$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft File: Qk_v-1duQR3lEYcdweC9eiDixNc.mft (raw, json) Hash identifier: nB3fDGRyWCbZ0yjvLOIWcYZtz6fYR6V+WQEfhMwf/8g= Subject key identifier: 1E:8E:F8:45:0D:FF:B7:50:D1:42:F6:FB:8B:60:91:4D:33:B0:AC:3F Authority key identifier: 42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7 Certificate issuer: /CN=424feffb576e411de511871dc1e0bd7a20e2c4d7 Certificate serial: 0196082F8FE59C59F6991699F38C22B04F97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft Manifest number: 10B5 Signing time: Sat 05 Apr 2025 23:00:56 +0000 Manifest this update: Sat 05 Apr 2025 23:00:56 +0000 Manifest next update: Sun 06 Apr 2025 23:00:56 +0000 Files and hashes: 1: DkWRQ6AFjFv7rFQxgp89eDWwZzQ.roa (hash: k4LFdro8EdWirWfXizr76ZtFjuGb6M0FW+ROBsiX2e8=) 2: EqxrefdyqjYZzrCHrTrk9NHiht0.roa (hash: PPHZGYMZ3zZjXKQA0ijIhbbL3UF83eAk3Rgwiwv4iE0=) 3: Qk_v-1duQR3lEYcdweC9eiDixNc.crl (hash: 2a5QnvG0R5tn2l13dTKQy6483agIUN2fYesfjngTF4M=) 4: WZk41uDGz8aqTuMK5_6Ovbbhicc.roa (hash: 5tAgdvaBn8Xzr7bEMaN+4RyehKAGk3MjK0uZbZfdeTE=) 5: XLX74-2fz_xcT8jjeK7YOxawwwc.roa (hash: b+kTBN0QlzOTjI1a+jkjVcwIWZ2nk7a5/iBtKxwJ0UQ=) 6: bfcBA_m7rGFWZUrLHbxdnwQav2M.roa (hash: 4dU7FEoFdtXhvQL59inDOPJXsvneQJU94I/fuz7sgSI=) 7: dE-dE1C98bzQfzFp4viryEzVGNI.roa (hash: keoRfTd2k6052VngqSZmL9fG3jF6ZyNryRy3nAsLGG4=) 8: msTbd_cRgqE8u0I4x9SddZe62KE.roa (hash: mupJQETdaQVPnbs2vC2bYij0saRrza6SHsY1QyVDaJY=) 9: tM1Yq2bXiB1kWHQqw1R7qqhyJN0.roa (hash: oZHMmFERFSMV3UaFbDA8Gmy32zJZA3mRLZIu5Egtw7c=) 10: zLAA5CUhIEdukEthrOgBOAwbyZM.roa (hash: MW2hOZqoAax6b0hos7zyQQFLCe7uqIGCikNzhGtl+O0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Apr 2025 22:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:08:2f:8f:e5:9c:59:f6:99:16:99:f3:8c:22:b0:4f:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=424feffb576e411de511871dc1e0bd7a20e2c4d7 Validity Not Before: Apr 5 23:00:56 2025 GMT Not After : Apr 6 23:00:56 2025 GMT Subject: CN=1e8ef8450dffb750d142f6fb8b60914d33b0ac3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a6:75:3a:f6:2a:d6:7a:35:ca:b3:cf:17:c2: 1b:68:57:fd:0f:e1:a1:5d:25:e4:91:9f:69:8e:7b: e7:25:f1:d4:2b:12:e4:f7:6e:f3:e3:7a:0b:55:b9: ae:25:54:cd:c8:fe:03:f5:38:d1:b8:0b:96:3e:43: 41:16:c3:94:41:85:18:57:d0:96:b0:13:02:a9:c6: 8a:71:3a:6f:89:b2:8d:27:76:4f:09:6a:cd:84:1b: 49:b7:af:f9:d2:7a:e3:d4:8a:bb:f7:39:9c:b4:03: 5d:f7:2d:ae:57:a7:8d:81:c1:66:72:14:03:27:81: eb:f1:e2:5e:49:60:21:e8:d6:49:7a:f2:2f:ed:72: 85:b1:64:ff:5f:84:7c:9c:0c:cd:2b:ca:a6:10:11: 7d:f0:28:51:f5:b1:81:05:4a:ff:34:80:fe:00:ad: ea:da:4b:6c:d8:96:09:53:19:d8:6f:4e:44:cc:d4: c8:89:2f:f3:1a:5f:f0:49:1e:42:89:ba:cf:81:d6: 00:d2:c0:6f:70:41:14:40:4f:86:8c:f0:d3:1e:f0: 6a:c9:ce:ad:61:a3:91:07:27:9b:4d:ba:9d:49:5b: c3:ad:f6:44:52:68:98:15:29:49:67:26:0f:17:48: 84:30:7c:7d:ca:72:14:7a:40:08:f4:f0:c4:9b:d5: a2:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:8E:F8:45:0D:FF:B7:50:D1:42:F6:FB:8B:60:91:4D:33:B0:AC:3F X509v3 Authority Key Identifier: keyid:42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:c7:a0:91:2d:7b:c0:1f:98:1f:20:6e:4d:e7:a0:e1:3e:05: 88:e0:04:c8:70:28:8d:f6:fb:55:52:b3:ba:e5:61:38:cb:5d: 1c:2c:20:3d:7e:22:72:e5:95:bc:fa:75:b8:0e:7a:16:3e:e0: 15:09:28:6b:e2:ef:f0:6d:5b:0f:12:d2:8c:11:c4:b6:2a:1a: cf:95:ea:a8:65:b4:b7:a4:48:b2:27:92:00:bf:d5:b6:3d:61: 1d:69:39:ca:7a:6d:30:15:4a:3a:01:40:31:b1:ac:2c:aa:cb: 3d:32:f1:ad:b3:4a:2e:3f:86:c0:99:bf:ae:a7:20:eb:d5:02: 00:a6:7b:30:73:8f:c0:65:d1:9a:73:0f:ea:d2:aa:fa:79:c7: 31:89:56:35:a2:6d:b0:bd:b0:42:b2:af:77:4c:a9:80:18:7d: bf:f5:ba:e4:bd:22:e4:0a:c3:bd:6c:70:b4:02:a5:c8:5e:ef: 66:f7:85:1b:e9:5e:60:96:a0:74:f0:67:0c:f9:0f:23:ef:6e: 37:de:0f:7d:2d:10:95:03:50:63:e4:c5:93:fb:40:ea:b3:9a: ca:a4:70:c0:be:2c:e2:a6:15:a5:1f:2d:ec:ec:d4:d2:7e:e9: 0b:c3:74:a5:6d:60:2b:a9:eb:6e:66:0d:f5:a7:ae:cf:c9:dc: 0e:4d:a2:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZYIL4/lnFn2mRaZ84wisE+XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyNGZlZmZiNTc2ZTQxMWRlNTExODcxZGMxZTBiZDdhMjBl MmM0ZDcwHhcNMjUwNDA1MjMwMDU2WhcNMjUwNDA2MjMwMDU2WjAzMTEwLwYDVQQD EygxZThlZjg0NTBkZmZiNzUwZDE0MmY2ZmI4YjYwOTE0ZDMzYjBhYzNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKZ1OvYq1no1yrPPF8IbaFf9D+Gh XSXkkZ9pjnvnJfHUKxLk927z43oLVbmuJVTNyP4D9TjRuAuWPkNBFsOUQYUYV9CW sBMCqcaKcTpvibKNJ3ZPCWrNhBtJt6/50nrj1Iq79zmctANd9y2uV6eNgcFmchQD J4Hr8eJeSWAh6NZJevIv7XKFsWT/X4R8nAzNK8qmEBF98ChR9bGBBUr/NID+AK3q 2kts2JYJUxnYb05EzNTIiS/zGl/wSR5CibrPgdYA0sBvcEEUQE+GjPDTHvBqyc6t YaORByebTbqdSVvDrfZEUmiYFSlJZyYPF0iEMHx9ynIUekAI9PDEm9WidwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB6O+EUN/7dQ0UL2+4tgkU0zsKw/MB8GA1UdIwQY MBaAFEJP7/tXbkEd5RGHHcHgvXog4sTXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWtfdi0xZHVRUjNsRVljZHdlQzllaURpeE5jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy82MTM1MDgtMDgzMi00MWY2LWFjYjct ODMxZjdlNmY1Y2NkLzEvUWtfdi0xZHVRUjNsRVljZHdlQzllaURpeE5jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy82MTM1MDgtMDgzMi00MWY2LWFjYjctODMxZjdlNmY1Y2Nk LzEvUWtfdi0xZHVRUjNsRVljZHdlQzllaURpeE5jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPcegkS17 wB+YHyBuTeeg4T4FiOAEyHAojfb7VVKzuuVhOMtdHCwgPX4icuWVvPp1uA56Fj7g FQkoa+Lv8G1bDxLSjBHEtioaz5XqqGW0t6RIsieSAL/Vtj1hHWk5ynptMBVKOgFA MbGsLKrLPTLxrbNKLj+GwJm/rqcg69UCAKZ7MHOPwGXRmnMP6tKq+nnHMYlWNaJt sL2wQrKvd0ypgBh9v/W65L0i5ArDvWxwtAKlyF7vZveFG+leYJagdPBnDPkPI+9u N94PfS0QlQNQY+TFk/tA6rOayqRwwL4s4qYVpR8t7OzU0n7pC8N0pW1gK6nrbmYN 9aeuz8ncDk2i/w== -----END CERTIFICATE-----Generated at Sun Apr 6 02:00:15 2025 by rpki-client