$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft File: DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft (raw, json) Hash identifier: HFZr1tZILGq8zqdb891GkJMAMZtEYtFKLzpTwv4Q9zw= Subject key identifier: 2A:CB:A7:C5:87:48:DC:FA:1F:DE:59:B6:6B:62:C8:5E:10:73:86:A3 Authority key identifier: 0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44 Certificate issuer: /CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444 Certificate serial: 0194BAF24C6F467F4D00FEBBAEBBA44ACC18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft Manifest number: 1238 Signing time: Fri 31 Jan 2025 06:00:28 +0000 Manifest this update: Fri 31 Jan 2025 06:00:28 +0000 Manifest next update: Sat 01 Feb 2025 06:00:28 +0000 Files and hashes: 1: 0hFTuA6AYFpULfZQK-DJnDN4HTE.roa (hash: ZWH8sUTXV7vc3XiT9tGW1AKcmChi4TaSnZLt2D9dIPY=) 2: 4pZKRfe5fiQn8NCnSgtBMxH4nA0.roa (hash: /bv/y4DWJzT7cXKu9PqjPnO5JeXnj7ypys8X05kZhms=) 3: 5w999aY5B-VWAa6ftaNr618pG0E.roa (hash: 8wN96xy8ODTe8QO5TfcB2rXR54h3xrngHGhngMKpn4Q=) 4: Dc4gxTOpB2FpuZTR-rgoOnXmf3U.roa (hash: ozAE7o2JiE/g27iwAqeKkWRtVrj/KXMn+s+oxwq9l6U=) 5: DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl (hash: qsVA4UrxGupx7vP0tEvQCfu57JvahofbkFTjQ3ZHMNE=) 6: G-4MkLr94NS2-9Ku0UWb3AXttl4.roa (hash: MJLnkHzwVcSrOTlOpvURHWaKDFPtD/OsJDcwH0W+j0Q=) 7: GvjwQJC9DdP7_qbPkN-koM22ONc.roa (hash: V1Pprk+ac1UgNd3D2gH6NUqG9FbJK9dkkFlOqw7KkJ0=) 8: ObT--BjZ0RTC9v8KUfNAXJErkK4.roa (hash: PUggAjXL6p26e7O1E2dQJLLZhDJNB05tG3qARPuO6Zs=) 9: R-yr__D8H7MP9PScPKEilF73LO0.roa (hash: nvt4z74nDeI7TVi+pk9xj2FnIVd/rCnmLiaN7owjvJE=) 10: Yz2WA4YrokT5MNylkkePaMrbf2o.roa (hash: ziXl9mNJzbObSVi2cK+BC9zmxuWzXdJmKO6shLQNMdA=) 11: _mbTkWs_huXNRXoAZz6RgcHa1ac.roa (hash: Gtnl2zq6+nya1Z5zQfHNFtNMNJ5L0SVArl4/D3Vch3Q=) 12: aVCML_0qfO6OM-B-v0Xw0SaCLis.roa (hash: gzLeZf6vO+ZM/QBYI1anl4lUtsGtfB7flnqVi3ieG9w=) 13: decwyQByL9jlEF-fUB7pfHoFmgQ.roa (hash: 5O1HhNbTc555c6OiBZaMXaTg/2tAkc4lpEKBesV7WOU=) 14: eBLjgP6QOLHPEHfrPD5twygIeZU.roa (hash: JBGkxKIicuoXximDsbTGL6FHqL8hJgTiNa9S88568yo=) 15: f9ZO97gOWJUut8XaLFuUGxsZrIY.roa (hash: 6tq23TLuISKAQugLOcVCTXKPxD4H8WtHoGjZUKQXbNY=) 16: k6cDiCt-ewxpqeRmfJzrjmZcNYs.roa (hash: F25einM6r2JI8uo+fB3CIsLXrVN1axCT87o7iIgCFmA=) 17: zzJiEA9OQiotmK-6chwppb9bfAg.roa (hash: phH+Eq45ta+fXEQo1+NZ8G1rEF6YkHPFggEaaMcPisI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 01 Feb 2025 06:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:94:ba:f2:4c:6f:46:7f:4d:00:fe:bb:ae:bb:a4:4a:cc:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444 Validity Not Before: Jan 31 06:00:28 2025 GMT Not After : Feb 1 06:00:28 2025 GMT Subject: CN=2acba7c58748dcfa1fde59b66b62c85e107386a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:17:fe:9b:ff:74:da:2e:a8:8e:ee:60:97:7c: 65:d3:6e:60:bd:b4:d1:e8:34:b8:cf:51:2d:98:ea: 8e:be:6a:70:5c:e6:8c:0b:48:8b:cd:fe:d9:65:2e: 8f:95:e3:37:cd:b0:e1:55:0d:82:29:b8:5f:81:aa: 0d:6d:dc:45:fe:d5:b5:b0:07:ea:a7:c0:fa:8a:3d: 93:04:51:d7:0b:43:4e:da:e2:fe:0d:9b:21:26:9d: 14:e4:a2:3c:08:9e:1a:de:d9:6a:99:ee:d5:9a:97: 40:21:15:8f:18:22:97:cc:14:dd:e1:f4:3e:ab:73: 81:2f:4e:62:89:1a:6a:f0:08:41:03:df:59:ce:38: a0:bb:f5:20:37:e1:e9:04:f9:5d:95:d5:ed:75:cf: 28:8f:5b:15:28:1f:c8:ec:02:70:cd:39:d4:20:9c: 55:08:94:ad:c0:22:6d:ef:42:0a:a6:77:9a:64:46: 32:50:da:d5:7a:76:34:e1:86:0d:24:87:db:71:2f: 1f:37:d1:87:87:50:c2:cd:31:ea:22:0e:af:c9:2d: 2b:3a:60:89:58:0c:8a:1a:f5:de:7f:06:60:fa:ea: 18:0c:8e:fd:80:c1:6b:d9:40:1d:71:c6:de:99:36: 5b:ea:57:07:5d:e7:db:dd:67:30:c7:1f:a0:29:40: 13:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:CB:A7:C5:87:48:DC:FA:1F:DE:59:B6:6B:62:C8:5E:10:73:86:A3 X509v3 Authority Key Identifier: keyid:0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:5c:6c:d4:ea:77:f5:8c:a5:96:bf:3a:3c:0f:24:85:27:96: ab:cc:ac:a5:6c:90:35:b7:d0:35:2b:37:77:da:1e:0a:c5:a2: 9e:4c:d5:68:80:1e:d8:37:64:f4:70:74:ae:44:d6:98:32:65: f3:ac:3f:f5:5b:f1:38:88:86:59:01:34:87:83:0e:60:ee:9b: 8e:8e:7c:5a:18:0a:cb:53:6f:f5:d7:51:81:ac:bf:7b:2f:e8: 34:4c:ae:18:e5:65:70:b4:cc:67:db:c2:68:45:0f:cd:69:72: aa:ee:03:23:d3:27:64:0e:63:4d:b2:b5:83:02:86:89:f5:df: 8d:6b:73:60:d6:17:c7:1c:45:6f:3a:f4:87:08:5a:06:c1:da: 04:b9:f8:92:ee:15:04:e8:50:d2:b2:8f:92:c3:ef:8c:ef:2c: c3:32:43:4c:3a:40:00:8e:cf:bb:2d:48:b4:3d:a1:70:df:eb: 56:25:66:38:94:02:a1:7c:f1:da:39:c6:76:ea:26:9e:eb:db: ac:38:56:ba:0e:fd:9b:69:d9:bf:77:5e:9d:e2:60:16:8a:d0: 7a:e5:43:97:96:6e:c0:58:5e:a1:30:7f:d2:74:bc:d0:09:e7: 42:bd:e7:ae:46:4a:52:32:a8:6b:f4:72:f3:f4:b1:bf:b8:1a: af:fd:6b:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZS68kxvRn9NAP67rrukSswYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlZjVjYjJmNTkwZDA0MTY1NGY0ZGZkYjYwYTI4ZjlhMTU0 NGY0NDQwHhcNMjUwMTMxMDYwMDI4WhcNMjUwMjAxMDYwMDI4WjAzMTEwLwYDVQQD EygyYWNiYTdjNTg3NDhkY2ZhMWZkZTU5YjY2YjYyYzg1ZTEwNzM4NmEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBf+m/902i6oju5gl3xl025gvbTR 6DS4z1EtmOqOvmpwXOaMC0iLzf7ZZS6PleM3zbDhVQ2CKbhfgaoNbdxF/tW1sAfq p8D6ij2TBFHXC0NO2uL+DZshJp0U5KI8CJ4a3tlqme7VmpdAIRWPGCKXzBTd4fQ+ q3OBL05iiRpq8AhBA99Zzjigu/UgN+HpBPldldXtdc8oj1sVKB/I7AJwzTnUIJxV CJStwCJt70IKpneaZEYyUNrVenY04YYNJIfbcS8fN9GHh1DCzTHqIg6vyS0rOmCJ WAyKGvXefwZg+uoYDI79gMFr2UAdccbemTZb6lcHXefb3Wcwxx+gKUAT8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCrLp8WHSNz6H95ZtmtiyF4Qc4ajMB8GA1UdIwQY MBaAFA71yy9ZDQQWVPTf22Cij5oVRPREMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHZYTEwxa05CQlpVOU5fYllLS1BtaFZFOUVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8yMjZmMDQtZjdkYi00OTFhLWJhZmIt ZWU0MzVkM2NkNTg1LzEvRHZYTEwxa05CQlpVOU5fYllLS1BtaFZFOUVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny8yMjZmMDQtZjdkYi00OTFhLWJhZmItZWU0MzVkM2NkNTg1 LzEvRHZYTEwxa05CQlpVOU5fYllLS1BtaFZFOUVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU1xs1Op3 9Yyllr86PA8khSeWq8yspWyQNbfQNSs3d9oeCsWinkzVaIAe2Ddk9HB0rkTWmDJl 86w/9VvxOIiGWQE0h4MOYO6bjo58WhgKy1Nv9ddRgay/ey/oNEyuGOVlcLTMZ9vC aEUPzWlyqu4DI9MnZA5jTbK1gwKGifXfjWtzYNYXxxxFbzr0hwhaBsHaBLn4ku4V BOhQ0rKPksPvjO8swzJDTDpAAI7Puy1ItD2hcN/rViVmOJQCoXzx2jnGduomnuvb rDhWug79m2nZv3deneJgForQeuVDl5ZuwFheoTB/0nS80AnnQr3nrkZKUjKoa/Ry 8/Sxv7gar/1rew== -----END CERTIFICATE-----Generated at Fri Jan 31 15:35:41 2025 by rpki-client on console-fra.rpki-client.org