$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft File: LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft (raw, json) Hash identifier: 4lnCgv7RCcNbxpueT/UHoXwY2D+Os9JFjxq5AeAEG/E= Subject key identifier: A4:C6:24:59:12:98:48:19:9A:C3:0E:9D:FD:F0:67:86:4C:04:18:3F Authority key identifier: 2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51 Certificate issuer: /CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51 Certificate serial: 019638E481084EA513803FF0E5B5C4C8A807 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft Manifest number: 0D77 Signing time: Tue 15 Apr 2025 10:00:21 +0000 Manifest this update: Tue 15 Apr 2025 10:00:21 +0000 Manifest next update: Wed 16 Apr 2025 10:00:21 +0000 Files and hashes: 1: 10boupFvI1XULQNro2UN6lTac7g.roa (hash: TeSlzV5XfscAlltaInqH0+tXc9GXKbl3p81v+qesFug=) 2: 39NWCkxRJ14fZsy4fi4Dndunc3E.roa (hash: I60N/7b2uZcY0NbUe1SX8teSf0fVCyRemkra4xSsvf0=) 3: 3gaGUu98vgQ58MJvezo7k-ARASo.roa (hash: zKOcaqs6+UltL1w+RWoeOik9hgJIRqoSknm0oRsT/R8=) 4: 9SjejDTjZj0BtNF2Kp675mfLhag.roa (hash: RSM260xjwGf3+M4q8hzyY6CZ3UIIUis4qXJ8wDFcbHo=) 5: KUbX0VcDxa-Iyxzf4X9iZxn8Eig.roa (hash: bb9xUuRWwAY6FOOdBD4YOtWtJhp7uGNnKhs67QdqaKM=) 6: LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl (hash: vfH5sl8itAautcA4FOMp8GxvrMtltR2WDtEWaXeiBq0=) 7: UBsXmv4C5qffM7QM-9ND5QsfZfM.roa (hash: txrbSAO01vgCN97ZFCzVUVpn4VMkZhlbZmWHgF7E6VM=) 8: UMD_GrrBm5exfk4ne6BfKt3EdWg.roa (hash: r961vKQM2ic8nkYfC0teGF9Gu+iyVr4kAJkHxGV3f5E=) 9: Ug3t5QSKiSeV7OaH9F3UphE_NVs.roa (hash: VCeDrHYHr0n+emKVtRdKeoVIDZkLCFe4gRvZ/XqLmhk=) 10: ZHR6Evs2t_5MsAWITZbO0_S2MQc.roa (hash: TTSbz7ZJFR5Cfc5bWCmHmNZ+Klnd0Mt+hNshpgdxShs=) 11: g6eqrIfadHQCNvxrUPQ7Hredl8c.roa (hash: KzSePhZAtRu+meTZKCOYI8r/ad0eb15/dsNOD2iILt8=) 12: qnVXtf1TVi5GCQxQhYlNE39LANs.roa (hash: Vkby1xioM0TdE4rcN305dR5fIAGrIUI8/ZjjHRe70O4=) 13: sAlcT023Re1_motyjBVZccLuCgg.roa (hash: tja1+p7BrfZqb4rfBBKJcVOy+ZddkR/MXj/lAwerOJo=) 14: wC0sOJE7Wv-NDnjnHyFLfG4GZzQ.roa (hash: eBDWtuxEoge7xWpb5CncoOSy1UIXobW2890cjPYuR1s=) 15: zF2MV26QdQWRwXiicXiudK6n1Xw.roa (hash: 4aHxt6tPwu63K1PTNxL4On+nj5XwjJaZnAxdGrgtlxw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 16 Apr 2025 10:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:38:e4:81:08:4e:a5:13:80:3f:f0:e5:b5:c4:c8:a8:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51 Validity Not Before: Apr 15 10:00:21 2025 GMT Not After : Apr 16 10:00:21 2025 GMT Subject: CN=a4c62459129848199ac30e9dfdf067864c04183f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a8:0f:17:61:e5:d3:e1:29:48:2b:9f:50:a1: 02:49:ae:30:8d:60:08:bc:f9:95:e7:6e:22:7f:21: a6:ed:76:62:8a:92:61:b0:e0:e2:77:cf:0e:61:1b: 50:ad:c4:d4:9a:3c:f4:d8:60:92:42:ed:c2:76:89: 92:3d:89:70:ca:30:ff:fc:40:9c:d9:21:4e:83:0d: 7e:f2:98:c8:99:b2:85:46:8c:ff:f2:42:48:f3:36: b5:68:cc:b3:0c:a1:4c:1d:91:70:12:03:22:5e:1d: c8:79:de:71:eb:52:e0:c8:5e:91:f0:89:22:d7:ff: 5f:23:f3:1d:37:95:fb:2f:f5:81:4c:49:f9:04:14: 59:97:e6:78:51:5c:d9:c1:5b:9d:9f:8c:c1:31:f1: 10:20:a6:1a:a1:32:15:b0:df:8e:25:03:d0:6f:d0: 8f:f4:1a:e3:a1:4c:56:63:6c:7f:28:1d:da:b4:03: 6b:7b:78:89:f0:08:ad:65:f6:38:06:62:d5:c4:81: 48:55:c5:89:d9:66:91:20:65:c2:25:e9:25:4c:17: 10:12:7f:de:e0:9e:94:7b:75:90:13:50:a3:d1:53: 79:b5:0b:01:53:d5:79:7b:69:e3:6d:71:16:b0:f6: e6:8b:a6:99:30:07:99:b2:e4:99:b5:49:dd:4e:09: 8b:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:C6:24:59:12:98:48:19:9A:C3:0E:9D:FD:F0:67:86:4C:04:18:3F X509v3 Authority Key Identifier: keyid:2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:03:43:0c:4c:a2:cf:c1:e8:00:c9:bb:b4:01:99:3c:0b:b0: 67:be:21:52:f6:06:8c:ae:ba:7e:72:b7:fa:33:26:08:8c:f0: 42:98:fa:86:78:3e:d3:de:d5:05:1a:80:61:0e:63:c7:b4:a2: e0:a9:52:7a:81:79:7b:3b:ea:d5:9a:4d:d0:e9:13:17:8e:de: 8b:4c:9a:7e:7c:95:cc:2c:7e:d6:56:7d:35:15:d9:a4:d7:64: f2:80:12:c6:3d:6e:62:6e:ad:8a:87:40:84:b5:26:49:4b:79: 57:64:47:be:18:2e:2a:43:41:88:a7:93:64:ac:d1:12:9f:91: 84:02:ba:d4:32:52:0b:eb:f9:57:4d:89:0b:c2:7b:ba:62:e6: 7f:4d:bf:19:1a:6a:b7:75:91:52:a8:f6:5e:1e:63:05:fa:91: 12:3c:db:d5:96:4d:99:c2:2e:3c:bc:46:55:74:89:32:38:0b: c1:5d:62:02:0e:a3:65:05:f4:bd:d4:7c:e5:6a:0f:e7:7f:86: 3b:d0:94:a2:d6:f5:28:fc:0a:f6:c7:88:5b:7d:57:58:11:d6: 3b:cb:71:d3:37:91:dd:8f:53:01:7d:10:6e:f5:72:05:eb:f5: ff:4b:66:21:11:61:99:d1:6f:4a:33:b3:31:24:ce:79:87:dd: 0e:24:bb:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZY45IEITqUTgD/w5bXEyKgHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlODI5NjNmZjFhYTcwYWIxMGQxZDMzZTg2YjFkNmQ0OTRk NmNlNTEwHhcNMjUwNDE1MTAwMDIxWhcNMjUwNDE2MTAwMDIxWjAzMTEwLwYDVQQD EyhhNGM2MjQ1OTEyOTg0ODE5OWFjMzBlOWRmZGYwNjc4NjRjMDQxODNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6gPF2Hl0+EpSCufUKECSa4wjWAI vPmV524ifyGm7XZiipJhsODid88OYRtQrcTUmjz02GCSQu3CdomSPYlwyjD//ECc 2SFOgw1+8pjImbKFRoz/8kJI8za1aMyzDKFMHZFwEgMiXh3Ied5x61LgyF6R8Iki 1/9fI/MdN5X7L/WBTEn5BBRZl+Z4UVzZwVudn4zBMfEQIKYaoTIVsN+OJQPQb9CP 9BrjoUxWY2x/KB3atANre3iJ8AitZfY4BmLVxIFIVcWJ2WaRIGXCJeklTBcQEn/e 4J6Ue3WQE1Cj0VN5tQsBU9V5e2njbXEWsPbmi6aZMAeZsuSZtUndTgmL2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKTGJFkSmEgZmsMOnf3wZ4ZMBBg/MB8GA1UdIwQY MBaAFC6Clj/xqnCrENHTPoax1tSU1s5RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG9LV1BfR3FjS3NRMGRNLWhySFcxSlRXemxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi85NTdjNjgtNmYyNy00MGVkLWFiZWQt ZGY2NGYwZTgyMzYwLzEvTG9LV1BfR3FjS3NRMGRNLWhySFcxSlRXemxFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi85NTdjNjgtNmYyNy00MGVkLWFiZWQtZGY2NGYwZTgyMzYw LzEvTG9LV1BfR3FjS3NRMGRNLWhySFcxSlRXemxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdANDDEyi z8HoAMm7tAGZPAuwZ74hUvYGjK66fnK3+jMmCIzwQpj6hng+097VBRqAYQ5jx7Si 4KlSeoF5ezvq1ZpN0OkTF47ei0yafnyVzCx+1lZ9NRXZpNdk8oASxj1uYm6tiodA hLUmSUt5V2RHvhguKkNBiKeTZKzREp+RhAK61DJSC+v5V02JC8J7umLmf02/GRpq t3WRUqj2Xh5jBfqREjzb1ZZNmcIuPLxGVXSJMjgLwV1iAg6jZQX0vdR85WoP53+G O9CUotb1KPwK9seIW31XWBHWO8tx0zeR3Y9TAX0QbvVyBev1/0tmIRFhmdFvSjOz MSTOeYfdDiS7UA== -----END CERTIFICATE-----Generated at Tue Apr 15 21:03:49 2025 by rpki-client