$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.mft File: Nxi3NDSb8yfZRTuWUB5EsZLlUUI.mft (raw, json) Hash identifier: hNk4m11SRhIa4AXSUILbY1BG3X+Qzrpl9AGAymgOK1I= Subject key identifier: 0F:FD:1E:D6:6D:AB:55:9B:E6:D3:26:A2:82:F1:E8:53:62:A0:50:58 Authority key identifier: 37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42 Certificate issuer: /CN=3718b734349bf327d9453b96501e44b192e55142 Certificate serial: 0194BAF20E942305121C6E33714370D081B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.mft Manifest number: 1459 Signing time: Fri 31 Jan 2025 06:00:13 +0000 Manifest this update: Fri 31 Jan 2025 06:00:13 +0000 Manifest next update: Sat 01 Feb 2025 06:00:13 +0000 Files and hashes: 1: 2pr-_P6iDqjAxA7czCmuypqm4EU.roa (hash: ej7V7a6TRJZtAHiPijn6nzDCvVHx84y+/K94PPrq0S8=) 2: 6Wce0HwyXHqQ5XvowobWiCGASj8.roa (hash: JFU8RjnJrDHjFA6pQUpW2/JnNtPldCW7iPpp3L9hrfw=) 3: 7ew9vmcgcgJuvHxbbgCDhgBggzg.roa (hash: u0wbp7PqNlKFQlgee1VKfFdKJWs/LztnZMwBMRcyX9U=) 4: GgUE_XL4Sq39Xxf8zIW_JumJGGM.roa (hash: XcS1ZuCgKYC4lujI/f/yKgFd5if0KehDM2OJ7bBb2dY=) 5: Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl (hash: 2K2aBrG5Kg4JOS4kJfSykZxNBVdw4gBA7M2Piy+VdH8=) 6: aK0dA5MmIygJO16Exk-PLk4gois.roa (hash: QqX6uV81cNM3T3ekrr/KNlMQckc8rHHyDWJgqO9m2ls=) 7: cM_tRkIVV-yV7xbBDk0jpANibHU.roa (hash: xH3UvGA+cwpvKtSHxMEbc6CFPMgBoyUHriV0CyZHYkI=) 8: eNIzChavkXrXhBcx5KhFIa_03No.roa (hash: al6RTv9L5NiUuPwMYnEc4gdzs2XQ2y9lN+MHqth5CUY=) 9: hR0aklM0mAN8fo2NAWbCBlNhjOM.roa (hash: Jbshxm1j4VBKQqIgJntd8GSTZvPjna3+FUThPxwp0+w=) 10: mYHZwdczViyYoXBOpOzeD_D0ItI.roa (hash: XzRlhEXAU8XyuAh5UY5SOWlFLWNphDHJg45+8nGpaYw=) 11: nacXLj4ipPsV_k1jJoeGgdJJTR0.roa (hash: qiJywz77O2QkWdA3UBlJhojznuqFAOGHI3p6mqFybe0=) 12: xKARJqa_okDPNZYsEYbBqhi6oaQ.roa (hash: 55gOZL5S3KKSH+1WYi46u5J13NnuzjyEmj8BjI7hTlI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.mft rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 01 Feb 2025 06:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:94:ba:f2:0e:94:23:05:12:1c:6e:33:71:43:70:d0:81:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3718b734349bf327d9453b96501e44b192e55142 Validity Not Before: Jan 31 06:00:13 2025 GMT Not After : Feb 1 06:00:13 2025 GMT Subject: CN=0ffd1ed66dab559be6d326a282f1e85362a05058 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:2a:06:8c:c7:4b:51:f6:0f:a8:dc:58:66:62: 21:c8:57:35:2f:5f:48:39:1b:44:71:3c:59:72:87: 68:97:27:8d:2d:8d:3c:a7:c5:46:cd:89:f7:db:f3: 2b:c4:58:c5:d1:0f:96:82:fb:5e:80:a5:6d:38:87: bd:93:d1:c4:08:1f:de:6b:20:d5:05:f3:1a:ed:1a: 8e:b1:10:0f:61:36:ab:48:1e:ad:97:2d:3b:a6:aa: 34:64:75:ae:95:71:31:64:62:ec:ef:d5:e4:4f:18: f7:cf:24:c4:90:ed:37:a6:98:ba:1c:f9:db:2a:f8: da:d3:69:8b:8a:b2:ca:48:09:5f:7f:8a:bd:c8:aa: 1b:b1:b6:5e:7d:2d:e2:37:50:e1:0e:3f:0c:ee:16: a7:57:02:ca:c4:b8:14:b0:09:1d:b4:bb:bc:d4:d5: d2:d8:07:56:89:30:0a:be:d9:76:11:1e:5a:9e:27: 1c:ce:51:58:50:4b:cf:a9:70:18:40:72:82:f0:1b: e4:57:82:18:d4:87:17:ba:33:75:48:91:b8:ba:33: f9:9f:24:dd:d8:68:2d:7f:c9:fe:50:46:bc:f3:bf: dc:e6:c6:46:4a:34:b0:ba:1d:db:1d:a8:54:e6:0b: 5a:97:dd:e5:ea:f0:14:1d:e3:08:02:e9:58:46:f7: 8b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:FD:1E:D6:6D:AB:55:9B:E6:D3:26:A2:82:F1:E8:53:62:A0:50:58 X509v3 Authority Key Identifier: keyid:37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:95:f9:e1:cf:ba:97:e6:1a:da:a4:5f:06:9e:17:60:0f:b5: 25:01:90:00:02:45:eb:5e:40:78:64:0c:39:78:ed:b2:1d:ca: 37:5e:b2:1e:2c:d8:90:d5:bc:12:c3:15:d9:84:df:fb:8b:a0: 65:79:73:76:81:6e:97:88:e2:0c:c5:41:bb:0a:ea:e0:23:e3: c1:78:50:12:74:55:84:ed:75:1d:44:6d:62:86:d1:06:78:06: 08:64:03:9b:17:09:66:c7:7e:14:f1:07:a1:94:67:a5:29:3f: 2c:8e:16:2a:a4:32:d0:25:d9:e2:e4:e2:58:ee:58:b5:9c:5f: a2:d9:27:d2:6e:5e:9b:b6:bf:4b:b0:3b:82:6c:62:4e:ca:0e: 35:c0:ce:a0:d6:c8:92:be:0a:cc:d1:c4:de:61:57:f5:ec:88: c8:d9:8e:b6:8c:5c:99:84:49:1f:00:f3:76:81:eb:78:f0:41: bf:75:bf:26:af:63:03:36:ca:24:6f:7f:87:30:5c:cb:4d:48: d7:97:24:cd:ff:8c:7b:42:2b:80:f6:61:ed:47:ff:05:71:05: 2e:e9:47:a6:ea:36:de:34:8b:2c:6f:54:f0:ef:75:bf:0d:6b: 42:55:88:1d:fb:33:19:37:d2:c6:2c:d0:d1:77:61:2a:51:d4: 6d:15:d1:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZS68g6UIwUSHG4zcUNw0IGwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3MThiNzM0MzQ5YmYzMjdkOTQ1M2I5NjUwMWU0NGIxOTJl NTUxNDIwHhcNMjUwMTMxMDYwMDEzWhcNMjUwMjAxMDYwMDEzWjAzMTEwLwYDVQQD EygwZmZkMWVkNjZkYWI1NTliZTZkMzI2YTI4MmYxZTg1MzYyYTA1MDU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqioGjMdLUfYPqNxYZmIhyFc1L19I ORtEcTxZcodolyeNLY08p8VGzYn32/MrxFjF0Q+WgvtegKVtOIe9k9HECB/eayDV BfMa7RqOsRAPYTarSB6tly07pqo0ZHWulXExZGLs79XkTxj3zyTEkO03ppi6HPnb Kvja02mLirLKSAlff4q9yKobsbZefS3iN1DhDj8M7hanVwLKxLgUsAkdtLu81NXS 2AdWiTAKvtl2ER5anicczlFYUEvPqXAYQHKC8BvkV4IY1IcXujN1SJG4ujP5nyTd 2Ggtf8n+UEa887/c5sZGSjSwuh3bHahU5gtal93l6vAUHeMIAulYRveLVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA/9HtZtq1Wb5tMmooLx6FNioFBYMB8GA1UdIwQY MBaAFDcYtzQ0m/Mn2UU7llAeRLGS5VFCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnhpM05EU2I4eWZaUlR1V1VCNUVzWkxsVVVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My83YmY4YTgtZTQ5Yy00MDZlLThlYjct YzgyM2NjOGYzODM3LzEvTnhpM05EU2I4eWZaUlR1V1VCNUVzWkxsVVVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My83YmY4YTgtZTQ5Yy00MDZlLThlYjctYzgyM2NjOGYzODM3 LzEvTnhpM05EU2I4eWZaUlR1V1VCNUVzWkxsVVVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcJX54c+6 l+Ya2qRfBp4XYA+1JQGQAAJF615AeGQMOXjtsh3KN16yHizYkNW8EsMV2YTf+4ug ZXlzdoFul4jiDMVBuwrq4CPjwXhQEnRVhO11HURtYobRBngGCGQDmxcJZsd+FPEH oZRnpSk/LI4WKqQy0CXZ4uTiWO5YtZxfotkn0m5em7a/S7A7gmxiTsoONcDOoNbI kr4KzNHE3mFX9eyIyNmOtoxcmYRJHwDzdoHrePBBv3W/Jq9jAzbKJG9/hzBcy01I 15ckzf+Me0IrgPZh7Uf/BXEFLulHpuo23jSLLG9U8O91vw1rQlWIHfszGTfSxizQ 0XdhKlHUbRXR1g== -----END CERTIFICATE-----Generated at Fri Jan 31 15:34:37 2025 by rpki-client on console-fra.rpki-client.org