$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.mft File: VfrZbdBa-MLSYZLIQRMfL5dFn-0.mft (raw, json) Hash identifier: whO7bs8pbveaKFFehVqrV1RDuttAzxFUDuTg2RSHi6w= Subject key identifier: B8:98:08:F6:FC:14:39:14:BB:17:A3:EE:4D:5F:78:0E:5A:14:A3:7F Authority key identifier: 55:FA:D9:6D:D0:5A:F8:C2:D2:61:92:C8:41:13:1F:2F:97:45:9F:ED Certificate issuer: /CN=55fad96dd05af8c2d26192c841131f2f97459fed Certificate serial: 01963B09F7AC58FF96CCD65C722F33DE4C12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.mft Manifest number: 14FC Signing time: Tue 15 Apr 2025 20:00:30 +0000 Manifest this update: Tue 15 Apr 2025 20:00:30 +0000 Manifest next update: Wed 16 Apr 2025 20:00:30 +0000 Files and hashes: 1: 6fy-RpF2xj4bRR9VT9bQ_Fryj8A.roa (hash: +fjUuan9mhMoL5J+xbDDTtsP2e+9iZNf2Q6jWOsGO/g=) 2: B2guzqJ0c1c1SQ3CcIbZxFBJLXQ.roa (hash: 55A03hHw140PM0KCnI5wADrRDcpuUYgxTN0Hby4pUXI=) 3: GDhDJ-2zjU0GkRTxU28X9ngeRHc.roa (hash: o2yqsnKawfThSJXCRUMbs0Smm+L29A8WJUtnBaTxbug=) 4: GcZeqFRM3Vo0APvxkyx_MnzPveU.roa (hash: a4xzh+76qyVv2r1JqzdGIwl68kZYtgkEbksxJPUpquk=) 5: HDILnjmhtcEJk46AQcpCMkCLoA8.roa (hash: RKyE3trmJiGqNtjuvNCycAFA3dGIi6wfCWONyfSdxXk=) 6: OzvEZ_7o6iiEemTYYUh3uPS2kS0.roa (hash: olMlYCsvO4RycaUkfHVORoJbVkzPaXULWZ1VzqkkPLI=) 7: VfrZbdBa-MLSYZLIQRMfL5dFn-0.crl (hash: VjlLhyKVgWDkNDPxev6KbB7OrFg83219uX+KXS50hcQ=) 8: X8OOCxFmHvFVmgVaORuTFl7bqwA.roa (hash: 8QmTqC1KGhreGJsiTB4YVXTsChzMFM1fgstpYcqi2wU=) 9: _XmPllT7ofYCPa4yLDSVV52Pl3k.roa (hash: bV+K4k+usRA15bCwnB7mW9jVhJg2loiLSbzbXFY6zLY=) 10: kGlBTt5x7KU-txz2Om5dyRKUTdQ.roa (hash: gRmjPVyQTg22cTzCYFSGaaZzVv3Ajzi1EkEgtKCYrRY=) 11: zC5qQAr1NH8TWMnKZTFLrXEquxw.roa (hash: p9nwz/HJCgnc5FZXpmGWtTKanzU2+2yGdiNXNP6y+Q0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.crl rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.mft rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 16 Apr 2025 20:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:3b:09:f7:ac:58:ff:96:cc:d6:5c:72:2f:33:de:4c:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55fad96dd05af8c2d26192c841131f2f97459fed Validity Not Before: Apr 15 20:00:30 2025 GMT Not After : Apr 16 20:00:30 2025 GMT Subject: CN=b89808f6fc143914bb17a3ee4d5f780e5a14a37f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:78:1d:58:41:e3:ee:50:65:1a:c8:53:cc:b8: 19:96:53:d3:6d:22:6a:22:22:a4:0d:29:b7:34:79: f6:43:c4:a7:e8:67:f3:56:0d:ae:41:18:c2:0a:25: 1c:4b:7d:25:8e:d0:b3:69:c6:d6:94:cb:c4:89:3f: ef:17:7d:f0:1b:0f:be:e9:ea:bf:59:59:c2:0d:3a: 71:ed:60:0b:f0:45:fc:ba:1b:26:0c:54:ae:55:83: b7:bf:cf:d7:b8:9f:49:21:d1:62:96:33:9d:d3:35: 68:39:82:28:24:97:e0:6c:2c:c9:54:a8:6f:b9:fa: 41:69:23:17:2e:83:fd:66:e3:dc:20:c6:49:90:20: 95:10:65:6e:cf:46:87:4d:dc:a8:f6:f4:ae:ca:00: 30:42:21:32:4b:21:17:71:ff:c7:9e:ce:be:bf:38: 06:0e:5b:49:8a:4c:e8:e9:4f:72:14:17:5f:56:da: e3:39:92:98:4b:8e:0d:b4:aa:5b:72:30:da:80:fe: 76:59:5f:bf:f5:c3:f6:f7:8a:5c:89:91:f8:72:9d: b2:50:a0:61:0f:31:b4:32:61:fd:c9:e8:59:42:0f: 71:0c:ea:20:04:de:5d:d7:d0:b4:7d:34:79:c7:42: 8b:06:5e:d9:7a:3d:6d:52:5b:af:c1:47:fd:e6:93: 45:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:98:08:F6:FC:14:39:14:BB:17:A3:EE:4D:5F:78:0E:5A:14:A3:7F X509v3 Authority Key Identifier: keyid:55:FA:D9:6D:D0:5A:F8:C2:D2:61:92:C8:41:13:1F:2F:97:45:9F:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:a2:34:bb:d3:5e:95:f7:a4:4d:b2:59:48:82:7a:56:70:ed: 4e:31:03:bb:6a:5f:df:85:96:39:6b:d8:e4:e1:7f:59:0e:36: ef:f0:6c:7d:82:1b:d3:69:ae:07:d3:6b:85:15:8d:99:28:1d: 39:56:0c:0a:cf:65:cf:dc:1a:cd:a3:52:17:14:db:2b:41:f9: 24:0e:e1:01:6d:81:44:f9:b0:74:65:82:ea:7d:a9:5d:00:3f: 8c:af:11:33:f4:3c:a5:c3:8b:cf:4a:f2:c8:5d:8e:96:0e:2e: 44:95:d8:75:c3:2b:69:fb:46:84:1c:7a:cd:f6:a8:e8:c6:f2: 67:b1:7f:c8:98:cb:d6:ca:9d:c9:40:e2:a0:ba:ec:47:e9:40: 45:e5:dd:07:2a:a1:1c:71:89:67:9a:b0:e4:65:5a:a4:78:2a: b9:e9:34:23:14:52:14:b3:82:41:b0:ff:fb:db:5d:5d:83:fb: 03:1d:56:4d:9a:64:92:cd:0f:64:6f:cc:18:37:b4:67:2b:57: cd:12:25:d2:a5:ab:99:7a:4c:9c:c5:27:60:25:c9:ac:1b:8f: 48:93:67:fd:24:56:9d:22:30:9e:b6:fe:de:d4:7d:42:ad:8c: da:9d:08:f4:85:b4:9e:a3:eb:5a:74:f3:bb:6d:a5:10:72:17: b2:38:ae:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZY7CfesWP+WzNZcci8z3kwSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1ZmFkOTZkZDA1YWY4YzJkMjYxOTJjODQxMTMxZjJmOTc0 NTlmZWQwHhcNMjUwNDE1MjAwMDMwWhcNMjUwNDE2MjAwMDMwWjAzMTEwLwYDVQQD EyhiODk4MDhmNmZjMTQzOTE0YmIxN2EzZWU0ZDVmNzgwZTVhMTRhMzdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3gdWEHj7lBlGshTzLgZllPTbSJq IiKkDSm3NHn2Q8Sn6GfzVg2uQRjCCiUcS30ljtCzacbWlMvEiT/vF33wGw++6eq/ WVnCDTpx7WAL8EX8uhsmDFSuVYO3v8/XuJ9JIdFiljOd0zVoOYIoJJfgbCzJVKhv ufpBaSMXLoP9ZuPcIMZJkCCVEGVuz0aHTdyo9vSuygAwQiEySyEXcf/Hns6+vzgG DltJikzo6U9yFBdfVtrjOZKYS44NtKpbcjDagP52WV+/9cP294pciZH4cp2yUKBh DzG0MmH9yehZQg9xDOogBN5d19C0fTR5x0KLBl7Zej1tUluvwUf95pNFmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLiYCPb8FDkUuxej7k1feA5aFKN/MB8GA1UdIwQY MBaAFFX62W3QWvjC0mGSyEETHy+XRZ/tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmZyWmJkQmEtTUxTWVpMSVFSTWZMNWRGbi0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8zMGU1ODItNDQ0OC00OTUyLTk0YTAt MzBmZjJjODNmMDAxLzEvVmZyWmJkQmEtTUxTWVpMSVFSTWZMNWRGbi0wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi8zMGU1ODItNDQ0OC00OTUyLTk0YTAtMzBmZjJjODNmMDAx LzEvVmZyWmJkQmEtTUxTWVpMSVFSTWZMNWRGbi0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ6I0u9Ne lfekTbJZSIJ6VnDtTjEDu2pf34WWOWvY5OF/WQ427/BsfYIb02muB9NrhRWNmSgd OVYMCs9lz9wazaNSFxTbK0H5JA7hAW2BRPmwdGWC6n2pXQA/jK8RM/Q8pcOLz0ry yF2Olg4uRJXYdcMraftGhBx6zfao6MbyZ7F/yJjL1sqdyUDioLrsR+lAReXdByqh HHGJZ5qw5GVapHgquek0IxRSFLOCQbD/+9tdXYP7Ax1WTZpkks0PZG/MGDe0ZytX zRIl0qWrmXpMnMUnYCXJrBuPSJNn/SRWnSIwnrb+3tR9Qq2M2p0I9IW0nqPrWnTz u22lEHIXsjiuwg== -----END CERTIFICATE-----Generated at Wed Apr 16 04:13:46 2025 by rpki-client