$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.mft File: dGOVwSZyrZWJIbYrncmyvNimip8.mft (raw, json) Hash identifier: BnvIQbcf0YW5tp750/cePHMOb+A5zE9olrfkCaXuiC0= Subject key identifier: D8:C1:9E:F6:BA:D2:9D:B7:D5:19:36:9B:14:02:C5:89:F3:12:79:C1 Authority key identifier: 74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F Certificate issuer: /CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f Certificate serial: 019614A20EC3EBE1B9226A9A845F56623FBB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.mft Manifest number: 0D20 Signing time: Tue 08 Apr 2025 09:01:26 +0000 Manifest this update: Tue 08 Apr 2025 09:01:26 +0000 Manifest next update: Wed 09 Apr 2025 09:01:26 +0000 Files and hashes: 1: 49__1Mb6TJOq1lBE39sK0MqptNw.roa (hash: mUbErI4yr16L9KeXw+m7dZ8Q/W3G3H5gFLIPV4hSK+w=) 2: 5dh_b1RBPEedGPoH5jPrifwFpjk.roa (hash: FiUlLPDPpSS4NO4ecP0itIgJ8SGlTnSQQXsonHz0nWs=) 3: 9JRK7EwR6Rg_h37a1uMH5kLd-FE.roa (hash: seSeyyGJGHJLolRBA5CPiq9g6rFjmIDsp1xxdhmozxQ=) 4: D_DMWXe-SCxub8zdYhqregtOfgc.roa (hash: YdgWjYi7meP25wOXjFPlW12dueNlMrHsgbDj5lqUC/U=) 5: Gtrnpnu2EuvTaSZcq-k7Wc8SQpo.roa (hash: Ozf4xst6zqysHFFPHqPk6t9V4R5ZCQl3Sl9vytAN8Vc=) 6: LdIbymxNIXROKdCHKP82tGDACeU.roa (hash: kQyQUPIfVzFwJ1Jq+tF49xJ69eCwQR/ZkbVWbjv5vAI=) 7: SChPZPj9fTG0LMgBHiZShGaGesk.roa (hash: yiFf6ekegDw5R3MvDUcGOwB0KMvQ6EjjT4IN1JKBmzE=) 8: TBnbIzlh-BKbahkJ3E7jSuQuQaY.roa (hash: wANue+0BieEbIbGU0PO+SRCogjBRNdJwQ6IIP6xIdvM=) 9: dGOVwSZyrZWJIbYrncmyvNimip8.crl (hash: /csgLRLCO6SDQxZbGDAo4ra2ZyBFgLx9sIGDHYT0t2c=) 10: h1ukNoxF9DJUl37AyGab6Erc1Gg.roa (hash: ZJoHXOQXc61UY5FcS2k+Dk9a8RGGZKOXsXXbXlt54JQ=) 11: py6UVbnGSCFD9UnKceZ9kgRxFEA.roa (hash: bcsPoMQcphhUQSwMWLfV++Vj4Ps638fSjd2kseADRTg=) 12: r1KzO2xl8ICSO7mqxB698PRuZNw.roa (hash: kEobsRqs12mPpmxJMO043I+VfPOn+9gNzHlkxfMSy8w=) 13: sji6IRKMxoDbfzOHSYIJXQ44kMU.roa (hash: J7ZKFCKuQD4fFS/N1oH5CYaWP7urJ+aNVO6F4VGrJVY=) 14: t5XPQX_yMIvCtklbQrF1q82oTKI.roa (hash: 7XrFoeiXGnOydV2Y9F7H+zsIgDxk1pwJqNALV9hG41A=) 15: zn28wDGOw3qBz9OqZJzgWf1QCv0.roa (hash: IFT8wg4FnvyKYbJvM5hiahqsDRtzob17zeYuwyl/UlM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.crl rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.mft rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 09 Apr 2025 08:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:14:a2:0e:c3:eb:e1:b9:22:6a:9a:84:5f:56:62:3f:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f Validity Not Before: Apr 8 09:01:26 2025 GMT Not After : Apr 9 09:01:26 2025 GMT Subject: CN=d8c19ef6bad29db7d519369b1402c589f31279c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:b6:a6:45:bb:5f:bc:b9:d5:d4:71:8b:a6:1b: ac:2e:a2:e9:8e:db:30:db:c2:ca:32:21:65:fb:52: 18:12:29:10:61:12:5b:cd:10:1b:a1:62:a8:d0:b4: 47:1a:13:c3:0e:89:53:d5:a2:8c:47:6d:c5:31:13: 79:28:38:f1:81:4c:b3:42:e5:aa:d6:3f:7b:2f:10: a7:ba:fe:b1:86:c2:4a:60:0f:e7:7f:bc:ed:02:65: 42:48:1e:99:bf:a5:f0:0b:19:6a:b8:6b:6b:f3:3f: 47:54:d7:50:5d:58:09:da:34:f8:42:66:53:20:90: a9:8e:c0:c7:cc:13:33:ac:c8:de:7f:2f:02:58:0d: 0a:9e:73:b9:dd:87:ce:2e:48:37:f7:b1:79:d7:3e: 78:4d:ab:20:f7:69:02:fd:db:12:09:f9:2b:07:9f: 46:c7:24:5b:77:6c:b8:7d:76:90:4f:e9:63:39:a2: 91:5d:dc:09:47:94:8a:db:5d:86:aa:09:39:33:97: 43:f2:d7:5f:8c:94:12:5e:80:b1:d9:72:64:45:ff: d9:66:09:af:0d:ce:68:af:d4:f9:c2:47:81:d8:97: bc:f8:80:fc:0d:89:a0:57:46:69:4a:6f:cd:13:78: c5:69:18:3f:a0:4d:c6:bd:e9:3b:44:95:e3:c5:90: a5:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:C1:9E:F6:BA:D2:9D:B7:D5:19:36:9B:14:02:C5:89:F3:12:79:C1 X509v3 Authority Key Identifier: keyid:74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:52:e8:3c:a5:10:19:e4:9f:9f:ac:5c:84:27:ad:70:65:ec: 41:b1:d4:5a:0c:fb:32:35:b6:87:7a:cd:83:56:09:99:22:c0: 4c:a3:5e:84:ed:ee:01:fd:81:86:bf:90:3a:c1:0e:12:e4:f9: c4:df:e6:ac:a7:3e:17:d3:d1:93:fc:9c:87:f6:64:03:01:69: df:ec:f4:33:b2:07:5e:d8:e4:24:1e:e2:74:e9:02:82:1e:89: 26:4b:d0:46:3e:be:01:9c:3f:28:35:fd:9e:f8:78:c5:14:0d: 14:fd:42:5e:c1:06:57:2b:a1:a9:34:16:89:b7:b2:f4:60:ad: 04:ba:f8:09:a2:1a:03:36:c7:1b:69:8b:2b:61:18:c0:ed:c6: ca:7b:bf:3c:e9:11:b3:04:2d:ec:86:7f:91:54:0a:7f:f8:20: 63:1f:ae:bd:f7:10:d9:f2:18:a4:91:97:09:73:08:e6:dc:cf: 21:11:ec:87:be:92:7b:a9:5a:4c:44:d1:b8:54:a1:36:22:b0: 59:9b:06:07:d6:04:39:ec:80:bc:5d:0a:0b:bb:c7:36:e4:b0: 95:5c:0d:51:c9:46:d2:69:a5:27:86:ea:10:0c:a5:af:30:fd: f7:43:96:f2:2b:d0:83:8a:56:50:b7:bc:27:ec:e3:fa:ea:3e: a5:9e:73:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZYUog7D6+G5ImqahF9WYj+7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0NjM5NWMxMjY3MmFkOTU4OTIxYjYyYjlkYzliMmJjZDhh NjhhOWYwHhcNMjUwNDA4MDkwMTI2WhcNMjUwNDA5MDkwMTI2WjAzMTEwLwYDVQQD EyhkOGMxOWVmNmJhZDI5ZGI3ZDUxOTM2OWIxNDAyYzU4OWYzMTI3OWMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7amRbtfvLnV1HGLphusLqLpjtsw 28LKMiFl+1IYEikQYRJbzRAboWKo0LRHGhPDDolT1aKMR23FMRN5KDjxgUyzQuWq 1j97LxCnuv6xhsJKYA/nf7ztAmVCSB6Zv6XwCxlquGtr8z9HVNdQXVgJ2jT4QmZT IJCpjsDHzBMzrMjefy8CWA0KnnO53YfOLkg397F51z54Tasg92kC/dsSCfkrB59G xyRbd2y4fXaQT+ljOaKRXdwJR5SK212Gqgk5M5dD8tdfjJQSXoCx2XJkRf/ZZgmv Dc5or9T5wkeB2Je8+ID8DYmgV0ZpSm/NE3jFaRg/oE3Gvek7RJXjxZClEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNjBnva60p231Rk2mxQCxYnzEnnBMB8GA1UdIwQY MBaAFHRjlcEmcq2ViSG2K53JsrzYpoqfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEdPVndTWnlyWldKSWJZcm5jbXl2TmltaXA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi85ZTIzNTEtOGRkMC00YjcwLWE1ZmMt ZmI3NzRhYmRmYWMyLzEvZEdPVndTWnlyWldKSWJZcm5jbXl2TmltaXA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi85ZTIzNTEtOGRkMC00YjcwLWE1ZmMtZmI3NzRhYmRmYWMy LzEvZEdPVndTWnlyWldKSWJZcm5jbXl2TmltaXA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZlLoPKUQ GeSfn6xchCetcGXsQbHUWgz7MjW2h3rNg1YJmSLATKNehO3uAf2Bhr+QOsEOEuT5 xN/mrKc+F9PRk/ych/ZkAwFp3+z0M7IHXtjkJB7idOkCgh6JJkvQRj6+AZw/KDX9 nvh4xRQNFP1CXsEGVyuhqTQWibey9GCtBLr4CaIaAzbHG2mLK2EYwO3Gynu/POkR swQt7IZ/kVQKf/ggYx+uvfcQ2fIYpJGXCXMI5tzPIRHsh76Se6laTETRuFShNiKw WZsGB9YEOeyAvF0KC7vHNuSwlVwNUclG0mmlJ4bqEAylrzD990OW8ivQg4pWULe8 J+zj+uo+pZ5zmw== -----END CERTIFICATE-----Generated at Tue Apr 8 11:30:05 2025 by rpki-client