$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.mft File: _EQpfpJxxu3wZJFfYYCuEmkN2os.mft (raw, json) Hash identifier: zaOHq5a/KVChtRRLKbl2x0XpiC1wqkysMu1/n146QTU= Subject key identifier: 30:B2:D1:2A:CB:37:5E:C8:D3:17:C5:5E:5C:7E:55:A3:2B:7B:59:29 Authority key identifier: FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B Certificate issuer: /CN=fc44297e9271c6edf064915f6180ae12690dda8b Certificate serial: 0194BB291CA3CAEC27759C11A04D77159A0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.mft Manifest number: 143D Signing time: Fri 31 Jan 2025 07:00:21 +0000 Manifest this update: Fri 31 Jan 2025 07:00:21 +0000 Manifest next update: Sat 01 Feb 2025 07:00:21 +0000 Files and hashes: 1: 32yhRz_S8ITRiOsBYkmV4NnQCYc.roa (hash: dVgxRZDbIbYdq2fLtDV8WTt0Yh4BvCJtbiIWE/I7V9o=) 2: 3YfXMGxAROTBpSHK0nXhT4XXVLA.roa (hash: t9FN1AE/iUXMjLgMElEEh/Ci+Kik/9ynPh+dOX7Z5u8=) 3: 4CRh1_CvU86oKkepqeWz0p8Z20g.roa (hash: eECawWd/eK8DTrkxHmdqWQ83awsrOYEANzuH8VdAHYk=) 4: 4yVwhdNr1x7QWhuQZt7jnU3WVfU.roa (hash: Avv1mWPFCgDH8L+bShCZ3laRZSIOjbCtfz5vWH2fX7s=) 5: 7hrowrIyQ_yhCn7NqJyPwlbnjvU.roa (hash: jaDUXbK3NwGZnP8kMILOfU6k2MmyLuZSMbC+5y9ZUnQ=) 6: EC4-LQ6kidGJzuS4NcMwvpf6NbU.roa (hash: p11JEQANSGpxSsSCC9KDVq2xpHH5TNvaJmupLy6k704=) 7: He_wIqs9WbeGj8B22HW3VzQspCQ.roa (hash: tlw/MPCRV5MVLGPRtjnV6Ynl8QAazIvng9cpXGa9Jjc=) 8: HuL3gMV6_zC2v4RtUtbhqokAt3o.roa (hash: oOaz6NQBz4nDsaAkIEoLusftKpiuLlvRyaHsm/ZmfH4=) 9: QOp8bh5ZPSuznKCRrGZLlhCTgcs.roa (hash: 7hAuGp/9PxCmWRCRnl/vszI74VutrV1FkyouYG2D0Ok=) 10: ZWOY1CQejAaInI5dPiW91XYX-d8.roa (hash: 99cY9onRLW//cQHI0vGgH4e5SQS2hb6TJu75LNYg/pg=) 11: _EQpfpJxxu3wZJFfYYCuEmkN2os.crl (hash: fsUY5j6Wo5H/zXumniZNVIgM4I925PNaxk8/z6hZsdk=) 12: bvGIb4I9tPNSFQAgMarPZLbQdco.roa (hash: z2ND/X4p7VMdJla0AX/t4QpyjiykeGek/GP7iei/AGM=) 13: qs1JWbE-8Qg_3DADHg82UZLRgLk.roa (hash: GwsKvXza8+FRqhHl7U0dNTsqvqx+AGXE1OTWkTaMtlE=) 14: tineMtUjOADbmljZnXO2AjKqXkc.roa (hash: 0BfJzskVZ3BO+kzng4r5uCUBjRTYeY/YcraQ9f9oslk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.crl rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.mft rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 01 Feb 2025 07:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:94:bb:29:1c:a3:ca:ec:27:75:9c:11:a0:4d:77:15:9a:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc44297e9271c6edf064915f6180ae12690dda8b Validity Not Before: Jan 31 07:00:21 2025 GMT Not After : Feb 1 07:00:21 2025 GMT Subject: CN=30b2d12acb375ec8d317c55e5c7e55a32b7b5929 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:1b:08:9e:af:e6:08:f1:f5:b2:0e:92:b1:8d: 4a:c4:66:13:2c:16:0d:a7:95:f9:e9:7f:92:31:22: 08:08:a9:a4:d2:dd:e7:b5:c0:bd:30:1c:da:d4:d9: 7c:04:10:96:89:1d:13:eb:71:80:3c:ed:7d:03:24: df:cf:27:af:de:ee:e0:67:23:67:1a:8f:91:78:8a: 69:df:1a:81:32:22:45:84:e5:e5:e6:0c:c6:00:c0: ff:fd:19:d7:31:6c:07:ee:11:ce:a1:25:4d:be:8c: 20:d1:97:6c:01:02:02:bf:93:2f:ed:69:55:27:b6: f2:1b:dd:8a:c1:80:74:0a:d5:86:b2:22:98:75:3d: b8:06:4d:df:39:ac:66:3e:e4:ad:c1:08:6a:25:13: 9a:6d:19:be:a6:f0:a2:df:b6:0f:9b:b5:22:f7:f5: a7:30:a8:7f:4d:95:7b:12:b4:a9:d9:0d:93:31:f4: 07:95:f4:9d:08:03:48:7e:93:f7:82:1f:98:6e:06: ba:5c:61:6d:06:7e:e9:bf:32:44:48:ec:88:34:61: 2c:c8:ff:6c:56:2c:b1:fb:1a:27:46:d3:29:3a:ab: 7f:3c:1b:80:af:7b:1d:fa:9f:8f:5c:84:ed:db:15: 43:83:10:7b:87:aa:b7:b9:1d:fd:45:0e:20:2c:5b: de:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:B2:D1:2A:CB:37:5E:C8:D3:17:C5:5E:5C:7E:55:A3:2B:7B:59:29 X509v3 Authority Key Identifier: keyid:FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:0a:4f:c6:e5:1c:54:43:aa:92:d8:f5:36:51:22:bc:1e:93: 1c:20:13:45:cc:0b:b7:6e:87:42:29:bb:5e:f4:74:7f:aa:fd: 54:03:af:82:97:b4:33:93:a7:61:04:67:ae:73:00:e6:c3:84: 49:cf:b3:40:b8:13:f8:33:87:92:e3:6f:01:3c:b1:33:05:d0: 50:30:2c:4e:74:81:35:0a:89:b4:6a:ae:c6:54:3a:9d:bc:72: 50:b2:44:b6:53:39:93:d9:38:4c:ca:5d:69:d4:ed:72:b6:81: 5b:58:9e:1e:a2:32:cd:c6:c8:64:8a:dc:8f:62:27:2f:28:e6: 00:bc:40:a2:ec:c8:72:9f:5a:10:0c:4a:b1:93:97:0d:86:9e: 37:fa:5f:05:47:e6:2b:10:63:c3:b6:bb:22:df:f9:65:27:a2: e4:b7:f7:12:3f:61:59:40:78:f8:ba:41:1d:ab:bb:3f:fc:dd: 6d:f8:0b:c8:9f:ff:df:e6:b2:4a:51:af:8a:78:53:e5:5b:11: f0:b2:b6:0e:52:51:49:e9:5b:a9:39:3b:46:f1:24:ac:6c:d5: 81:c4:40:e9:f7:57:23:a5:54:d5:b1:9a:c7:f1:8b:67:e6:fc: ad:00:4c:47:22:9b:2b:02:50:74:20:b2:6d:a9:5a:11:3b:c2: 39:c3:d0:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZS7KRyjyuwndZwRoE13FZoLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjNDQyOTdlOTI3MWM2ZWRmMDY0OTE1ZjYxODBhZTEyNjkw ZGRhOGIwHhcNMjUwMTMxMDcwMDIxWhcNMjUwMjAxMDcwMDIxWjAzMTEwLwYDVQQD EygzMGIyZDEyYWNiMzc1ZWM4ZDMxN2M1NWU1YzdlNTVhMzJiN2I1OTI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBsInq/mCPH1sg6SsY1KxGYTLBYN p5X56X+SMSIICKmk0t3ntcC9MBza1Nl8BBCWiR0T63GAPO19AyTfzyev3u7gZyNn Go+ReIpp3xqBMiJFhOXl5gzGAMD//RnXMWwH7hHOoSVNvowg0ZdsAQICv5Mv7WlV J7byG92KwYB0CtWGsiKYdT24Bk3fOaxmPuStwQhqJROabRm+pvCi37YPm7Ui9/Wn MKh/TZV7ErSp2Q2TMfQHlfSdCANIfpP3gh+Ybga6XGFtBn7pvzJESOyINGEsyP9s Viyx+xonRtMpOqt/PBuAr3sd+p+PXITt2xVDgxB7h6q3uR39RQ4gLFveOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDCy0SrLN17I0xfFXlx+VaMre1kpMB8GA1UdIwQY MBaAFPxEKX6Sccbt8GSRX2GArhJpDdqLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0VRcGZwSnh4dTN3WkpGZllZQ3VFbWtOMm9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi83Y2IxNzktYWQyYy00ODI0LWExZTUt YWUwN2YzMmU0MTAyLzEvX0VRcGZwSnh4dTN3WkpGZllZQ3VFbWtOMm9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi83Y2IxNzktYWQyYy00ODI0LWExZTUtYWUwN2YzMmU0MTAy LzEvX0VRcGZwSnh4dTN3WkpGZllZQ3VFbWtOMm9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMwpPxuUc VEOqktj1NlEivB6THCATRcwLt26HQim7XvR0f6r9VAOvgpe0M5OnYQRnrnMA5sOE Sc+zQLgT+DOHkuNvATyxMwXQUDAsTnSBNQqJtGquxlQ6nbxyULJEtlM5k9k4TMpd adTtcraBW1ieHqIyzcbIZIrcj2InLyjmALxAouzIcp9aEAxKsZOXDYaeN/pfBUfm KxBjw7a7It/5ZSei5Lf3Ej9hWUB4+LpBHau7P/zdbfgLyJ//3+aySlGvinhT5VsR 8LK2DlJRSelbqTk7RvEkrGzVgcRA6fdXI6VU1bGax/GLZ+b8rQBMRyKbKwJQdCCy balaETvCOcPQxw== -----END CERTIFICATE-----Generated at Fri Jan 31 15:34:23 2025 by rpki-client on console-fra.rpki-client.org