$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft File: Otc0z5DHc0KIBrloIJUVuRSDGp0.mft (raw, json) Hash identifier: xzstzIQLJkKfQEP6vBartDXt0hXr0XmrIbwZ7X3aGbQ= Subject key identifier: C7:C9:72:18:9D:C0:1A:9F:CA:36:79:F6:BA:D9:54:B8:B7:2E:1B:11 Authority key identifier: 3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D Certificate issuer: /CN=3ad734cf90c773428806b968209515b914831a9d Certificate serial: 019609E7F350FF7BAE66083F47DC6A03EDC2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft Manifest number: 14EF Signing time: Sun 06 Apr 2025 07:01:57 +0000 Manifest this update: Sun 06 Apr 2025 07:01:57 +0000 Manifest next update: Mon 07 Apr 2025 07:01:57 +0000 Files and hashes: 1: 1-3fiDUT6gzjtAQogV6bgofonnG4.roa (hash: pc7dIo5ndDhRJIrcZvUMyHa9aA2Wx3LxCkefIcK3Gqc=) 2: 2NYdjjFKUwwAHXr7ubSJv8Kzg8g.roa (hash: kjplcNAq1JXoQgnY61zJpj1+5jIDXxWAT5fT5oin7qk=) 3: AF-KFPYoLrR_wnL0SE_zW6WshRE.roa (hash: z49PjeXPIBQhRQUNgU9fm0U8o2Eum7mravj6VvfHLII=) 4: K9OoJ9oRdDGRAG9_JEraDylQYiQ.roa (hash: EDky965lH+7d9zEKg3uh2UPLM5EYLdR0gznw5lmNnpo=) 5: KXPczm1nS64dvcv4u7CYJ1l5AHI.roa (hash: IT1fLQDPUweWTezSJLi2UFJ5fUaIjncEdmdwkryAQWo=) 6: Otc0z5DHc0KIBrloIJUVuRSDGp0.crl (hash: M8VmkK95gqS7h0r2maIkxCT1OMzUCfhRFDEKvdK3C24=) 7: apLqK898oR7RE-dAFEvdyErBOzE.roa (hash: 7wPWjmBIQU48S3GSQT90DN//sDuxGXlKRA7f0n/Hjc8=) 8: beYTq1ZSU6CkOYAx7ryqD6bd3cM.roa (hash: x3+IsuLxOdLQwSExJVIL+EzcT73OO7RISZtN+IgQDrQ=) 9: cJ5TDgfH_xk0ahokTNlv7EYdOTA.roa (hash: s1puOAMsS7Je7hdhCgv2/ytoYeU9rstzLYKCy4SNXps=) 10: cNvBb2RRxSjoCAkb0wZvTJ3BY5k.roa (hash: oDSoGJIctW5p0rg5AbBoYa3L96DcMDhEp9yGbjF4AfU=) 11: eFAtBNJzls8AgaaXT8fjcCX17mA.roa (hash: GPQ9iMR4UR3PGXp7FlfdeNJSrFumQ8WzN02VnHoIJ84=) 12: fmuUqwHIE4LJQQIBDK_3JI3axjw.roa (hash: jgYvNn+KWNnN7BXATe+H2BiIlAYgwP4SHTyKXfV03HU=) 13: mgVlb5y6oflmqG3d7ppnuUd0Clo.roa (hash: dzpQ0zn6slEv00KpzZGJezOhzkkJQj1vaHxpsdbRvnE=) 14: qx1D6MwlFJLvd2j3wGKzaKDH1gc.roa (hash: /6Qrju93/zC5tTWH2Z6B9bYEnrkHOlHlFsFGFSYu75M=) 15: vpHvJjjgw4O3Rz8r2ZFr25OMuek.roa (hash: DjXvcuXor+t9vZEtEo50/bWiWyQCM6LNcDnznEPg0tw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 07 Apr 2025 07:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:09:e7:f3:50:ff:7b:ae:66:08:3f:47:dc:6a:03:ed:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ad734cf90c773428806b968209515b914831a9d Validity Not Before: Apr 6 07:01:57 2025 GMT Not After : Apr 7 07:01:57 2025 GMT Subject: CN=c7c972189dc01a9fca3679f6bad954b8b72e1b11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:68:18:fa:6d:f0:f4:d0:2c:a4:a4:9b:c4:57: b0:01:bd:2d:e2:f4:cb:95:25:ef:a6:83:82:7a:56: 3e:bc:77:5e:db:4f:13:18:cf:f8:34:ad:f5:35:5a: aa:9d:98:aa:e6:eb:8e:f9:09:ca:e2:94:61:59:92: 82:72:8d:e1:c9:53:bc:74:58:75:8e:8f:22:02:3d: 0c:9b:90:2d:bc:2d:fc:21:b8:36:1d:5b:8e:88:4d: 86:ae:50:80:e1:f9:ee:b1:d7:20:40:f8:5b:b8:9f: 3d:cb:67:ae:22:16:33:9e:9a:60:6d:42:c0:dd:02: f8:5d:08:ea:3b:b1:9a:bb:92:59:3f:1b:ab:76:02: d7:96:6b:df:5e:44:1e:cd:1a:47:d3:01:2f:d6:d4: 76:1b:38:86:35:11:f0:80:f1:4d:6c:4f:c6:b2:23: 03:88:eb:e8:18:b7:56:19:5e:6b:7d:c7:b1:37:7e: 9b:52:8e:d1:aa:c9:6f:9f:a1:8c:a5:ec:44:f6:4c: 7c:d4:6c:85:b7:2f:04:89:c0:b1:e5:fd:7e:7d:80: 4b:78:53:1f:83:67:b3:91:97:3a:52:08:77:92:54: e4:09:cf:3e:18:99:cc:e9:23:cc:67:0c:6b:99:0a: bb:f5:66:6f:4c:f9:3f:e3:11:f4:ad:5a:0f:f4:33: 09:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:C9:72:18:9D:C0:1A:9F:CA:36:79:F6:BA:D9:54:B8:B7:2E:1B:11 X509v3 Authority Key Identifier: keyid:3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:69:2c:a2:bc:50:9d:90:28:50:21:59:ee:e5:34:ea:cb:68: fa:e3:f7:e8:87:60:33:2c:55:68:c3:21:04:02:78:f7:3c:b8: 9b:de:90:8d:ed:c0:d5:fe:15:97:22:a6:b9:6b:cd:b1:d1:58: 0d:bb:30:7b:07:e2:69:5a:17:c6:fa:57:c5:a6:b2:44:d1:a6: af:c7:ab:52:18:df:3c:6c:86:38:12:98:01:b6:19:0b:b0:dd: e1:7b:1c:d0:53:9d:32:1b:a5:fb:42:14:82:d9:2f:8a:57:2f: 08:bf:68:26:6f:71:fe:38:2b:f5:6c:9a:49:b4:d4:75:6b:7d: ce:8b:83:55:da:51:d5:04:2b:a0:39:c7:4a:89:17:1c:be:76: 7d:a7:bf:d1:3e:dc:06:f9:7f:c9:f7:1f:ed:25:d0:a8:ef:1b: e9:07:5c:1c:a8:30:09:c6:20:91:32:9f:25:ca:2f:b5:7b:42: 0c:df:7b:b5:7b:0f:ed:fc:b6:72:c4:17:ef:2f:6c:de:a1:67: f8:9f:31:6a:22:05:9e:b1:50:75:e5:25:72:67:ed:08:be:81: 5d:10:1a:8d:b2:35:a1:44:41:74:b9:07:f3:ca:74:7e:16:da: 78:79:b0:d1:78:85:6f:da:a3:3b:67:c6:9f:f7:47:a5:2b:b1: 03:3e:f6:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZYJ5/NQ/3uuZgg/R9xqA+3CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZDczNGNmOTBjNzczNDI4ODA2Yjk2ODIwOTUxNWI5MTQ4 MzFhOWQwHhcNMjUwNDA2MDcwMTU3WhcNMjUwNDA3MDcwMTU3WjAzMTEwLwYDVQQD EyhjN2M5NzIxODlkYzAxYTlmY2EzNjc5ZjZiYWQ5NTRiOGI3MmUxYjExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmgY+m3w9NAspKSbxFewAb0t4vTL lSXvpoOCelY+vHde208TGM/4NK31NVqqnZiq5uuO+QnK4pRhWZKCco3hyVO8dFh1 jo8iAj0Mm5AtvC38Ibg2HVuOiE2GrlCA4fnusdcgQPhbuJ89y2euIhYznppgbULA 3QL4XQjqO7Gau5JZPxurdgLXlmvfXkQezRpH0wEv1tR2GziGNRHwgPFNbE/GsiMD iOvoGLdWGV5rfcexN36bUo7Rqslvn6GMpexE9kx81GyFty8EicCx5f1+fYBLeFMf g2ezkZc6Ugh3klTkCc8+GJnM6SPMZwxrmQq79WZvTPk/4xH0rVoP9DMJiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMfJchidwBqfyjZ59rrZVLi3LhsRMB8GA1UdIwQY MBaAFDrXNM+Qx3NCiAa5aCCVFbkUgxqdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3RjMHo1REhjMEtJQnJsb0lKVVZ1UlNER3AwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9lYmYzODEtMDBjOC00ODBkLWE2NmMt NzZhMWQ0ZDgzMTk3LzEvT3RjMHo1REhjMEtJQnJsb0lKVVZ1UlNER3AwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS9lYmYzODEtMDBjOC00ODBkLWE2NmMtNzZhMWQ0ZDgzMTk3 LzEvT3RjMHo1REhjMEtJQnJsb0lKVVZ1UlNER3AwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACWksorxQ nZAoUCFZ7uU06sto+uP36IdgMyxVaMMhBAJ49zy4m96Qje3A1f4VlyKmuWvNsdFY DbswewfiaVoXxvpXxaayRNGmr8erUhjfPGyGOBKYAbYZC7Dd4Xsc0FOdMhul+0IU gtkvilcvCL9oJm9x/jgr9WyaSbTUdWt9zouDVdpR1QQroDnHSokXHL52fae/0T7c Bvl/yfcf7SXQqO8b6QdcHKgwCcYgkTKfJcovtXtCDN97tXsP7fy2csQX7y9s3qFn +J8xaiIFnrFQdeUlcmftCL6BXRAajbI1oURBdLkH88p0fhbaeHmw0XiFb9qjO2fG n/dHpSuxAz72zw== -----END CERTIFICATE-----Generated at Sun Apr 6 13:56:55 2025 by rpki-client