$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft File: Njdp-GRKWnGK5isFjdH7YstaPCA.mft (raw, json) Hash identifier: l9ruFOm7qcj6zS+JuSNGUosX0wsQEebcquawgExjTdA= Subject key identifier: 2C:98:D5:89:BF:2F:CC:D8:F9:A5:48:F3:38:F4:29:37:9E:0E:53:4B Authority key identifier: 36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20 Certificate issuer: /CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20 Certificate serial: 01963C5383F57F8A67F539602C57AEC462A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft Manifest number: 1142 Signing time: Wed 16 Apr 2025 02:00:28 +0000 Manifest this update: Wed 16 Apr 2025 02:00:28 +0000 Manifest next update: Thu 17 Apr 2025 02:00:28 +0000 Files and hashes: 1: 6KojKGt8m1JZYflLectBk9G6KyQ.roa (hash: f7oRXtNmZrUg7ECYCX58KaB9kZ/BYKNvyNqrr7ZA0pg=) 2: 9_VTzPNMtq6bRoN_2gQPbFirB_4.roa (hash: GFcx39JAffdglXqipIFTeQRGB4wpQ89alaTRPqJNkCk=) 3: 9d7-oiu-mBjw4z1zBB1dh7CSH94.roa (hash: NSPVHDDpPzrpqQjtgOJxVDl+4YeQklgmMnIIlaE/zH4=) 4: BxI-z_iKAoRv-KkoQfmyFBd2rBU.roa (hash: azqV4pSZAum5oUwc2nR9O4azmHBN9hS6/dWIvs6n6Yk=) 5: I9XUisFoxGtL5nlEyDkRm9SxnHU.roa (hash: CRR3lDaaR4JHFLVIWiAceY/tOhJb5JmxYXyKyqN2k7o=) 6: JwtLcTu5YVfj_v6EYmBkVEJOCSk.roa (hash: Z/uV55YxgNv0N3LLBrV+q7AxLOdh39PbZ8CIfU7Xb24=) 7: Njdp-GRKWnGK5isFjdH7YstaPCA.crl (hash: PuLylN2UH8y9uTX7Jz3U6LVfrM14l07BkhPI60UM+dA=) 8: UB0nHtcN2JqEpsBiE2dgnMbsFmA.roa (hash: /6u2jCfdxJpMMlfUjlpcIXqMInwiMRNkGcmBxEuYZxo=) 9: lVLXkjE5u336DUNe5-yOssKJPTU.roa (hash: LZfaMzNKKI5KTD1Ka0mwOqPdg88OEyiRswrf9PDppVQ=) 10: mMGXQdchjm-1k_0cqBgKyEDxRR4.roa (hash: 3upgVfgQw3wj9y0X5oDRyiDppWmgLqIOtqf6K+MUlIM=) 11: nI4pg8TJwdBGvcOSMEwiKdACRgY.roa (hash: e4fjV36QQP3EEWEcje1wCzIbRILO6c8V4Bt3WpH8Zcc=) 12: o5rwtBSGBeueFoqXJnECfg6cmYA.roa (hash: TLPcNxEKVGJq+q8J97N3QnvxQz4N/IjsjG2sJIGRFeA=) 13: okDig36WatgfOljJ7YAQ7f4qAwI.roa (hash: 9F0Jk3aBVBsMc/BBPP2ZGmKOPXIvDvI2DUUSrfyHD70=) 14: pVY_FGIDhlEf6vs7MShMAVBNlQk.roa (hash: 36C0/NjrkK4EvhEr+5+ZgIKhG5JQMFDTmhg9XNYss9Q=) 15: snSvPYVkGepL_9GgsNIGnoIWw44.roa (hash: T0HMAvigAIpTuY/J9VuaKFj34+4Tc7VdD2Bhy8snzbA=) 16: uiYUyTWWE4PZpkpKN5LB2EKpPu0.roa (hash: z03Urv4xQycLb08btj7gfHzMCKzXb1kRu0QwraJJBFQ=) 17: xZ2Mzu_3c40aDFLd62CdvQWebug.roa (hash: xKY3AuHc8X/lxha18soPYIUuGtqbxocRZavr4da/On8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 17 Apr 2025 00:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:3c:53:83:f5:7f:8a:67:f5:39:60:2c:57:ae:c4:62:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20 Validity Not Before: Apr 16 02:00:28 2025 GMT Not After : Apr 17 02:00:28 2025 GMT Subject: CN=2c98d589bf2fccd8f9a548f338f429379e0e534b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:20:06:db:9e:29:8d:ed:6f:1b:db:d7:a5:ad: 5f:72:53:78:64:cc:05:1e:99:d6:6c:3c:0c:9c:3d: e6:8f:98:4c:03:61:2e:71:c8:2f:bc:2e:22:91:f0: 46:e3:e9:9f:b4:75:ea:93:46:fc:44:8f:5e:5f:e3: 80:c2:f8:1b:42:c3:86:d2:cb:f4:e9:a0:69:8a:78: 7c:4e:29:b8:a5:ad:0d:dc:55:95:82:1a:a9:d3:3c: 89:79:ab:d8:f1:7b:27:6c:4d:68:83:4b:0c:4a:11: db:b9:5f:32:03:32:c6:ce:f4:fd:d5:25:0d:16:4b: d2:2a:47:e6:e8:70:48:a2:00:d6:c1:c0:90:ca:98: 7e:1d:fb:db:51:8a:e7:08:02:ff:49:cc:cb:70:f0: b6:17:be:f7:40:c0:dc:fc:fe:88:23:e7:4a:ee:09: 95:79:67:f5:58:b3:31:6a:ff:57:df:1e:e0:71:99: da:64:3c:07:85:7c:05:7a:0c:ca:59:b7:85:52:12: d6:1a:43:0b:96:6a:dd:d0:60:e0:af:05:37:3b:cf: cd:81:ae:9d:2e:5f:a5:f7:60:88:3a:86:c3:16:13: d9:61:c7:ad:46:2d:29:58:20:30:57:14:19:01:2c: 56:44:bb:15:dc:11:f9:1c:f1:6b:4f:2a:6c:f4:e7: bd:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:98:D5:89:BF:2F:CC:D8:F9:A5:48:F3:38:F4:29:37:9E:0E:53:4B X509v3 Authority Key Identifier: keyid:36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:50:a8:5d:3e:66:7a:fa:89:36:b5:bb:1f:51:0b:ad:17:be: 92:6b:43:c8:77:7e:80:c3:ea:db:f7:59:05:76:70:2c:c6:69: 95:92:57:a5:d7:f9:66:be:77:bf:a4:b0:f6:4b:9b:69:53:a9: ce:99:cf:02:a5:07:63:1a:2b:c0:6a:31:7c:a7:44:ad:a2:76: b2:cb:da:b0:d7:86:12:dd:e8:fa:dc:4b:52:46:8c:69:f8:9f: 38:e4:1b:ce:f9:af:98:e4:0d:3d:a1:61:d2:97:ec:cf:ce:41: 70:7d:63:b0:55:e6:1f:8b:29:d0:3b:3d:dc:3f:4a:ff:3a:1f: 42:2d:bf:ab:54:60:4e:23:bf:0b:5c:0e:32:f3:f1:74:e3:c4: ca:3e:e0:14:98:96:d7:32:31:a2:1f:c5:d7:33:49:ac:63:83: 14:9e:94:e0:d6:41:3b:34:1e:0e:d0:3a:3d:41:c9:be:6f:df: 43:71:29:f9:02:cb:67:b4:1c:3d:a4:8d:ea:30:8e:11:f6:15: 40:b7:e5:5b:a7:98:79:08:b4:cf:a1:29:8a:73:03:cc:34:39: 2c:1f:9d:8f:16:f2:1b:fa:e1:e9:26:1c:0a:d3:bc:0b:86:7b: 53:f8:70:33:f5:5c:37:98:7f:76:29:94:94:57:9a:7f:b9:44: bd:fd:7f:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZY8U4P1f4pn9TlgLFeuxGKjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2Mzc2OWY4NjQ0YTVhNzE4YWU2MmIwNThkZDFmYjYyY2I1 YTNjMjAwHhcNMjUwNDE2MDIwMDI4WhcNMjUwNDE3MDIwMDI4WjAzMTEwLwYDVQQD EygyYzk4ZDU4OWJmMmZjY2Q4ZjlhNTQ4ZjMzOGY0MjkzNzllMGU1MzRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCAG254pje1vG9vXpa1fclN4ZMwF HpnWbDwMnD3mj5hMA2EuccgvvC4ikfBG4+mftHXqk0b8RI9eX+OAwvgbQsOG0sv0 6aBpinh8Tim4pa0N3FWVghqp0zyJeavY8XsnbE1og0sMShHbuV8yAzLGzvT91SUN FkvSKkfm6HBIogDWwcCQyph+HfvbUYrnCAL/SczLcPC2F773QMDc/P6II+dK7gmV eWf1WLMxav9X3x7gcZnaZDwHhXwFegzKWbeFUhLWGkMLlmrd0GDgrwU3O8/Nga6d Ll+l92CIOobDFhPZYcetRi0pWCAwVxQZASxWRLsV3BH5HPFrTyps9Oe9sQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCyY1Ym/L8zY+aVI8zj0KTeeDlNLMB8GA1UdIwQY MBaAFDY3afhkSlpxiuYrBY3R+2LLWjwgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmpkcC1HUktXbkdLNWlzRmpkSDdZc3RhUENBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8wZjhmZWEtZjAwYS00NDE1LWIzOTYt Mzk5ZmM5NjkzYjIyLzEvTmpkcC1HUktXbkdLNWlzRmpkSDdZc3RhUENBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8wZjhmZWEtZjAwYS00NDE1LWIzOTYtMzk5ZmM5NjkzYjIy LzEvTmpkcC1HUktXbkdLNWlzRmpkSDdZc3RhUENBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXVCoXT5m evqJNrW7H1ELrRe+kmtDyHd+gMPq2/dZBXZwLMZplZJXpdf5Zr53v6Sw9kubaVOp zpnPAqUHYxorwGoxfKdEraJ2ssvasNeGEt3o+txLUkaMafifOOQbzvmvmOQNPaFh 0pfsz85BcH1jsFXmH4sp0Ds93D9K/zofQi2/q1RgTiO/C1wOMvPxdOPEyj7gFJiW 1zIxoh/F1zNJrGODFJ6U4NZBOzQeDtA6PUHJvm/fQ3Ep+QLLZ7QcPaSN6jCOEfYV QLflW6eYeQi0z6EpinMDzDQ5LB+djxbyG/rh6SYcCtO8C4Z7U/hwM/VcN5h/dimU lFeaf7lEvf1/tg== -----END CERTIFICATE-----Generated at Wed Apr 16 04:46:06 2025 by rpki-client