$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft File: iabNn0vrewwE0x_-XGdKh6dznSE.mft (raw, json) Hash identifier: pvDmOEL9UiK/FUBDHDkuJKZH5Sx4M0MffDZue+9gj8c= Subject key identifier: D1:93:60:47:CE:39:D5:4A:D0:F7:5C:E0:8C:11:6D:16:57:3C:5C:F7 Authority key identifier: 89:A6:CD:9F:4B:EB:7B:0C:04:D3:1F:FE:5C:67:4A:87:A7:73:9D:21 Certificate issuer: /CN=89a6cd9f4beb7b0c04d31ffe5c674a87a7739d21 Certificate serial: 019510901E058AF423EE20F724BB998ED960 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft Manifest number: 145A Signing time: Sun 16 Feb 2025 21:00:35 +0000 Manifest this update: Sun 16 Feb 2025 21:00:35 +0000 Manifest next update: Mon 17 Feb 2025 21:00:35 +0000 Files and hashes: 1: 1AVD6_mgeoD7QDUZJl7EDizwiPA.roa (hash: cX/v9qqSG1teaYFoFOKsa3bn2RyT9qsyhWH8nkdQ7JA=) 2: 8nPu7g_10GykuOn6hB7ddpZ32pc.roa (hash: PE7yr9seUogU++GGlz15g0vomylBpNKOs5X1aqyCFXY=) 3: FuyO4nKRxR39tBuC6eKFQfxQwrc.roa (hash: GUrm17XZGeWFCxLew8/dow89FusnPuSqgk9j0BnqmKQ=) 4: IRm19nOK5U99-KFgT6Iyqb6FLRs.roa (hash: il+0ahEt0jHE3mPTA9QCPGv0irQio4DzrHv3lezN4EI=) 5: OCZT2CotgRCIuoB7CyLdArI0Xq4.roa (hash: 2KavfbQ9/xCmCPRw2wyEJR9Q6ABQMSBcOd2DtqJChbQ=) 6: QCfiaxU0-L0V2BF9e1C_GwYnzP4.roa (hash: VRlfNE6x9/KNibY36WnSc/VobsG0jDrCOQJvdKNN4i4=) 7: TrekbKofwJJgypIh3djYyzsCUwU.roa (hash: TCCyZiFHD9x34gvfVDyLYWKAPcQuU4dBBXrQhqnIl2k=) 8: hR_O6orQ7VIoQZRz0Ft_rQtrjmE.roa (hash: ufdueV5sW54kE98qc2NMXNaVclJV1tmEIBRjswSFBHQ=) 9: iabNn0vrewwE0x_-XGdKh6dznSE.crl (hash: YNheJr3TYx8ydVjKwIcSTtBhO/zWmwc3UOW0Bnjvkh4=) 10: mmf39HAPu66pAhfk5t6hl32At34.roa (hash: v8H+MR6QM0GWin6TVlCN7PLO5Ye9iX/HYlHyOCGTDCY=) 11: poQ9sY-40mE5OkfYNESkcevxBo8.roa (hash: t3e6WnaTkGCDqI4QgZzs43WxvQ36SKjt1xL670t+gp8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.crl rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:95:10:90:1e:05:8a:f4:23:ee:20:f7:24:bb:99:8e:d9:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89a6cd9f4beb7b0c04d31ffe5c674a87a7739d21 Validity Not Before: Feb 16 21:00:35 2025 GMT Not After : Feb 17 21:00:35 2025 GMT Subject: CN=d1936047ce39d54ad0f75ce08c116d16573c5cf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:76:da:f2:d4:3c:59:4e:3e:e9:d6:95:90:fd: cd:10:f6:fd:e2:11:47:1c:30:a7:74:4d:f7:a6:0d: 68:c4:18:59:f2:d5:70:e6:55:2e:da:05:8d:c1:31: 01:c7:b3:7b:a9:38:39:37:f8:0b:d7:ab:b0:58:47: a7:c4:ec:75:79:88:6c:52:2d:89:50:8d:e7:02:28: 69:34:02:ce:5a:6c:2b:86:cb:1a:ab:95:8c:16:e0: 09:c8:f6:ac:af:9b:6a:55:3d:ca:82:b4:0b:f2:e4: b3:fc:c7:55:ba:d6:fb:ff:1b:b7:4e:97:b7:c1:97: 8a:e4:17:b4:54:35:e5:cd:ae:ef:f5:af:37:c4:12: 21:4d:cd:2c:64:2f:8d:d5:28:77:cb:48:80:92:5f: 18:6d:8f:a6:56:fc:98:fb:e4:83:ff:3f:1d:6a:09: c4:2b:0e:7e:77:fb:13:68:f1:f6:59:ce:4f:c9:72: a7:cf:07:77:08:86:20:a0:53:cc:b9:63:cb:05:f5: 63:ca:5e:06:1e:53:df:1d:29:fc:d6:e4:05:fa:ed: 6c:cf:5d:df:89:2b:eb:3c:a0:44:0f:0c:e6:90:12: 32:73:02:00:4e:d5:07:db:f1:90:c3:f4:fe:00:13: fd:01:68:35:a6:3e:24:1f:15:0d:fa:82:91:85:47: c6:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:93:60:47:CE:39:D5:4A:D0:F7:5C:E0:8C:11:6D:16:57:3C:5C:F7 X509v3 Authority Key Identifier: keyid:89:A6:CD:9F:4B:EB:7B:0C:04:D3:1F:FE:5C:67:4A:87:A7:73:9D:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:ce:20:ed:14:f9:31:ff:1f:55:2e:f5:fc:9e:54:c3:4c:03: 61:e0:52:b6:58:45:93:bf:a4:11:68:a0:7b:39:e7:a1:f0:5c: f1:5c:5b:9c:32:16:cc:2f:af:69:b6:6a:8a:11:6e:76:45:cb: 1f:ce:eb:58:ca:0c:e9:17:db:3a:68:8c:df:00:8d:ca:81:c1: 2b:a6:a4:ce:a9:ca:ba:d4:dd:e2:8f:fd:21:2f:19:ff:bd:17: 2f:58:18:da:07:c9:ce:54:18:ce:44:1c:4b:d7:c5:b8:46:14: 84:b6:ca:46:78:02:5f:8f:a8:b1:1c:c2:3d:d3:44:1d:d0:99: ee:68:06:21:6f:df:85:1c:41:a5:80:6f:21:d5:53:9b:3e:f4: 09:06:35:c3:a9:b9:e7:14:56:16:e3:83:2b:e3:49:0c:55:56: 62:94:8f:f2:41:87:fb:0c:38:71:09:b5:1e:de:c7:c6:d0:b7: d2:dd:29:3b:03:04:a1:fd:d9:92:97:d0:ae:46:61:b3:e5:60: 3b:bf:e8:f2:75:82:09:9c:18:6d:1e:08:f4:59:62:d7:be:61: d1:7b:12:2f:0a:08:53:67:db:ce:e0:91:d7:20:a9:06:1d:a8: 9c:aa:39:d0:d3:55:59:ab:b9:5f:f7:a9:b6:cd:a0:33:5c:b6: 6e:0b:63:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZUQkB4FivQj7iD3JLuZjtlgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5YTZjZDlmNGJlYjdiMGMwNGQzMWZmZTVjNjc0YTg3YTc3 MzlkMjEwHhcNMjUwMjE2MjEwMDM1WhcNMjUwMjE3MjEwMDM1WjAzMTEwLwYDVQQD EyhkMTkzNjA0N2NlMzlkNTRhZDBmNzVjZTA4YzExNmQxNjU3M2M1Y2Y3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgnba8tQ8WU4+6daVkP3NEPb94hFH HDCndE33pg1oxBhZ8tVw5lUu2gWNwTEBx7N7qTg5N/gL16uwWEenxOx1eYhsUi2J UI3nAihpNALOWmwrhssaq5WMFuAJyPasr5tqVT3KgrQL8uSz/MdVutb7/xu3Tpe3 wZeK5Be0VDXlza7v9a83xBIhTc0sZC+N1Sh3y0iAkl8YbY+mVvyY++SD/z8dagnE Kw5+d/sTaPH2Wc5PyXKnzwd3CIYgoFPMuWPLBfVjyl4GHlPfHSn81uQF+u1sz13f iSvrPKBEDwzmkBIycwIATtUH2/GQw/T+ABP9AWg1pj4kHxUN+oKRhUfGpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNGTYEfOOdVK0Pdc4IwRbRZXPFz3MB8GA1UdIwQY MBaAFImmzZ9L63sMBNMf/lxnSoenc50hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWFiTm4wdnJld3dFMHhfLVhHZEtoNmR6blNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni85OWE0Y2MtNDcyMC00YTY0LWFhMDYt MWY5MjQ0OTVmY2RkLzEvaWFiTm4wdnJld3dFMHhfLVhHZEtoNmR6blNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni85OWE0Y2MtNDcyMC00YTY0LWFhMDYtMWY5MjQ0OTVmY2Rk LzEvaWFiTm4wdnJld3dFMHhfLVhHZEtoNmR6blNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAas4g7RT5 Mf8fVS71/J5Uw0wDYeBStlhFk7+kEWigeznnofBc8VxbnDIWzC+vabZqihFudkXL H87rWMoM6RfbOmiM3wCNyoHBK6akzqnKutTd4o/9IS8Z/70XL1gY2gfJzlQYzkQc S9fFuEYUhLbKRngCX4+osRzCPdNEHdCZ7mgGIW/fhRxBpYBvIdVTmz70CQY1w6m5 5xRWFuODK+NJDFVWYpSP8kGH+ww4cQm1Ht7HxtC30t0pOwMEof3ZkpfQrkZhs+Vg O7/o8nWCCZwYbR4I9Fli175h0XsSLwoIU2fbzuCR1yCpBh2onKo50NNVWau5X/ep ts2gM1y2bgtjFA== -----END CERTIFICATE-----Generated at Sun Feb 16 22:17:49 2025 by rpki-client