$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.mft File: 7xxmWwOGkrk7310djzzqPphpegM.mft (raw, json) Hash identifier: ubAAvkEGnpjtunEM0WjhXfhHzDwnLlebe2JnCo1NsyY= Subject key identifier: 1F:11:84:6B:54:6B:37:E8:41:65:8F:F1:DA:4C:6A:21:2E:10:6F:3C Authority key identifier: EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03 Certificate issuer: /CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03 Certificate serial: 0196594B4E08AA0DDC652EBC84B7D64DFF94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.mft Manifest number: 153D Signing time: Mon 21 Apr 2025 17:00:29 +0000 Manifest this update: Mon 21 Apr 2025 17:00:29 +0000 Manifest next update: Tue 22 Apr 2025 17:00:29 +0000 Files and hashes: 1: 2As0Mp8svkA_acr8TjpzRvXcyRw.roa (hash: x7SMSN6/Nb1zQXVVEV5INFQjFMZ3I+mES8tTWRbKxME=) 2: 5CikPgAp5jK6pSp3Js9BBzIPLTs.roa (hash: 3KlXSk2A55yorEOG87Fyp/oyUbDybm4fyMBJebbovv0=) 3: 6cgyQw3c6pwtU4O5qiL8so1iLO0.roa (hash: RrJ/CIW7j+YCVbEs17TVrQYeU0kZt0hrM4cIT1zfgiE=) 4: 74UxeEZGGUp4hcEj6IOpMbtbMQY.roa (hash: ptmjV2tZkQpAgK/kc2iedynulu5N2vpF6ojZ4cIXBag=) 5: 7ZDYTKvAvTNv12GuIpMzhz94tXM.roa (hash: 9lUGbHgSaTzoBqrtOfwYxrD4Ctnrj/4XCW9Dfv6cVfg=) 6: 7xxmWwOGkrk7310djzzqPphpegM.crl (hash: hNlCXeHujS4jRCHEBArCKSKsnXwssLedKoAWFD2g2/s=) 7: GojN_v9AmfIlDGJ-pJiiWvRB3t4.roa (hash: gyhGTfbQ/CUnY8OiIN0VNwGVdkmIAUvZzNOgZEIdotE=) 8: Q0G9s41BFpS1cMxCZoIHJk-pW6Q.roa (hash: FvO5ikNQfN+oNfsreOeiUDXZg/1ZawIRE/udyXEqBRw=) 9: VevE1Qkku5OCuflEElcF548SkKs.roa (hash: OO4osqCuMqLt/NPspapEtGPa5x8FCuxawiZlsDGiwlo=) 10: f6xp71AmSGD06YY2IrJqZ9soec4.roa (hash: P2ngCAMEJOf4Ce1vVcWfg+Kihos97gOGnSUxltJgsDU=) 11: i0UtjKhThBAIzRT1eJL3hD2Ywmk.roa (hash: BKlQ/77pz1u1TCDlrGybeS13ax7xeZWbK2z+UAz10UA=) 12: wtHvUUEBKpecU95cJCBjwBXIyFM.roa (hash: mNNvoDTEhZQOBLemoApsWk3Gy3NbhXq1e0BNHY0+0p4=) 13: xAMpMh4nbO4LyB6Qja6DFe_88jA.roa (hash: ue80NNFiLfpsrkKjl+M4mLElo07egwD3NcN+sAuZBTc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.mft rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Apr 2025 10:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:59:4b:4e:08:aa:0d:dc:65:2e:bc:84:b7:d6:4d:ff:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03 Validity Not Before: Apr 21 17:00:29 2025 GMT Not After : Apr 22 17:00:29 2025 GMT Subject: CN=1f11846b546b37e841658ff1da4c6a212e106f3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b5:96:75:87:21:ed:57:6a:1b:51:dd:5a:2b: 02:45:42:25:8b:95:93:27:90:34:0c:7c:e4:08:8b: b9:18:b8:d7:d2:b5:ac:c2:6c:5e:55:a0:4a:3e:9c: 9b:d6:e9:80:40:ad:a5:5c:ee:b9:7f:3f:c8:91:4c: a5:73:68:11:dd:fc:90:e9:86:a1:43:10:e7:38:4f: 7a:7d:46:4e:cd:26:01:34:00:9c:2a:f8:83:26:1c: 8d:b8:a4:24:f8:a8:f6:a6:c5:87:9c:a6:7f:98:bd: 5d:23:47:07:1a:d3:a2:9b:01:ee:2b:7b:83:ea:71: 9d:17:b1:3b:f8:40:78:61:40:1d:a6:22:b4:1d:35: e8:5a:29:96:6c:33:1f:b0:eb:e8:8a:f9:2a:e5:cc: e2:90:7b:bd:12:80:43:fb:4c:13:e7:5e:58:b1:ca: 74:b6:42:94:3a:27:5a:2a:5b:d2:f0:83:0e:4d:e4: 2a:e5:02:65:8c:69:7d:0e:b6:51:00:bc:49:7e:ee: 8c:91:bb:b4:53:a0:1f:f5:dd:b8:dd:51:70:cc:ed: c7:ef:c2:d0:23:4c:f1:d7:56:d6:1a:f7:5e:c3:42: 76:5d:82:de:e1:37:1d:6b:cb:cb:84:f3:de:f2:14: 89:8c:b7:4b:5b:e8:34:f3:6c:38:77:1e:45:f7:9d: da:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:11:84:6B:54:6B:37:E8:41:65:8F:F1:DA:4C:6A:21:2E:10:6F:3C X509v3 Authority Key Identifier: keyid:EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:4d:e0:58:69:27:d9:e0:bd:ef:27:98:31:6f:71:81:0d:a5: c6:5c:ab:83:56:87:d3:48:84:8d:1a:7b:a3:0a:75:4f:4c:01: 85:a8:c6:ea:85:0a:87:f7:54:d3:67:a1:ae:a0:54:2a:c8:72: f2:68:dd:1f:b4:b4:17:7f:16:af:ca:90:8e:91:d0:ef:cc:ec: 47:32:35:7f:ba:bd:0b:ee:3a:d0:c7:a3:df:cf:27:98:08:f4: b6:89:47:74:80:db:3d:7e:e3:1e:0e:19:66:e8:98:a2:84:06: b6:f0:12:2b:1e:c3:1a:6d:02:65:56:8f:e0:7e:7a:f1:50:81: f8:0f:dc:79:82:88:07:de:c8:7b:ef:10:71:91:05:a5:aa:ac: b0:e2:69:d4:d6:67:a0:d9:ab:a2:14:25:08:a4:6a:3e:0e:fd: 92:6a:93:a9:af:76:df:9c:41:86:17:08:d8:83:87:ef:28:69: 63:76:cf:c3:e1:d6:d7:be:c8:e4:ec:85:01:6b:7a:df:75:b8: 77:d8:83:da:00:c3:09:b5:2e:2a:0d:bc:87:c4:73:d4:a8:66: 09:87:ee:46:ae:c4:1c:de:41:08:36:ef:c4:7a:44:71:d0:85: a1:42:50:4f:0f:b6:92:c2:50:6f:a7:41:72:66:4d:ac:9a:4d: fe:43:4c:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZZS04Iqg3cZS68hLfWTf+UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmMWM2NjViMDM4NjkyYjkzYmRmNWQxZDhmM2NlYTNlOTg2 OTdhMDMwHhcNMjUwNDIxMTcwMDI5WhcNMjUwNDIyMTcwMDI5WjAzMTEwLwYDVQQD EygxZjExODQ2YjU0NmIzN2U4NDE2NThmZjFkYTRjNmEyMTJlMTA2ZjNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrWWdYch7VdqG1HdWisCRUIli5WT J5A0DHzkCIu5GLjX0rWswmxeVaBKPpyb1umAQK2lXO65fz/IkUylc2gR3fyQ6Yah QxDnOE96fUZOzSYBNACcKviDJhyNuKQk+Kj2psWHnKZ/mL1dI0cHGtOimwHuK3uD 6nGdF7E7+EB4YUAdpiK0HTXoWimWbDMfsOvoivkq5czikHu9EoBD+0wT515Yscp0 tkKUOidaKlvS8IMOTeQq5QJljGl9DrZRALxJfu6Mkbu0U6Af9d243VFwzO3H78LQ I0zx11bWGvdew0J2XYLe4Tcda8vLhPPe8hSJjLdLW+g082w4dx5F953a9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB8RhGtUazfoQWWP8dpMaiEuEG88MB8GA1UdIwQY MBaAFO8cZlsDhpK5O99dHY886j6YaXoDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3h4bVd3T0drcms3MzEwZGp6enFQcGhwZWdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC8yOTI1YTMtODcxYi00Njc2LWFlMTAt Njg4ZDMzM2VkOWQ1LzEvN3h4bVd3T0drcms3MzEwZGp6enFQcGhwZWdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC8yOTI1YTMtODcxYi00Njc2LWFlMTAtNjg4ZDMzM2VkOWQ1 LzEvN3h4bVd3T0drcms3MzEwZGp6enFQcGhwZWdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeU3gWGkn 2eC97yeYMW9xgQ2lxlyrg1aH00iEjRp7owp1T0wBhajG6oUKh/dU02ehrqBUKshy 8mjdH7S0F38Wr8qQjpHQ78zsRzI1f7q9C+460Mej388nmAj0tolHdIDbPX7jHg4Z ZuiYooQGtvASKx7DGm0CZVaP4H568VCB+A/ceYKIB97Ie+8QcZEFpaqssOJp1NZn oNmrohQlCKRqPg79kmqTqa9235xBhhcI2IOH7yhpY3bPw+HW177I5OyFAWt633W4 d9iD2gDDCbUuKg28h8Rz1KhmCYfuRq7EHN5BCDbvxHpEcdCFoUJQTw+2ksJQb6dB cmZNrJpN/kNMgA== -----END CERTIFICATE-----Generated at Mon Apr 21 20:09:35 2025 by rpki-client