$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft File: LvlXq6LvADUoUOICRkxx0zyoFEg.mft (raw, json) Hash identifier: cDXiSTO9UWOXO2VGl0PyeZ227zszvS6NrCjiyVHoUDU= Subject key identifier: 9C:BC:39:09:23:FA:A1:53:1F:77:2F:57:2B:EF:6A:80:22:1C:60:8A Authority key identifier: 2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48 Certificate issuer: /CN=2ef957aba2ef00352850e202464c71d33ca81448 Certificate serial: 019611D7CC9BEF7D58A17DE7A33EC672BB70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft Manifest number: 14E0 Signing time: Mon 07 Apr 2025 20:01:17 +0000 Manifest this update: Mon 07 Apr 2025 20:01:17 +0000 Manifest next update: Tue 08 Apr 2025 20:01:17 +0000 Files and hashes: 1: 1-YLitnkBbXXsQAFgwq_VXNT0JiU.roa (hash: AJ3gimUDCGBcWcTGkG9GHuWdzHVsFaaNIwm4c/UaNKI=) 2: EgAgobnZWpD4wDoqIoxyr3MZA5Y.roa (hash: mjozCBG8d8a1a9rxk2/WXOhv1sAeajKVlJoBmpCTphI=) 3: JJeVt7UZqNUEt2c6x7hNRcOI6xI.roa (hash: MfyInY8zOEg6qrPZH5fZlCQbjzWyB7B/O95gOPgwBK8=) 4: JRPXqjHWLaWnIuSL8g9IeICp1DA.roa (hash: 2iPE1VbPS86vB8xHzmkYPiMJ/2pRuAO+4Eo+0e52CUU=) 5: KCNwgf6PeVKuiUUhuKfKXnLgLFQ.roa (hash: v+IFmLklJP0SF039aJ72TNFUXKdUB+t1BQfemj0rrwE=) 6: LvlXq6LvADUoUOICRkxx0zyoFEg.crl (hash: 8U2RyC6M6Uuz+omY4zACQpWv0WbWKTdDRN9G8DORQOg=) 7: PKP5a34KkATdKIYJt-5YPdlCScc.roa (hash: DIduPrIRFwlPmmTvgmnIOUqFQ2p2Urxx9bdsVWJtVNQ=) 8: URdHpLliQS0f_xW89x43dy03NFM.roa (hash: slk/BTTaKKDTHH1yknm1NTv+Ov77fSUjZtooH73b8sg=) 9: gEEujvRXufmsjgTmstu1Zbbnfs0.roa (hash: P5YHH8ETd3YFKeI8j0ogt9xk/9FEVi5SrSm44Y95yWk=) 10: koANhf94Ms7kfxsa0LrqViexTxU.roa (hash: n1usXJi4k9IdIFnEicQPzyVEwnESkffY6S41/7XDahM=) 11: lsyqD2gTgikkDZqsbqed-AvQOFE.roa (hash: 2f7aOq0K3Z5tB/Bm8elLHTKPwyM1VQt3iTAgGQr0kUA=) 12: m-IIE152ao_pZE4Wt42YO_x1XlM.roa (hash: muFT1Obe9mEevORUc6UEy/Cz3RKhk79/nUEvl5PDZM4=) 13: nZHdV3WJYYopwUGJLwL5bZm3VpI.roa (hash: yZFjAsboNvT9P5DWXdZp8gsxk1AZMOxeZfK2Mq9pQEU=) 14: oJy5Ih3Wi9poj-CApp9bi93q2-8.roa (hash: UiKgdsncZ7pajJ8yDf76t7tbkfWUzikpYtARnAAsGHo=) 15: riI-pOFWNLX8839TKqYFfWOwpZ8.roa (hash: fqG5C98P6l1daY/xcAV9OUvehrdtHt6AHPVOzurPOBw=) 16: sr_tDwJkHkj-JXNMt0Zy5ypCJ7g.roa (hash: btOhuVo5qzp7IyhUfnRzrwSPzaIUCOIvSAfRoFrawl8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 08 Apr 2025 20:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:11:d7:cc:9b:ef:7d:58:a1:7d:e7:a3:3e:c6:72:bb:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ef957aba2ef00352850e202464c71d33ca81448 Validity Not Before: Apr 7 20:01:17 2025 GMT Not After : Apr 8 20:01:17 2025 GMT Subject: CN=9cbc390923faa1531f772f572bef6a80221c608a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:5a:0b:69:4c:d1:ff:9b:28:69:a6:10:af:db: 1a:ef:81:be:dd:68:9c:8e:9e:62:1a:8d:c3:3e:40: 2b:37:9b:e8:47:ac:fb:0c:1d:37:bb:14:99:95:c6: 03:e5:5c:b0:2d:37:8f:83:28:51:6e:53:4f:5a:42: da:46:a1:4c:ef:89:c4:68:16:2d:9d:62:9f:34:a3: e8:d6:3a:04:61:71:f7:db:90:80:62:b9:08:50:36: 76:49:0a:21:f8:a8:83:4b:66:79:de:0c:a5:c2:7b: 93:66:93:75:59:b3:1b:9b:63:84:08:3a:57:2c:66: a9:6a:f1:0b:dc:b4:98:5a:a8:52:51:93:29:8c:16: a4:d4:e1:87:bd:0d:0e:55:30:04:88:3a:c7:7b:29: 47:e3:44:80:44:31:b9:cd:86:a3:74:f0:8f:31:1a: 48:c1:a7:d7:62:50:51:dd:7f:30:dd:da:cd:dd:f6: 1c:b4:70:cd:28:05:e5:a1:7a:39:84:4b:d8:5b:0e: b6:20:28:13:a7:68:e7:85:bf:55:7c:03:3f:08:12: 2c:d2:f1:f5:76:26:61:18:e7:b9:83:16:47:36:01: 7e:9b:96:76:f4:10:29:13:39:10:61:21:a1:eb:3b: 23:15:1a:34:25:7d:b8:ab:b8:0b:b0:a6:60:78:4b: b3:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:BC:39:09:23:FA:A1:53:1F:77:2F:57:2B:EF:6A:80:22:1C:60:8A X509v3 Authority Key Identifier: keyid:2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:18:24:bc:9a:45:28:2b:c2:a5:17:be:48:69:9c:63:db:51: d7:26:81:c9:eb:73:1f:77:65:e0:ec:e6:6b:42:61:87:91:9e: 5c:b0:a2:77:05:82:80:95:10:a7:f1:d2:d3:3b:5e:25:92:e3: 2a:55:25:a3:8e:63:9a:83:45:f5:6f:41:db:fe:53:38:20:86: 52:b0:6c:03:f0:94:bc:6b:a7:83:5f:c8:b5:f5:ba:d7:1f:78: 55:23:fd:9f:31:5c:df:4a:b1:ee:51:a9:35:87:f7:58:3b:32: 8a:4f:e5:53:61:e9:8b:a1:c0:9c:98:f5:04:de:47:a6:0a:cf: 0a:1b:95:00:27:01:a9:75:52:c6:2c:40:87:00:3f:62:e2:8f: 17:26:59:e2:92:79:2f:38:cc:96:6e:ef:78:de:d0:d1:f8:bf: 1e:d3:2e:fe:81:e8:3d:b3:62:49:d3:bb:63:39:e2:ad:63:b1: ac:c7:b5:20:8c:41:3c:2c:38:e7:f4:c1:dd:f4:fe:bc:b2:81: 27:61:25:aa:4a:18:9b:ac:51:e4:42:d7:57:c7:ab:1e:42:af: e2:5b:0c:49:0d:8d:b0:59:66:5d:af:4b:29:2b:eb:bb:44:36: 1d:1e:4c:bd:77:26:3b:99:70:51:9f:39:4a:ee:c3:33:f0:07: 33:dd:11:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZYR18yb731YoX3noz7GcrtwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlZjk1N2FiYTJlZjAwMzUyODUwZTIwMjQ2NGM3MWQzM2Nh ODE0NDgwHhcNMjUwNDA3MjAwMTE3WhcNMjUwNDA4MjAwMTE3WjAzMTEwLwYDVQQD Eyg5Y2JjMzkwOTIzZmFhMTUzMWY3NzJmNTcyYmVmNmE4MDIyMWM2MDhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxloLaUzR/5soaaYQr9sa74G+3Wic jp5iGo3DPkArN5voR6z7DB03uxSZlcYD5VywLTePgyhRblNPWkLaRqFM74nEaBYt nWKfNKPo1joEYXH325CAYrkIUDZ2SQoh+KiDS2Z53gylwnuTZpN1WbMbm2OECDpX LGapavEL3LSYWqhSUZMpjBak1OGHvQ0OVTAEiDrHeylH40SARDG5zYajdPCPMRpI wafXYlBR3X8w3drN3fYctHDNKAXloXo5hEvYWw62ICgTp2jnhb9VfAM/CBIs0vH1 diZhGOe5gxZHNgF+m5Z29BApEzkQYSGh6zsjFRo0JX24q7gLsKZgeEuzTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJy8OQkj+qFTH3cvVyvvaoAiHGCKMB8GA1UdIwQY MBaAFC75V6ui7wA1KFDiAkZMcdM8qBRIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9hNTg0ZTQtY2NkNC00YzRmLTlkMTYt MDRhMjdjNGQ1NDUzLzEvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9hNTg0ZTQtY2NkNC00YzRmLTlkMTYtMDRhMjdjNGQ1NDUz LzEvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhBgkvJpF KCvCpRe+SGmcY9tR1yaByetzH3dl4Ozma0Jhh5GeXLCidwWCgJUQp/HS0zteJZLj KlUlo45jmoNF9W9B2/5TOCCGUrBsA/CUvGung1/ItfW61x94VSP9nzFc30qx7lGp NYf3WDsyik/lU2Hpi6HAnJj1BN5HpgrPChuVACcBqXVSxixAhwA/YuKPFyZZ4pJ5 LzjMlm7veN7Q0fi/HtMu/oHoPbNiSdO7YznirWOxrMe1IIxBPCw45/TB3fT+vLKB J2ElqkoYm6xR5ELXV8erHkKv4lsMSQ2NsFlmXa9LKSvru0Q2HR5MvXcmO5lwUZ85 Su7DM/AHM90RHw== -----END CERTIFICATE-----Generated at Tue Apr 8 05:13:17 2025 by rpki-client