$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft File: nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft (raw, json) Hash identifier: JK15H/dlaXHRmXaN/1PeVJiY6WC7KvUl5hfkzU5HehQ= Subject key identifier: EA:9E:76:5F:2C:8D:8E:7E:9A:8B:3B:CD:2C:DB:A5:36:72:64:78:6D Authority key identifier: 9D:5D:E4:90:FF:87:4E:96:89:CE:CF:72:6C:BB:4E:2F:51:F6:C7:31 Certificate issuer: /CN=9d5de490ff874e9689cecf726cbb4e2f51f6c731 Certificate serial: 01963A6573B7D958C0B2D601D5AB73FA9884 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft Manifest number: 14F4 Signing time: Tue 15 Apr 2025 17:00:49 +0000 Manifest this update: Tue 15 Apr 2025 17:00:49 +0000 Manifest next update: Wed 16 Apr 2025 17:00:49 +0000 Files and hashes: 1: 3vl8XIfuhRt73vGy6IwhrWPuLQI.roa (hash: q3Fh75KrQyoQfVHvtuNwmD855fGW6oB7xId9MSHUyb4=) 2: 6wuhUyQ6B8hcKFtpQPLF4a8xiLM.roa (hash: PVP/CIAq5vbBthYH2NgEEDe22Dw5jd7urf5cJiuVvXo=) 3: 9NNSEhajneEgbt66V0EkEE6XolA.roa (hash: xTgVQs+MsZfir4Ub3DiVbK1ClBqkcXuh9whyhrkEvAM=) 4: BzRg7cqbGCxPjaoZhAl0Moquf1Y.roa (hash: 6kEaZouendLfYXdknvUfHV20sm02LURoxyHpm7Wn7AY=) 5: G-7uTcKf4R76KSJdYf98itHFuPU.roa (hash: uB9gNVUlSjqGsS16y0z5ke/O0agEGAvuljoiA6PJrUM=) 6: QgQPTUqWSoJLC8pH1ZTpV9J6Spg.roa (hash: roAeP2l3vRUpAFpkZSsf9wX3WRLL0BI8ikMQ5kYqDxQ=) 7: ftQQpBrk0ZFia4n99q7-wX-5E0M.roa (hash: U0GhDpZiZ5saXJRfz3p+tKxwcbveFdHD/WbcCpSo+CQ=) 8: mUKuky3l-ZY5p-RPO9s2pPEyk78.roa (hash: ti7kzq8iHsvI0iGcqQO/PpqkoDoJf7orqrrfuhBfEKg=) 9: nV3kkP-HTpaJzs9ybLtOL1H2xzE.crl (hash: zSSXb7Ms+xjobHw2Of5E7IR4L25zMIu7EHRPhhYkAxQ=) 10: pp90XH9ku5igKr_7gjm59WVXVs4.roa (hash: bfssuNaaIGlZ7LKFXdiYHHy+DIw/jcyEOsfVzSQEBMQ=) 11: qFB-AfrzECXh6GN5dVSZvb0x6SI.roa (hash: GzIs503Dc0bsL2WCHQKf2MOheJQNWlvUYNrT8tj73vc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.crl rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 16 Apr 2025 15:22:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:3a:65:73:b7:d9:58:c0:b2:d6:01:d5:ab:73:fa:98:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d5de490ff874e9689cecf726cbb4e2f51f6c731 Validity Not Before: Apr 15 17:00:49 2025 GMT Not After : Apr 16 17:00:49 2025 GMT Subject: CN=ea9e765f2c8d8e7e9a8b3bcd2cdba5367264786d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a7:85:b2:8c:0b:ba:a9:d1:a1:e0:1f:63:ed: db:2a:23:71:a2:db:a1:25:fe:c5:cd:de:69:d1:ae: e4:ca:6a:be:13:f2:a9:14:00:e0:df:40:19:e7:80: 39:27:af:2f:e0:6b:d6:7d:84:e2:8d:43:d1:61:cd: df:40:da:4b:48:6b:cc:85:29:29:6f:0e:2b:3c:54: ac:9b:0e:94:3b:f1:8b:ab:46:19:51:a5:be:22:ee: 43:9e:8f:df:b9:71:00:96:57:3a:13:9d:61:c9:ca: b5:0d:26:83:44:04:62:05:71:09:6f:74:52:53:37: d6:7a:af:8b:e0:90:6b:9e:9f:73:b2:10:fb:eb:47: 33:d3:bb:53:95:72:9b:10:68:31:e0:07:9e:e7:ce: 77:01:e9:df:b2:49:79:eb:2c:f2:4f:93:f9:34:7d: 91:78:b6:35:75:04:4b:47:f0:88:49:26:5a:58:cb: 59:30:90:4c:f0:df:cd:ad:56:45:5b:6e:ec:7a:f8: 2d:1a:5c:67:d5:63:6a:7b:e3:0c:a0:d9:39:e8:f9: 97:74:d1:5d:13:ca:00:46:9e:92:45:81:9c:d2:d8: 56:4f:66:54:29:2c:1a:89:e7:7b:f0:2c:7b:d1:7e: ae:80:fe:7a:8b:cf:b4:8a:44:ca:d3:48:33:c5:7d: e1:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:9E:76:5F:2C:8D:8E:7E:9A:8B:3B:CD:2C:DB:A5:36:72:64:78:6D X509v3 Authority Key Identifier: keyid:9D:5D:E4:90:FF:87:4E:96:89:CE:CF:72:6C:BB:4E:2F:51:F6:C7:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:95:87:be:ac:09:41:3b:17:2c:ce:a0:62:fb:4a:e7:83:45: 89:33:6f:2e:83:1e:3d:e7:5a:54:63:b4:b7:b9:e8:bb:b7:d3: c2:3a:5f:d3:58:01:23:a0:f8:84:a2:c3:d0:30:62:54:8b:3b: 8a:27:06:9b:58:50:72:5a:08:f2:ee:55:d1:64:7b:4d:29:c9: 44:d3:3e:10:29:f6:bd:a5:db:ca:8a:0d:87:c9:34:43:c7:dc: bb:8f:84:2a:eb:6f:22:9f:bd:f9:23:e0:52:66:4d:18:33:6f: b6:ff:56:9b:86:b3:20:2d:fe:e2:c6:66:a8:e3:91:4d:ff:cb: 42:5c:48:25:16:bc:e4:2e:91:88:9b:91:2d:cc:80:ab:f1:fa: a0:14:ae:a5:c2:11:fa:06:a3:13:79:bb:77:fb:d0:39:49:c3: 52:d2:a9:4a:db:86:13:93:60:7d:d6:7b:6a:38:cb:4c:f1:3d: 88:08:1f:f6:84:39:e5:f4:ee:1b:db:1c:70:ef:3e:cb:54:6e: 07:11:f1:02:29:fb:85:a9:51:ad:d4:e5:6b:24:4e:65:a8:88: 37:03:58:b6:68:fe:25:8d:b9:54:74:f7:61:83:4b:05:16:9a: 83:14:1c:f3:b8:35:ea:8e:bd:f4:72:7b:16:5f:b8:aa:7b:1d: b6:68:68:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZY6ZXO32VjAstYB1atz+piEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkNWRlNDkwZmY4NzRlOTY4OWNlY2Y3MjZjYmI0ZTJmNTFm NmM3MzEwHhcNMjUwNDE1MTcwMDQ5WhcNMjUwNDE2MTcwMDQ5WjAzMTEwLwYDVQQD EyhlYTllNzY1ZjJjOGQ4ZTdlOWE4YjNiY2QyY2RiYTUzNjcyNjQ3ODZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKeFsowLuqnRoeAfY+3bKiNxotuh Jf7Fzd5p0a7kymq+E/KpFADg30AZ54A5J68v4GvWfYTijUPRYc3fQNpLSGvMhSkp bw4rPFSsmw6UO/GLq0YZUaW+Iu5Dno/fuXEAllc6E51hycq1DSaDRARiBXEJb3RS UzfWeq+L4JBrnp9zshD760cz07tTlXKbEGgx4Aee5853Aenfskl56yzyT5P5NH2R eLY1dQRLR/CISSZaWMtZMJBM8N/NrVZFW27sevgtGlxn1WNqe+MMoNk56PmXdNFd E8oARp6SRYGc0thWT2ZUKSwaied78Cx70X6ugP56i8+0ikTK00gzxX3hdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOqedl8sjY5+mos7zSzbpTZyZHhtMB8GA1UdIwQY MBaAFJ1d5JD/h06Wic7Pcmy7Ti9R9scxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblYza2tQLUhUcGFKenM5eWJMdE9MMUgyeHpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC83NDViZGItMTA0Yi00OWM3LTk5ZDUt Y2VjMzNiYTFiZGY1LzEvblYza2tQLUhUcGFKenM5eWJMdE9MMUgyeHpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC83NDViZGItMTA0Yi00OWM3LTk5ZDUtY2VjMzNiYTFiZGY1 LzEvblYza2tQLUhUcGFKenM5eWJMdE9MMUgyeHpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgJWHvqwJ QTsXLM6gYvtK54NFiTNvLoMePedaVGO0t7nou7fTwjpf01gBI6D4hKLD0DBiVIs7 iicGm1hQcloI8u5V0WR7TSnJRNM+ECn2vaXbyooNh8k0Q8fcu4+EKutvIp+9+SPg UmZNGDNvtv9Wm4azIC3+4sZmqOORTf/LQlxIJRa85C6RiJuRLcyAq/H6oBSupcIR +gajE3m7d/vQOUnDUtKpStuGE5NgfdZ7ajjLTPE9iAgf9oQ55fTuG9sccO8+y1Ru BxHxAin7halRrdTlayROZaiINwNYtmj+JY25VHT3YYNLBRaagxQc87g16o699HJ7 Fl+4qnsdtmhonA== -----END CERTIFICATE-----Generated at Tue Apr 15 20:55:41 2025 by rpki-client