$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/02AMuv0m_uUGT8ifMB38jjwdPKU.mft File: 02AMuv0m_uUGT8ifMB38jjwdPKU.mft (raw, json) Hash identifier: LwkU1cTExdYxVk4qjxC8GSR48JTnDzUIQ6MSBMgzmeg= Subject key identifier: FB:9A:78:EA:04:FC:CD:B1:51:AA:F3:99:A6:1E:63:D5:2A:2E:39:77 Authority key identifier: D3:60:0C:BA:FD:26:FE:E5:06:4F:C8:9F:30:1D:FC:8E:3C:1D:3C:A5 Certificate issuer: /CN=d3600cbafd26fee5064fc89f301dfc8e3c1d3ca5 Certificate serial: 01960942D76BCB349F60D35719F965DC116A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02AMuv0m_uUGT8ifMB38jjwdPKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/02AMuv0m_uUGT8ifMB38jjwdPKU.mft Manifest number: 14E3 Signing time: Sun 06 Apr 2025 04:01:37 +0000 Manifest this update: Sun 06 Apr 2025 04:01:37 +0000 Manifest next update: Mon 07 Apr 2025 04:01:37 +0000 Files and hashes: 1: 02AMuv0m_uUGT8ifMB38jjwdPKU.crl (hash: 0KP7XW56jBNm/JKs5Fe56m0094u8jNZqvIddUyImm7A=) 2: 2WkxZ6d8ewxrLWO8WH12o0AY6xw.roa (hash: nbEjkYORzyFd58OrYmjVC1fHN4kRwapxAIIPY/slelc=) 3: 4kCyuSPPrXsbU9QOAHaicAmHwD0.roa (hash: UItrJSqbNqJpjVkVyURO/DW/ecr4i3goD+N+znJcDDg=) 4: 7WBr1YnHsoup1UkbmIJWHNzDX0E.roa (hash: W4SWAwkwaa5kcD/y0ZmDJSccOFKGfkQE9QaUWTtSQO4=) 5: AG97hJvhy0UeDTt3HIas70L9MWQ.roa (hash: CpGaF4KcigctK1KLFQXtXWhD0jjodHuaq3LolhI5NC8=) 6: EEkMm6nCb9R4YLtB4IXzgCR8OOM.roa (hash: 7A7HQmXagHkrgjRynPlWf1aNJTOS5cJM4PvFKY2czsg=) 7: JdavXfgS1C88UGPje2KGgh-CbRs.roa (hash: fsvo1+m2SxrjapW7ugn4l/vkPt8HqDS/T913gxJRh4I=) 8: M-yd6Ugm4j37VvR5jMt-KNJrmEI.roa (hash: vqjDdTSN4DxJrQed7BY7JJ0opDc9Ee98YYBmwBxXED4=) 9: Nedx1_M66uIc0vDKNZQnQXlLIdM.roa (hash: zJ8+VfMNsVLvkhPB7kvPUzmVC3uoyAUluiAWRCM46n4=) 10: Qi9XVq-dT2o75N7dfhs2g5GBACU.roa (hash: ZA6fIgi4q3HA9rAbCvC+Xiwj/72PmBX2B2EUlsP/w2Q=) 11: jLnip0BdB36NRqrdIhQucDZy8-A.roa (hash: PgGmCULcevmCru0Kv0QVroNMx8/gH95JrLZ6JaAFDWc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/02AMuv0m_uUGT8ifMB38jjwdPKU.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/02AMuv0m_uUGT8ifMB38jjwdPKU.mft rsync://rpki.ripe.net/repository/DEFAULT/02AMuv0m_uUGT8ifMB38jjwdPKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 07 Apr 2025 04:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:09:42:d7:6b:cb:34:9f:60:d3:57:19:f9:65:dc:11:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3600cbafd26fee5064fc89f301dfc8e3c1d3ca5 Validity Not Before: Apr 6 04:01:37 2025 GMT Not After : Apr 7 04:01:37 2025 GMT Subject: CN=fb9a78ea04fccdb151aaf399a61e63d52a2e3977 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a0:26:a0:1c:95:ba:a8:fa:ed:5f:40:96:fc: 1c:f0:a2:7b:52:be:b3:73:46:fa:32:5a:2f:e0:66: 5d:c1:d1:49:55:69:bb:66:31:eb:a1:b3:e9:04:77: cc:85:91:b5:d2:3c:47:12:ec:0c:d6:9e:cd:d8:60: fc:86:be:e8:19:30:cb:c3:f8:b2:73:db:17:fa:fe: f2:79:b8:50:76:68:42:34:52:84:f5:19:a1:9a:55: dc:54:a1:bd:f3:ad:b9:50:40:4d:43:3f:1b:3e:1f: 2d:3a:c5:64:72:a4:49:98:5b:51:15:8e:5e:1e:af: ea:bc:0c:65:a5:ad:03:f6:a1:f8:72:7f:fc:b4:ef: d2:12:a2:0a:4c:24:78:c1:07:5e:d5:9e:dc:63:d1: 9d:68:88:2c:60:36:95:bf:27:14:20:94:cf:c2:86: 4a:6a:0e:c4:fb:89:12:e0:a8:d5:b6:89:b6:6c:2d: e9:f2:46:50:6a:55:62:e0:51:a9:52:68:33:15:7d: 7b:fe:4b:92:8d:63:f2:88:99:af:19:34:d3:2a:7c: ee:b9:52:8e:aa:26:81:9e:0c:f8:81:e2:07:eb:cf: 59:61:ad:56:e4:b8:cf:f8:fd:11:7e:76:04:6c:7c: 97:66:59:c9:dc:bf:58:94:e7:6b:bc:0a:40:90:e8: 51:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:9A:78:EA:04:FC:CD:B1:51:AA:F3:99:A6:1E:63:D5:2A:2E:39:77 X509v3 Authority Key Identifier: keyid:D3:60:0C:BA:FD:26:FE:E5:06:4F:C8:9F:30:1D:FC:8E:3C:1D:3C:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02AMuv0m_uUGT8ifMB38jjwdPKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/02AMuv0m_uUGT8ifMB38jjwdPKU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/02AMuv0m_uUGT8ifMB38jjwdPKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:4d:15:9c:e6:7b:c8:d4:96:bc:fa:53:c3:25:01:b7:a9:32: fd:d9:91:b1:52:25:5d:0a:86:05:52:d8:f7:f5:46:c7:32:de: bf:e3:42:d3:76:04:a9:1d:03:52:35:26:8a:aa:db:50:bc:8c: dd:30:64:98:24:6e:31:2d:26:0f:28:3a:98:67:7c:74:b0:b3: ad:f2:ff:b8:7f:74:ae:5a:d0:5e:ff:31:a1:cc:20:d3:59:47: 9c:bd:fb:34:ac:a0:38:94:f4:db:93:e5:6e:42:7e:3c:89:21: 5c:0d:ad:6e:76:21:53:63:41:0e:e5:d1:e9:b0:22:d3:ca:15: 61:92:d4:d8:3a:b9:0f:b8:39:98:7d:29:86:65:2e:14:75:bd: 1b:f6:35:2f:2c:c7:5f:c2:1d:47:3d:ea:a0:f7:95:02:8b:67: 8f:a7:39:d7:21:e0:09:b0:6b:17:7a:21:e8:c6:b8:4d:44:c2: 83:60:fa:fa:66:58:59:4d:ef:9b:9e:f8:77:7e:d9:60:c8:db: f3:1d:ed:88:11:4a:08:4c:e7:2f:5b:95:a9:31:ff:08:c0:fb: 21:cb:a2:c8:12:19:55:c5:dc:e3:cc:7d:94:6f:bb:c0:7f:b4: 67:56:5a:88:87:64:8b:52:b5:16:8d:d6:dd:d3:de:30:91:1e: 0a:e8:51:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZYJQtdryzSfYNNXGfll3BFqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzNjAwY2JhZmQyNmZlZTUwNjRmYzg5ZjMwMWRmYzhlM2Mx ZDNjYTUwHhcNMjUwNDA2MDQwMTM3WhcNMjUwNDA3MDQwMTM3WjAzMTEwLwYDVQQD EyhmYjlhNzhlYTA0ZmNjZGIxNTFhYWYzOTlhNjFlNjNkNTJhMmUzOTc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwaAmoByVuqj67V9Alvwc8KJ7Ur6z c0b6Mlov4GZdwdFJVWm7ZjHrobPpBHfMhZG10jxHEuwM1p7N2GD8hr7oGTDLw/iy c9sX+v7yebhQdmhCNFKE9RmhmlXcVKG98625UEBNQz8bPh8tOsVkcqRJmFtRFY5e Hq/qvAxlpa0D9qH4cn/8tO/SEqIKTCR4wQde1Z7cY9GdaIgsYDaVvycUIJTPwoZK ag7E+4kS4KjVtom2bC3p8kZQalVi4FGpUmgzFX17/kuSjWPyiJmvGTTTKnzuuVKO qiaBngz4geIH689ZYa1W5LjP+P0RfnYEbHyXZlnJ3L9YlOdrvApAkOhReQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPuaeOoE/M2xUarzmaYeY9UqLjl3MB8GA1UdIwQY MBaAFNNgDLr9Jv7lBk/InzAd/I48HTylMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDJBTXV2MG1fdVVHVDhpZk1CMzhqandkUEtVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9iNzA2NTgtZTFkYy00OTQ0LWEwNmIt MWM2ODBhZGY3YTI2LzEvMDJBTXV2MG1fdVVHVDhpZk1CMzhqandkUEtVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9iNzA2NTgtZTFkYy00OTQ0LWEwNmItMWM2ODBhZGY3YTI2 LzEvMDJBTXV2MG1fdVVHVDhpZk1CMzhqandkUEtVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQU0VnOZ7 yNSWvPpTwyUBt6ky/dmRsVIlXQqGBVLY9/VGxzLev+NC03YEqR0DUjUmiqrbULyM 3TBkmCRuMS0mDyg6mGd8dLCzrfL/uH90rlrQXv8xocwg01lHnL37NKygOJT025Pl bkJ+PIkhXA2tbnYhU2NBDuXR6bAi08oVYZLU2Dq5D7g5mH0phmUuFHW9G/Y1LyzH X8IdRz3qoPeVAotnj6c51yHgCbBrF3oh6Ma4TUTCg2D6+mZYWU3vm574d37ZYMjb 8x3tiBFKCEznL1uVqTH/CMD7IcuiyBIZVcXc48x9lG+7wH+0Z1ZaiIdki1K1Fo3W 3dPeMJEeCuhRUw== -----END CERTIFICATE-----Generated at Sun Apr 6 13:17:06 2025 by rpki-client