$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft File: LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft (raw, json) Hash identifier: 1YQLcS5mO2ABo/pnctk5z0kZ00EGBKdnsttmirDjtQQ= Subject key identifier: 17:90:32:14:1D:03:11:9D:A2:87:D1:06:C2:A3:E6:41:C9:C8:B7:F9 Authority key identifier: 2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51 Certificate issuer: /CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51 Certificate serial: 01946EC59CC0B09E8518583B0DD2E7B2D858 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft Manifest number: 0C89 Signing time: Thu 16 Jan 2025 11:00:31 +0000 Manifest this update: Thu 16 Jan 2025 11:00:31 +0000 Manifest next update: Fri 17 Jan 2025 11:00:31 +0000 Files and hashes: 1: 10boupFvI1XULQNro2UN6lTac7g.roa (hash: TeSlzV5XfscAlltaInqH0+tXc9GXKbl3p81v+qesFug=) 2: 39NWCkxRJ14fZsy4fi4Dndunc3E.roa (hash: I60N/7b2uZcY0NbUe1SX8teSf0fVCyRemkra4xSsvf0=) 3: 3gaGUu98vgQ58MJvezo7k-ARASo.roa (hash: zKOcaqs6+UltL1w+RWoeOik9hgJIRqoSknm0oRsT/R8=) 4: KUbX0VcDxa-Iyxzf4X9iZxn8Eig.roa (hash: bb9xUuRWwAY6FOOdBD4YOtWtJhp7uGNnKhs67QdqaKM=) 5: LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl (hash: +kdSX3p2u4EStz+IxPA42ytJDywsjNIuGocV8B2JT8U=) 6: UBsXmv4C5qffM7QM-9ND5QsfZfM.roa (hash: txrbSAO01vgCN97ZFCzVUVpn4VMkZhlbZmWHgF7E6VM=) 7: UMD_GrrBm5exfk4ne6BfKt3EdWg.roa (hash: r961vKQM2ic8nkYfC0teGF9Gu+iyVr4kAJkHxGV3f5E=) 8: Ug3t5QSKiSeV7OaH9F3UphE_NVs.roa (hash: VCeDrHYHr0n+emKVtRdKeoVIDZkLCFe4gRvZ/XqLmhk=) 9: ZHR6Evs2t_5MsAWITZbO0_S2MQc.roa (hash: TTSbz7ZJFR5Cfc5bWCmHmNZ+Klnd0Mt+hNshpgdxShs=) 10: g6eqrIfadHQCNvxrUPQ7Hredl8c.roa (hash: KzSePhZAtRu+meTZKCOYI8r/ad0eb15/dsNOD2iILt8=) 11: qnVXtf1TVi5GCQxQhYlNE39LANs.roa (hash: Vkby1xioM0TdE4rcN305dR5fIAGrIUI8/ZjjHRe70O4=) 12: sAlcT023Re1_motyjBVZccLuCgg.roa (hash: tja1+p7BrfZqb4rfBBKJcVOy+ZddkR/MXj/lAwerOJo=) 13: wC0sOJE7Wv-NDnjnHyFLfG4GZzQ.roa (hash: eBDWtuxEoge7xWpb5CncoOSy1UIXobW2890cjPYuR1s=) 14: zF2MV26QdQWRwXiicXiudK6n1Xw.roa (hash: 4aHxt6tPwu63K1PTNxL4On+nj5XwjJaZnAxdGrgtlxw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Jan 2025 11:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:94:6e:c5:9c:c0:b0:9e:85:18:58:3b:0d:d2:e7:b2:d8:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51 Validity Not Before: Jan 16 11:00:31 2025 GMT Not After : Jan 17 11:00:31 2025 GMT Subject: CN=179032141d03119da287d106c2a3e641c9c8b7f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e0:59:fd:16:72:9b:cc:45:0f:b8:5e:6f:b2: e0:37:90:c2:03:23:5d:cc:db:a4:d3:3c:d0:51:91: b2:12:0d:d0:2a:b1:56:d3:1e:3a:8b:cd:50:6f:66: 30:c9:dd:76:be:37:23:69:59:eb:ce:f9:9d:d8:b8: 00:ad:12:e1:82:b2:51:e0:4f:a5:83:46:72:5a:fd: ab:ef:e7:a4:30:21:03:53:9b:eb:14:2f:04:c4:50: 66:7e:a2:48:50:9d:23:f9:d1:c6:fe:16:ef:be:ed: de:ac:80:06:4e:5e:5e:76:75:d8:dc:78:44:19:e2: bc:ec:14:a2:b4:81:62:4f:1b:d7:a8:79:be:08:f0: d3:11:57:84:c2:47:2b:6e:b4:e1:31:4a:46:18:a8: 2b:db:2a:47:52:18:3e:8e:37:53:cc:bc:0a:32:bd: 1d:04:24:4f:b2:b8:0e:c7:77:60:e0:7e:82:b9:2f: b3:6c:da:1f:5a:2b:e3:7a:10:2b:09:bf:46:7e:b0: 3c:42:24:ee:60:ae:02:ac:0b:c2:ce:3e:ee:bc:fc: 66:a4:c8:dd:45:b3:46:69:a6:f6:9c:ca:ff:7f:26: 54:af:f9:2b:51:78:62:c0:af:8a:2c:d8:c3:9e:3f: ac:ca:6a:c2:c6:db:a7:b6:30:46:34:a9:48:fa:e1: 6f:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:90:32:14:1D:03:11:9D:A2:87:D1:06:C2:A3:E6:41:C9:C8:B7:F9 X509v3 Authority Key Identifier: keyid:2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:78:f1:28:6a:06:e5:3f:8b:99:f8:e7:b3:07:12:2a:5a:5a: 5c:12:57:db:45:65:9e:7a:c9:78:1c:9e:f0:35:58:c1:ed:c9: eb:5e:d7:8d:e3:7a:2b:a9:07:56:a3:dd:40:7e:6f:1f:ef:ee: 20:3b:34:e6:cd:0b:4a:0c:2a:fc:db:d5:08:83:a1:20:cc:73: 47:59:38:14:56:70:31:0e:98:02:c9:19:ee:ac:80:a3:4f:e1: be:09:d8:83:6a:4d:ea:7b:79:0b:be:3d:36:16:06:0c:7b:f7: 29:05:b5:24:c0:4d:51:30:19:72:98:2e:b5:25:78:1d:e4:a5: 79:81:be:f8:8f:d1:1d:c4:ff:95:cc:e7:93:cf:59:1f:8a:64: 94:30:12:f7:de:24:06:3e:2e:8a:14:86:d5:ed:cf:7f:28:aa: bf:ba:a4:9d:c5:dd:fb:8a:80:d4:35:30:87:1c:3c:9c:2a:3e: 5e:83:30:62:8f:75:70:86:e3:30:0c:7f:7f:11:f1:53:db:c1: a6:26:7c:7a:55:06:db:96:71:f8:92:75:84:8b:cb:c0:fb:83: 30:44:4d:68:e8:a8:58:55:6d:38:b6:bf:98:f0:51:17:59:74: 90:31:4e:8e:f9:76:6b:db:c7:69:06:70:f9:7c:fa:39:57:e4: 20:63:85:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZRuxZzAsJ6FGFg7DdLnsthYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlODI5NjNmZjFhYTcwYWIxMGQxZDMzZTg2YjFkNmQ0OTRk NmNlNTEwHhcNMjUwMTE2MTEwMDMxWhcNMjUwMTE3MTEwMDMxWjAzMTEwLwYDVQQD EygxNzkwMzIxNDFkMDMxMTlkYTI4N2QxMDZjMmEzZTY0MWM5YzhiN2Y5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOBZ/RZym8xFD7heb7LgN5DCAyNd zNuk0zzQUZGyEg3QKrFW0x46i81Qb2Ywyd12vjcjaVnrzvmd2LgArRLhgrJR4E+l g0ZyWv2r7+ekMCEDU5vrFC8ExFBmfqJIUJ0j+dHG/hbvvu3erIAGTl5ednXY3HhE GeK87BSitIFiTxvXqHm+CPDTEVeEwkcrbrThMUpGGKgr2ypHUhg+jjdTzLwKMr0d BCRPsrgOx3dg4H6CuS+zbNofWivjehArCb9GfrA8QiTuYK4CrAvCzj7uvPxmpMjd RbNGaab2nMr/fyZUr/krUXhiwK+KLNjDnj+symrCxtuntjBGNKlI+uFvfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBeQMhQdAxGdoofRBsKj5kHJyLf5MB8GA1UdIwQY MBaAFC6Clj/xqnCrENHTPoax1tSU1s5RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG9LV1BfR3FjS3NRMGRNLWhySFcxSlRXemxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi85NTdjNjgtNmYyNy00MGVkLWFiZWQt ZGY2NGYwZTgyMzYwLzEvTG9LV1BfR3FjS3NRMGRNLWhySFcxSlRXemxFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi85NTdjNjgtNmYyNy00MGVkLWFiZWQtZGY2NGYwZTgyMzYw LzEvTG9LV1BfR3FjS3NRMGRNLWhySFcxSlRXemxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuXjxKGoG 5T+LmfjnswcSKlpaXBJX20VlnnrJeBye8DVYwe3J617XjeN6K6kHVqPdQH5vH+/u IDs05s0LSgwq/NvVCIOhIMxzR1k4FFZwMQ6YAskZ7qyAo0/hvgnYg2pN6nt5C749 NhYGDHv3KQW1JMBNUTAZcpgutSV4HeSleYG++I/RHcT/lcznk89ZH4pklDAS994k Bj4uihSG1e3Pfyiqv7qkncXd+4qA1DUwhxw8nCo+XoMwYo91cIbjMAx/fxHxU9vB piZ8elUG25Zx+JJ1hIvLwPuDMERNaOioWFVtOLa/mPBRF1l0kDFOjvl2a9vHaQZw +Xz6OVfkIGOFaA== -----END CERTIFICATE-----Generated at Thu Jan 16 18:06:35 2025 by rpki-client on console-fra.rpki-client.org