$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.mft File: wOVJ_c7rApEsiodByBaAa74ZxEg.mft (raw, json) Hash identifier: 0Ijk8PtooUyd+tKiKLWUg2sinjvEjuiVKkirIdaVuEM= Subject key identifier: 7D:EB:D2:99:A0:48:44:4C:9F:09:DA:B2:A6:D8:C2:35:FC:26:2A:24 Authority key identifier: C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48 Certificate issuer: /CN=c0e549fdceeb02912c8a8741c816806bbe19c448 Certificate serial: 01963B785BA7A7B2C02858D24000E04E54ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.mft Manifest number: 099D Signing time: Tue 15 Apr 2025 22:01:05 +0000 Manifest this update: Tue 15 Apr 2025 22:01:05 +0000 Manifest next update: Wed 16 Apr 2025 22:01:05 +0000 Files and hashes: 1: 92v4gOX7Hd4VpBM47MNWwQITmiQ.roa (hash: IYC56kc9QpO1Lz7tXp5PsrYKm5wg9hGG4hbFTisgloQ=) 2: BJ6lsg-DXRJALTpWPFS2koaTAyY.roa (hash: IiHbLMYyBvv8idUUWBs1VcBi/2+qrySt01qtestuj3U=) 3: DO5idF7JefFWyUYzkZhYwCuZL6c.roa (hash: AJ1wLkAbsKPjn/aeUEI+0wqiFAaro9i62bH223sEeJk=) 4: EtFPMFFyhb5HQ3AUrbc3nrn6e7Q.roa (hash: amzFmUzQXu8Qk3jOcia7riw9XANsVxhL8nKSAMe7SvU=) 5: YxVBGHzpZ098_zTBEpObTl9p4Eg.roa (hash: JesGckTpDCNMKUvtvdV1ogwXfe3HeaDGJnDqvGhYCXo=) 6: iDdiLh5kCcnVhEcS17XeyUklRpU.roa (hash: vH9FgKr3O/PWH1F99+7VS2TIiEwAAU+Q3wu4ESVAvX4=) 7: lb8SvljV7v-gn9cpNcy7VFlIW4U.roa (hash: TMosDmxteJN205Un1BL0SVx3OHQURc2E5+W3ttZ+rDY=) 8: qkGOcb9ML1ScPc6ocdkEc-fJdPo.roa (hash: rOYR9Hc2I/xQX5WTMTMX9NryWoJMfSMzeGQ9FnM3vXE=) 9: v4giAVOJMEch9tYcozCGJgelH1M.roa (hash: OUMy4ShdW4gTpBY9LdojzedOmb/sODuZT4FZY1l2uCM=) 10: wOVJ_c7rApEsiodByBaAa74ZxEg.crl (hash: QlnhcvGv3wXeNgmtRynnMqqnLLwcfY2235TCaYB+hTg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.crl rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.mft rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 16 Apr 2025 22:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:3b:78:5b:a7:a7:b2:c0:28:58:d2:40:00:e0:4e:54:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0e549fdceeb02912c8a8741c816806bbe19c448 Validity Not Before: Apr 15 22:01:05 2025 GMT Not After : Apr 16 22:01:05 2025 GMT Subject: CN=7debd299a048444c9f09dab2a6d8c235fc262a24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:20:9e:16:48:70:b8:f0:fd:1c:77:0f:90:52: db:03:55:8d:41:d3:1d:82:17:23:41:5a:c6:0a:c4: 0f:35:a9:bb:e7:ca:53:98:24:bb:0f:12:5a:f6:7c: 1d:f7:84:16:84:89:af:ef:3b:79:80:1d:0f:5a:a5: a9:53:95:97:c7:e2:c4:d4:f0:6c:a9:63:31:e9:66: 93:ec:3b:e8:84:98:a0:0f:ac:98:24:84:05:78:7e: 22:30:70:59:f0:fc:9a:54:49:9d:78:c3:14:57:f0: 49:cb:23:5a:56:1e:b7:ef:1c:7e:1a:70:6e:e0:a8: 83:4d:9c:53:42:49:5d:dd:ee:3b:77:b7:9c:26:21: bb:ed:ab:a8:f2:08:3a:85:ce:f9:4b:ce:f0:a6:ca: 81:6b:64:5f:00:b1:78:fa:6e:25:21:28:82:6b:32: 89:91:57:b6:0e:21:4b:a3:a7:2d:79:07:d9:2e:da: fb:59:93:29:2e:bd:e2:39:51:4b:bf:d4:01:78:a9: 5c:4e:70:d7:66:b3:88:ae:d9:85:8b:bc:bb:a1:1c: 75:1e:8b:d0:ac:a2:19:f4:46:f3:4c:51:a5:7d:96: 7c:2b:ab:bf:ed:0f:df:0e:8f:69:6b:53:74:fe:b7: 8e:fb:8e:bb:c4:c4:e6:0a:f4:d4:95:de:d1:b1:3b: 87:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:EB:D2:99:A0:48:44:4C:9F:09:DA:B2:A6:D8:C2:35:FC:26:2A:24 X509v3 Authority Key Identifier: keyid:C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:23:b3:bb:c7:dd:d2:3e:6a:d2:ec:5a:8d:54:f3:f5:60:de: 8f:7f:f7:50:3f:bc:b7:74:22:31:c2:75:9e:67:14:75:20:5a: 34:af:86:5b:32:ac:22:f3:5c:3b:6d:39:82:e3:cf:74:2c:3a: ff:ba:77:7d:ce:ea:f8:92:1f:ef:6d:df:c8:f6:43:fe:25:0d: a8:52:e3:93:e2:c1:b8:77:17:3e:a5:f0:85:ce:e3:e3:bd:20: 54:04:fc:27:fa:1f:73:3e:6b:f3:aa:94:45:35:82:2c:28:c9: 90:20:5f:18:e6:64:d6:b5:db:31:2f:fc:3e:bb:8e:18:35:a6: 25:c3:be:21:28:81:1e:0a:a1:ae:0e:b1:bb:e1:bf:dc:91:20: 04:d2:39:2b:d4:3b:fe:83:3d:32:e1:69:ff:07:e7:68:04:0a: 24:2f:72:64:00:85:e2:31:96:26:6b:77:8d:ab:5f:02:3f:a7: 0c:93:e9:b0:4a:58:41:34:30:0d:5f:5d:f3:c0:72:6a:1e:79: e5:47:57:ce:ec:82:74:5f:d5:24:8c:9a:cc:7d:b0:65:fd:1d: 3c:ed:2e:d6:41:c7:b7:1f:64:45:e6:0c:a9:ea:9f:a5:81:1f: bd:17:df:85:a0:fa:d0:f5:b4:09:00:f7:12:d8:fb:ed:31:45: b7:21:91:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZY7eFunp7LAKFjSQADgTlTtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwZTU0OWZkY2VlYjAyOTEyYzhhODc0MWM4MTY4MDZiYmUx OWM0NDgwHhcNMjUwNDE1MjIwMTA1WhcNMjUwNDE2MjIwMTA1WjAzMTEwLwYDVQQD Eyg3ZGViZDI5OWEwNDg0NDRjOWYwOWRhYjJhNmQ4YzIzNWZjMjYyYTI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSCeFkhwuPD9HHcPkFLbA1WNQdMd ghcjQVrGCsQPNam758pTmCS7DxJa9nwd94QWhImv7zt5gB0PWqWpU5WXx+LE1PBs qWMx6WaT7DvohJigD6yYJIQFeH4iMHBZ8PyaVEmdeMMUV/BJyyNaVh637xx+GnBu 4KiDTZxTQkld3e47d7ecJiG77auo8gg6hc75S87wpsqBa2RfALF4+m4lISiCazKJ kVe2DiFLo6cteQfZLtr7WZMpLr3iOVFLv9QBeKlcTnDXZrOIrtmFi7y7oRx1HovQ rKIZ9EbzTFGlfZZ8K6u/7Q/fDo9pa1N0/reO+467xMTmCvTUld7RsTuHuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH3r0pmgSERMnwnasqbYwjX8JiokMB8GA1UdIwQY MBaAFMDlSf3O6wKRLIqHQcgWgGu+GcRIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd09WSl9jN3JBcEVzaW9kQnlCYUFhNzRaeEVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8xNjBmOGYtZGJhYi00ODJkLWIzOWMt YWQyZmRhNDc5ODhlLzEvd09WSl9jN3JBcEVzaW9kQnlCYUFhNzRaeEVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8xNjBmOGYtZGJhYi00ODJkLWIzOWMtYWQyZmRhNDc5ODhl LzEvd09WSl9jN3JBcEVzaW9kQnlCYUFhNzRaeEVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKiOzu8fd 0j5q0uxajVTz9WDej3/3UD+8t3QiMcJ1nmcUdSBaNK+GWzKsIvNcO205guPPdCw6 /7p3fc7q+JIf723fyPZD/iUNqFLjk+LBuHcXPqXwhc7j470gVAT8J/ofcz5r86qU RTWCLCjJkCBfGOZk1rXbMS/8PruOGDWmJcO+ISiBHgqhrg6xu+G/3JEgBNI5K9Q7 /oM9MuFp/wfnaAQKJC9yZACF4jGWJmt3jatfAj+nDJPpsEpYQTQwDV9d88Byah55 5UdXzuyCdF/VJIyazH2wZf0dPO0u1kHHtx9kReYMqeqfpYEfvRffhaD60PW0CQD3 Etj77TFFtyGROg== -----END CERTIFICATE-----Generated at Wed Apr 16 08:46:22 2025 by rpki-client