$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft File: Skcc1s5gq-3XR2KxAapeb0IH784.mft (raw, json) Hash identifier: UON07zDJ80xRzU1ZPR1QrmJhtIuzOrs2hZlXhQlBXtE= Subject key identifier: 19:4A:37:EE:34:07:7E:52:2A:B5:1E:E1:02:75:AD:FC:5B:C7:0C:F6 Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce Certificate serial: 01960E68F50C5B815E8DF67466F5069A0AC6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft Manifest number: 0B33 Signing time: Mon 07 Apr 2025 04:01:21 +0000 Manifest this update: Mon 07 Apr 2025 04:01:21 +0000 Manifest next update: Tue 08 Apr 2025 04:01:21 +0000 Files and hashes: 1: 8a7Shw-C7t8tDg8xa-1FGikOXPc.roa (hash: 4edDmS0LETRqSpGQGFtoKLhIM6xiHOAiP43PkbiFy4g=) 2: A9GxPF4ifZ6rbABmHPjtyPKjmzE.roa (hash: W77hd6FGDraLnDkaoT1pKx2we4vpUTM+eeqG9pbSJEo=) 3: DCQBlEbEwUGmnDibgcct5WXqQ9w.roa (hash: 2loNvmo8igx2IH1TUeYoiocdqVl5ys5Nj/gH2QT5uEs=) 4: Ec-3R5lSbUg4nkiWhBSyhOomcnQ.roa (hash: 62Xy6RK/IfEoVB5QCyI3LUCOJ3jLbPB31KKuSd8Y3RM=) 5: FvcaLEo9ePCgEvBVIK2eI87VCIQ.roa (hash: tEu/ql9ub4L5vy+BTuIysc1oUr/aYIo+MTuSlbcYBuk=) 6: GAnOR60hpofm0szlGWoPLIE5k9U.roa (hash: lr43p+6HKeY7jXAlLyQZ1kcGKOOPGZSL2OJ25R36SAo=) 7: IPFcr3SVsMO45CcvgFBNdZXFKXs.roa (hash: /7VeIgyIKlw9hTj1q7qRAKWUwYWQVMZL16M4EWKXr70=) 8: Rtf-eqgW1jg7kzfL0pg8e63I-5M.roa (hash: IMz1jRwRZYT/rMcvQ4nY+BdL0NQuZlG7iPglwgBzyqQ=) 9: Skcc1s5gq-3XR2KxAapeb0IH784.crl (hash: U3kLJjPPvx+EqaMaNB2/m3yBy6PRxGdzdBNi9vRbuTQ=) 10: aqxiXCKg8wILOiiXb3CbjFknkz0.roa (hash: yaEb+yV9BvpFXZongqAOcwN1zzlRTWmLt/Rv8aKMq6E=) 11: cYGTSChE9gFQuUNQB0z3uVeo_M4.roa (hash: oMlb77CshXZ5OhhRrgeA3KmMtc/wbw1QuqBFiLFBoVI=) 12: fXIkEQH3meKCBAEQ5mXacq0TJ20.roa (hash: rnj1CDmi4d3j1os+cxi9WBUMoxTK5VvPgUCy380Y0oI=) 13: p25F4lxe6nXngKaRbux6XPZ5x1U.roa (hash: I4gYijlDBFf9xEaj+NrtUgL1crcekBLLnZdYciaAwRg=) 14: pa8fQ4jOrZ59vAyb7Lg7bj_QEgQ.roa (hash: Ep011ixCtG+lu/klHXgc5PQt2d4i1uDvMubTIvs6Oro=) 15: qGL-UUbfc2n5gMthqcDrY6oqiRI.roa (hash: fb04IIPduA2+NhPfcjizdhoAsQqWUl17Qoy+hMnSrwg=) 16: toUQ0_iu6duuq_aTFgLEWgwtLpw.roa (hash: kGnBtrL9aHFWQFQVLy+h7pb0Fwh4bSr9itiOACSqYyk=) 17: twRuprVXnPVVcyrSMrNa_0_uqhM.roa (hash: nog8tSBlkAVSJF5Qw+uLxzczszHatj2ld99hU2zis/0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:0e:68:f5:0c:5b:81:5e:8d:f6:74:66:f5:06:9a:0a:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce Validity Not Before: Apr 7 04:01:21 2025 GMT Not After : Apr 8 04:01:21 2025 GMT Subject: CN=194a37ee34077e522ab51ee10275adfc5bc70cf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:5f:29:48:08:40:22:0e:73:56:78:aa:ba:f5: fd:34:7c:11:25:b0:00:8a:2c:32:c6:48:16:cc:8e: cd:34:0f:d4:e6:e3:42:36:4c:21:01:f6:b7:44:5c: 16:dd:d0:25:70:af:00:c4:2f:39:15:1a:37:70:53: e5:9e:fd:fe:76:63:68:b0:f3:f5:02:38:d7:93:bd: 36:35:a9:7f:45:71:37:ae:4f:c6:7c:83:2e:96:bc: de:3b:c2:53:d3:47:39:b5:40:8a:87:84:66:13:72: 1c:34:a1:c6:8b:fd:1d:09:02:e0:2f:e8:fd:f3:e2: a2:d0:c2:d2:1a:4d:11:31:af:94:d4:a3:48:fe:d8: b7:a3:b3:8c:d3:bf:b6:e7:9c:f8:c2:88:ee:86:38: 4b:0c:f4:40:13:be:2b:2e:38:95:ec:03:14:d4:b3: 50:d9:8f:e5:9b:e4:12:26:d0:3e:8d:07:65:94:5f: 00:3d:26:9e:c8:cd:c9:a6:2f:53:f2:22:46:47:8a: 3d:b0:31:ca:ba:32:e5:a6:9f:25:84:65:fe:f6:30: 9e:9c:1d:f3:f8:16:9e:1b:79:0a:f0:f7:9b:9e:55: e9:ff:c0:e2:e8:5d:b8:64:5d:8a:08:fd:eb:5b:e9: 65:da:99:00:62:94:11:75:e5:cc:cf:c8:a1:52:62: bc:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:4A:37:EE:34:07:7E:52:2A:B5:1E:E1:02:75:AD:FC:5B:C7:0C:F6 X509v3 Authority Key Identifier: keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:57:82:a6:07:99:31:43:fd:dc:1e:81:98:27:75:5e:94:0e: f9:81:bd:f8:c0:75:92:80:b5:a0:e1:bb:94:79:d4:af:ad:eb: b4:14:bb:58:23:b6:65:14:72:4e:32:59:c4:c0:45:22:c9:1d: 1c:46:d2:ed:2c:b8:77:e4:07:29:24:c4:24:f5:b4:90:56:10: 41:10:1f:b6:ec:67:ab:ac:bb:16:0c:5e:fe:73:52:4d:cf:7c: c7:09:7e:b6:a2:59:58:0b:c9:e9:af:f8:e1:d9:8a:00:38:0e: ca:c6:51:84:bf:dc:71:c1:d8:7e:94:f5:d5:3f:fa:5d:4d:55: 9c:6e:58:0b:c1:d1:2c:47:38:be:f6:e4:75:d5:17:ac:2f:02: 52:4a:e0:ea:73:70:de:7f:45:2f:fb:18:c7:4b:a9:ec:bb:13: 8d:b8:7f:04:50:12:ef:57:f3:1d:37:11:ea:72:37:66:46:d6: 9d:88:1d:11:db:97:1d:92:5c:3c:2c:d5:e4:b1:00:68:74:c8: 73:2c:aa:fb:7e:03:f9:7d:82:9f:c2:99:4f:94:23:e3:8c:0a: 69:6a:e6:3a:0a:79:11:66:90:1f:40:2c:fd:d2:e1:c4:92:d8: 57:fc:59:2c:3e:21:62:e7:07:32:ea:da:86:96:f9:97:40:bf: b9:f7:e8:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZYOaPUMW4FejfZ0ZvUGmgrGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNDcxY2Q2Y2U2MGFiZWRkNzQ3NjJiMTAxYWE1ZTZmNDIw N2VmY2UwHhcNMjUwNDA3MDQwMTIxWhcNMjUwNDA4MDQwMTIxWjAzMTEwLwYDVQQD EygxOTRhMzdlZTM0MDc3ZTUyMmFiNTFlZTEwMjc1YWRmYzViYzcwY2Y2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqF8pSAhAIg5zVniquvX9NHwRJbAA iiwyxkgWzI7NNA/U5uNCNkwhAfa3RFwW3dAlcK8AxC85FRo3cFPlnv3+dmNosPP1 AjjXk702Nal/RXE3rk/GfIMulrzeO8JT00c5tUCKh4RmE3IcNKHGi/0dCQLgL+j9 8+Ki0MLSGk0RMa+U1KNI/ti3o7OM07+255z4wojuhjhLDPRAE74rLjiV7AMU1LNQ 2Y/lm+QSJtA+jQdllF8APSaeyM3Jpi9T8iJGR4o9sDHKujLlpp8lhGX+9jCenB3z +BaeG3kK8PebnlXp/8Di6F24ZF2KCP3rW+ll2pkAYpQRdeXMz8ihUmK8fQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBlKN+40B35SKrUe4QJ1rfxbxwz2MB8GA1UdIwQY MBaAFEpHHNbOYKvt10disQGqXm9CB+/OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9lMTc3MTQtNDY3Yi00NDMzLTliN2Qt YTZiOTkxZjRmYWY4LzEvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS9lMTc3MTQtNDY3Yi00NDMzLTliN2QtYTZiOTkxZjRmYWY4 LzEvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMleCpgeZ MUP93B6BmCd1XpQO+YG9+MB1koC1oOG7lHnUr63rtBS7WCO2ZRRyTjJZxMBFIskd HEbS7Sy4d+QHKSTEJPW0kFYQQRAftuxnq6y7Fgxe/nNSTc98xwl+tqJZWAvJ6a/4 4dmKADgOysZRhL/cccHYfpT11T/6XU1VnG5YC8HRLEc4vvbkddUXrC8CUkrg6nNw 3n9FL/sYx0up7LsTjbh/BFAS71fzHTcR6nI3ZkbWnYgdEduXHZJcPCzV5LEAaHTI cyyq+34D+X2Cn8KZT5Qj44wKaWrmOgp5EWaQH0As/dLhxJLYV/xZLD4hYucHMura hpb5l0C/uffouw== -----END CERTIFICATE-----Generated at Mon Apr 7 06:25:03 2025 by rpki-client