$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.mft File: fRSfYkR4U2icEvsoiv62toHP68E.mft (raw, json) Hash identifier: SaJhAcIJmf3D+dY52ERgzhiOLD7fA5TvoMwTHHBu5sk= Subject key identifier: 1A:32:24:92:4A:06:CF:7A:08:EC:39:74:59:F9:F3:F5:42:DF:36:BB Authority key identifier: 7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1 Certificate issuer: /CN=7d149f62447853689c12fb288afeb6b681cfebc1 Certificate serial: 0194BAF2590867765A829AFA3A4C69A5C202 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.mft Manifest number: 13C6 Signing time: Fri 31 Jan 2025 06:00:32 +0000 Manifest this update: Fri 31 Jan 2025 06:00:32 +0000 Manifest next update: Sat 01 Feb 2025 06:00:32 +0000 Files and hashes: 1: 2CeWoGzDWl6UkY36SIUH1OhgWjI.roa (hash: SpuPtcO5oh6qYeICaLjHEnb1AyuNec5O8bsGPbWlXR0=) 2: 2OyaFSjBRoREDHEMRffL3EbO-HE.roa (hash: nXI4OkiYa5c+MjdVzqLFFZ3ZGswBHizjRFddCRvE7B8=) 3: 3wwIi79zg2SGivGdrN-g0LB5ULQ.roa (hash: RzCIbHY1nS76gIylPt0Y25UbcEOAlA6M3aFOCeIxSG4=) 4: 7gAx1Pyx4u0TcyoGJm-7xTCnp00.roa (hash: gAGdIZGspYyJlvskZ74rsTfXVPxswIlGbLI3PkYprvU=) 5: EUICRwNR8sR91Lfm3GIv3mdVr9k.roa (hash: ua1xjRnUek2cLwApq/HW3bjCZKfJsqGGvp16wgKp8P0=) 6: HYkelKhWY7NiPV2rIoXC5vMsggM.roa (hash: 8m611pZGVk4ujPG9J04iZxFPYTUOzYbyGd2fDqvqZP4=) 7: Jhq91rxsv2WDUPAoN1fbsyaCM6g.roa (hash: nybfHNUP7zn/KmMoeiwkEEs96tiChMxH1OSoiBocUXI=) 8: Melq7PLQcz-P184ktmpNOP2H3e4.roa (hash: bGaw09MG/JnAsEfDppYWkhFJuztc0B+a9Nz0AQOqrUY=) 9: RWf3DVveZH4QLyKGQca82kY-7Qw.roa (hash: V22GqObY+hDoy85YYLCgPS5lAieuM7VmlAbZz3/L7ZM=) 10: _NtdAshoDnlOJZsbDUhHb5DpQ-8.roa (hash: RxY1ucf+m1KziN998xY04kbjZueKaMFRsQImUOWnCMQ=) 11: fRSfYkR4U2icEvsoiv62toHP68E.crl (hash: yosfRF3nBDjuOtSQM0AMdHu+jjy8SOEv++r3IO25fTY=) 12: l63ezx_M0iAM5dKGQZtcWd8xPmQ.roa (hash: qf8bDHKpJxynQt1q7hXqJrXbCZfUxZZ7MBpbrfJkMcU=) 13: lkgJ8Vsd8ocb4eicMkQ6N3ZL26E.roa (hash: 9Yz4K7Z8z/hwTeoXB4iHYgi23xVHLoum6nVhNj0Tjmc=) 14: o1JVWuEuZPta2YEvpJ2jdJYR8K8.roa (hash: qNV/P5sCJuhJ/7lvmy6L/P1vDN6QSvQRrwuS+5DqKkg=) 15: txxKQQE40wffgCtcTH6E5WrYYhY.roa (hash: td5UTouO1Nf7RuKTOrzSb6h5NfM7Vvfby16oyueCQko=) 16: zBonQZgEPDvj1nGNR_bu7NzMU0U.roa (hash: s94OjMSrqoWnsXwDlW8kAk2CQ0Z0teuNflnJXhN+I6g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.mft rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 01 Feb 2025 06:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:94:ba:f2:59:08:67:76:5a:82:9a:fa:3a:4c:69:a5:c2:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d149f62447853689c12fb288afeb6b681cfebc1 Validity Not Before: Jan 31 06:00:32 2025 GMT Not After : Feb 1 06:00:32 2025 GMT Subject: CN=1a3224924a06cf7a08ec397459f9f3f542df36bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a5:35:e0:d7:ec:3a:e0:88:7c:84:a5:c4:97: 18:70:aa:a4:b1:13:ae:25:29:30:48:53:37:09:fc: d8:ad:83:d9:57:f1:b3:4e:ae:df:47:fb:6b:18:24: 9c:21:dd:a9:dd:ec:36:5c:ff:56:b0:63:de:15:05: a9:8c:ca:d1:52:46:e7:9e:89:12:17:b4:86:c2:61: 2a:46:14:76:85:5e:5b:cc:0a:ad:13:ef:be:5f:f9: 30:d4:b0:56:7c:9b:83:a9:98:d5:27:d0:9e:f6:c7: 4c:19:12:6d:fe:f0:06:dc:57:37:3a:10:7b:fc:38: 9f:8c:12:ca:2d:5a:00:0b:c6:ec:90:50:17:7e:a7: 66:91:05:f0:40:44:14:96:be:20:b6:ef:cc:29:47: 35:c2:f2:a2:c4:57:e3:85:26:c4:95:9c:05:47:ce: 8c:98:11:4a:4d:82:96:a7:f5:d4:79:ec:39:fd:80: 28:75:01:d0:06:26:bf:8f:9f:ce:be:17:21:22:c5: 50:b5:d5:a9:4c:1c:03:17:04:06:fc:5d:72:b1:e8: b3:00:3a:e2:da:9f:45:de:12:e7:6c:7c:47:b3:20: b7:09:c1:80:f1:57:29:2b:96:db:13:9b:04:1b:15: dd:50:96:9d:82:63:27:d9:b2:17:f8:76:06:76:3c: 45:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:32:24:92:4A:06:CF:7A:08:EC:39:74:59:F9:F3:F5:42:DF:36:BB X509v3 Authority Key Identifier: keyid:7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:c4:d8:f3:f5:83:15:66:1d:88:92:21:dd:66:1d:91:d4:91: f3:d3:27:ec:c9:c5:35:f6:ab:2e:37:6a:21:79:7e:c0:d9:94: e1:48:a3:18:f7:b4:34:91:ca:08:1e:bd:d9:fa:e7:c4:dc:bb: ca:10:52:0f:f7:e8:8a:c7:e7:a3:0c:3c:14:c9:02:68:10:86: 1b:24:c7:ba:89:29:df:94:0b:81:b8:8e:c7:c2:88:2b:5d:0e: 7c:55:59:eb:0f:27:79:46:eb:ef:85:77:41:09:cc:c6:6a:43: ce:44:9f:c5:6d:82:3a:a2:be:66:2a:e3:f3:4d:5c:9e:9e:3b: 11:8c:df:22:58:8f:7e:60:20:22:a7:17:a8:97:15:be:a3:16: d4:cf:46:31:31:a3:02:43:7d:c9:73:1e:8f:73:e3:98:a6:28: 4c:10:8f:b8:07:b1:e0:c3:22:17:fd:18:63:23:e8:33:22:6b: 6d:13:75:5c:b2:08:bf:8f:48:86:9c:91:ff:07:44:3c:1e:a0: c5:2f:8b:71:94:44:22:6f:f0:18:8d:68:70:ce:f9:a9:63:85: ad:44:4b:6a:f5:73:62:e4:8a:73:dc:90:8c:69:17:b2:06:6a: 50:70:f6:20:d0:9c:ed:2a:ad:6f:8e:56:e9:63:90:eb:96:70: 1a:f1:03:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZS68lkIZ3Zagpr6OkxppcICMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMTQ5ZjYyNDQ3ODUzNjg5YzEyZmIyODhhZmViNmI2ODFj ZmViYzEwHhcNMjUwMTMxMDYwMDMyWhcNMjUwMjAxMDYwMDMyWjAzMTEwLwYDVQQD EygxYTMyMjQ5MjRhMDZjZjdhMDhlYzM5NzQ1OWY5ZjNmNTQyZGYzNmJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqU14NfsOuCIfISlxJcYcKqksROu JSkwSFM3CfzYrYPZV/GzTq7fR/trGCScId2p3ew2XP9WsGPeFQWpjMrRUkbnnokS F7SGwmEqRhR2hV5bzAqtE+++X/kw1LBWfJuDqZjVJ9Ce9sdMGRJt/vAG3Fc3OhB7 /DifjBLKLVoAC8bskFAXfqdmkQXwQEQUlr4gtu/MKUc1wvKixFfjhSbElZwFR86M mBFKTYKWp/XUeew5/YAodQHQBia/j5/OvhchIsVQtdWpTBwDFwQG/F1yseizADri 2p9F3hLnbHxHsyC3CcGA8VcpK5bbE5sEGxXdUJadgmMn2bIX+HYGdjxFvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBoyJJJKBs96COw5dFn58/VC3za7MB8GA1UdIwQY MBaAFH0Un2JEeFNonBL7KIr+traBz+vBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlJTZllrUjRVMmljRXZzb2l2NjJ0b0hQNjhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC82YTU0YmYtZjAwZi00NjdhLWJmNTct YWFiMGU0MTRjYzYzLzEvZlJTZllrUjRVMmljRXZzb2l2NjJ0b0hQNjhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC82YTU0YmYtZjAwZi00NjdhLWJmNTctYWFiMGU0MTRjYzYz LzEvZlJTZllrUjRVMmljRXZzb2l2NjJ0b0hQNjhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhcTY8/WD FWYdiJIh3WYdkdSR89Mn7MnFNfarLjdqIXl+wNmU4UijGPe0NJHKCB692frnxNy7 yhBSD/foisfnoww8FMkCaBCGGyTHuokp35QLgbiOx8KIK10OfFVZ6w8neUbr74V3 QQnMxmpDzkSfxW2COqK+Zirj801cnp47EYzfIliPfmAgIqcXqJcVvqMW1M9GMTGj AkN9yXMej3PjmKYoTBCPuAex4MMiF/0YYyPoMyJrbRN1XLIIv49IhpyR/wdEPB6g xS+LcZREIm/wGI1ocM75qWOFrURLavVzYuSKc9yQjGkXsgZqUHD2INCc7Sqtb45W 6WOQ65ZwGvEDAA== -----END CERTIFICATE-----Generated at Fri Jan 31 15:32:13 2025 by rpki-client on console-fra.rpki-client.org