$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft File: NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft (raw, json) Hash identifier: w+tF+o+gu+anUrSLJdxt8vZol4b5Gx/1dqLYBC/AyKc= Subject key identifier: BD:89:12:86:DE:F1:E0:3D:E1:DE:A7:1F:33:84:5A:8A:AD:1B:4A:BD Authority key identifier: 35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4 Certificate issuer: /CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4 Certificate serial: 019511A24DA04B5607F8F994209938D21EC7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft Manifest number: 1473 Signing time: Mon 17 Feb 2025 02:00:04 +0000 Manifest this update: Mon 17 Feb 2025 02:00:04 +0000 Manifest next update: Tue 18 Feb 2025 02:00:04 +0000 Files and hashes: 1: 4Kndf8f0K38NeByF4eDeojFEkWc.roa (hash: z9ZWxvxCc7vC5TAiLfa7y9gNN02jk+BIQEMSzkn78Bk=) 2: 6-2qTlMtEZPzOHSAtmdNhcbE1qQ.roa (hash: F+2AAW+4AfT1GQuiFRv0wVbwu5zq2uVmbs9qsl8++uA=) 3: 6wzCW0kCjyL7eOaN0tirv_V-3uw.roa (hash: S6kLaAfy9ySF66gowUatFPcaC1tWs6Nfr+BOUd2Yozo=) 4: 8sgH-ZOMo18VOXKP7ZiwbPqCqiQ.roa (hash: eGf/pzyBqq1cxIFxS42rOeSUvmat4xHxNvblptUlpg4=) 5: CSQPKu-qpPTqg1yhCPEmsJhRnzI.roa (hash: auSoLSfduR8C0x2bAUZMvWJdtjGO1f6pjFPhEJiTFRA=) 6: Fm18RFfmtw-ty_MOYt1iAF-NS08.roa (hash: pq2vFSrbuWCHpjKgD2s5D798cXhhJkM/C70Aaa/iCuA=) 7: GPRtp5xOkeL5cFbOcLZLwwHI9s8.roa (hash: qEFXixGocvZk8lkNUHp2R4rSCKUt6DKkNZt4rBzX0SY=) 8: HiKOjaGmDxpi59kezYj2Aw_UxJE.roa (hash: IDFiNaoIwOJrP6SVw5rUJ9NDJDF8ucwCpy8kzd1Ucqk=) 9: Lr0nKbirlPmBX-3lvJsCJOROKJM.roa (hash: TqdXd4s2N+H906Qbg6lObKToYZQaynILZEigcrAh59E=) 10: NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl (hash: P9yQhmW8gzo+3blzXfMxcDolhsdsWEEQ4LhIKgSetQc=) 11: QBb9KaF0cIXBem__XFHTxdHk0-g.roa (hash: /YyDhbAPnvtDPEPid9fWMtl8pnQeWOykKx8WROxiL+M=) 12: VWhVpICVoAdzB9EQIkXWDcCWifs.roa (hash: QRblW0tqls+p82T8xFTpIjMYlVKizBoeE6qJKM11/3k=) 13: VufdicgIFan1jsDCf-sZLGuwp0g.roa (hash: vJuq8lo3RWIe59gYKl/s0D5AiIhMTyrcU4xMbfyblcY=) 14: bmgQpI-VIkGKEdb2NDjhfJ-ov18.roa (hash: MOydOwWb+ZNvRmMLEPCFgu1thwKEQGRA70pBvfHH5qM=) 15: e-v0jP0Yr1s-j_LETXIOOzdyLGk.roa (hash: xcWMYa3OgNb5AY/zol6hl7sqGF74VxIwNPjPwmEIM7U=) 16: fKVs2lzJco8yky1RgsvfRpsERwg.roa (hash: RSt0/ulmpZFZg4SLAM6kZKlm2sOebMgPJyz/oV0nMGg=) 17: i9SX3nWo4NzvcKgFdy_Fb9U00JU.roa (hash: 1YuxocoriVhQ/l4n2Sas0LfPCL7SyxG7duq+UXS6TBU=) 18: lYSlQ-4feryLZZTaUJ-AJBOZotM.roa (hash: Z1Weo02vp6uD0aD+NKaCNak3b37ID56s/v4nECqj3gE=) 19: rOy5uy_NTIjdgXXxIju3UL-TKY4.roa (hash: ShPP3cFWgf+p1Ts/WZ7cZBJeKVFu0VhveaoD9AjxE14=) 20: vzHyhh5HbyybH8e2L2p6WLWrTAs.roa (hash: pemGMurs9tSXdm3CozX4NApOqx3owIuQ7I2ySxitcuA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 17 Feb 2025 23:00:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:95:11:a2:4d:a0:4b:56:07:f8:f9:94:20:99:38:d2:1e:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4 Validity Not Before: Feb 17 02:00:04 2025 GMT Not After : Feb 18 02:00:04 2025 GMT Subject: CN=bd891286def1e03de1dea71f33845a8aad1b4abd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:0f:84:fe:2a:e0:58:67:7b:51:7b:98:ea:6b: 23:6b:f8:b9:3c:7c:3a:17:af:b2:36:76:8b:ea:b1: c1:29:14:1a:00:2d:60:74:ff:c4:63:58:bd:8b:6c: 83:95:27:05:54:45:08:d0:ae:52:db:e2:57:7d:83: 0d:04:f8:26:ab:0f:87:8e:2f:46:30:17:3b:90:73: b1:08:c6:1c:6e:e2:9e:eb:fe:2d:cd:fd:3a:f7:b3: 11:3b:33:54:cf:de:76:7d:54:7a:8a:58:4a:fa:fa: 61:59:6d:d2:d1:e0:2e:71:d2:b4:e6:12:8b:b1:e1: b4:cb:0f:e2:aa:e8:d9:9d:78:ef:03:ca:63:26:a0: e1:05:a7:7e:bf:90:80:34:4c:8a:9c:21:ab:9a:82: 87:97:7d:65:48:de:c2:a8:e2:bd:b3:60:37:19:60: 49:d2:33:53:03:96:b1:fd:c0:c2:f6:60:8e:ec:5f: e9:d9:f6:fd:39:56:34:84:84:fb:79:2f:41:2a:3f: f5:04:b5:c4:48:99:bd:ee:66:4f:d9:7b:90:fd:05: b8:25:a4:ab:1b:7a:43:28:a1:65:86:1d:1f:4b:1d: a0:e0:3c:46:22:3a:e7:17:cb:e0:2c:10:1e:84:48: 5b:43:53:38:1a:24:a5:1a:80:22:03:db:9e:f8:cf: 40:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:89:12:86:DE:F1:E0:3D:E1:DE:A7:1F:33:84:5A:8A:AD:1B:4A:BD X509v3 Authority Key Identifier: keyid:35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:29:d9:2f:10:1e:3e:48:52:2c:90:9b:4b:aa:ad:b9:1d:8b: 8a:60:82:5e:5c:42:ad:04:e4:75:f5:0f:b7:75:39:ee:77:0c: ef:65:72:b8:0f:37:40:14:64:3d:5c:eb:0b:7a:5c:1c:ed:1d: aa:28:04:30:bb:f5:ba:13:58:12:f5:90:94:11:a7:44:d1:cc: 5b:56:70:46:91:68:e0:ee:42:ae:a0:49:de:1c:f9:eb:5a:3d: 99:54:ea:4a:67:ab:37:32:18:8e:65:a5:25:28:eb:57:3c:58: ce:c9:20:22:d1:5f:c5:35:87:4f:4a:89:6f:09:f0:a8:83:77: ca:28:26:41:7f:dd:ad:e6:0c:c9:22:0c:50:bd:b0:48:b2:5f: c7:86:9c:23:38:f7:33:e5:cf:b8:dd:16:e8:f2:28:92:36:0c: 18:df:0f:b9:91:98:d1:6e:e3:22:73:80:f6:6d:2f:ce:b9:19: 90:d8:47:ff:9b:0f:d5:13:b5:9e:67:07:b7:30:cb:d6:79:13: ce:8e:07:d1:1b:fe:37:81:35:35:c6:bf:c5:23:cc:79:cb:bf: 2e:cc:a5:bb:34:a3:4d:70:11:f4:08:f7:ca:d5:0a:41:a2:a4: 2d:e7:70:27:29:ac:48:4b:5c:2c:db:4f:9c:83:26:18:57:2a: 83:ad:dd:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZURok2gS1YH+PmUIJk40h7HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MWEyZmQ2ZjVlNWFmODdkNWNlYTA5NTA2NmZiY2MzZDNl NTQ2YTQwHhcNMjUwMjE3MDIwMDA0WhcNMjUwMjE4MDIwMDA0WjAzMTEwLwYDVQQD EyhiZDg5MTI4NmRlZjFlMDNkZTFkZWE3MWYzMzg0NWE4YWFkMWI0YWJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzg+E/irgWGd7UXuY6msja/i5PHw6 F6+yNnaL6rHBKRQaAC1gdP/EY1i9i2yDlScFVEUI0K5S2+JXfYMNBPgmqw+Hji9G MBc7kHOxCMYcbuKe6/4tzf0697MROzNUz952fVR6ilhK+vphWW3S0eAucdK05hKL seG0yw/iqujZnXjvA8pjJqDhBad+v5CANEyKnCGrmoKHl31lSN7CqOK9s2A3GWBJ 0jNTA5ax/cDC9mCO7F/p2fb9OVY0hIT7eS9BKj/1BLXESJm97mZP2XuQ/QW4JaSr G3pDKKFlhh0fSx2g4DxGIjrnF8vgLBAehEhbQ1M4GiSlGoAiA9ue+M9A2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL2JEobe8eA94d6nHzOEWoqtG0q9MB8GA1UdIwQY MBaAFDUaL9b15a+H1c6glQZvvMPT5UakMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9jZGRkZDUtODE3YS00MTEzLThiODIt MjMwNDllNGQyZjEyLzEvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9jZGRkZDUtODE3YS00MTEzLThiODItMjMwNDllNGQyZjEy LzEvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUCnZLxAe PkhSLJCbS6qtuR2LimCCXlxCrQTkdfUPt3U57ncM72VyuA83QBRkPVzrC3pcHO0d qigEMLv1uhNYEvWQlBGnRNHMW1ZwRpFo4O5CrqBJ3hz561o9mVTqSmerNzIYjmWl JSjrVzxYzskgItFfxTWHT0qJbwnwqIN3yigmQX/dreYMySIMUL2wSLJfx4acIzj3 M+XPuN0W6PIokjYMGN8PuZGY0W7jInOA9m0vzrkZkNhH/5sP1RO1nmcHtzDL1nkT zo4H0Rv+N4E1Nca/xSPMecu/LsyluzSjTXAR9Aj3ytUKQaKkLedwJymsSEtcLNtP nIMmGFcqg63dQg== -----END CERTIFICATE-----Generated at Mon Feb 17 07:27:28 2025 by rpki-client