$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.mft File: lwJP_Eknv-NSiUNdnQKAQguOzcs.mft (raw, json) Hash identifier: v8n6VfgacsdQF+KtwqFtS6cyp7Vp8CkHRapIuKqD+q0= Subject key identifier: 54:B4:C2:30:89:65:B2:4A:F8:EF:C7:6B:A8:21:8C:CF:A9:A3:CE:E0 Authority key identifier: 97:02:4F:FC:49:27:BF:E3:52:89:43:5D:9D:02:80:42:0B:8E:CD:CB Certificate issuer: /CN=97024ffc4927bfe35289435d9d0280420b8ecdcb Certificate serial: 01964C3483314F2364AC9402AB572F106B04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lwJP_Eknv-NSiUNdnQKAQguOzcs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.mft Manifest number: 01DE Signing time: Sat 19 Apr 2025 04:00:31 +0000 Manifest this update: Sat 19 Apr 2025 04:00:31 +0000 Manifest next update: Sun 20 Apr 2025 04:00:31 +0000 Files and hashes: 1: 2SkENpXb0el73BG8YEd0qffOYtk.roa (hash: 0jaoPpV/MX/H1rwXTjmAcjuo/4JCznBTWQGqCB7AVKs=) 2: JZvyn9etRbXjoocBllh7CNIOWtQ.roa (hash: mGlCIUXbc6xwaltgbnFxc0QkfIrllonR1TRT5DAGlfo=) 3: TPKP9_vIv3ZwN8x82Si3hqn8TqY.roa (hash: yYiZ6dC2HXsnlhNc9UgTQuWOe3jZHK4v0roNCv1tWq8=) 4: UQTJpCv9bdrUfH2Saww4hxPMkG8.roa (hash: SUoc+09CYtApBYMdnWncVZH3VjgdKoqVPXysENVRzSs=) 5: V4OKC9u84ToAwKHP8ipFnECEUSc.roa (hash: 63X029Xmtv3CuXa3LW6ITuuCc8ehUl7D3xtwLtBbGKw=) 6: gLbYx573_mCaGUlXxiWajg-EMEY.roa (hash: XXunEzXS739jLBVukfokQ5juDd54e+4tF/UDVJT6Zy4=) 7: lwJP_Eknv-NSiUNdnQKAQguOzcs.crl (hash: M40hEvUHw+2NoaySRUOMbHE7ufD31BXNxW5YrjnWCYY=) 8: nMgeDSRn1palbG1YFRplQLiBJ88.roa (hash: qMMTHgMyiQ7I7jN7xNsRXFOKbCMbPEhnaDyD9fJClec=) 9: r8pB6OBljZlMvGeFwUgatLrYkjM.roa (hash: W/h+mxaAQgY0+amEPgG34hfdTN3S90SZFDGD/ImhAMQ=) 10: uYRmq9riIpnSj-dt063FdDttSMY.roa (hash: eVkY1lCFSypqnoFYGs3dDTWcHF3+cepLJEQKRr/0kno=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.mft rsync://rpki.ripe.net/repository/DEFAULT/lwJP_Eknv-NSiUNdnQKAQguOzcs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 20 Apr 2025 04:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:4c:34:83:31:4f:23:64:ac:94:02:ab:57:2f:10:6b:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97024ffc4927bfe35289435d9d0280420b8ecdcb Validity Not Before: Apr 19 04:00:31 2025 GMT Not After : Apr 20 04:00:31 2025 GMT Subject: CN=54b4c2308965b24af8efc76ba8218ccfa9a3cee0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:82:ae:3c:e6:fe:d2:78:52:aa:cf:06:20:d1: c8:16:54:97:fe:fa:c0:0a:ad:c0:d6:1d:ca:1b:57: 8c:4f:b4:77:70:06:6b:1b:6d:85:a3:cf:1e:fa:b2: 0b:f3:12:b8:6d:67:e3:14:2c:38:21:64:e9:73:0c: da:fd:3e:38:14:5c:c9:5a:56:c3:55:e1:a3:b9:45: 2a:dc:db:bb:75:52:f4:d6:c8:7d:8f:73:1f:0d:e5: b1:8a:9e:a4:6f:37:67:25:46:40:f0:e1:5a:5a:7f: 5a:6f:20:85:17:59:20:0d:57:c8:46:d5:9d:15:1f: 48:8c:05:f9:60:97:4b:a3:e8:9b:1e:d8:b3:ba:8a: 9d:b7:ed:b5:70:bf:c5:63:46:09:2f:91:b2:5b:74: 66:ce:4d:f7:bc:eb:e3:6f:a1:6e:75:f2:91:19:8c: 42:3f:a6:8b:a4:9b:a9:e2:0a:8e:2c:25:f8:18:99: 76:c4:be:bb:89:7e:a6:0f:82:3d:5a:4e:df:27:cc: 36:71:a6:10:f8:2e:c8:87:5c:d7:a4:e3:b9:65:03: f8:51:cb:89:ce:44:3e:76:d6:51:5c:85:67:ec:80: 61:ca:ac:ee:5d:7c:de:f1:81:67:05:29:2a:63:d0: 92:6a:e4:b2:3a:1e:4a:c9:7e:c9:93:a2:d3:76:80: 46:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:B4:C2:30:89:65:B2:4A:F8:EF:C7:6B:A8:21:8C:CF:A9:A3:CE:E0 X509v3 Authority Key Identifier: keyid:97:02:4F:FC:49:27:BF:E3:52:89:43:5D:9D:02:80:42:0B:8E:CD:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lwJP_Eknv-NSiUNdnQKAQguOzcs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d5:f7:0e:7b:57:2a:9a:f0:98:2d:b7:0f:d6:dd:da:6c:a1:36: cf:59:43:4c:4f:56:d1:a9:8f:8c:a5:29:b3:b8:3a:f1:cd:be: af:61:2c:2d:a3:fd:15:43:5d:03:9a:d0:a0:5a:10:d7:86:b7: 5f:d5:02:3b:da:7e:ab:36:13:0d:a3:9d:e1:4c:6a:bc:e7:ff: 05:f0:22:eb:0f:92:c8:fa:ec:37:fe:7a:f9:2b:87:6a:a0:9f: 2c:98:ae:62:5b:93:32:85:48:a6:fa:32:61:01:7b:b3:23:6f: db:50:9c:e7:9b:0a:78:d2:af:4c:1e:4d:84:61:6e:3f:bd:a3: d4:0e:cd:5d:f3:2c:6e:7b:85:f2:2f:fd:1b:57:81:a4:53:0d: a7:b4:2f:25:64:c3:4d:aa:80:de:ec:33:ae:56:f4:49:e7:76: bd:0f:bf:e3:21:33:34:bf:00:0a:d6:43:ba:0d:65:08:0e:28: c7:bd:a3:b2:75:f3:74:e3:bd:7d:cc:26:1b:66:10:9a:e1:9f: cd:87:ff:9b:0c:58:35:ad:72:41:3c:40:4c:4d:13:fd:79:47: 01:bf:b2:d3:11:26:d1:34:f7:78:44:00:a2:31:dd:55:ab:81: 7f:4e:7e:6e:44:7a:dd:71:57:cc:ee:33:83:e5:1a:fc:f8:93: d5:c6:99:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZMNIMxTyNkrJQCq1cvEGsEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3MDI0ZmZjNDkyN2JmZTM1Mjg5NDM1ZDlkMDI4MDQyMGI4 ZWNkY2IwHhcNMjUwNDE5MDQwMDMxWhcNMjUwNDIwMDQwMDMxWjAzMTEwLwYDVQQD Eyg1NGI0YzIzMDg5NjViMjRhZjhlZmM3NmJhODIxOGNjZmE5YTNjZWUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIKuPOb+0nhSqs8GINHIFlSX/vrA Cq3A1h3KG1eMT7R3cAZrG22Fo88e+rIL8xK4bWfjFCw4IWTpcwza/T44FFzJWlbD VeGjuUUq3Nu7dVL01sh9j3MfDeWxip6kbzdnJUZA8OFaWn9abyCFF1kgDVfIRtWd FR9IjAX5YJdLo+ibHtizuoqdt+21cL/FY0YJL5GyW3Rmzk33vOvjb6FudfKRGYxC P6aLpJup4gqOLCX4GJl2xL67iX6mD4I9Wk7fJ8w2caYQ+C7Ih1zXpOO5ZQP4UcuJ zkQ+dtZRXIVn7IBhyqzuXXze8YFnBSkqY9CSauSyOh5KyX7Jk6LTdoBGVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFS0wjCJZbJK+O/Ha6ghjM+po87gMB8GA1UdIwQY MBaAFJcCT/xJJ7/jUolDXZ0CgEILjs3LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHdKUF9Fa252LU5TaVVOZG5RS0FRZ3VPemNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC83MTcyMjEtMWQwMy00ZDEzLTkwNDkt NDAxYmRhNDQ3N2I1LzEvbHdKUF9Fa252LU5TaVVOZG5RS0FRZ3VPemNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC83MTcyMjEtMWQwMy00ZDEzLTkwNDktNDAxYmRhNDQ3N2I1 LzEvbHdKUF9Fa252LU5TaVVOZG5RS0FRZ3VPemNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1fcOe1cq mvCYLbcP1t3abKE2z1lDTE9W0amPjKUps7g68c2+r2EsLaP9FUNdA5rQoFoQ14a3 X9UCO9p+qzYTDaOd4UxqvOf/BfAi6w+SyPrsN/56+SuHaqCfLJiuYluTMoVIpvoy YQF7syNv21Cc55sKeNKvTB5NhGFuP72j1A7NXfMsbnuF8i/9G1eBpFMNp7QvJWTD TaqA3uwzrlb0Sed2vQ+/4yEzNL8ACtZDug1lCA4ox72jsnXzdOO9fcwmG2YQmuGf zYf/mwxYNa1yQTxATE0T/XlHAb+y0xEm0TT3eEQAojHdVauBf05+bkR63XFXzO4z g+Ua/PiT1caZBA== -----END CERTIFICATE-----Generated at Sat Apr 19 12:36:13 2025 by rpki-client