$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.mft File: wOVJ_c7rApEsiodByBaAa74ZxEg.mft (raw, json) Hash identifier: m2hnMKi6EtPbaPAAw0RqJpPz2HoGfiwJ/9TmOdRf0/c= Subject key identifier: 16:25:3B:83:6E:D0:02:C7:3B:92:65:FA:63:4F:7A:8E:C1:A9:16:FA Authority key identifier: C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48 Certificate issuer: /CN=c0e549fdceeb02912c8a8741c816806bbe19c448 Certificate serial: 01950F47018C314019738528D7936A1C2A5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.mft Manifest number: 08FF Signing time: Sun 16 Feb 2025 15:01:06 +0000 Manifest this update: Sun 16 Feb 2025 15:01:06 +0000 Manifest next update: Mon 17 Feb 2025 15:01:06 +0000 Files and hashes: 1: 7eNb44WNvRe3zUhzNoMOXBV0hdw.roa (hash: u5nCu4SXyaiL5SI5Y24CZX8YRjgh+vsOfZ1NUiBL330=) 2: 92v4gOX7Hd4VpBM47MNWwQITmiQ.roa (hash: IYC56kc9QpO1Lz7tXp5PsrYKm5wg9hGG4hbFTisgloQ=) 3: BJ6lsg-DXRJALTpWPFS2koaTAyY.roa (hash: IiHbLMYyBvv8idUUWBs1VcBi/2+qrySt01qtestuj3U=) 4: DO5idF7JefFWyUYzkZhYwCuZL6c.roa (hash: AJ1wLkAbsKPjn/aeUEI+0wqiFAaro9i62bH223sEeJk=) 5: iDdiLh5kCcnVhEcS17XeyUklRpU.roa (hash: vH9FgKr3O/PWH1F99+7VS2TIiEwAAU+Q3wu4ESVAvX4=) 6: lb8SvljV7v-gn9cpNcy7VFlIW4U.roa (hash: TMosDmxteJN205Un1BL0SVx3OHQURc2E5+W3ttZ+rDY=) 7: qkGOcb9ML1ScPc6ocdkEc-fJdPo.roa (hash: rOYR9Hc2I/xQX5WTMTMX9NryWoJMfSMzeGQ9FnM3vXE=) 8: v4giAVOJMEch9tYcozCGJgelH1M.roa (hash: OUMy4ShdW4gTpBY9LdojzedOmb/sODuZT4FZY1l2uCM=) 9: vCbOPN37-7Enm6vsP3-hGOISXDg.roa (hash: 7gKAoJeE/xQ9th4073due0jo0EKw0fA+BzapZ9ZOEdQ=) 10: wOVJ_c7rApEsiodByBaAa74ZxEg.crl (hash: PuBLBWn3HfsQH2gIYJtooiFhdVpv6UNnR7XAUAbs+z8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.crl rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.mft rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:95:0f:47:01:8c:31:40:19:73:85:28:d7:93:6a:1c:2a:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0e549fdceeb02912c8a8741c816806bbe19c448 Validity Not Before: Feb 16 15:01:06 2025 GMT Not After : Feb 17 15:01:06 2025 GMT Subject: CN=16253b836ed002c73b9265fa634f7a8ec1a916fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:62:54:45:63:0d:55:05:90:ef:5d:5a:84:bf: bf:9f:33:a7:7d:a5:b0:49:e5:33:c5:29:ff:a6:82: 2d:03:e2:08:5b:f7:a6:e5:b1:c2:cd:d5:3a:93:67: b1:4d:ce:6c:50:39:c8:4b:08:2f:eb:92:9d:de:18: bf:4b:45:02:fe:0e:89:11:86:23:45:68:ce:cc:35: fa:5b:3f:02:1c:77:21:31:84:b6:33:6d:7e:78:45: 71:70:d7:48:4b:18:43:cb:f6:27:c1:87:63:50:07: b1:b6:2d:6c:a7:65:5e:ef:82:ac:37:60:03:cc:dc: e4:3d:ac:3c:e5:5a:d4:2f:a3:96:ab:f2:07:2a:4a: 78:b6:9f:96:19:a7:1c:92:44:76:ff:84:88:e0:a8: 39:d2:52:f2:a0:18:43:3e:ca:f0:2f:6e:4b:12:3b: ab:60:b7:70:4c:cc:89:bb:aa:78:9b:56:f2:70:88: cd:8b:68:23:1b:e8:24:9f:22:88:88:9a:d0:d3:73: ce:9a:0e:e8:da:48:bd:f6:7d:31:54:a9:33:13:29: d6:3f:3b:e9:b9:a1:a4:2d:e6:07:c7:fc:b0:32:f9: 60:ba:89:9b:c4:12:9d:5f:ed:a3:b7:91:92:f6:d7: 25:b5:28:73:f1:9b:6c:63:dc:83:57:f8:f5:24:b6: b9:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:25:3B:83:6E:D0:02:C7:3B:92:65:FA:63:4F:7A:8E:C1:A9:16:FA X509v3 Authority Key Identifier: keyid:C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:30:4c:bf:76:1f:ca:ae:9d:3f:c8:30:79:d5:f7:9c:3b:e7: 53:c6:2c:a1:c8:94:e4:dd:10:0a:7d:62:6e:45:fe:d5:d2:55: 9b:60:aa:fb:2b:d0:84:ab:c1:27:4c:91:12:fd:e4:5d:fd:b9: 61:60:7c:f8:65:fe:72:66:dd:ff:07:ee:7b:c0:dc:f0:e1:4a: 40:b0:e4:06:10:80:06:8b:44:d3:d0:a5:cf:b7:5f:cb:ac:72: 41:95:56:df:41:f4:e5:14:67:1f:ec:de:29:7a:92:1d:f9:41: f2:b6:d1:ab:dd:c1:b0:fa:c2:37:cd:14:f8:c1:a0:ef:b4:9c: 30:00:70:c8:73:ab:2b:ed:2b:37:21:18:34:a2:f3:92:75:1a: 29:07:92:01:cd:f8:7a:5e:18:13:bf:d8:37:44:3b:66:b0:7c: cf:0d:75:88:f5:ce:a0:44:82:60:b1:19:bf:c1:fb:85:56:16: 33:67:74:5f:2f:d9:76:a6:52:c5:5d:22:fa:e3:75:1b:7d:7f: a1:8a:18:b2:7a:46:f7:f2:64:6d:83:b6:4e:45:c2:05:68:69: b7:24:a6:be:32:7a:f5:16:2b:47:56:f0:e5:6e:20:76:ad:6f: 4d:64:56:d6:91:65:56:72:a4:18:29:19:39:17:9c:93:b5:e5: 19:5d:0c:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZUPRwGMMUAZc4Uo15NqHCpdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwZTU0OWZkY2VlYjAyOTEyYzhhODc0MWM4MTY4MDZiYmUx OWM0NDgwHhcNMjUwMjE2MTUwMTA2WhcNMjUwMjE3MTUwMTA2WjAzMTEwLwYDVQQD EygxNjI1M2I4MzZlZDAwMmM3M2I5MjY1ZmE2MzRmN2E4ZWMxYTkxNmZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2JURWMNVQWQ711ahL+/nzOnfaWw SeUzxSn/poItA+IIW/em5bHCzdU6k2exTc5sUDnISwgv65Kd3hi/S0UC/g6JEYYj RWjOzDX6Wz8CHHchMYS2M21+eEVxcNdISxhDy/YnwYdjUAexti1sp2Ve74KsN2AD zNzkPaw85VrUL6OWq/IHKkp4tp+WGacckkR2/4SI4Kg50lLyoBhDPsrwL25LEjur YLdwTMyJu6p4m1bycIjNi2gjG+gknyKIiJrQ03POmg7o2ki99n0xVKkzEynWPzvp uaGkLeYHx/ywMvlguombxBKdX+2jt5GS9tcltShz8ZtsY9yDV/j1JLa5WQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBYlO4Nu0ALHO5Jl+mNPeo7BqRb6MB8GA1UdIwQY MBaAFMDlSf3O6wKRLIqHQcgWgGu+GcRIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd09WSl9jN3JBcEVzaW9kQnlCYUFhNzRaeEVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8xNjBmOGYtZGJhYi00ODJkLWIzOWMt YWQyZmRhNDc5ODhlLzEvd09WSl9jN3JBcEVzaW9kQnlCYUFhNzRaeEVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8xNjBmOGYtZGJhYi00ODJkLWIzOWMtYWQyZmRhNDc5ODhl LzEvd09WSl9jN3JBcEVzaW9kQnlCYUFhNzRaeEVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABjBMv3Yf yq6dP8gwedX3nDvnU8YsociU5N0QCn1ibkX+1dJVm2Cq+yvQhKvBJ0yREv3kXf25 YWB8+GX+cmbd/wfue8Dc8OFKQLDkBhCABotE09Clz7dfy6xyQZVW30H05RRnH+ze KXqSHflB8rbRq93BsPrCN80U+MGg77ScMABwyHOrK+0rNyEYNKLzknUaKQeSAc34 el4YE7/YN0Q7ZrB8zw11iPXOoESCYLEZv8H7hVYWM2d0Xy/ZdqZSxV0i+uN1G31/ oYoYsnpG9/JkbYO2TkXCBWhptySmvjJ69RYrR1bw5W4gdq1vTWRW1pFlVnKkGCkZ OReck7XlGV0MaA== -----END CERTIFICATE-----Generated at Sun Feb 16 20:37:23 2025 by rpki-client