$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft File: KWi04O-BBvDhKrjlAdKqTja3g8I.mft (raw, json) Hash identifier: WncMqWS97wRV3bj0MXX3Yq5EtUTpzJakbGpRNqs4rxk= Subject key identifier: 0D:D1:69:25:DD:E5:D9:9E:F0:BF:B7:F3:D0:09:64:64:FF:B8:A5:21 Authority key identifier: 29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2 Certificate issuer: /CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2 Certificate serial: 019351D0CBABC522DA2178B5250B1039BAC4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft Manifest number: 0121 Signing time: Fri 22 Nov 2024 03:00:58 +0000 Manifest this update: Fri 22 Nov 2024 03:00:58 +0000 Manifest next update: Sat 23 Nov 2024 03:00:58 +0000 Files and hashes: 1: 4wj9rcW9HrKYfO--LYyJBmCwQ9g.roa (hash: dKDvnTU3RxhAM+tu5r5kKKz/v7cH6yhqWbEVrtix5Rg=) 2: 81pRjzjqWPfSyBvYA2FIDC2rNl4.roa (hash: BrYgBVkHPVw2Ac71SKbeWUlks4U3ZtQaE6nxQsbCg8A=) 3: AO58Qo86FCKIWISOB9O6GjKv8OA.roa (hash: o+7BJvXgd4CttZ9Dnd4aAdvSGAALC353sDNqCMSmWMc=) 4: F74VmGI1SDZQJwmErXxtv-XUBgM.roa (hash: h3s4lxTJlvrsNbADa0TaLHziyDa5KHW7kxljgfsKwpw=) 5: FebS1h220mdyqTabQEyHTQqPBQA.roa (hash: nmNk1qLxckoBfqZaZzrzORUpQIgvU/gQzpmo/Xe5Tg8=) 6: Gwa-b_ALei9w6IV__E0Ow7D1qes.roa (hash: cs3cfqYgmSaxglP2VyiB6dI0K0bVX7zES2kBSXqIcZw=) 7: IDOkVqrsMsjV5SiYmRY5frxrOB4.roa (hash: BCwWP2Q3I+Y2o/vh9LYgw+9s0+jAd56GHkbNekx6JWE=) 8: KWi04O-BBvDhKrjlAdKqTja3g8I.crl (hash: 4RKuSnkT/TOxVzGxG6tAdU7Gma9clLP0OeaH0RD5GPc=) 9: Kpx0QIRiTHluia0woaGZ5dIQxuA.roa (hash: D1z/hj/HUjDpHsI8e0GXAWC/AKBHZxEdZGhu9NgZSS4=) 10: Ku6XMsqQA_kFDYVqVjxChxYSBZY.roa (hash: pXnRlmxITNF3VidUei1MBouSPcglkUZKCh+HofZVUX4=) 11: RA5adPABboCfrlrGho0ndFmt5yQ.roa (hash: feuYGBFmNsrW/jztovMN+GhsTVgNzf4OUHytHEj9TlA=) 12: T2Brql0Yt4MLEwd6xrs_MtwUops.roa (hash: GVu7glPuwGzBSQa/9uShXAaz1o9DgmeZyp8FEo9hDEA=) 13: T4YzafknjHTPZzU7s4BVsNys3XU.roa (hash: BGrkygNCZyAT4QOKIBGlUYXmOi1v49gGfW85bgZTYS0=) 14: TbZRM3h4AsMjWvHak2KrmhLVQCU.roa (hash: jIYARf85azSdSt3z2i3QmxNxs7i1RGU9J9OCGWG96JA=) 15: WCYB5ZjQPGwowaoJ06MZFi0XtPE.roa (hash: JLVgefvD6m/xi9Px1GxKDSJNk6p918nr8nA8BYm/OiE=) 16: jpwBe-AkRq2dy_PULOnXHQ9Ycs0.roa (hash: CD+U4XQaiXctHnizntcTVPzR91HUW5c2OzChIkv3V24=) 17: kwA42BmNzSUewbTo_dU5la_0zP0.roa (hash: y/TAma2s4/3KscvdC7zP9L37MDVBoJoEBiQsT1GFBM8=) 18: lnx0MSNXu-b8u8FI0lpqz-A7oHw.roa (hash: NVmLaYkx9p0xeTDyYslIT2xRvTPcao/7hqa2UU+qxCQ=) 19: mLqkp52huHgu77s0fgjERZHy0E4.roa (hash: Z2iiQA2ZVIB6RCX/WGfimd6SADlOca40Qi2sxW5VON4=) 20: pbWRur8kdBoNZy-7uNHkY120NTA.roa (hash: jfa1B31/YH+pRpa6ejUnZronMhff+LqETy02l5VHyp4=) 21: xFjtl4EbfgRcr8YCbGiiwZbihqk.roa (hash: T7WS3OUKYwBABdHgljmlTQydFPQNe0dXXPXlVj0NdxA=) 22: yBH-PuuC7JTiiHmYfl03jkZ7A6I.roa (hash: MHF3WUFLj0xu5jZYgsBNTfH+BQJtJCHmt3TdzrdhKc4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 23:17:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:51:d0:cb:ab:c5:22:da:21:78:b5:25:0b:10:39:ba:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2 Validity Not Before: Nov 22 03:00:58 2024 GMT Not After : Nov 23 03:00:58 2024 GMT Subject: CN=0dd16925dde5d99ef0bfb7f3d0096464ffb8a521 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:d1:7b:05:b6:9f:b7:0f:19:fc:20:bd:b0:c1: 13:0b:d1:a0:a1:1c:89:14:31:02:63:70:56:1c:8a: 90:2e:c0:ee:82:6a:f2:13:44:ef:ba:47:45:9d:4f: 6c:ee:42:e3:9b:50:b8:a3:bb:a9:79:a4:cb:5c:65: b9:81:4b:b7:35:83:e3:30:41:02:67:e4:8d:7a:cd: bd:cb:5d:6e:57:79:9d:75:60:5f:2c:eb:99:86:08: b7:30:8c:41:05:2d:84:81:a2:11:23:55:bc:b6:4f: 0e:4b:6b:4f:a3:5c:5a:cd:29:bb:63:6f:a8:cb:e5: 90:31:82:c1:8d:6f:c5:67:6d:6f:57:f0:5f:dc:b3: 3c:5e:ef:ef:6e:b6:fa:56:38:13:99:5c:46:9b:02: 63:ed:58:61:a5:ca:cb:d5:8a:d9:71:a9:91:ff:a8: 9b:9c:ff:72:c3:b1:3e:08:05:4e:c5:4c:e5:0b:36: b1:1a:5a:6b:ae:a3:f4:90:48:60:0c:33:e3:18:8e: e8:7f:98:f7:5c:89:fc:d1:9b:fd:d6:8e:1b:0f:c1: 88:18:fc:0f:eb:43:16:66:56:6c:d1:d4:46:8a:c6: fb:ce:ef:8a:b2:c5:c5:45:9d:f9:0b:0d:59:52:d3: 46:26:7f:5d:5b:56:fc:6d:f7:20:f5:f9:d4:e1:78: 60:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:D1:69:25:DD:E5:D9:9E:F0:BF:B7:F3:D0:09:64:64:FF:B8:A5:21 X509v3 Authority Key Identifier: keyid:29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:db:06:8c:60:7e:7b:d9:a3:0b:7b:6f:00:8d:b0:ed:3d:01: 1e:12:c7:aa:5e:10:b5:e2:a2:ad:b9:dd:e2:5d:bc:c5:e4:4a: 0c:ab:f4:c9:f8:60:fe:2b:ba:61:70:11:c9:ae:61:4d:89:05: 2e:0b:ed:1c:d2:89:83:da:0c:b5:68:75:9e:c8:11:90:a1:ce: b9:45:da:42:75:f1:91:12:91:b0:e1:43:46:0b:e7:14:5d:18: ee:ae:48:d2:01:d5:f6:13:ba:4a:97:9e:a4:16:b3:98:fb:72: ef:61:60:f9:41:47:ea:f8:6f:02:72:44:d5:5c:82:b4:ce:89: ce:62:14:77:3f:82:5e:c4:21:39:44:6a:53:9a:47:73:3b:e0: 59:e8:38:d7:4c:47:80:dc:2a:80:59:4e:a6:da:43:4a:5a:dc: 79:c4:61:e3:bc:cf:eb:c1:fc:02:83:29:6c:1e:6b:2f:78:42: 3d:86:1a:fc:6c:1d:28:a9:0b:20:b3:4c:f0:de:84:b3:6b:7f: 24:f2:ea:21:26:a7:58:d8:9a:f5:00:d4:ff:ad:87:15:22:d9: ac:4d:ee:90:59:bf:06:1d:d1:2a:3c:31:77:f7:96:89:a7:16: 08:7f:f5:16:f3:81:79:80:f2:84:da:2b:b8:bd:46:f1:f2:14: e4:7d:2b:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZNR0MurxSLaIXi1JQsQObrEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NjhiNGUwZWY4MTA2ZjBlMTJhYjhlNTAxZDJhYTRlMzZi NzgzYzIwHhcNMjQxMTIyMDMwMDU4WhcNMjQxMTIzMDMwMDU4WjAzMTEwLwYDVQQD EygwZGQxNjkyNWRkZTVkOTllZjBiZmI3ZjNkMDA5NjQ2NGZmYjhhNTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7NF7Bbaftw8Z/CC9sMETC9GgoRyJ FDECY3BWHIqQLsDugmryE0TvukdFnU9s7kLjm1C4o7upeaTLXGW5gUu3NYPjMEEC Z+SNes29y11uV3mddWBfLOuZhgi3MIxBBS2EgaIRI1W8tk8OS2tPo1xazSm7Y2+o y+WQMYLBjW/FZ21vV/Bf3LM8Xu/vbrb6VjgTmVxGmwJj7VhhpcrL1YrZcamR/6ib nP9yw7E+CAVOxUzlCzaxGlprrqP0kEhgDDPjGI7of5j3XIn80Zv91o4bD8GIGPwP 60MWZlZs0dRGisb7zu+KssXFRZ35Cw1ZUtNGJn9dW1b8bfcg9fnU4XhgsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA3RaSXd5dme8L+389AJZGT/uKUhMB8GA1UdIwQY MBaAFClotODvgQbw4Sq45QHSqk42t4PCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1dpMDRPLUJCdkRoS3JqbEFkS3FUamEzZzhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy80ODE2MzctNmMxYy00NWU4LThmYmQt NDRmOGVkNWQ2MWQ3LzEvS1dpMDRPLUJCdkRoS3JqbEFkS3FUamEzZzhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy80ODE2MzctNmMxYy00NWU4LThmYmQtNDRmOGVkNWQ2MWQ3 LzEvS1dpMDRPLUJCdkRoS3JqbEFkS3FUamEzZzhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc9sGjGB+ e9mjC3tvAI2w7T0BHhLHql4QteKirbnd4l28xeRKDKv0yfhg/iu6YXARya5hTYkF LgvtHNKJg9oMtWh1nsgRkKHOuUXaQnXxkRKRsOFDRgvnFF0Y7q5I0gHV9hO6Spee pBazmPty72Fg+UFH6vhvAnJE1VyCtM6JzmIUdz+CXsQhOURqU5pHczvgWeg410xH gNwqgFlOptpDSlrcecRh47zP68H8AoMpbB5rL3hCPYYa/GwdKKkLILNM8N6Es2t/ JPLqISanWNia9QDU/62HFSLZrE3ukFm/Bh3RKjwxd/eWiacWCH/1FvOBeYDyhNor uL1G8fIU5H0r9A== -----END CERTIFICATE-----Generated at Fri Nov 22 04:35:32 2024 by rpki-client on console-fra.rpki-client.org