$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft File: CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft (raw, json) Hash identifier: wLqhJXNCVlv1YqwQcHkoKLHnVtZ22xullrE6oaXY8ZA= Subject key identifier: 9F:EA:49:15:F7:05:16:95:77:9D:35:48:77:97:08:7B:A3:B5:C3:F7 Authority key identifier: 08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65 Certificate issuer: /CN=081b7a22e51cfb9cf84205e4449998ad55d8f065 Certificate serial: 01964556A624488BB42BE9A530B6B80741D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft Manifest number: 1527 Signing time: Thu 17 Apr 2025 20:00:28 +0000 Manifest this update: Thu 17 Apr 2025 20:00:28 +0000 Manifest next update: Fri 18 Apr 2025 20:00:28 +0000 Files and hashes: 1: 0EWIFMkHOwPxXxJO-cVVnlFMV9M.roa (hash: H3HRfMwSGiaOC4hjRP3JPpolbe1iEtk1HgVt+tXcFJg=) 2: 1Q8S-F04ndhiDn0SGwOoAJvpcJE.roa (hash: C3Etga/0CnN14pA6mDGityRvYUsO547YlA3aweNBuiE=) 3: 4eUzX53KjKiFABS1AxLPvZ5r-bY.roa (hash: 7YG9ahRtvq/YQgGSsJQAoRx/DWLAGEIhFL7ghXNU9R4=) 4: 5HzzPzyXFWUltUFIxz7A1OHGi7o.roa (hash: KdXF+S8JaHRcZ3Ivt3Pqt/DXcq9oRCgLGhDICrSfT58=) 5: 9NRiEzWNWvOsqkkmj1H_nO4JtIA.roa (hash: M1EfpG0UAk+KXmH4YDb8gbqx8X4cMoL0D3M3L/57Gmk=) 6: CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl (hash: lVIV4STu/Z6in+8YmuRvpNv9nekzdOpI7qYSZcOaaiQ=) 7: CdZHXMtiuXIYHPmoJY2aErxG8Z8.roa (hash: zau8aloWL7mHqdY4KBJaLbm12+SMJIeq7unHMUAtkpg=) 8: ELaIItpNMzqHS9OpyWZxQCWwejQ.roa (hash: nTU80YWNnv8w85NSUIjn+8ThW6vosJXjx8iKS04GONQ=) 9: QDnTB1-gKLLvkYk5f0mHuXK293g.roa (hash: ITp7yMZbWE36QWni9uBDxLpY4F+C9+SnVAj3E7l62Ts=) 10: XDAdp99VnBF7cnnsQ12OybJrT8Y.roa (hash: RlZg9LpMx3Sn+N/ygBjqDdQQDqiZuazZKwQVgxx0FBg=) 11: dSMxrGujVz_UnPvDy2DrbcFQ2Iw.roa (hash: Ji0fBhD2gqGu5FmHg7adB34zmDu43UCMBxzM8MIIlYg=) 12: rfdo-9tZjARHX4NveRw0hMtJZi0.roa (hash: 5ECReeTc1Tc4KP4YsINLVoWJBI6UqeiVxcrFrB9M65o=) 13: tjV22hyfL6sKASeEJo6Ke2cIRMg.roa (hash: j+NWMjI7+Df8SVOaL0Iyl9IZZ4H1LL2E359iqV63je4=) 14: zCJNwAHBT-OuD8JSwLlWmHeq2i0.roa (hash: xxcu2GFnZrIoRaIL254U2SP3O3E+qALgdaalLMmqYoY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 18 Apr 2025 18:56:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:45:56:a6:24:48:8b:b4:2b:e9:a5:30:b6:b8:07:41:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=081b7a22e51cfb9cf84205e4449998ad55d8f065 Validity Not Before: Apr 17 20:00:28 2025 GMT Not After : Apr 18 20:00:28 2025 GMT Subject: CN=9fea4915f7051695779d35487797087ba3b5c3f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:43:fe:aa:9a:a2:2a:0a:1a:50:79:72:0f:e7: 41:53:57:7e:d1:24:2e:b7:f3:5a:45:bb:b4:7a:a1: 9f:2c:71:c6:02:a9:e3:2c:e5:12:35:01:ae:64:29: eb:fa:e3:7d:1f:6e:3d:44:80:d5:38:1d:43:b1:1d: 5a:c9:0a:ed:62:ff:a5:59:7d:ab:43:8d:fa:e2:64: 22:95:94:71:8a:8b:88:66:03:f7:ab:a5:bb:72:bf: 87:ed:bf:10:75:f2:92:07:80:73:07:33:a6:e8:ce: 26:28:30:7d:08:b9:d7:2f:68:9c:19:a4:fb:b9:c2: 57:f7:04:cb:3a:bc:5f:77:be:49:27:46:bc:8b:95: 6d:56:d7:bb:61:b1:3c:b9:4b:11:e4:18:4c:16:dc: 92:fd:85:d0:77:04:ab:b5:7a:ca:b1:c2:e9:aa:aa: 3e:bd:0a:fc:f8:17:dc:d4:e4:32:41:3a:fd:9e:e9: 0c:38:8f:02:41:3a:ac:a7:94:b2:14:bc:3e:a4:e5: 3c:6f:d9:af:7b:47:17:47:7d:b3:8f:bd:14:72:f0: 6f:0b:b0:9b:01:00:d4:f4:3a:b9:e9:d9:59:98:33: ff:63:88:85:6b:cb:24:90:3c:8c:bf:25:96:d0:d4: c4:b9:4f:21:62:dc:d5:ff:93:99:4f:cc:34:97:71: 22:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:EA:49:15:F7:05:16:95:77:9D:35:48:77:97:08:7B:A3:B5:C3:F7 X509v3 Authority Key Identifier: keyid:08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:8d:a6:86:64:b7:91:aa:c7:64:b0:ae:77:ec:b3:84:a7:b7: da:b6:76:06:6c:2f:45:91:9b:f0:c6:11:56:50:e0:6d:30:c7: 6f:e8:4d:0f:30:d3:b4:8d:b7:74:55:9e:6b:e4:f0:31:a5:61: 80:4f:c9:88:0e:f2:af:55:f4:19:0e:ea:b9:ae:da:89:14:11: bb:8b:dd:0f:9d:6d:49:0a:8f:13:0f:ba:f9:8b:db:2e:11:f9: 1d:ac:5e:93:62:04:da:37:fd:14:e3:00:ff:6c:4d:fb:ef:4e: 1d:78:7e:64:fb:70:a0:4c:1f:5a:1e:07:88:79:b9:65:73:11: f8:41:74:bf:3f:13:40:d5:82:c2:e6:54:01:07:91:b8:54:6d: bc:5d:8f:34:87:73:2b:9f:b5:8d:29:cd:0c:7d:0e:7b:ac:58: 60:e6:99:80:43:7b:0d:96:9a:e9:50:7e:72:18:e5:3a:4b:39: fa:34:6c:83:fb:8f:cd:2b:31:c6:56:13:31:d1:60:d6:7e:ce: e4:6a:65:26:f2:98:20:f9:f9:cd:63:f8:4b:1c:35:c8:bb:34: 57:dd:0f:55:e0:e0:48:e1:84:57:48:18:4a:81:c0:3d:62:bd: 16:7c:98:12:f4:de:18:d2:c8:24:92:b1:b1:3e:8f:43:dc:61: 72:53:82:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZFVqYkSIu0K+mlMLa4B0HQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MWI3YTIyZTUxY2ZiOWNmODQyMDVlNDQ0OTk5OGFkNTVk OGYwNjUwHhcNMjUwNDE3MjAwMDI4WhcNMjUwNDE4MjAwMDI4WjAzMTEwLwYDVQQD Eyg5ZmVhNDkxNWY3MDUxNjk1Nzc5ZDM1NDg3Nzk3MDg3YmEzYjVjM2Y3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUP+qpqiKgoaUHlyD+dBU1d+0SQu t/NaRbu0eqGfLHHGAqnjLOUSNQGuZCnr+uN9H249RIDVOB1DsR1ayQrtYv+lWX2r Q4364mQilZRxiouIZgP3q6W7cr+H7b8QdfKSB4BzBzOm6M4mKDB9CLnXL2icGaT7 ucJX9wTLOrxfd75JJ0a8i5VtVte7YbE8uUsR5BhMFtyS/YXQdwSrtXrKscLpqqo+ vQr8+Bfc1OQyQTr9nukMOI8CQTqsp5SyFLw+pOU8b9mve0cXR32zj70UcvBvC7Cb AQDU9Dq56dlZmDP/Y4iFa8skkDyMvyWW0NTEuU8hYtzV/5OZT8w0l3EiyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ/qSRX3BRaVd501SHeXCHujtcP3MB8GA1UdIwQY MBaAFAgbeiLlHPuc+EIF5ESZmK1V2PBlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9jNTE1YzktZGYwOC00MjZjLTgwZTYt MDM2NzI2OGZmODcxLzEvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9jNTE1YzktZGYwOC00MjZjLTgwZTYtMDM2NzI2OGZmODcx LzEvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeY2mhmS3 karHZLCud+yzhKe32rZ2BmwvRZGb8MYRVlDgbTDHb+hNDzDTtI23dFWea+TwMaVh gE/JiA7yr1X0GQ7qua7aiRQRu4vdD51tSQqPEw+6+YvbLhH5Haxek2IE2jf9FOMA /2xN++9OHXh+ZPtwoEwfWh4HiHm5ZXMR+EF0vz8TQNWCwuZUAQeRuFRtvF2PNIdz K5+1jSnNDH0Oe6xYYOaZgEN7DZaa6VB+chjlOks5+jRsg/uPzSsxxlYTMdFg1n7O 5GplJvKYIPn5zWP4Sxw1yLs0V90PVeDgSOGEV0gYSoHAPWK9FnyYEvTeGNLIJJKx sT6PQ9xhclOCrw== -----END CERTIFICATE-----Generated at Fri Apr 18 03:17:53 2025 by rpki-client