$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft File: YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft (raw, json) Hash identifier: ShyJkZs1MbPxOXJ8jo9v0Y6LhcCR3tDJev8RgDdB24c= Subject key identifier: EE:F6:D1:17:BD:09:81:4B:01:E7:3B:8C:4B:48:CF:11:2D:DC:CC:C9 Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20 Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20 Certificate serial: 01960340182DC51BD1B2E32E717561F96CE9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft Manifest number: 08DF Signing time: Sat 05 Apr 2025 00:00:54 +0000 Manifest this update: Sat 05 Apr 2025 00:00:54 +0000 Manifest next update: Sun 06 Apr 2025 00:00:54 +0000 Files and hashes: 1: ISSEb8mvPD7Wb-BO3eMjyBnQD-A.roa (hash: dUQ5dbyZRiVT9qvtigPflifhbpzSjWdmMJQhCiRK9yY=) 2: ITCvofTUKcrPXUX4ThJtq_NekLI.roa (hash: AZpr92O9rMAjpfYJ9xUOlJVoKycP42+TRFWjyvB4His=) 3: LLA4IvVGtRI6yA90ov_lLpcYo6k.roa (hash: 7JmnUHmpGf8b/M1tDswRWUSaT/rNeM/CbbqIQS+ZYgw=) 4: LXQ5Dl426hhh6QRd3yqtOofjp0o.roa (hash: znv04G+MmU69F8joUAs2FqyoL/VISgL++/Y2Z827I2w=) 5: PX1j4imQFBN7657jyc7Zu1gTrXU.roa (hash: 8zsptqmRSRBJaOtfsTJAsFAwYhvmDOrkIMgQNuU7OfE=) 6: Sh7JlMJhv-6RtBisv-L0kfbZJks.roa (hash: F+4kBoxCrAhOhNOKd39I4JEpehCkgRYyGrELsXTNP9s=) 7: Vhllw2glaqL8EoPQw5XUwOXiBGo.roa (hash: wq9dUzUVsrgsDS8bxTvADCSBnajTq7yo0dmS3z28Cq4=) 8: VicI--UiT4J4AutTMYdO2uMhkGg.roa (hash: Y40nMU70m0+2jleYg2nqHmXkrHQzj9QhtyBLW6piLPY=) 9: YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl (hash: jGMzZQLSTQX74ouB1gOYpVHpp1BNZtSMM6wxX5kizAc=) 10: dGxUQhmXosrd6snNM74Lqxgx6XA.roa (hash: 9vHiXTHPhgjpbGVFJ6NuVl7cW85jEiPNxPoz0tnnkYg=) 11: eagdGfGJlmEZQGY_VHLxO8WUTq8.roa (hash: Qa/XODMcIs8RjiGQJgYDisZS+5jCHEU61E4SO+4K1Jo=) 12: i39d_g_1_9oM3E5qn-WFCJuc6cY.roa (hash: 3J8AXusWQrGt85CnVf7tcXl4q37hdR3eK7fR6zkLiJ4=) 13: l8KpKReixNDHkSubHdfI2z2J0LI.roa (hash: pX4lLViztQ13HYJwweHqkIk+20Vma9iisJYbAnhei/E=) 14: rpUidfPLaFOcta7e_Cd7vj4f2yI.roa (hash: SBNCqpl4yY77T1TIQFUe8+GhTqmXQvEg+yrLX2iKkQ8=) 15: tVbXIsKonEYY3NQbCMNk-3GrQgw.roa (hash: C+asYh9Wc9bJHLCabAmtSAQY11vbwluQbmtmn754Gvc=) 16: ufiNJ7oH6OnNQOp5WCbDZcS6fFs.roa (hash: ft+2DADbVaLgXn5IbVGPEM2UTUtfzZPECsxi5dLpDrA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Apr 2025 19:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:03:40:18:2d:c5:1b:d1:b2:e3:2e:71:75:61:f9:6c:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20 Validity Not Before: Apr 5 00:00:54 2025 GMT Not After : Apr 6 00:00:54 2025 GMT Subject: CN=eef6d117bd09814b01e73b8c4b48cf112ddcccc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a2:b3:7a:5d:c9:90:a1:87:08:0b:81:e5:a9: 00:39:d1:ac:48:da:c5:07:62:94:b4:5e:a0:31:45: 4e:fb:c1:f3:2d:4f:4e:c4:b2:ad:3f:3c:8a:56:4c: c3:8a:42:5c:e3:3c:9a:5e:11:5c:61:50:e6:db:f1: 07:e7:16:ca:49:7c:97:6b:94:66:f0:c3:21:ef:9a: ce:dd:17:0f:3c:1a:7d:7b:2c:0f:c0:32:d8:19:de: 2f:e2:e1:f5:a0:37:c3:49:3b:ec:2c:f1:f8:79:9c: 06:ce:84:ab:c2:4e:cb:2f:16:fa:1d:ca:4c:a5:ad: a8:68:c5:be:cd:c0:d6:3b:4f:b3:97:09:b4:fa:df: c3:4c:d7:e8:48:b3:06:c8:43:2e:98:77:d6:d5:26: dd:58:fd:81:ec:51:1c:33:09:91:59:6d:09:ad:b7: f9:ad:8c:30:54:88:e4:36:ca:ab:d9:b6:5a:f6:bc: 32:c5:60:14:2e:ee:08:fb:14:c3:ab:49:f7:42:e9: b2:94:b1:4e:ce:3c:c0:16:0c:5c:b4:e2:aa:ea:a3: 19:43:5a:a3:ca:aa:b3:5f:e0:63:73:87:2b:44:ea: 07:c6:4e:c5:b4:a6:71:bc:0b:bf:6f:b9:f6:d7:52: fa:f9:87:72:97:cc:ee:d9:76:e2:6a:d7:fe:1c:b2: 7b:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:F6:D1:17:BD:09:81:4B:01:E7:3B:8C:4B:48:CF:11:2D:DC:CC:C9 X509v3 Authority Key Identifier: keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:ad:ba:57:19:8d:72:ea:29:d2:cf:96:ff:9a:d0:ab:03:ce: fe:5e:61:fc:16:33:30:c5:8d:e9:49:51:9a:8f:fa:49:ab:92: fe:0a:bf:3c:1a:a4:86:92:0a:b6:1f:e6:bb:06:73:b7:fd:91: e8:ac:02:50:4a:14:d7:73:25:10:a2:5d:f8:6b:a5:d5:ff:7b: d4:0f:3a:59:f3:50:6c:79:87:6b:d7:5b:f9:35:15:00:94:00: 4f:4a:34:7b:6d:c2:8c:84:41:d1:d6:17:10:68:67:d0:e8:65: 5f:fd:a0:0f:fc:2b:d9:d1:28:c6:1c:71:26:a4:e0:0c:b6:ac: 07:eb:f0:cd:dc:fe:88:d3:ba:07:f4:db:ab:77:0d:e5:41:f2: d2:4c:5f:5a:bc:ea:38:4a:84:4e:1c:79:7e:2f:f6:61:4c:a9: 13:06:4b:34:ab:1a:a8:9b:6e:8f:5c:ae:c4:67:61:7a:a7:97: ce:8e:ed:d8:74:41:82:18:83:72:71:39:50:00:9b:cf:b5:6f: 6f:cc:6f:6a:66:2d:12:69:f0:b2:56:82:46:46:d8:d6:71:c3: 68:f4:23:18:5c:71:a2:5c:6f:a2:8c:9d:71:c1:9e:c7:63:9c: 99:f0:58:98:cb:64:7c:e5:db:c5:21:02:0f:7a:95:19:e5:36: f4:53:5a:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZYDQBgtxRvRsuMucXVh+WzpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyYTE1Y2M4ODY1OWY1NzhjYzE1OWM1MmIzYTdlOWVjNTgx OWZiMjAwHhcNMjUwNDA1MDAwMDU0WhcNMjUwNDA2MDAwMDU0WjAzMTEwLwYDVQQD EyhlZWY2ZDExN2JkMDk4MTRiMDFlNzNiOGM0YjQ4Y2YxMTJkZGNjY2M5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaKzel3JkKGHCAuB5akAOdGsSNrF B2KUtF6gMUVO+8HzLU9OxLKtPzyKVkzDikJc4zyaXhFcYVDm2/EH5xbKSXyXa5Rm 8MMh75rO3RcPPBp9eywPwDLYGd4v4uH1oDfDSTvsLPH4eZwGzoSrwk7LLxb6HcpM pa2oaMW+zcDWO0+zlwm0+t/DTNfoSLMGyEMumHfW1SbdWP2B7FEcMwmRWW0Jrbf5 rYwwVIjkNsqr2bZa9rwyxWAULu4I+xTDq0n3QumylLFOzjzAFgxctOKq6qMZQ1qj yqqzX+Bjc4crROoHxk7FtKZxvAu/b7n211L6+Ydyl8zu2Xbiatf+HLJ7/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO720Re9CYFLAec7jEtIzxEt3MzJMB8GA1UdIwQY MBaAFGKhXMiGWfV4zBWcUrOn6exYGfsgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXFGY3lJWlo5WGpNRlp4U3M2ZnA3RmdaLXlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8yMTE3YmMtMWY5ZS00NTkwLWE1NTAt NDI2OWI1NmJmN2Q0LzEvWXFGY3lJWlo5WGpNRlp4U3M2ZnA3RmdaLXlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi8yMTE3YmMtMWY5ZS00NTkwLWE1NTAtNDI2OWI1NmJmN2Q0 LzEvWXFGY3lJWlo5WGpNRlp4U3M2ZnA3RmdaLXlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATa26VxmN cuop0s+W/5rQqwPO/l5h/BYzMMWN6UlRmo/6SauS/gq/PBqkhpIKth/muwZzt/2R 6KwCUEoU13MlEKJd+Gul1f971A86WfNQbHmHa9db+TUVAJQAT0o0e23CjIRB0dYX EGhn0OhlX/2gD/wr2dEoxhxxJqTgDLasB+vwzdz+iNO6B/Tbq3cN5UHy0kxfWrzq OEqEThx5fi/2YUypEwZLNKsaqJtuj1yuxGdheqeXzo7t2HRBghiDcnE5UACbz7Vv b8xvamYtEmnwslaCRkbY1nHDaPQjGFxxolxvooydccGex2OcmfBYmMtkfOXbxSEC D3qVGeU29FNa3A== -----END CERTIFICATE-----Generated at Sat Apr 5 02:03:23 2025 by rpki-client