$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.mft File: lwJP_Eknv-NSiUNdnQKAQguOzcs.mft (raw, json) Hash identifier: Nt6yApqsdJH5Ak3ciIA7VRatp4V+kVOzH2DHQSRH8ok= Subject key identifier: 4D:71:EF:F9:01:39:C2:47:8D:6D:2E:09:1F:E0:62:BA:5E:19:A3:89 Authority key identifier: 97:02:4F:FC:49:27:BF:E3:52:89:43:5D:9D:02:80:42:0B:8E:CD:CB Certificate issuer: /CN=97024ffc4927bfe35289435d9d0280420b8ecdcb Certificate serial: 0195116C0EC088EDF39BAAE646C24B1FAE95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lwJP_Eknv-NSiUNdnQKAQguOzcs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.mft Manifest number: 013B Signing time: Mon 17 Feb 2025 01:00:49 +0000 Manifest this update: Mon 17 Feb 2025 01:00:49 +0000 Manifest next update: Tue 18 Feb 2025 01:00:49 +0000 Files and hashes: 1: 2SkENpXb0el73BG8YEd0qffOYtk.roa (hash: 0jaoPpV/MX/H1rwXTjmAcjuo/4JCznBTWQGqCB7AVKs=) 2: JZvyn9etRbXjoocBllh7CNIOWtQ.roa (hash: mGlCIUXbc6xwaltgbnFxc0QkfIrllonR1TRT5DAGlfo=) 3: TPKP9_vIv3ZwN8x82Si3hqn8TqY.roa (hash: yYiZ6dC2HXsnlhNc9UgTQuWOe3jZHK4v0roNCv1tWq8=) 4: UQTJpCv9bdrUfH2Saww4hxPMkG8.roa (hash: SUoc+09CYtApBYMdnWncVZH3VjgdKoqVPXysENVRzSs=) 5: V4OKC9u84ToAwKHP8ipFnECEUSc.roa (hash: 63X029Xmtv3CuXa3LW6ITuuCc8ehUl7D3xtwLtBbGKw=) 6: gLbYx573_mCaGUlXxiWajg-EMEY.roa (hash: XXunEzXS739jLBVukfokQ5juDd54e+4tF/UDVJT6Zy4=) 7: lwJP_Eknv-NSiUNdnQKAQguOzcs.crl (hash: fhUH0Sj+acjDxHIo0v1UyRgVyO746NETUnCCYUuCuFg=) 8: nMgeDSRn1palbG1YFRplQLiBJ88.roa (hash: qMMTHgMyiQ7I7jN7xNsRXFOKbCMbPEhnaDyD9fJClec=) 9: r8pB6OBljZlMvGeFwUgatLrYkjM.roa (hash: W/h+mxaAQgY0+amEPgG34hfdTN3S90SZFDGD/ImhAMQ=) 10: uYRmq9riIpnSj-dt063FdDttSMY.roa (hash: eVkY1lCFSypqnoFYGs3dDTWcHF3+cepLJEQKRr/0kno=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.mft rsync://rpki.ripe.net/repository/DEFAULT/lwJP_Eknv-NSiUNdnQKAQguOzcs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 17 Feb 2025 23:00:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:95:11:6c:0e:c0:88:ed:f3:9b:aa:e6:46:c2:4b:1f:ae:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97024ffc4927bfe35289435d9d0280420b8ecdcb Validity Not Before: Feb 17 01:00:49 2025 GMT Not After : Feb 18 01:00:49 2025 GMT Subject: CN=4d71eff90139c2478d6d2e091fe062ba5e19a389 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:35:31:be:ea:80:a4:55:ea:8d:d4:20:bb:62: 9e:36:5e:6f:8f:6d:f2:eb:1c:62:00:8a:35:13:82: d1:4f:12:33:61:5e:25:b6:a8:73:1e:3e:d4:17:1d: c4:4c:8d:9a:e0:ef:e6:05:24:eb:45:ca:53:20:26: 55:52:87:30:ec:30:3b:ea:03:b9:c1:dd:b1:66:4b: e9:0a:fe:f5:87:3f:49:6f:da:a5:b8:cb:50:f8:33: 63:e7:e5:a8:fe:c1:34:6c:b2:ca:af:17:e2:c2:c9: c9:00:87:1d:f4:c7:76:a7:f4:a9:73:a6:5e:ad:d2: 84:23:51:88:bb:0d:17:03:ec:6d:1a:62:83:38:8d: 97:e5:c5:1d:2d:ed:b5:17:c0:f6:6e:56:ba:4b:9e: 0f:7d:cc:02:2d:63:2b:70:c1:5a:95:4d:d2:fe:5f: b5:5b:c9:e9:6c:5b:90:3d:6f:33:88:d1:73:8d:4b: 04:b5:60:71:8e:98:b7:f9:b7:6c:f9:fb:ae:f4:ef: 24:d4:d9:d7:02:e8:35:83:89:45:68:00:c1:db:c1: 4f:6b:77:39:84:de:51:c9:8b:67:0a:32:03:cd:67: be:4c:39:9b:a8:62:dd:bf:07:99:c7:b6:db:bb:2f: 15:dc:af:b7:14:ff:7a:c9:ec:b3:65:ff:55:9c:7a: 49:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:71:EF:F9:01:39:C2:47:8D:6D:2E:09:1F:E0:62:BA:5E:19:A3:89 X509v3 Authority Key Identifier: keyid:97:02:4F:FC:49:27:BF:E3:52:89:43:5D:9D:02:80:42:0B:8E:CD:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lwJP_Eknv-NSiUNdnQKAQguOzcs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:34:cb:74:57:60:dc:f0:af:41:d2:14:1f:fc:d1:89:89:2b: ac:2c:ab:ec:af:d2:d7:41:cd:0a:57:c9:03:de:02:2d:3f:1f: 93:0f:10:97:b3:df:d0:1a:47:1c:f8:fb:64:60:f9:d5:27:35: c3:cc:ef:90:bb:6d:1a:2e:6a:73:9f:e0:bd:9a:ed:b6:50:54: 4d:a5:ac:38:cb:14:38:e5:d8:34:74:53:ea:09:c1:cd:39:d0: ba:56:01:f8:e0:bb:79:7e:06:29:ba:0a:54:ee:f2:f4:eb:1b: 56:7b:5b:c9:4f:d5:10:db:18:0f:62:cb:fe:50:8f:ed:e1:39: 18:39:ac:bd:1f:07:45:03:dc:2d:3d:ff:31:4f:79:b7:eb:7e: 94:7a:6e:4a:90:f3:f6:4a:78:a2:71:44:15:e5:fc:f3:ec:a6: 9c:de:02:15:6e:b4:bb:54:46:79:27:81:24:35:7f:a7:8b:11: 60:17:e9:4d:ea:66:6e:f5:ce:9c:a8:cd:7d:64:0d:02:59:c1: 9f:7c:c4:f4:f0:f1:2d:4e:ab:19:47:58:80:88:3e:76:11:3b: 00:0d:b3:3d:a9:f2:70:e8:74:0f:09:a9:24:78:75:a3:3d:77: 32:4b:a6:ef:87:66:3c:6a:2c:85:39:63:75:1f:64:68:a8:c3: b3:0d:15:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZURbA7AiO3zm6rmRsJLH66VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3MDI0ZmZjNDkyN2JmZTM1Mjg5NDM1ZDlkMDI4MDQyMGI4 ZWNkY2IwHhcNMjUwMjE3MDEwMDQ5WhcNMjUwMjE4MDEwMDQ5WjAzMTEwLwYDVQQD Eyg0ZDcxZWZmOTAxMzljMjQ3OGQ2ZDJlMDkxZmUwNjJiYTVlMTlhMzg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjUxvuqApFXqjdQgu2KeNl5vj23y 6xxiAIo1E4LRTxIzYV4ltqhzHj7UFx3ETI2a4O/mBSTrRcpTICZVUocw7DA76gO5 wd2xZkvpCv71hz9Jb9qluMtQ+DNj5+Wo/sE0bLLKrxfiwsnJAIcd9Md2p/Spc6Ze rdKEI1GIuw0XA+xtGmKDOI2X5cUdLe21F8D2bla6S54PfcwCLWMrcMFalU3S/l+1 W8npbFuQPW8ziNFzjUsEtWBxjpi3+bds+fuu9O8k1NnXAug1g4lFaADB28FPa3c5 hN5RyYtnCjIDzWe+TDmbqGLdvweZx7bbuy8V3K+3FP96yeyzZf9VnHpJcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE1x7/kBOcJHjW0uCR/gYrpeGaOJMB8GA1UdIwQY MBaAFJcCT/xJJ7/jUolDXZ0CgEILjs3LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHdKUF9Fa252LU5TaVVOZG5RS0FRZ3VPemNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC83MTcyMjEtMWQwMy00ZDEzLTkwNDkt NDAxYmRhNDQ3N2I1LzEvbHdKUF9Fa252LU5TaVVOZG5RS0FRZ3VPemNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC83MTcyMjEtMWQwMy00ZDEzLTkwNDktNDAxYmRhNDQ3N2I1 LzEvbHdKUF9Fa252LU5TaVVOZG5RS0FRZ3VPemNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAszTLdFdg 3PCvQdIUH/zRiYkrrCyr7K/S10HNClfJA94CLT8fkw8Ql7Pf0BpHHPj7ZGD51Sc1 w8zvkLttGi5qc5/gvZrttlBUTaWsOMsUOOXYNHRT6gnBzTnQulYB+OC7eX4GKboK VO7y9OsbVntbyU/VENsYD2LL/lCP7eE5GDmsvR8HRQPcLT3/MU95t+t+lHpuSpDz 9kp4onFEFeX88+ymnN4CFW60u1RGeSeBJDV/p4sRYBfpTepmbvXOnKjNfWQNAlnB n3zE9PDxLU6rGUdYgIg+dhE7AA2zPanycOh0DwmpJHh1oz13Mkum74dmPGoshTlj dR9kaKjDsw0Vrw== -----END CERTIFICATE-----Generated at Mon Feb 17 08:18:04 2025 by rpki-client