$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.mft File: Z7WwLcQBZm7gRauQzIiBf-CdcGo.mft (raw, json) Hash identifier: cUzOJFZpxbwxC4Tchf8/yl7jaHXOl4jcA5XXocYEcSY= Subject key identifier: 3A:73:B6:2C:20:D0:CD:81:A2:63:8C:73:D6:37:CD:B0:2E:7E:21:6E Authority key identifier: 67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A Certificate issuer: /CN=67b5b02dc401666ee045ab90cc88817fe09d706a Certificate serial: 0194BAF2776AC1C857E48C5E93F91AE7BF5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.mft Manifest number: 1149 Signing time: Fri 31 Jan 2025 06:00:39 +0000 Manifest this update: Fri 31 Jan 2025 06:00:39 +0000 Manifest next update: Sat 01 Feb 2025 06:00:39 +0000 Files and hashes: 1: 1ivGp7ZTe_WJHvpJWRSBYZJtPTU.roa (hash: 8hUwx2J2aTyoVrBsBJYruI95DDhQTOqqh8I6oZ2c7RU=) 2: 2hV2Eva-Yq0Tj6R_zRma3IFAz5U.roa (hash: xaAXokmFBA+GIkC2gCBEPvYGMsKwjG9cFEwuB3Zkoqw=) 3: Cmf9RxXVbj1W_upe6IuVSwuAxKQ.roa (hash: rsOsAqqxDUPTEG53YtwuWDnU0k4Vab+UJYOi1M8uBcE=) 4: CnW3qR_oIITaOQij9dhtcxmI3Ew.roa (hash: c6jiCaV7kJAiM633jZnJHCKNng9Erj/W/XlTBj+QRpY=) 5: DHALUAN5tK6vdZdATqkw-W3Rehs.roa (hash: 7l9RAeo7N/jmnp2dP2Muv9E6xCL1r9O+gLOg/k2Fq2s=) 6: Tt5lRvCR59EmvIm9nWpxifL8PvQ.roa (hash: K94v285TvMOOo7AcPioAGeK/gkVuCpfkO4FQfselq2s=) 7: Z7WwLcQBZm7gRauQzIiBf-CdcGo.crl (hash: pbHfyJJgbvMQmy7DsYmt+Yf7+S1Xz6XbOVnRaOciyAA=) 8: _K0BWZ_stZe84EL_peOxUFKFCCY.roa (hash: 6JiOQ185PalZ+aky+RRHmp+1NLMR68q9NXdXomLIHN8=) 9: k7Uhxcf1dLyLbabkMZGt9dayq9s.roa (hash: gFVryfVaKzHzs9H28hxg6aO05RnxqjKmSXgUNR+b4kg=) 10: kIbghkBOfoXjY46mtdWaD6ECFzI.roa (hash: 0pGxzPrydHhKJZ3AyBjYXBgg0KwtH0VaWuahmKMYYJY=) 11: n-1P-bnNMbfHyYOOBdFHAhTQeeU.roa (hash: VCctCwWgn1+jYqEkjhICyTVDTXkxSrSucpTbDGLkOEU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.crl rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.mft rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 01 Feb 2025 06:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:94:ba:f2:77:6a:c1:c8:57:e4:8c:5e:93:f9:1a:e7:bf:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67b5b02dc401666ee045ab90cc88817fe09d706a Validity Not Before: Jan 31 06:00:39 2025 GMT Not After : Feb 1 06:00:39 2025 GMT Subject: CN=3a73b62c20d0cd81a2638c73d637cdb02e7e216e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:2e:6f:44:8a:ab:49:b8:2f:fb:5b:32:6d:c5: 09:e8:17:4e:9d:df:44:90:ca:9f:24:bf:bb:0a:3f: 9c:42:63:83:b1:1b:f1:de:10:c1:0b:26:b5:fe:36: b7:ae:5c:66:8f:2a:27:6c:38:e8:ee:f9:ab:38:dd: 28:fb:81:2c:4c:a3:80:85:33:74:f0:a6:bf:da:c5: 08:29:cd:bf:b9:09:28:74:fe:8e:35:da:29:d1:31: 96:4d:d5:35:f7:3f:c6:84:d3:6a:7b:0a:23:39:41: ab:a8:c3:07:f2:fd:09:bf:1c:bf:02:6c:2e:a0:61: 63:8d:eb:bc:2f:7a:ac:30:4f:35:59:62:ce:7a:7b: 5e:d8:b5:29:b4:df:bc:4b:1f:9b:72:07:b1:58:28: 8a:09:d6:d1:7e:b9:99:5e:cc:6d:2d:28:fc:94:3d: 58:68:f3:db:97:74:bf:32:49:23:a3:63:63:36:1d: e4:57:fe:17:41:b7:d9:88:7a:45:af:01:93:00:45: 1b:b8:13:c9:e3:a3:5a:51:c2:94:13:1e:06:90:ea: ac:c9:46:91:dc:d1:03:ea:fc:1e:c2:27:29:2c:34: ea:db:46:33:5f:f9:f7:b9:b7:30:df:03:03:97:24: f8:a1:9b:92:73:a6:ba:b3:a5:c1:64:d5:35:15:a8: 9e:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:73:B6:2C:20:D0:CD:81:A2:63:8C:73:D6:37:CD:B0:2E:7E:21:6E X509v3 Authority Key Identifier: keyid:67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:6f:24:3e:96:c3:71:6a:33:0c:fc:80:21:50:9b:0f:a2:e7: e5:08:2d:c4:7d:53:5f:80:25:2f:4f:dc:ed:58:db:30:15:c3: d7:5a:5f:e8:26:34:23:8a:ca:3a:2e:b4:04:2f:d9:70:d9:f3: 12:b0:b6:2d:74:12:c1:63:4a:99:9b:71:d8:a9:76:92:4b:46: aa:9e:fd:76:74:4f:5b:fd:66:7e:f9:f1:75:b0:62:97:a7:80: c6:78:f2:1f:69:5e:15:56:c6:28:4f:55:06:a6:a3:23:1d:21: 07:df:11:e6:30:fd:4a:f5:9d:1f:04:96:0d:50:d4:b5:a4:42: a8:1b:81:77:18:2a:c8:4d:c2:90:17:39:e6:83:72:60:17:53: 86:e6:47:21:66:0a:fd:12:89:e5:5f:53:af:cd:53:64:d6:e2: 3d:e5:84:85:69:dc:89:1f:63:a8:c4:03:86:bb:cc:99:44:cf: c3:b5:cb:01:08:bb:32:25:5d:36:be:0b:c9:7a:b2:66:77:d1: e1:b3:5b:28:70:fa:71:bb:25:17:06:0e:02:0d:40:9d:cb:f2: 2c:df:82:b9:7b:e6:18:35:29:96:7b:91:2e:4a:2f:98:7d:d0: e7:7d:67:46:af:a6:b1:9c:04:ee:cb:2a:65:9c:e2:20:90:88: 84:6d:5d:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZS68ndqwchX5Ixek/ka579aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3YjViMDJkYzQwMTY2NmVlMDQ1YWI5MGNjODg4MTdmZTA5 ZDcwNmEwHhcNMjUwMTMxMDYwMDM5WhcNMjUwMjAxMDYwMDM5WjAzMTEwLwYDVQQD EygzYTczYjYyYzIwZDBjZDgxYTI2MzhjNzNkNjM3Y2RiMDJlN2UyMTZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoy5vRIqrSbgv+1sybcUJ6BdOnd9E kMqfJL+7Cj+cQmODsRvx3hDBCya1/ja3rlxmjyonbDjo7vmrON0o+4EsTKOAhTN0 8Ka/2sUIKc2/uQkodP6ONdop0TGWTdU19z/GhNNqewojOUGrqMMH8v0Jvxy/Amwu oGFjjeu8L3qsME81WWLOente2LUptN+8Sx+bcgexWCiKCdbRfrmZXsxtLSj8lD1Y aPPbl3S/Mkkjo2NjNh3kV/4XQbfZiHpFrwGTAEUbuBPJ46NaUcKUEx4GkOqsyUaR 3NED6vwewicpLDTq20YzX/n3ubcw3wMDlyT4oZuSc6a6s6XBZNU1FaieLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDpztiwg0M2BomOMc9Y3zbAufiFuMB8GA1UdIwQY MBaAFGe1sC3EAWZu4EWrkMyIgX/gnXBqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjdXd0xjUUJabTdnUmF1UXpJaUJmLUNkY0dvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82NGEzZGUtODEyYS00YWNlLTgxNGQt YjVkODg4YWRmZDM3LzEvWjdXd0xjUUJabTdnUmF1UXpJaUJmLUNkY0dvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82NGEzZGUtODEyYS00YWNlLTgxNGQtYjVkODg4YWRmZDM3 LzEvWjdXd0xjUUJabTdnUmF1UXpJaUJmLUNkY0dvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtW8kPpbD cWozDPyAIVCbD6Ln5QgtxH1TX4AlL0/c7VjbMBXD11pf6CY0I4rKOi60BC/ZcNnz ErC2LXQSwWNKmZtx2Kl2kktGqp79dnRPW/1mfvnxdbBil6eAxnjyH2leFVbGKE9V BqajIx0hB98R5jD9SvWdHwSWDVDUtaRCqBuBdxgqyE3CkBc55oNyYBdThuZHIWYK /RKJ5V9Tr81TZNbiPeWEhWnciR9jqMQDhrvMmUTPw7XLAQi7MiVdNr4LyXqyZnfR 4bNbKHD6cbslFwYOAg1AncvyLN+CuXvmGDUplnuRLkovmH3Q531nRq+msZwE7ssq ZZziIJCIhG1d+Q== -----END CERTIFICATE-----Generated at Fri Jan 31 15:33:38 2025 by rpki-client on console-fra.rpki-client.org