$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.mft File: EbabWdGfKYfknxhS1guxd3-AowE.mft (raw, json) Hash identifier: 5cJ+NN7znfj68mLb5zUieudZgz2Ax8mMqGs/9J+2r1o= Subject key identifier: 37:07:7E:28:2D:57:E1:EC:72:78:02:B9:14:66:97:B0:34:80:DB:19 Authority key identifier: 11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01 Certificate issuer: /CN=11b69b59d19f2987e49f1852d60bb1777f80a301 Certificate serial: 01960B3093842EAD3303C78D3F105782333A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.mft Manifest number: 1594 Signing time: Sun 06 Apr 2025 13:00:54 +0000 Manifest this update: Sun 06 Apr 2025 13:00:54 +0000 Manifest next update: Mon 07 Apr 2025 13:00:54 +0000 Files and hashes: 1: 0jaLsOw9YdPpBGIswhoj8eUnoxw.roa (hash: JZhBZNzrrJhfkQHTBxXkZHOAnhdVXAmCf1pHyjeoA/Y=) 2: 1--WDAhFOBW7ncSoM8jfxu_x_aPA.roa (hash: 5hRd7iHG9OvxZkn9587WnUFx5p+RxhyhidWTwSlJ2mE=) 3: 9de0VEdjbWo-tUqmz8gijTg6IaE.roa (hash: f2qUpX3qXVm+Q2CbUSag5dNIyDCVc83yVIgmgfZphx0=) 4: DJpyAKTDavgYCCrqAykXQ-7aSsQ.roa (hash: SbHCCngPuwzLDu4NPCfVPRXqz9AZUUHXZ5GJKcQqTKQ=) 5: EbabWdGfKYfknxhS1guxd3-AowE.crl (hash: 5h7T3FpWNihGqIhKdCDkK6uZk53AfWy2R6OtEi83tl0=) 6: EiEIQCc_qMer4lOJnSDqRcuD1Lc.roa (hash: ijZabFruWckgrMPN8StTP6ptBpbQ5XdRowFLqAhy8V0=) 7: JIWcXiw5e-DMCtEQjl82_rCum6M.roa (hash: aum4OzbjHbjDqqRbPTuypoabo0V5INMyV5rJ/7+2kJk=) 8: WEz0cGIk3YmjQ0yrdknf8JONckc.roa (hash: aWcb5jHZpWl1UXwytQ84UDQpza5mh8xr0Rn64szejaY=) 9: Yad7D0u10l6-G2byoPRYhPza6iI.roa (hash: AYvuuAYk23DpV2QbnhAJBghdOegUASc3Ay0HmaR8IQE=) 10: hh5gFEvny7iJIP363sERSCjh-rs.roa (hash: nHmDgAhsTOhkwPJGUNXsbu1PrrGNS0xivvoOwxQO9Og=) 11: mpiw9JhQM7LKtUVCRbcJs0dukrY.roa (hash: 6u6djeisAdzHv9sPzUqJK6BMNgw7cN5OEZXaoLYZmKY=) 12: pgY7a6E6tgPcuDGaJ9In9AClvQU.roa (hash: LI5gLLz864YQ5E9OGWp9/KKXRdmX9ZlNd6zL73F9k74=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.crl rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.mft rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 07 Apr 2025 10:07:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:0b:30:93:84:2e:ad:33:03:c7:8d:3f:10:57:82:33:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11b69b59d19f2987e49f1852d60bb1777f80a301 Validity Not Before: Apr 6 13:00:54 2025 GMT Not After : Apr 7 13:00:54 2025 GMT Subject: CN=37077e282d57e1ec727802b9146697b03480db19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:34:b2:16:51:f6:bf:53:ae:20:de:3c:ba:10: c1:1c:57:04:d3:9e:02:d8:b5:50:6b:a6:f7:7e:27: 06:72:58:74:57:28:16:6e:a8:c3:66:5b:58:5c:ef: 9e:85:2e:ae:76:ae:55:5c:8e:d1:52:b9:e6:ae:e0: b1:f6:c2:93:01:c5:f7:8d:66:64:10:4c:ed:ce:3d: 1a:9d:79:c8:12:d2:0b:66:49:82:c1:9c:e9:05:fa: 6d:50:68:5d:3e:79:e0:71:88:c2:56:46:0d:f6:c2: 80:02:ed:1f:be:16:d3:b0:6b:80:a6:57:23:fc:45: 85:e8:89:49:a9:70:4e:ee:3a:92:e6:cb:75:cb:ce: e3:06:52:cc:1f:34:f3:75:d5:c3:b7:74:bb:54:9e: 11:68:4e:67:ac:71:de:84:b0:6e:08:a3:9f:57:61: 51:42:dd:db:d0:4c:63:54:c9:f8:06:f3:52:02:d5: bf:ef:00:79:f8:0b:5e:1e:b6:66:79:be:2f:cf:51: 28:5a:cf:4b:f4:99:1d:25:90:a3:6e:3a:5f:3c:3a: f8:b4:03:e8:c9:08:2e:34:48:a8:cd:71:d9:5f:07: 8d:f2:4a:61:9d:9a:34:00:b1:3d:4c:2e:94:69:0c: 72:ab:b5:0a:ce:d8:46:d1:5d:bd:ac:9f:1e:1c:67: e8:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:07:7E:28:2D:57:E1:EC:72:78:02:B9:14:66:97:B0:34:80:DB:19 X509v3 Authority Key Identifier: keyid:11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:6e:f2:c0:ba:55:d4:d6:c6:fc:68:7f:a7:e3:10:a1:db:41: ba:56:81:55:ba:57:5b:8c:65:e3:e9:54:ff:fd:8d:11:8e:c4: 04:94:cc:ec:a1:a3:e9:44:a0:bd:67:74:49:77:5a:ad:2d:ec: 53:70:c0:b7:27:cb:86:a3:47:e7:6e:10:c2:b8:d8:7e:1f:ea: dd:89:b3:62:71:2b:44:6c:67:d0:97:ca:9c:60:e3:0d:e6:2d: 28:62:8c:95:92:ac:c2:d1:1b:08:eb:08:09:eb:03:ae:a0:fe: b1:2d:5c:f9:67:d3:73:c0:bd:75:b3:73:7a:a2:b4:91:3a:51: 65:f1:e2:5c:0c:62:21:4d:d8:44:e0:4e:b6:4e:99:4e:ae:88: 5e:6e:06:80:83:5f:5e:0d:08:13:c5:bc:30:ae:05:20:b7:85: bd:1a:a2:cc:dd:51:ef:11:8b:71:87:19:07:7f:65:a0:4f:4f: 4f:b2:6c:20:5b:1e:d0:fc:e5:e6:b2:87:24:24:9b:aa:92:b2: b2:e8:5e:a5:f8:14:ea:6c:65:26:9f:5e:a8:0b:66:00:6d:eb: 5f:14:4c:ac:db:bd:22:1a:2d:da:d5:eb:20:8b:25:22:e1:88: 24:f1:6b:05:73:42:ba:3d:09:16:26:f4:3f:dc:3b:8f:1c:8b: 7f:e2:9f:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZYLMJOELq0zA8eNPxBXgjM6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExYjY5YjU5ZDE5ZjI5ODdlNDlmMTg1MmQ2MGJiMTc3N2Y4 MGEzMDEwHhcNMjUwNDA2MTMwMDU0WhcNMjUwNDA3MTMwMDU0WjAzMTEwLwYDVQQD EygzNzA3N2UyODJkNTdlMWVjNzI3ODAyYjkxNDY2OTdiMDM0ODBkYjE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjSyFlH2v1OuIN48uhDBHFcE054C 2LVQa6b3ficGclh0VygWbqjDZltYXO+ehS6udq5VXI7RUrnmruCx9sKTAcX3jWZk EEztzj0anXnIEtILZkmCwZzpBfptUGhdPnngcYjCVkYN9sKAAu0fvhbTsGuAplcj /EWF6IlJqXBO7jqS5st1y87jBlLMHzTzddXDt3S7VJ4RaE5nrHHehLBuCKOfV2FR Qt3b0ExjVMn4BvNSAtW/7wB5+AteHrZmeb4vz1EoWs9L9JkdJZCjbjpfPDr4tAPo yQguNEiozXHZXweN8kphnZo0ALE9TC6UaQxyq7UKzthG0V29rJ8eHGfocwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDcHfigtV+HscngCuRRml7A0gNsZMB8GA1UdIwQY MBaAFBG2m1nRnymH5J8YUtYLsXd/gKMBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWJhYldkR2ZLWWZrbnhoUzFndXhkMy1Bb3dFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC81ZWRmN2EtYWI5YS00NWU3LWE2MTIt ZDE2OWMwODhiNDEyLzEvRWJhYldkR2ZLWWZrbnhoUzFndXhkMy1Bb3dFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC81ZWRmN2EtYWI5YS00NWU3LWE2MTItZDE2OWMwODhiNDEy LzEvRWJhYldkR2ZLWWZrbnhoUzFndXhkMy1Bb3dFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOG7ywLpV 1NbG/Gh/p+MQodtBulaBVbpXW4xl4+lU//2NEY7EBJTM7KGj6USgvWd0SXdarS3s U3DAtyfLhqNH524QwrjYfh/q3YmzYnErRGxn0JfKnGDjDeYtKGKMlZKswtEbCOsI CesDrqD+sS1c+WfTc8C9dbNzeqK0kTpRZfHiXAxiIU3YROBOtk6ZTq6IXm4GgINf Xg0IE8W8MK4FILeFvRqizN1R7xGLcYcZB39loE9PT7JsIFse0Pzl5rKHJCSbqpKy suhepfgU6mxlJp9eqAtmAG3rXxRMrNu9Ihot2tXrIIslIuGIJPFrBXNCuj0JFib0 P9w7jxyLf+KfIQ== -----END CERTIFICATE-----Generated at Sun Apr 6 20:49:05 2025 by rpki-client