$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.mft File: uk0Oaat2n2W7KxVb36g6cYburEQ.mft (raw, json) Hash identifier: mPTH5/2TeR7G5kUyljgsGYDfF2YoWjY48Ud5Yow7c+g= Subject key identifier: F4:C3:4D:D9:30:2B:52:CB:3E:D5:48:35:21:F1:57:72:DA:70:3F:36 Authority key identifier: BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44 Certificate issuer: /CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44 Certificate serial: 01960151C671F0AA0B4E5AE924A64875B6EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.mft Manifest number: 1374 Signing time: Fri 04 Apr 2025 15:00:58 +0000 Manifest this update: Fri 04 Apr 2025 15:00:58 +0000 Manifest next update: Sat 05 Apr 2025 15:00:58 +0000 Files and hashes: 1: 1-3bDj9neCbaQWw4yQtHya4rokp4.roa (hash: wHpii48/V8AwQkYAqHFtfgQFrRyn7WTmLrq5OaQhFQI=) 2: 1FRdiyb2IlZHXUod0EZtqjIuV48.roa (hash: yKc3udCTzpcxZg08Iku4TuTVL01TeqCQ6AGsUIubbLc=) 3: 7s-kRW15wfOY4-sOfxDBcecv-8g.roa (hash: 4P0C1BGP3QHpEQVAqgQur0JFPU07CPZaJXvyjV3BZyw=) 4: B7kkBiV21842X9l7dcEqEfT9Zhw.roa (hash: eQpICIgwqm0QLmyTmdzGlrlE/hIWTLpGGaUuy7LQL4c=) 5: B84STFeKoQGNNPVu7qjqse7G6tE.roa (hash: MtuuUttjdEHBfw9pQ6wLwNYRQchbll7oYwTHz6pA12k=) 6: EN1Levip2YxWtU05lzM8Oxq_nLI.roa (hash: puDE3/UvpEy/plTRQ66R42swdASFEazK0Kj21wbGDG0=) 7: FsUxuSAEJxcJvbQQbnEmdzyGBMM.roa (hash: JUy66RzJLN9pwvog5+NOwd/k0EE8faYmzaGcXwEZppg=) 8: MZ4QGIPEiPuDSyr_3gXeFWBvPXo.roa (hash: fdgnEtst2k3DjzBCjD9kY1X5vik8xfLx76ArRZpas2g=) 9: ffHd2Ruair9ltxVERYk4w2zsaNM.roa (hash: VnPUAyYKwhFfhmNOrOW74LPAJWypgZpyGJcY3RIeMSM=) 10: ncWW-PHiyTcD5myQc3_j5MkvxYM.roa (hash: yq//c+NUg8a+fjUiszm4DltA+xgrNNfhnKp5UTxqPzs=) 11: tcAOvX2JVQ4PKm-lNI8KuapK7Kk.roa (hash: zEUlrMdSx1XEO6nITfckAddCeacPaNoy7iHflkwOAW8=) 12: uk0Oaat2n2W7KxVb36g6cYburEQ.crl (hash: y0e/odDf7cVU2H6OqXErZGRe5MrwNKbesYwC4kA5CpA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.mft rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Apr 2025 15:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:01:51:c6:71:f0:aa:0b:4e:5a:e9:24:a6:48:75:b6:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44 Validity Not Before: Apr 4 15:00:58 2025 GMT Not After : Apr 5 15:00:58 2025 GMT Subject: CN=f4c34dd9302b52cb3ed5483521f15772da703f36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:3d:97:1d:2e:3e:fd:1d:16:bc:d2:6a:6a:17: b3:bd:c2:6b:58:50:25:69:34:19:d2:58:76:27:43: fd:2a:ca:a4:2b:0a:65:dd:a4:43:1f:d5:c2:5c:fd: 2e:94:3d:b6:1f:b6:1b:5a:1c:6e:40:08:d6:b7:5e: 35:4e:21:15:26:4c:31:30:33:19:fd:15:44:86:45: 6b:57:3f:bc:e0:7e:ba:c9:c6:84:b8:b5:da:f7:ef: 57:d8:d9:b7:c3:4a:de:39:9a:cc:2c:80:85:8e:bb: de:c5:e4:d2:a2:68:58:c8:0d:8e:20:d0:c9:6b:53: 42:9e:ac:6c:21:fe:e4:da:90:7a:93:11:6d:b9:1d: 2d:d0:2a:22:d3:a1:0b:5d:85:08:c3:6e:f9:55:f5: 4b:dd:85:42:79:c8:45:aa:96:59:fe:56:08:7e:af: 07:28:24:64:83:30:59:a0:89:26:2e:16:d7:e9:da: 88:b3:4b:fd:63:d2:7f:51:67:3e:9c:59:72:a3:28: 57:ec:8b:4b:b5:ed:13:29:9b:d3:be:88:52:36:92: 5e:42:94:4a:cb:ef:ea:de:fd:8c:23:c8:51:3f:7b: 18:27:03:c3:f4:34:16:07:e7:8f:52:e2:98:0c:61: 6f:a3:c8:dc:40:63:2f:d7:a9:28:55:14:9d:21:21: d8:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:C3:4D:D9:30:2B:52:CB:3E:D5:48:35:21:F1:57:72:DA:70:3F:36 X509v3 Authority Key Identifier: keyid:BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:48:b9:cd:a4:ee:6e:74:30:fb:1e:18:d8:c5:8e:6c:cb:a3: e8:d2:44:12:de:b0:b1:ca:af:79:33:2a:11:4d:33:10:9c:2b: a8:1f:cb:40:4e:40:13:37:73:3d:1b:39:24:57:a0:60:5a:05: 18:58:5f:4b:6d:6a:dc:d5:48:26:e1:df:51:c9:cb:c6:cb:c9: ac:fe:e8:1c:d7:e1:d0:4a:43:5d:23:ae:d4:aa:fb:ba:9b:15: 4e:d7:8b:16:02:03:98:9e:2a:69:3f:6e:0f:f4:38:25:4d:e1: 2a:ef:d1:ca:3a:22:13:d8:2b:a6:11:48:08:4f:e6:34:63:31: 2d:20:fc:4c:f6:c2:e2:38:a4:ce:34:1e:fc:67:df:2b:c0:b3: c5:14:28:73:4e:b1:95:4a:6c:34:c8:0f:6e:c5:9d:fd:f1:d2: 7b:28:45:76:60:ec:8c:6a:6a:43:66:77:c3:a5:ac:6d:6d:ac: bd:eb:dc:6f:52:e6:0c:b8:1f:ad:52:21:ed:80:d2:bd:c4:e2: 0f:1f:86:fd:56:7a:e7:c1:f1:ba:47:91:96:9d:db:5f:7a:12: 4c:f3:52:a9:b4:17:c0:05:df:f4:fe:73:a1:3e:de:52:55:75: 68:bd:09:9d:0b:b3:21:69:f4:b8:90:d0:80:08:79:ef:59:eb: ba:c1:9f:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZYBUcZx8KoLTlrpJKZIdbbrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNGQwZTY5YWI3NjlmNjViYjJiMTU1YmRmYTgzYTcxODZl ZWFjNDQwHhcNMjUwNDA0MTUwMDU4WhcNMjUwNDA1MTUwMDU4WjAzMTEwLwYDVQQD EyhmNGMzNGRkOTMwMmI1MmNiM2VkNTQ4MzUyMWYxNTc3MmRhNzAzZjM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzj2XHS4+/R0WvNJqahezvcJrWFAl aTQZ0lh2J0P9KsqkKwpl3aRDH9XCXP0ulD22H7YbWhxuQAjWt141TiEVJkwxMDMZ /RVEhkVrVz+84H66ycaEuLXa9+9X2Nm3w0reOZrMLICFjrvexeTSomhYyA2OINDJ a1NCnqxsIf7k2pB6kxFtuR0t0Coi06ELXYUIw275VfVL3YVCechFqpZZ/lYIfq8H KCRkgzBZoIkmLhbX6dqIs0v9Y9J/UWc+nFlyoyhX7ItLte0TKZvTvohSNpJeQpRK y+/q3v2MI8hRP3sYJwPD9DQWB+ePUuKYDGFvo8jcQGMv16koVRSdISHYPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPTDTdkwK1LLPtVINSHxV3LacD82MB8GA1UdIwQY MBaAFLpNDmmrdp9luysVW9+oOnGG7qxEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWswT2FhdDJuMlc3S3hWYjM2ZzZjWWJ1ckVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8zZDZkNmMtZjU4ZC00MmU2LWI2ODgt OGVmZjNmZDNjNDhhLzEvdWswT2FhdDJuMlc3S3hWYjM2ZzZjWWJ1ckVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC8zZDZkNmMtZjU4ZC00MmU2LWI2ODgtOGVmZjNmZDNjNDhh LzEvdWswT2FhdDJuMlc3S3hWYjM2ZzZjWWJ1ckVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUki5zaTu bnQw+x4Y2MWObMuj6NJEEt6wscqveTMqEU0zEJwrqB/LQE5AEzdzPRs5JFegYFoF GFhfS21q3NVIJuHfUcnLxsvJrP7oHNfh0EpDXSOu1Kr7upsVTteLFgIDmJ4qaT9u D/Q4JU3hKu/RyjoiE9grphFICE/mNGMxLSD8TPbC4jikzjQe/GffK8CzxRQoc06x lUpsNMgPbsWd/fHSeyhFdmDsjGpqQ2Z3w6WsbW2svevcb1LmDLgfrVIh7YDSvcTi Dx+G/VZ658HxukeRlp3bX3oSTPNSqbQXwAXf9P5zoT7eUlV1aL0JnQuzIWn0uJDQ gAh571nrusGf0g== -----END CERTIFICATE-----Generated at Fri Apr 4 23:41:07 2025 by rpki-client