$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft File: V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft (raw, json) Hash identifier: eFoTdXlOtijZV7UR1CKPuVHlBiYPVMw6V7kHS7Qh/uU= Subject key identifier: 21:E9:27:FC:37:CD:71:0B:69:5D:D0:35:69:5C:B1:59:F9:FF:0A:BD Authority key identifier: 57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47 Certificate issuer: /CN=5753c06290a371994d7577318685f5bc4a538d47 Certificate serial: 01964D7E6D997612E729C28BCC36540C1901 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft Manifest number: 10EA Signing time: Sat 19 Apr 2025 10:00:53 +0000 Manifest this update: Sat 19 Apr 2025 10:00:53 +0000 Manifest next update: Sun 20 Apr 2025 10:00:53 +0000 Files and hashes: 1: 1-2ze8RFqsfXiBAT11ime5104BjY.roa (hash: 1G/91kNwXr6Euhuawe1vb8XkKyyCivckcaN+MUB7G0c=) 2: 2Kp_9YpfYIQIxyL5CznhHnkIxfU.roa (hash: LYK8gdoVuDcWT2M8puwmkXBr6TS/IOAg3OaPmCBsVwI=) 3: 5lDpUUbHXzya0fMquFYbFulqqVs.roa (hash: f1hht89a/wconxQu5KNK8QHufJfhYi0HFOvBnekJIq0=) 4: FHAcQ1hSwnBkPa_1eYwrasvDBAI.roa (hash: UEqpRdrSw3UNWb3wNwi2VW+eLR/IeGW0ScqzLsmeYpU=) 5: FeD_-2NSvz_oTh1LHrP44NqzWIo.roa (hash: M0rfgf8nLa/Z7WmSdsaO8N+Wk6yxPhPTCcsAwupLmJk=) 6: G0XtWDoXmf3g4WPOe4oJBWwD53c.roa (hash: ah5ed8JgyczAK0ktQp/XfJNbJde2PQoHxbYeBWCDQq0=) 7: HlClfikOJrfktj0svDKphR0_6Ic.roa (hash: g1qw7C3eBB8cA1eir2ZaMGGhWvD9jq2Y2uAjecDMYHM=) 8: JHZeQoZfAbaLUlrZmCxtZ1ApkWo.roa (hash: +VPqWsWngmfKHIzBC3GFe6m9tn9RXpVp3jH9A+hxoC0=) 9: LXaOacmSywqNlfh5CO5J1YXXGmI.roa (hash: jtQHK2Bwk3+TO9AZet3mFNI8IuZDJg2fZaIIhEkYoQM=) 10: OXCR5eZAjAKFe_5_WqZvsLDsIGw.roa (hash: +dX5GIlPaHoX8hOklKsClO3JcTsDNTNWJiq3yrlcruo=) 11: SpYcE3S7smMV4xZjzIbw_3YgWQ8.roa (hash: r3TEKYZlZtxmxAKHk3aPSvesmIPuqj82Nxme4CHttjE=) 12: V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl (hash: d1w9+Vu3WPZlpExffnkElrehyoP/T6zmCp2Ygy0QIIY=) 13: Xdc1GXsEPiQ6GE6eHjFDA0ZgS3w.roa (hash: OE+tVEQ0oQcFP5VxqAmEpxiSoF7RE792pp1YSKmB2O0=) 14: ctU4FIR-r7525NdQcQhV07S1InU.roa (hash: AU7Mc04mkVMs25EZU4CCsCrYPVp1VtWzfOi9wTwg8to=) 15: mgE4NAvl5a_fjijODt9d3QXoFWo.roa (hash: U49USPjZ5W98U1upDeeRKhUCJZwO5RTn5SJ+Rro+7ys=) 16: valOsPAluNa3RG5X659q6dsU_FA.roa (hash: fkBC+Rvf3Gv+oy6BC36LsnU6WeruMquhW06fi/seA5s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 20 Apr 2025 10:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:4d:7e:6d:99:76:12:e7:29:c2:8b:cc:36:54:0c:19:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5753c06290a371994d7577318685f5bc4a538d47 Validity Not Before: Apr 19 10:00:53 2025 GMT Not After : Apr 20 10:00:53 2025 GMT Subject: CN=21e927fc37cd710b695dd035695cb159f9ff0abd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7b:36:68:f9:6c:bb:75:20:2f:b6:b9:3f:a8: a3:37:d0:bf:bb:f3:03:96:27:0f:66:60:6c:fa:6f: 25:a0:79:d9:b6:14:a3:a1:16:85:a6:ec:c5:6d:a7: 62:08:15:a0:94:f4:02:ae:1d:8e:98:47:b3:86:17: e5:a0:de:ee:d6:5b:49:ff:d3:c3:56:ec:65:5a:ed: cb:a9:e5:26:4a:d2:75:72:79:d0:7f:25:12:76:5d: 37:51:a1:c7:fa:98:42:6d:21:36:8e:e1:c7:92:7f: 9f:6c:90:9f:ba:7f:32:07:cb:a7:c5:a8:51:53:c5: 55:bb:ab:e6:0c:a8:fa:11:b7:79:0d:f6:60:e1:e6: e2:82:12:75:e5:ac:28:d4:88:43:a6:97:e3:67:f1: fe:49:27:5b:3f:f8:3b:ab:b2:dd:fd:fb:8b:22:20: eb:97:d3:74:f5:26:a1:65:f8:28:4a:ab:d7:60:6b: 6c:6b:89:8b:83:d0:c0:52:d3:91:8a:a5:f6:9e:48: 88:52:8e:f7:dc:8a:ea:a7:23:e1:27:9e:78:3f:87: e0:19:16:f8:1a:04:18:8d:0e:01:83:5a:ee:2b:85: e5:03:f2:97:9d:6b:a6:12:52:5e:10:bf:b1:fe:3b: 37:61:46:53:f2:54:99:e9:65:52:ba:af:39:12:3f: 18:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:E9:27:FC:37:CD:71:0B:69:5D:D0:35:69:5C:B1:59:F9:FF:0A:BD X509v3 Authority Key Identifier: keyid:57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:d3:20:81:58:f6:cb:8c:cc:d6:65:03:99:41:9a:6c:ee:ae: 94:1a:2e:21:95:ad:8d:04:d7:50:88:74:25:6e:02:01:43:9b: 9f:89:0f:9b:8b:2f:a2:f7:56:4b:45:f8:90:2c:4c:ff:9b:04: ad:53:f6:f8:42:6a:32:db:3c:b8:2e:fa:de:af:69:80:03:03: 61:03:95:be:68:4e:65:73:ef:bc:4b:9b:3e:30:fe:ce:ac:c0: 27:da:bc:33:15:b8:a9:14:a8:df:2d:55:61:54:28:06:de:13: 83:62:6b:63:8f:c5:c7:c2:5f:22:64:a6:44:75:2d:1e:c4:ce: 66:ac:cc:ab:07:3b:e4:3f:a0:20:e8:f5:cc:73:3b:24:ed:f9: 8d:4d:68:5b:c4:aa:2b:f4:36:07:ca:af:d9:8d:cf:6a:71:36: 7d:04:16:6d:5f:4d:45:22:7e:d9:7b:3e:c4:b3:25:e9:68:be: eb:a6:e3:f3:52:d7:5a:76:88:cc:fa:75:8b:83:64:64:73:7d: cc:ff:70:52:e7:8c:b6:e1:f2:5d:20:2f:8a:aa:26:e5:ef:97: 94:98:a9:3f:3d:c9:70:a9:83:8d:3c:3f:82:cb:c3:0d:cc:b7: 94:84:2f:8c:62:eb:9a:e7:c9:35:15:5f:7e:07:0d:0d:9f:32: ca:7f:ab:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZNfm2ZdhLnKcKLzDZUDBkBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3NTNjMDYyOTBhMzcxOTk0ZDc1NzczMTg2ODVmNWJjNGE1 MzhkNDcwHhcNMjUwNDE5MTAwMDUzWhcNMjUwNDIwMTAwMDUzWjAzMTEwLwYDVQQD EygyMWU5MjdmYzM3Y2Q3MTBiNjk1ZGQwMzU2OTVjYjE1OWY5ZmYwYWJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3s2aPlsu3UgL7a5P6ijN9C/u/MD licPZmBs+m8loHnZthSjoRaFpuzFbadiCBWglPQCrh2OmEezhhfloN7u1ltJ/9PD VuxlWu3LqeUmStJ1cnnQfyUSdl03UaHH+phCbSE2juHHkn+fbJCfun8yB8unxahR U8VVu6vmDKj6Ebd5DfZg4ebighJ15awo1IhDppfjZ/H+SSdbP/g7q7Ld/fuLIiDr l9N09SahZfgoSqvXYGtsa4mLg9DAUtORiqX2nkiIUo733IrqpyPhJ554P4fgGRb4 GgQYjQ4Bg1ruK4XlA/KXnWumElJeEL+x/js3YUZT8lSZ6WVSuq85Ej8Y1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCHpJ/w3zXELaV3QNWlcsVn5/wq9MB8GA1UdIwQY MBaAFFdTwGKQo3GZTXV3MYaF9bxKU41HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjFQQVlwQ2pjWmxOZFhjeGhvWDF2RXBUalVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9iNDFhYjYtYjlmMy00YjRhLTliN2It MWVkMTA5NTRiZDk2LzEvVjFQQVlwQ2pjWmxOZFhjeGhvWDF2RXBUalVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9iNDFhYjYtYjlmMy00YjRhLTliN2ItMWVkMTA5NTRiZDk2 LzEvVjFQQVlwQ2pjWmxOZFhjeGhvWDF2RXBUalVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi9MggVj2 y4zM1mUDmUGabO6ulBouIZWtjQTXUIh0JW4CAUObn4kPm4svovdWS0X4kCxM/5sE rVP2+EJqMts8uC763q9pgAMDYQOVvmhOZXPvvEubPjD+zqzAJ9q8MxW4qRSo3y1V YVQoBt4Tg2JrY4/Fx8JfImSmRHUtHsTOZqzMqwc75D+gIOj1zHM7JO35jU1oW8Sq K/Q2B8qv2Y3PanE2fQQWbV9NRSJ+2Xs+xLMl6Wi+66bj81LXWnaIzPp1i4NkZHN9 zP9wUueMtuHyXSAviqom5e+XlJipPz3JcKmDjTw/gsvDDcy3lIQvjGLrmufJNRVf fgcNDZ8yyn+roQ== -----END CERTIFICATE-----Generated at Sat Apr 19 17:51:40 2025 by rpki-client