$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.mft File: gfpI9AvIRUDEa9I76bkIl6oYT00.mft (raw, json) Hash identifier: d8JSBUX51lKdfS/j+SnNeNBTie+vUbB9+Rmt/W31ee8= Subject key identifier: 38:D4:14:AE:7E:8B:2A:7F:4F:5C:72:9B:E9:C8:CD:CF:C8:CE:06:6D Authority key identifier: 81:FA:48:F4:0B:C8:45:40:C4:6B:D2:3B:E9:B9:08:97:AA:18:4F:4D Certificate issuer: /CN=81fa48f40bc84540c46bd23be9b90897aa184f4d Certificate serial: 01965D5EFB16265CC7259F354F00A14A9ED0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gfpI9AvIRUDEa9I76bkIl6oYT00.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.mft Manifest number: 1406 Signing time: Tue 22 Apr 2025 12:00:27 +0000 Manifest this update: Tue 22 Apr 2025 12:00:27 +0000 Manifest next update: Wed 23 Apr 2025 12:00:27 +0000 Files and hashes: 1: AHTg9VmGDmboYzdnURPHEfscAhc.roa (hash: EJAnurSy7dL6/EOxEWzPx0E5tdB8mhFHSs+OUGdmNJE=) 2: KDq1-Rr4Pa19JmpFQO8zp5WgB5U.roa (hash: tcyrTqGXX3Fxa4DyHBaUSmoiu94Dxk4AKYQpUR2BnQc=) 3: Ka0CbbqxvinVFD8NCpgLSzN4Yuk.roa (hash: ewEXTB63pST4ITekJqikDrNA0xHVxP58LM3zCY4gO3c=) 4: P37BkvZ1l2OERYAzbrZkTdiaI5M.roa (hash: r0XmRfw3/HfMKojS2A590rOx5ogcXcLpRlFRDhYBH24=) 5: aHuPxYoxTVBAD5qRwAIntTvBYUo.roa (hash: jE0S/EIIiLy8A4TT+0QWlg16D+11OM3xpNzdkTsYxVw=) 6: cqDq4tCqin-RxETDXp25AqdBSeE.roa (hash: RTcBG4WyCxixqgAm7DJ0Zrr1Fu3C+khmPuB8vFple2U=) 7: gfpI9AvIRUDEa9I76bkIl6oYT00.crl (hash: +uGpgJFDa2f0J7gTep0ldN+hppHpPQ9UFxEXujc8rN0=) 8: h-tvk7C7HYBOLYv_ABx2fNgHR9w.roa (hash: zNRYwDmzMbVfNXkGpvLErGmatw1vKWMLP5C9y/PFQm8=) 9: qQIdIKkAY3XL4H0UqqoBDCS4fe4.roa (hash: tJIJpMepFFp7mfCX13yP/PACk1thBv7CLEXSdOGaVw0=) 10: t10ytuHzLBo0-cyFhVGWj6IJRt0.roa (hash: MsPrygdde5gAS+ElSL2+5g+vrekUVGzvRNpNRAOCFCY=) 11: uI8lFhTxbU7XCjkbphUEU_LgR1s.roa (hash: 8FbC9jD7odYRy5r+lSqmVJIE2x1QODwfdsQJ3Toqh1E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.crl rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.mft rsync://rpki.ripe.net/repository/DEFAULT/gfpI9AvIRUDEa9I76bkIl6oYT00.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Apr 2025 12:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:5d:5e:fb:16:26:5c:c7:25:9f:35:4f:00:a1:4a:9e:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81fa48f40bc84540c46bd23be9b90897aa184f4d Validity Not Before: Apr 22 12:00:27 2025 GMT Not After : Apr 23 12:00:27 2025 GMT Subject: CN=38d414ae7e8b2a7f4f5c729be9c8cdcfc8ce066d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c8:16:68:67:7f:8a:db:37:79:b0:a5:a1:2d: 48:f2:3d:db:ec:bf:18:51:35:f5:64:43:16:3d:3e: f3:e7:01:7e:d7:6b:5f:28:3b:44:1f:59:04:d7:cc: 91:b2:f1:a8:fd:c6:29:ff:1f:97:7d:e5:08:82:c3: 1a:80:07:38:d4:1e:41:96:b3:9f:39:b5:7d:09:ce: ec:fd:0e:14:07:36:62:34:6b:4c:2d:ad:e6:f1:dc: b4:b8:4f:1b:1e:c2:b9:f1:16:6c:3c:f6:70:9a:04: 77:e4:b8:3d:16:47:ab:e6:2f:52:cb:48:3d:45:74: 37:69:32:da:13:c3:f6:37:cf:e7:9f:e4:5f:6d:0a: 5f:2b:42:7e:89:db:ed:90:b9:8c:ac:d9:3f:37:3e: 52:6f:52:27:bf:2a:55:01:2b:78:0d:89:63:66:49: 91:07:4b:6d:f2:c1:d0:a1:83:01:48:c1:40:92:5d: 79:6c:2b:ce:70:10:1c:6c:13:2a:18:23:f9:5a:3d: 6b:bc:a0:2c:c9:85:58:06:aa:3e:6e:25:bb:1d:42: 8a:74:78:bd:50:de:c5:28:e5:6f:8a:fa:f8:ea:8c: 57:57:80:5f:b0:f9:3f:42:79:23:33:a4:c9:b9:f7: ea:69:1d:47:ee:cb:b5:80:e3:ea:bc:1c:f5:f9:24: ab:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:D4:14:AE:7E:8B:2A:7F:4F:5C:72:9B:E9:C8:CD:CF:C8:CE:06:6D X509v3 Authority Key Identifier: keyid:81:FA:48:F4:0B:C8:45:40:C4:6B:D2:3B:E9:B9:08:97:AA:18:4F:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gfpI9AvIRUDEa9I76bkIl6oYT00.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:f9:82:78:65:39:23:db:18:3a:e2:48:48:08:ac:83:5f:cb: c9:51:72:3f:b1:96:76:68:47:db:05:5d:3c:70:b2:35:5a:25: 23:76:76:53:03:46:42:aa:ef:6d:34:2b:2b:8f:83:f6:73:cd: 0e:17:f7:d6:0c:6e:33:9d:f0:17:b9:8a:a7:92:d5:4b:00:d2: 2b:41:a4:77:12:4a:81:1e:eb:9c:0a:08:c3:a1:e0:f1:ac:b8: a0:3a:7e:f5:82:a4:41:fe:20:16:b2:41:8b:cc:35:cb:b7:d4: 82:36:a2:4c:3b:d1:19:b7:0e:6a:2f:9e:86:66:8c:dc:d2:c2: 1d:cf:25:e5:ba:30:28:b9:4c:a2:1b:07:ae:94:2b:33:7f:5e: 3f:15:81:22:93:da:0b:08:4b:58:ce:61:4a:97:10:f5:d6:27: 6e:47:ea:be:c5:18:1c:36:58:87:b0:8d:8d:d0:28:e3:15:8c: ee:ee:9c:a8:7e:97:3c:74:27:8c:66:bd:1c:74:dd:e2:b8:7a: 29:2a:2f:ab:91:e9:4a:3d:f0:f6:b2:81:d5:bf:77:b5:e2:65: ec:f0:f0:f7:73:6d:21:de:13:8a:ef:0e:cf:4f:eb:c9:7d:d1: 2c:05:20:da:c5:7f:af:e1:ab:30:c9:f0:26:c8:5b:4f:a3:80: 07:d0:7c:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZdXvsWJlzHJZ81TwChSp7QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxZmE0OGY0MGJjODQ1NDBjNDZiZDIzYmU5YjkwODk3YWEx ODRmNGQwHhcNMjUwNDIyMTIwMDI3WhcNMjUwNDIzMTIwMDI3WjAzMTEwLwYDVQQD EygzOGQ0MTRhZTdlOGIyYTdmNGY1YzcyOWJlOWM4Y2RjZmM4Y2UwNjZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8gWaGd/its3ebCloS1I8j3b7L8Y UTX1ZEMWPT7z5wF+12tfKDtEH1kE18yRsvGo/cYp/x+XfeUIgsMagAc41B5BlrOf ObV9Cc7s/Q4UBzZiNGtMLa3m8dy0uE8bHsK58RZsPPZwmgR35Lg9Fker5i9Sy0g9 RXQ3aTLaE8P2N8/nn+RfbQpfK0J+idvtkLmMrNk/Nz5Sb1InvypVASt4DYljZkmR B0tt8sHQoYMBSMFAkl15bCvOcBAcbBMqGCP5Wj1rvKAsyYVYBqo+biW7HUKKdHi9 UN7FKOVvivr46oxXV4BfsPk/QnkjM6TJuffqaR1H7su1gOPqvBz1+SSrZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDjUFK5+iyp/T1xym+nIzc/IzgZtMB8GA1UdIwQY MBaAFIH6SPQLyEVAxGvSO+m5CJeqGE9NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2ZwSTlBdklSVURFYTlJNzZia0lsNm9ZVDAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My8xNDYwNzgtZjliMi00MTYzLWFmMWEt OGU5M2NiNWM1MzU1LzEvZ2ZwSTlBdklSVURFYTlJNzZia0lsNm9ZVDAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My8xNDYwNzgtZjliMi00MTYzLWFmMWEtOGU5M2NiNWM1MzU1 LzEvZ2ZwSTlBdklSVURFYTlJNzZia0lsNm9ZVDAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS/mCeGU5 I9sYOuJISAisg1/LyVFyP7GWdmhH2wVdPHCyNVolI3Z2UwNGQqrvbTQrK4+D9nPN Dhf31gxuM53wF7mKp5LVSwDSK0GkdxJKgR7rnAoIw6Hg8ay4oDp+9YKkQf4gFrJB i8w1y7fUgjaiTDvRGbcOai+ehmaM3NLCHc8l5bowKLlMohsHrpQrM39ePxWBIpPa CwhLWM5hSpcQ9dYnbkfqvsUYHDZYh7CNjdAo4xWM7u6cqH6XPHQnjGa9HHTd4rh6 KSovq5HpSj3w9rKB1b93teJl7PDw93NtId4Tiu8Oz0/ryX3RLAUg2sV/r+GrMMnw JshbT6OAB9B81g== -----END CERTIFICATE-----Generated at Tue Apr 22 20:46:55 2025 by rpki-client