54:f5:b0:03:5c:95:cf:00:ee:96:5b: d0:39:b6:d9:1f:31:07:fb:28:df:b8:77:fd:47:48: 68:f7:c3:08:72:38:95:fc:de:1c:04:ea:95:19:7b: 3e:5b:f0:ec:bc:68:83:1c:b3:b2:12:1d:0c:0d:07: 73:ae:3d:14:fb:bb:b7:37:84:01:63:26:84:db:1e: 3b:50:a9:f3:3e:29:09:7b:01:48:76:6c:c1:c7:10: e9:dc:80:ce:15:1a:e2:3d:d2:60:fc:c3:dc:29:ef: c8:67:94:20:37:10:ed:98:a7:85:2a:e4:9c:96:de: 87:a9:48:c9:24:e8:3f:59:af:7a:bd:d0:a9:e6:11: 5e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:0A:7C:65:1E:C4:40:F5:58:7A:EC:5C:70:E2:1F:D2:2B:CD:C8:35 X509v3 Authority Key Identifier: keyid:34:F1:72:6E:A4:BD:6D:3C:80:91:AE:0C:8A:D1:A0:3E:91:E3:59:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:2f:70:89:d8:14:96:38:b6:79:af:e7:a9:b8:da:92:32:8c: 11:96:c3:10:e0:ed:1c:f0:5c:85:5f:04:48:20:bb:a3:d2:c8: 8f:10:ce:92:a1:90:bd:4a:8d:62:b0:8c:15:f7:0c:96:94:5f: 61:78:ae:c2:27:1e:34:5f:32:35:62:fb:96:32:93:10:6a:90: 8e:de:9d:00:33:52:7b:47:9f:67:af:38:58:25:ff:79:03:ca: 8d:b0:16:54:a2:bd:08:11:ac:7e:02:69:88:89:e9:cc:54:7d: 86:51:8f:f0:7d:4d:70:0e:7e:6a:2b:bc:af:24:ad:50:94:c0: b3:61:02:97:51:e5:3a:e5:b4:9e:3c:4f:c8:d8:ba:17:0a:a7: 98:6d:4e:c9:ac:4c:c7:7a:d2:67:32:cb:2e:6d:55:b3:df:c5: 16:28:0a:9e:c2:5a:3a:bd:d3:4b:02:0e:be:94:47:60:33:42: 3a:51:fc:a7:e6:74:7e:88:68:57:03:27:5e:80:9f:a4:97:51: 30:41:e1:75:62:82:d9:9b:3a:de:6c:0f:33:94:14:a9:d2:7c: 7d:40:11:5b:12:1d:d3:1e:e4:b8:27:f4:08:0f:50:f8:b8:53: 10:b7:f5:e4:a6:9c:25:17:70:f4:77:f6:e1:05:1e:b6:df:29: 82:71:ad:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZYumO7sEufx14r0oowYU9Z7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0ZjE3MjZlYTRiZDZkM2M4MDkxYWUwYzhhZDFhMDNlOTFl MzU5YTIwHhcNMjUwNDEzMTAwMTM2WhcNMjUwNDE0MTAwMTM2WjAzMTEwLwYDVQQD EyhlODBhN2M2NTFlYzQ0MGY1NTg3YWVjNWM3MGUyMWZkMjJiY2RjODM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7vIJpPo87JB3H76Cujl7yuoOYWVj JdSb04EbCcmCUzYDT7CB21qbagpIldIQSVNMnam+YAC/VEHrCnmcyPwZgtOPsZl+ sXE33SI+ebwerl1CtH17StHpE8oPxt6HFhhAWX+9Y+P+huwjYOvFQqRxblTh6Rfi cWGYn/s4VPWwA1yVzwDullvQObbZHzEH+yjfuHf9R0ho98MIcjiV/N4cBOqVGXs+ W/DsvGiDHLOyEh0MDQdzrj0U+7u3N4QBYyaE2x47UKnzPikJewFIdmzBxxDp3IDO FRriPdJg/MPcKe/IZ5QgNxDtmKeFKuSclt6HqUjJJOg/Wa96vdCp5hFevwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOgKfGUexED1WHrsXHDiH9Irzcg1MB8GA1UdIwQY MBaAFDTxcm6kvW08gJGuDIrRoD6R41miMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlBGeWJxUzliVHlBa2E0TWl0R2dQcEhqV2FJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9lZjhlODQtOTE2MS00MDJjLTgxYWQt ZThlOGQyZmU3MGZlLzEvTlBGeWJxUzliVHlBa2E0TWl0R2dQcEhqV2FJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9lZjhlODQtOTE2MS00MDJjLTgxYWQtZThlOGQyZmU3MGZl LzEvTlBGeWJxUzliVHlBa2E0TWl0R2dQcEhqV2FJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAci9widgU lji2ea/nqbjakjKMEZbDEODtHPBchV8ESCC7o9LIjxDOkqGQvUqNYrCMFfcMlpRf YXiuwiceNF8yNWL7ljKTEGqQjt6dADNSe0efZ684WCX/eQPKjbAWVKK9CBGsfgJp iInpzFR9hlGP8H1NcA5+aiu8ryStUJTAs2ECl1HlOuW0njxPyNi6FwqnmG1OyaxM x3rSZzLLLm1Vs9/FFigKnsJaOr3TSwIOvpRHYDNCOlH8p+Z0fohoVwMnXoCfpJdR MEHhdWKC2Zs63mwPM5QUqdJ8fUARWxId0x7kuCf0CA9Q+LhTELf15KacJRdw9Hf2 4QUett8pgnGtxQ== -----END CERTIFICATE-----Generated at Sun Apr 13 20:38:31 2025 by rpki-client