$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft File: YGYXWM4zBiJHCjmujW70ogRPg8Q.mft (raw, json) Hash identifier: qzBjYha6Enw0NmlBapx2bIa+WY+hYxG4eVlZ/6X8omc= Subject key identifier: 0E:9A:7C:C5:B2:5D:D5:D4:00:6D:F2:94:57:4A:1E:94:FB:CD:EB:AC Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4 Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4 Certificate serial: 019602D2A3CBF232F60F67C5E361BF0F76D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft Manifest number: 1501 Signing time: Fri 04 Apr 2025 22:01:20 +0000 Manifest this update: Fri 04 Apr 2025 22:01:20 +0000 Manifest next update: Sat 05 Apr 2025 22:01:20 +0000 Files and hashes: 1: 1jJgRYb9W4sURCICTmoLplbZHfs.roa (hash: qvyeOItWUbyQ2K5Z+KPy3O+0hoC+eVZj/p5eOsFLL2A=) 2: 2bitAWBYtHnJOfetAxEk1NWDm2Y.roa (hash: Ny4sMxLaEUhtST4+VmyAnyHZb/s80LG64s9z9X1sBRQ=) 3: FzUBpaz-C-RxalVbWOkDzpE2yCM.roa (hash: T/pZcNXmahfhGqhyvuYT5Ve4BWsAYlUMonVIOR9Jwwc=) 4: GnpXllFnavAmEq5NxCew5FbUJHI.roa (hash: UrAOMyeUWJbJMwCGhOZ8xTwTpTiZsyt257TfGcy1E8E=) 5: JsNpDFVTIVYgUCJ1BB9Q_OSa1eI.roa (hash: WP14cmIm0lMtM89Vbr+2k9QFB+POLX7HRTX2iqF9kl8=) 6: Ru0qR7TRZaYr9H0bORVN2DKCxoI.roa (hash: 8HruGL7yjBEpznKxnMUFMkvUrJXEnuhg3el+Q45d0VY=) 7: YGYXWM4zBiJHCjmujW70ogRPg8Q.crl (hash: 8xb9UDym+duVmnUaUD9UTJNZWcZhRQyLfnC4PnQL84E=) 8: aUwME-OEW2tfuy8IUz8xO9RJ9VA.roa (hash: TJpr115B55iHu7xXQQMd6VR9p+/zOYhE8FX2JwI2PiU=) 9: c3DCrLRFAJY72J3n3qrjNug2KJI.roa (hash: dR7zsNeMamp+bQYtYrwKTVfIZFLqO0MP1cdCrGnLSmE=) 10: fI3NusZkrqWO5jLO3fTZ5z39Yl0.roa (hash: KILLD4GBsSEpBwdB72CBo4dP3KtsyWxUfk3vFU0iOuU=) 11: k6TUAjq7IKBlApZOlbsqYXrEIx8.roa (hash: bC2yv2JOs11J0JF7qUwzq/8PnVIsXN9xT7P0dfHswKQ=) 12: kAyD-iamG8PuwFNIujY2KowQdcE.roa (hash: RV+R2SNYZWh3uXsxFcbw49NH++kmcr/RW695RLifrdU=) 13: oTWQynDMuokVxgCC3scF41MPP1o.roa (hash: g0Bup2p5b+SvxKWd8J3UiRUXUFS1Jebwoi2iOhjQxSI=) 14: qQ7qZcsRXtjJvwERncTyOZfQz3Q.roa (hash: mqEcMXW4dbXayMYmxFVMUymF7f19p03bN3IauxDIgdw=) 15: qjLDoZZ2r8Ejj-B1h-p33wShS3I.roa (hash: xORdIInsPZCisZI4VA2gawexPnESY6xnP15CmInP8bw=) 16: wjP874y9X7tkaBvc_HFbBV0R3o0.roa (hash: vHwJWvcMFOVy/O/CQb0+O6yyYvMFEOWnSj+tJ3CFAMw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Apr 2025 21:19:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:02:d2:a3:cb:f2:32:f6:0f:67:c5:e3:61:bf:0f:76:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4 Validity Not Before: Apr 4 22:01:20 2025 GMT Not After : Apr 5 22:01:20 2025 GMT Subject: CN=0e9a7cc5b25dd5d4006df294574a1e94fbcdebac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a7:b6:ac:4e:e7:ff:62:fd:da:42:03:01:72: 59:3a:9d:e6:3f:a8:a1:ba:cf:83:33:6c:45:5d:92: c3:51:7e:61:7f:0a:ff:4c:c1:58:68:19:c5:56:5c: 48:c4:6e:76:79:fb:d7:c7:d0:03:7e:be:5c:00:6a: be:54:20:5b:03:59:1c:73:e1:f5:94:09:3d:04:c8: d9:6d:f8:c0:c6:2e:59:25:19:f6:96:61:b7:d7:3e: 00:d2:78:50:92:2d:c9:d0:88:13:ee:13:1e:27:84: 68:41:99:fe:ca:e5:15:df:e4:57:bf:d3:3f:4e:a4: 25:62:4e:73:d3:23:70:df:8f:aa:0d:ad:33:c3:c4: 84:a8:18:99:9e:87:7b:82:f0:59:e3:2c:d1:1e:14: b6:51:47:a0:96:87:fb:d8:c3:de:33:6e:22:3a:7a: e3:f9:18:af:3f:17:24:b0:33:1e:a9:85:e9:da:3a: 7a:3b:3a:b2:f3:c8:03:ba:52:89:3a:88:d0:75:45: 73:12:24:28:97:6a:37:3e:79:ae:75:17:38:a8:ba: 18:7f:4a:ff:6d:6a:d5:50:23:f3:fd:fb:1b:0c:bf: 24:fb:71:c1:ff:dd:08:73:f6:95:e3:74:60:7c:5a: 5c:db:16:69:1c:6e:e3:93:78:f4:22:80:f6:2e:d3: 1c:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:9A:7C:C5:B2:5D:D5:D4:00:6D:F2:94:57:4A:1E:94:FB:CD:EB:AC X509v3 Authority Key Identifier: keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:34:c1:7d:68:61:c0:21:dc:e1:eb:76:8d:68:17:06:a6:f9: 43:ea:33:f2:01:bf:d1:41:25:c3:cf:23:16:e6:13:76:87:45: a0:22:d0:01:4f:5d:7b:f1:a1:b2:cf:c0:63:a1:2b:27:c9:fa: 4b:f1:5c:d7:79:25:55:9b:20:1a:9b:cc:1b:da:de:ce:00:b5: e8:b9:a1:35:ba:31:29:0f:d7:45:81:77:2f:cd:c5:9e:c1:78: ee:2a:20:6b:73:f6:32:4c:50:55:5d:c7:1d:dc:3d:15:0b:5a: 5c:93:e4:f1:c2:7d:34:82:8b:8b:50:72:20:4d:4c:43:e0:07: ab:96:76:c6:de:d9:08:25:f1:5a:a2:64:59:0d:6c:3c:ee:d6: 44:ab:79:3a:01:8a:9a:68:35:68:93:22:f7:d0:cd:2e:6e:33: 56:38:d5:72:8e:f0:e3:18:9b:a5:99:83:d8:70:4d:94:85:3b: f1:8e:42:e9:70:33:cf:ee:07:44:45:be:7b:fb:37:32:0b:dc: b5:6c:21:79:d3:fd:bf:fa:a4:c3:34:61:c6:79:30:57:e6:94: aa:a9:de:a7:be:0b:55:ad:60:5e:2f:42:fe:b8:79:61:3f:29: ab:56:98:58:e4:3d:79:87:59:23:e2:99:70:63:17:dc:6c:b2: bb:02:36:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZYC0qPL8jL2D2fF42G/D3bTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjYxNzU4Y2UzMzA2MjI0NzBhMzlhZThkNmVmNGEyMDQ0 ZjgzYzQwHhcNMjUwNDA0MjIwMTIwWhcNMjUwNDA1MjIwMTIwWjAzMTEwLwYDVQQD EygwZTlhN2NjNWIyNWRkNWQ0MDA2ZGYyOTQ1NzRhMWU5NGZiY2RlYmFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwae2rE7n/2L92kIDAXJZOp3mP6ih us+DM2xFXZLDUX5hfwr/TMFYaBnFVlxIxG52efvXx9ADfr5cAGq+VCBbA1kcc+H1 lAk9BMjZbfjAxi5ZJRn2lmG31z4A0nhQki3J0IgT7hMeJ4RoQZn+yuUV3+RXv9M/ TqQlYk5z0yNw34+qDa0zw8SEqBiZnod7gvBZ4yzRHhS2UUeglof72MPeM24iOnrj +RivPxcksDMeqYXp2jp6Ozqy88gDulKJOojQdUVzEiQol2o3PnmudRc4qLoYf0r/ bWrVUCPz/fsbDL8k+3HB/90Ic/aV43RgfFpc2xZpHG7jk3j0IoD2LtMcUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA6afMWyXdXUAG3ylFdKHpT7zeusMB8GA1UdIwQY MBaAFGBmF1jOMwYiRwo5ro1u9KIET4PEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2Ut MWY4NzQ2OTQ1NDgzLzEvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2UtMWY4NzQ2OTQ1NDgz LzEvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAATTBfWhh wCHc4et2jWgXBqb5Q+oz8gG/0UElw88jFuYTdodFoCLQAU9de/Ghss/AY6ErJ8n6 S/Fc13klVZsgGpvMG9rezgC16LmhNboxKQ/XRYF3L83FnsF47ioga3P2MkxQVV3H Hdw9FQtaXJPk8cJ9NIKLi1ByIE1MQ+AHq5Z2xt7ZCCXxWqJkWQ1sPO7WRKt5OgGK mmg1aJMi99DNLm4zVjjVco7w4xibpZmD2HBNlIU78Y5C6XAzz+4HREW+e/s3Mgvc tWwhedP9v/qkwzRhxnkwV+aUqqnep74LVa1gXi9C/rh5YT8pq1aYWOQ9eYdZI+KZ cGMX3GyyuwI2QA== -----END CERTIFICATE-----Generated at Sat Apr 5 06:32:09 2025 by rpki-client