$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft File: rfSRSIp82ESKQglFhxwLmWctxm4.mft (raw, json) Hash identifier: 4hJGf5gy/IPdSjeK+aI9Rzh6iipdRYFlY32VoNBlDLo= Subject key identifier: 72:89:9D:85:FF:41:A4:D9:7A:96:32:90:E6:A6:E5:A6:3B:16:2B:FB Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e Certificate serial: 0194BB298849F6904AC3573EA9A0DB581D81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft Manifest number: 15FD Signing time: Fri 31 Jan 2025 07:00:48 +0000 Manifest this update: Fri 31 Jan 2025 07:00:48 +0000 Manifest next update: Sat 01 Feb 2025 07:00:48 +0000 Files and hashes: 1: 0pU8j0MySids8B7P1Z4MPCYtQQ8.roa (hash: YB7/HZL1tekwHsjTYy7WcH7gtaLHvddr5HCEfT0Sa/M=) 2: Hz_xDuk3Vvfh6JY3welKqmjCaoE.roa (hash: UJU3C1rwhTNaES7yoXR7xuWHpGTcdq5wM3nNwCM33l4=) 3: TAMT8S1Oah9_z0PWf3XcQc44cOk.roa (hash: 9mcb/wnUVCxwNUJn00ZGKe3b2/Eu25INtNWxqWVF+fE=) 4: TOEtygW-JFsbCGpcVCPKCUmvT8Y.roa (hash: JOt+ILdNMnAl8qaOPRPYlPMnVx4wLH49n9I8LiobkQA=) 5: U2tphYuFM8kk0W7orOWXNfbZPqw.roa (hash: fWhJtmDdcAYyNt0CvDorvB/6p7uqlch+/pvi2XMjyPs=) 6: Uxt9xtNoM4UmPfW3AD2yl96P1g4.roa (hash: Hmj3pBb7cHH+AUZxj6RnL4nH/svIdPL8CJUVFbcYvdk=) 7: XbK71XmDhZ84irJ2BuCGbbUcSrI.roa (hash: /KFmCOPdf7KqB2mvQS6vb3QYy/TcVDV7emg/BulKL7A=) 8: ovKyvCqAYAi4GuIc3J8z5faKymI.roa (hash: Km2wn6rXYGpVOUdXmNB5XvHkgJAIc1yNr7TuGTuVV9M=) 9: rfSRSIp82ESKQglFhxwLmWctxm4.crl (hash: UXunmxaWvxwhyP026GJ8F+QQ7vasmYCqfVXIB17nE+A=) 10: rmrCbbrS1Tw_7ZKo8BjYlvL6Sj8.roa (hash: n/Do8QgQFF5nBe1gQaeGAVidQjalUdDv00gU2tjHloY=) 11: tnCxlMJcFjJNR1BgpRasaoWflbg.roa (hash: NGBkP+kMJwXFz3QRdHJSNRXeiC1xezQ5KE4ynogLaXo=) 12: vzTanwbr4t3-d_ew6MYjIY7B60s.roa (hash: V77quOethnKxDHJMjbM6m972KOUbs2IyF+Kf059wU8E=) 13: yK6ssOWoPDeYE0W6ZxzPJC0rBHw.roa (hash: 52vkWSu+Xe46mKEs+O2A4dE8J3gg0EoPs6Jdnm/NCrA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 01 Feb 2025 07:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:94:bb:29:88:49:f6:90:4a:c3:57:3e:a9:a0:db:58:1d:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e Validity Not Before: Jan 31 07:00:48 2025 GMT Not After : Feb 1 07:00:48 2025 GMT Subject: CN=72899d85ff41a4d97a963290e6a6e5a63b162bfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:80:0d:9f:23:89:7c:c0:6d:28:43:fb:79:d8: 5c:1a:50:9b:06:2e:40:12:9f:0c:e7:07:25:6d:ce: db:d5:2e:b0:25:5f:b1:a9:3d:f3:e8:50:b4:34:34: 7b:8d:6e:5d:11:d9:0b:6c:87:5b:d7:ec:70:f9:a8: b7:df:f2:63:9f:2e:5d:fe:d3:4a:58:82:e5:fd:ac: fa:8f:e7:fa:9e:a6:55:77:5f:c8:5b:72:12:62:93: 4d:4e:f7:12:c3:08:c5:90:b2:d5:ce:b3:b6:7b:0f: f5:7d:fe:e8:97:2f:90:b8:fa:c1:ac:53:06:e2:49: 53:7a:53:e8:5f:c4:85:f5:91:d7:de:64:2e:c4:8e: 08:0e:2f:2c:3a:c2:b7:68:37:de:44:74:56:65:53: d8:61:e9:27:af:07:04:fa:74:e8:84:ea:01:4a:29: 3c:2c:12:2a:0d:52:22:fb:7c:59:be:e0:76:e4:cf: 06:f1:b5:76:f9:78:86:ef:a7:d6:21:74:76:9a:7c: 22:e7:c4:66:9d:3b:a0:c7:20:13:b9:02:4e:a0:72: 42:de:02:3e:a2:f3:f4:f9:f1:a7:29:4f:d3:2d:4e: 50:e2:2c:e8:9b:37:bd:04:02:04:fe:fa:1c:1a:09: 74:6b:30:ca:73:4b:91:c0:3e:8f:70:36:bc:3e:ba: e8:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:89:9D:85:FF:41:A4:D9:7A:96:32:90:E6:A6:E5:A6:3B:16:2B:FB X509v3 Authority Key Identifier: keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:41:f5:0c:8e:0e:8d:5b:27:3a:2a:16:33:77:8a:58:81:00: 36:a8:21:f5:ab:cc:1f:ea:3f:4b:d6:f5:97:79:ef:10:a0:d6: f5:54:fc:39:0a:ad:8c:b8:c1:0a:59:cf:58:eb:c7:40:82:86: d4:7b:e5:f1:07:a9:09:e9:a1:e4:f8:43:9a:9e:fd:59:0f:38: 4a:10:43:5b:07:af:a5:89:95:aa:d5:42:88:d3:9e:86:cb:9b: ec:3f:8b:c3:0f:00:52:d7:0a:a3:5f:5e:d0:68:fd:19:14:1f: ab:c3:81:a4:b0:de:5f:05:14:00:15:19:bf:a1:af:dc:6e:2f: 04:b5:bf:87:10:61:a7:50:97:59:b0:ca:85:ce:cf:79:64:66: f0:63:79:b6:54:28:b7:fb:4a:78:0d:29:96:0e:64:08:c6:7e: 6e:8d:57:8a:68:2c:c2:39:1b:0c:9e:e4:46:76:e6:14:98:33: 90:4c:7f:7b:b2:d9:c6:6c:86:96:af:4b:98:1e:fc:e9:5b:07: 5c:80:d2:bb:da:35:30:80:b2:23:c2:74:1b:1b:63:98:9c:40: 6b:e6:67:15:d6:09:a1:fe:0b:b3:be:64:dd:be:03:1d:b3:7e: f6:9f:65:30:f3:0e:34:89:bf:86:96:c8:12:d0:98:3b:ce:99: e1:ff:a4:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZS7KYhJ9pBKw1c+qaDbWB2BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkZjQ5MTQ4OGE3Y2Q4NDQ4YTQyMDk0NTg3MWMwYjk5Njcy ZGM2NmUwHhcNMjUwMTMxMDcwMDQ4WhcNMjUwMjAxMDcwMDQ4WjAzMTEwLwYDVQQD Eyg3Mjg5OWQ4NWZmNDFhNGQ5N2E5NjMyOTBlNmE2ZTVhNjNiMTYyYmZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIANnyOJfMBtKEP7edhcGlCbBi5A Ep8M5wclbc7b1S6wJV+xqT3z6FC0NDR7jW5dEdkLbIdb1+xw+ai33/Jjny5d/tNK WILl/az6j+f6nqZVd1/IW3ISYpNNTvcSwwjFkLLVzrO2ew/1ff7oly+QuPrBrFMG 4klTelPoX8SF9ZHX3mQuxI4IDi8sOsK3aDfeRHRWZVPYYeknrwcE+nTohOoBSik8 LBIqDVIi+3xZvuB25M8G8bV2+XiG76fWIXR2mnwi58RmnTugxyATuQJOoHJC3gI+ ovP0+fGnKU/TLU5Q4izomze9BAIE/vocGgl0azDKc0uRwD6PcDa8Prro/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHKJnYX/QaTZepYykOam5aY7Fiv7MB8GA1UdIwQY MBaAFK30kUiKfNhEikIJRYccC5lnLcZuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi83MTVkMTUtMjgxMC00ODI3LThkYmQt MGJlZTA2MTI2YjFhLzEvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi83MTVkMTUtMjgxMC00ODI3LThkYmQtMGJlZTA2MTI2YjFh LzEvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAUH1DI4O jVsnOioWM3eKWIEANqgh9avMH+o/S9b1l3nvEKDW9VT8OQqtjLjBClnPWOvHQIKG 1Hvl8QepCemh5PhDmp79WQ84ShBDWwevpYmVqtVCiNOehsub7D+Lww8AUtcKo19e 0Gj9GRQfq8OBpLDeXwUUABUZv6Gv3G4vBLW/hxBhp1CXWbDKhc7PeWRm8GN5tlQo t/tKeA0plg5kCMZ+bo1XimgswjkbDJ7kRnbmFJgzkEx/e7LZxmyGlq9LmB786VsH XIDSu9o1MICyI8J0GxtjmJxAa+ZnFdYJof4Ls75k3b4DHbN+9p9lMPMONIm/hpbI EtCYO86Z4f+kjw== -----END CERTIFICATE-----Generated at Fri Jan 31 15:28:32 2025 by rpki-client on console-fra.rpki-client.org