$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/Eipka-1MQXprSAX5PXenpGXjS5M.mft File: Eipka-1MQXprSAX5PXenpGXjS5M.mft (raw, json) Hash identifier: Xr8Pc9WxEeE04CGo2hwjD1aGDvJ9fnd7OjzOgbr7DeU= Subject key identifier: 41:D1:E9:29:E7:74:12:4B:23:1C:0C:F9:6C:9A:EA:1E:78:E5:5E:9E Authority key identifier: 12:2A:64:6B:ED:4C:41:7A:6B:48:05:F9:3D:77:A7:A4:65:E3:4B:93 Certificate issuer: /CN=122a646bed4c417a6b4805f93d77a7a465e34b93 Certificate serial: 0196391C0B1E7A4AE6CB9F4C8A5519D6278D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eipka-1MQXprSAX5PXenpGXjS5M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/Eipka-1MQXprSAX5PXenpGXjS5M.mft Manifest number: 14F1 Signing time: Tue 15 Apr 2025 11:01:01 +0000 Manifest this update: Tue 15 Apr 2025 11:01:01 +0000 Manifest next update: Wed 16 Apr 2025 11:01:01 +0000 Files and hashes: 1: 4YzbiOUc55i_-wnN2lE8VcFHTjM.roa (hash: EJ1xacTTePUHCKfjWzR41VZNC5bwx1ceCyx+D2VuM0k=) 2: Eipka-1MQXprSAX5PXenpGXjS5M.crl (hash: qNkbB2PicSadxrt+s4kYpufRwoF8axhPSou1RmcKMXo=) 3: HZDIjKjXqWPf-ee37Nhj9_hhLmU.roa (hash: HSOaEhMUsdBzgZ8yvnvkhm7cbQn7PS/dlSIORdNMvnw=) 4: LSDiDkGHf8ktuSvpLiCF4QxxoHA.roa (hash: 1aHlaSEVJU/CBfEh/B+hUORROVZbrb1jBZXbNMg5cy4=) 5: N3Y7O0SBisZukLRMHy8_setuvFI.roa (hash: mKagmk6f++epGFCdum5PDcyniZIRDa8iTpQ+v2TwpbA=) 6: OO3HInjQE4V4nLX5G6Vefr6iPdA.roa (hash: mSjEnkNAFz3QeKqAoiXZ5g2rlJocA3yHCPraXIzbyWs=) 7: OmskgLTfs_yHaV8sxyBdNIbaPY0.roa (hash: +YVWkhb4gyvwjOmlRZNIrwJ0F1cssnxh9edgyxYPzgA=) 8: SLekjmBf2tyIMOB3CJb0Z47uJtk.roa (hash: dyK450H8i+alS9mWM0crx5H3Vwy79u+jha7k1eN+nzM=) 9: VUcsIi_9-b8RzEwnDD6jGVaTQ0M.roa (hash: FrKooKPN8B42nu5wk7iHVN6k1WQH71cGopIkNxiN9ZM=) 10: lNRs0BmJg2zqQMNQc_ixIHE9WsQ.roa (hash: 7Ls+3IQ8Q9VQV+f9v4gnxgD+wykLzcCXGexomxswIGQ=) 11: pK-j5yshh0oWZpvGt4P0ScMumdE.roa (hash: mnyHWgzU3xisUAQNhTt84VgPqHifggdlwwma4Rga83M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/Eipka-1MQXprSAX5PXenpGXjS5M.crl rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/Eipka-1MQXprSAX5PXenpGXjS5M.mft rsync://rpki.ripe.net/repository/DEFAULT/Eipka-1MQXprSAX5PXenpGXjS5M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 16 Apr 2025 08:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:39:1c:0b:1e:7a:4a:e6:cb:9f:4c:8a:55:19:d6:27:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=122a646bed4c417a6b4805f93d77a7a465e34b93 Validity Not Before: Apr 15 11:01:01 2025 GMT Not After : Apr 16 11:01:01 2025 GMT Subject: CN=41d1e929e774124b231c0cf96c9aea1e78e55e9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:b5:32:b4:13:8e:d0:e1:17:44:48:17:4a:0c: 8b:42:fb:74:38:4e:fe:e8:b1:fc:04:a6:b8:92:5b: 48:0f:bf:9a:c6:b1:6b:75:ba:0b:8b:48:ff:af:f7: 14:31:37:bb:bf:86:a7:69:ba:3f:5b:a7:ed:7b:95: 64:12:1e:7d:36:3a:d1:11:8f:1e:03:fa:e2:0e:2a: 57:73:81:37:86:2d:6f:b9:f2:1c:98:13:46:11:55: d8:50:da:3c:5a:dc:1b:00:68:db:bf:1d:c7:11:7e: f0:51:bd:ad:dc:e4:40:24:9a:dc:e6:c6:98:f2:97: a9:3e:d8:32:21:24:f8:e7:d3:de:c7:e8:57:6a:00: b9:b2:29:b8:67:01:29:ef:b7:46:b2:34:21:95:80: 9c:dd:ad:85:b4:e7:dc:c8:30:5a:13:c9:e2:09:e4: 7e:70:7f:e1:3b:5c:63:1f:f5:66:0e:9f:bf:cf:37: d6:9d:15:a2:bf:57:39:e5:a8:b8:cd:fc:09:b0:51: 16:e6:77:d5:0c:c2:a1:d3:aa:03:8c:6b:61:2f:e3: 64:2a:96:b0:2f:c9:31:c9:41:45:b0:46:9e:2b:d7: 5c:cd:81:69:20:48:18:4d:1a:d2:c9:51:d4:98:94: 25:47:6d:44:1e:41:53:45:21:71:17:5e:57:b3:ce: 18:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:D1:E9:29:E7:74:12:4B:23:1C:0C:F9:6C:9A:EA:1E:78:E5:5E:9E X509v3 Authority Key Identifier: keyid:12:2A:64:6B:ED:4C:41:7A:6B:48:05:F9:3D:77:A7:A4:65:E3:4B:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eipka-1MQXprSAX5PXenpGXjS5M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/Eipka-1MQXprSAX5PXenpGXjS5M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/Eipka-1MQXprSAX5PXenpGXjS5M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:37:0a:2f:d6:48:9a:72:a3:5f:bd:9c:c0:5b:5b:71:63:d2: ce:5a:9e:39:37:c8:5b:a0:99:98:ec:e9:c7:16:f4:2e:49:34: 6c:df:80:d4:38:91:07:d6:10:bd:39:e2:8b:16:65:90:cf:01: ba:52:dd:d3:79:22:d7:8c:a7:04:4a:4a:92:c0:00:ce:30:0b: bb:23:99:dc:4a:85:7f:8d:c7:43:a1:8c:01:ec:85:b4:63:84: 57:c7:cb:7d:20:b4:c4:1f:12:28:d2:96:b9:f7:b9:fc:55:d0: 59:71:b7:69:6d:d3:66:35:92:53:02:b2:0d:41:fe:74:e3:a1: de:96:65:83:64:15:16:4c:83:d4:e4:be:11:d8:26:c4:4f:32: 2b:04:7d:3a:09:c8:0a:08:73:b0:77:db:b6:f9:fc:91:80:c7: bf:54:03:a5:c4:27:d0:1a:a0:5e:04:ec:00:00:e8:70:3a:0b: 88:4e:58:d2:48:2a:93:71:56:ba:e0:56:19:74:40:7a:28:96: f1:f3:1b:96:e6:f7:ac:7e:e0:d1:a6:6e:73:2b:45:71:91:92: f6:12:b6:2c:92:8e:b9:e9:e7:ea:57:b7:8e:18:86:b9:91:99: 26:65:17:8e:d7:92:57:69:f3:01:31:2c:e0:fb:ad:58:68:50: bd:f4:49:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZY5HAseekrmy59MilUZ1ieNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyMmE2NDZiZWQ0YzQxN2E2YjQ4MDVmOTNkNzdhN2E0NjVl MzRiOTMwHhcNMjUwNDE1MTEwMTAxWhcNMjUwNDE2MTEwMTAxWjAzMTEwLwYDVQQD Eyg0MWQxZTkyOWU3NzQxMjRiMjMxYzBjZjk2YzlhZWExZTc4ZTU1ZTllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4bUytBOO0OEXREgXSgyLQvt0OE7+ 6LH8BKa4kltID7+axrFrdboLi0j/r/cUMTe7v4anabo/W6fte5VkEh59NjrREY8e A/riDipXc4E3hi1vufIcmBNGEVXYUNo8WtwbAGjbvx3HEX7wUb2t3ORAJJrc5saY 8pepPtgyIST459Pex+hXagC5sim4ZwEp77dGsjQhlYCc3a2FtOfcyDBaE8niCeR+ cH/hO1xjH/VmDp+/zzfWnRWiv1c55ai4zfwJsFEW5nfVDMKh06oDjGthL+NkKpaw L8kxyUFFsEaeK9dczYFpIEgYTRrSyVHUmJQlR21EHkFTRSFxF15Xs84YpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEHR6SnndBJLIxwM+Wya6h545V6eMB8GA1UdIwQY MBaAFBIqZGvtTEF6a0gF+T13p6Rl40uTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWlwa2EtMU1RWHByU0FYNVBYZW5wR1hqUzVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9hNTk2ZTItMjlkMi00OGM2LTliYWIt NWNiZDFmM2ZmMzlhLzEvRWlwa2EtMU1RWHByU0FYNVBYZW5wR1hqUzVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS9hNTk2ZTItMjlkMi00OGM2LTliYWItNWNiZDFmM2ZmMzlh LzEvRWlwa2EtMU1RWHByU0FYNVBYZW5wR1hqUzVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMjcKL9ZI mnKjX72cwFtbcWPSzlqeOTfIW6CZmOzpxxb0Lkk0bN+A1DiRB9YQvTniixZlkM8B ulLd03ki14ynBEpKksAAzjALuyOZ3EqFf43HQ6GMAeyFtGOEV8fLfSC0xB8SKNKW ufe5/FXQWXG3aW3TZjWSUwKyDUH+dOOh3pZlg2QVFkyD1OS+EdgmxE8yKwR9OgnI CghzsHfbtvn8kYDHv1QDpcQn0BqgXgTsAADocDoLiE5Y0kgqk3FWuuBWGXRAeiiW 8fMblub3rH7g0aZucytFcZGS9hK2LJKOuenn6le3jhiGuZGZJmUXjteSV2nzATEs 4PutWGhQvfRJcA== -----END CERTIFICATE-----Generated at Tue Apr 15 16:55:11 2025 by rpki-client