$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft File: DJDDVuKGT0OJSFdENVXYtcA1KBk.mft (raw, json) Hash identifier: en9ohJlT6oe/R0QXvHeKG8MNtRBcWnWwShVyQw9nepA= Subject key identifier: A4:B5:59:FB:8E:7B:7C:97:2E:11:83:39:BB:80:52:DA:FB:98:5A:DD Authority key identifier: 0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19 Certificate issuer: /CN=0c90c356e2864f43894857443555d8b5c0352819 Certificate serial: 019511D968470A4AC0EA402471A5B1EC55DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft Manifest number: 146C Signing time: Mon 17 Feb 2025 03:00:15 +0000 Manifest this update: Mon 17 Feb 2025 03:00:15 +0000 Manifest next update: Tue 18 Feb 2025 03:00:15 +0000 Files and hashes: 1: 7Pzqe98aO4BoBrbjEM8VyT6sS1M.roa (hash: njNZ21C9pluyh9z/aL31IWofBM1v+N+fPmyvHPndCq0=) 2: 90MmzVO4MvLdyb-AJQYr53vSOsE.roa (hash: 5J/pNqbP4sJI9fRD38vzW+V+FYiLCJKVNSYkNzbkDm4=) 3: 9GHN6GSMWh16APWbnq7wDsfKnn8.roa (hash: JH6A2KPyYk6kU9S+YXzBoAozjZCx1I1/FQIb22szn8c=) 4: A3yiMnUOTAMIYvHymHxcRRdl3pQ.roa (hash: stXGsXMD+FrQyZX4g7row6To+DPm5GuY/8GYAAv5+hY=) 5: ArupuQqxIpZ9KRGErEWkolf9CMo.roa (hash: cmyIpgJGXndY9DYqZiShJ9nFF8ZvJK4I3MWykMztzK8=) 6: DJDDVuKGT0OJSFdENVXYtcA1KBk.crl (hash: E/o1NyjdvViyOeEuuQ5bEeExzmk94G0+g8orrlaMNGY=) 7: QQRJC_YG8r-4Cm4-FiDTcyGseMs.roa (hash: v9L1LzSv9+QS9AJyAVCgrR0utN6Qk2ha4KHx/OIWRBY=) 8: Rtm2eqjMuokQbFDH0uOZXue46j0.roa (hash: i+SxWKbKu33HD+1YPJSxFNXcAddtYFx5sKVQShwTd24=) 9: _eU7wK7pdUxRG2CXsHdjbv2SOXc.roa (hash: ZAIXppKunQur0KGtFLAbnwIeXUabVYHwA+qIIq12IRo=) 10: aTMRrwo9_4SayQ9D7LTyaVFK_Xc.roa (hash: +IcvkZ/Lt7dooQvX8ekK5PfLV+YRr5hiDK4PBIh/lAA=) 11: fYrpElZs1NsSNrkwEfo6WNxBdRU.roa (hash: w1Z5VCOxpqbNZVNnJiTQLVLUsMOtA4kiHusU/VADD9E=) 12: rytOjYktSxYttWQbNzKnWNHr8kE.roa (hash: yLxz3XA2NehPKva17aTVpf9d8xx7CPICWNJXYP6IG3U=) 13: wz4Rxi2T5RISNbtekZKZj5gg7co.roa (hash: ZkBZlEwEIE4xANMo9oJsaqTSQA+2tjjnLN93XVxIic4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 17 Feb 2025 23:00:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:95:11:d9:68:47:0a:4a:c0:ea:40:24:71:a5:b1:ec:55:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c90c356e2864f43894857443555d8b5c0352819 Validity Not Before: Feb 17 03:00:15 2025 GMT Not After : Feb 18 03:00:15 2025 GMT Subject: CN=a4b559fb8e7b7c972e118339bb8052dafb985add Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:34:19:97:44:0f:35:0d:d5:7f:c6:1d:53:f4: 24:ff:6d:a3:c8:18:2b:27:1e:48:38:30:4b:da:ee: bd:43:07:70:58:bf:ac:64:cb:f6:ef:c2:39:5c:2f: 27:d6:e1:a9:ab:18:4c:ea:9d:56:07:94:34:64:04: 17:2a:8f:0d:32:b8:eb:fd:4d:a1:15:d8:20:6e:1e: 43:14:e6:c3:21:07:65:46:5f:04:ee:53:70:ed:cc: 8d:28:b9:45:2c:d2:02:af:92:f5:ba:19:a9:01:6b: 19:2a:06:2f:5f:73:d3:9a:2c:7e:c6:28:b8:c8:8a: 82:35:a0:08:25:31:58:ad:71:2c:cd:92:bf:eb:e7: f0:ac:a2:ea:b1:83:cc:ef:57:16:13:00:b6:2a:0e: ad:31:93:dc:a0:5d:8e:d7:05:ba:32:40:c6:14:94: a0:f2:b0:38:ac:f2:a0:bc:50:68:ee:43:51:ed:fd: 6d:b5:b2:71:a1:5b:ac:0d:4f:a9:3f:49:44:d1:c1: 7f:43:2f:80:b3:2d:ec:18:c4:59:92:0b:63:1a:fc: 6a:4d:da:7a:e4:67:68:ce:a4:6e:1e:e7:7d:b1:12: f4:12:c9:84:bf:0b:fb:8a:8d:5f:c7:2e:9e:28:f5: 18:d1:ae:ea:95:23:f5:fe:97:f7:07:77:b0:aa:55: 8e:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:B5:59:FB:8E:7B:7C:97:2E:11:83:39:BB:80:52:DA:FB:98:5A:DD X509v3 Authority Key Identifier: keyid:0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:05:88:f8:89:e1:60:ce:e1:9d:92:21:10:4c:a8:3f:f8:42: 12:49:be:6e:c2:9a:f1:86:d4:b9:47:a5:8b:00:af:3b:f6:40: 63:6e:46:24:e3:b0:35:0e:b0:43:f8:81:9c:96:de:54:c6:09: 08:7c:3c:b3:b6:07:e0:6d:18:50:44:d4:31:21:64:ef:f1:f2: 8d:30:33:06:69:2d:ec:4c:58:a6:0b:21:fb:91:05:02:29:47: cf:f0:da:24:aa:3d:09:c6:7d:ae:2b:a4:33:f6:f7:05:ef:b9: 46:b4:2a:ab:0f:3d:fe:79:56:b8:2b:07:09:72:31:28:18:cb: 84:35:02:3c:23:cf:94:0e:e1:d2:94:ed:d9:fa:af:c2:33:39: d4:d8:b3:11:c1:5f:4f:c1:91:d6:3c:45:eb:dc:ba:d9:92:d3: b7:a9:2b:43:c5:ca:08:c4:d8:85:4e:4c:bf:0a:08:39:94:5b: 3b:41:9b:e9:98:68:b0:b3:17:7e:b4:e5:a7:1e:7c:9a:89:75: 4b:77:83:9c:6e:8a:c3:db:b0:53:06:70:ee:ef:fb:f9:b2:f6: bf:d0:fa:af:d7:48:65:eb:82:a5:bc:74:48:6a:3a:3a:a3:d2: 55:7c:0c:52:49:cb:e9:27:48:6c:03:59:dd:cb:ab:d9:3e:b6: 8b:11:be:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZUR2WhHCkrA6kAkcaWx7FXcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjOTBjMzU2ZTI4NjRmNDM4OTQ4NTc0NDM1NTVkOGI1YzAz NTI4MTkwHhcNMjUwMjE3MDMwMDE1WhcNMjUwMjE4MDMwMDE1WjAzMTEwLwYDVQQD EyhhNGI1NTlmYjhlN2I3Yzk3MmUxMTgzMzliYjgwNTJkYWZiOTg1YWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujQZl0QPNQ3Vf8YdU/Qk/22jyBgr Jx5IODBL2u69QwdwWL+sZMv278I5XC8n1uGpqxhM6p1WB5Q0ZAQXKo8NMrjr/U2h Fdggbh5DFObDIQdlRl8E7lNw7cyNKLlFLNICr5L1uhmpAWsZKgYvX3PTmix+xii4 yIqCNaAIJTFYrXEszZK/6+fwrKLqsYPM71cWEwC2Kg6tMZPcoF2O1wW6MkDGFJSg 8rA4rPKgvFBo7kNR7f1ttbJxoVusDU+pP0lE0cF/Qy+Asy3sGMRZkgtjGvxqTdp6 5GdozqRuHud9sRL0EsmEvwv7io1fxy6eKPUY0a7qlSP1/pf3B3ewqlWOiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKS1WfuOe3yXLhGDObuAUtr7mFrdMB8GA1UdIwQY MBaAFAyQw1bihk9DiUhXRDVV2LXANSgZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hYzVhNTYtMTYzYS00OTdhLTk1NDct ZTM3OTlhZGU5ZGZlLzEvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hYzVhNTYtMTYzYS00OTdhLTk1NDctZTM3OTlhZGU5ZGZl LzEvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaAWI+Inh YM7hnZIhEEyoP/hCEkm+bsKa8YbUuUeliwCvO/ZAY25GJOOwNQ6wQ/iBnJbeVMYJ CHw8s7YH4G0YUETUMSFk7/HyjTAzBmkt7ExYpgsh+5EFAilHz/DaJKo9CcZ9riuk M/b3Be+5RrQqqw89/nlWuCsHCXIxKBjLhDUCPCPPlA7h0pTt2fqvwjM51NizEcFf T8GR1jxF69y62ZLTt6krQ8XKCMTYhU5MvwoIOZRbO0Gb6ZhosLMXfrTlpx58mol1 S3eDnG6Kw9uwUwZw7u/7+bL2v9D6r9dIZeuCpbx0SGo6OqPSVXwMUknL6SdIbANZ 3cur2T62ixG+oA== -----END CERTIFICATE-----Generated at Mon Feb 17 07:56:54 2025 by rpki-client