$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft File: KUC2lLuglTROS9uZ9R4fECO-V84.mft (raw, json) Hash identifier: wh4U37wfrvFvmsxFowEUTdkX5nqjbsaneWvQHG7kaCo= Subject key identifier: C0:86:42:9B:0A:F4:C9:5B:82:1C:38:95:2F:5C:71:11:5A:A6:75:A9 Authority key identifier: 29:40:B6:94:BB:A0:95:34:4E:4B:DB:99:F5:1E:1F:10:23:BE:57:CE Certificate issuer: /CN=2940b694bba095344e4bdb99f51e1f1023be57ce Certificate serial: 01963FF96478C4B6AF43BC4C4E7B210E5B79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft Manifest number: 1144 Signing time: Wed 16 Apr 2025 19:00:30 +0000 Manifest this update: Wed 16 Apr 2025 19:00:30 +0000 Manifest next update: Thu 17 Apr 2025 19:00:30 +0000 Files and hashes: 1: 1ovUioPSRpwIq2x5dlTtKSWuJt4.roa (hash: glwS98kItQ5aoRJZQt2/p+Tl6Vu2+KBQ6fnWyRCpxeE=) 2: 5ukXNC3ufs5Ifk5kp-hI7U2U8bk.roa (hash: 7ZgXZStDcuyKQtO7JFrlQRnqUqaRLXXlsW/IZ58nkBY=) 3: 6RkSnq1YobTmQ_SgAx2wlTkM2hY.roa (hash: Qt/KZiThTuHL2rOKsl4Ng5FOwbzizcKz0/dUQrpTSQc=) 4: B5wkeGWZjqgz1y_Wsk4MaKTCZiQ.roa (hash: ygucH/c6MgSrKR9IgUN2NMGsbIDgc3W5HpOJEaJUGPw=) 5: BXsWIMS27-emUbxg3N856ta0Zhs.roa (hash: VLEvZClMBOllgwcFIEd17EnHHY/+y56YDL+ioA9gy2o=) 6: KUC2lLuglTROS9uZ9R4fECO-V84.crl (hash: eEQaIE/49Jk17MhGI1XzioxpB2LGDjcqyC96up6moRw=) 7: YCe-DX5vspCo53n_t9ku3ipwr0c.roa (hash: bsw052ayicKeBY1zBDEewyIk2nJP8d+tgqf/wW7oirc=) 8: i4f1t__SHD-QTSI70hcDe0-iLuE.roa (hash: x5mSq7hcGWnjVGsMlKR9T5XBSWXyZ8MGhLOD1IalJyI=) 9: nlwD__Rr_Kz3vDBdg3j2YS8w3UU.roa (hash: oYim5zXBclNnekk/jArnYzaiEFQpBbNaF9nzqE+fJWU=) 10: t_T_n2rHgRaUg9w286JLApHuPsY.roa (hash: Xw7YLCCdVoaSNcuVfBLtogrNakQDxTgFieuFH7n8sSI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 17 Apr 2025 13:16:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:3f:f9:64:78:c4:b6:af:43:bc:4c:4e:7b:21:0e:5b:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2940b694bba095344e4bdb99f51e1f1023be57ce Validity Not Before: Apr 16 19:00:30 2025 GMT Not After : Apr 17 19:00:30 2025 GMT Subject: CN=c086429b0af4c95b821c38952f5c71115aa675a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:e9:b7:58:62:17:32:bf:4f:05:d6:74:42:2e: b9:9b:38:f5:04:3e:b5:30:ef:8a:82:46:7e:37:2c: cd:4f:a0:56:53:3e:66:1d:2e:5f:43:23:10:d5:d3: ca:3b:9d:11:63:cf:dc:6f:b6:2d:f8:2e:ca:ce:0d: 4a:4a:3e:96:f7:9a:b1:e4:1d:6a:ed:ac:2e:1d:21: c6:ae:9a:e3:85:25:96:98:76:17:ef:f4:5b:2b:2a: 1d:d2:00:21:98:22:9e:27:1a:85:8f:81:a7:49:d5: 45:66:4c:e0:ac:5e:50:ad:8e:d4:63:93:44:b4:7e: 24:e3:07:ae:a6:86:42:bd:6d:0b:34:71:40:63:b4: 9e:85:84:32:92:16:3d:bd:1c:2a:4c:08:24:60:dc: 48:81:f5:0a:4b:62:65:c3:c0:ca:92:70:2a:bd:72: 5e:2a:3f:25:0a:e3:b0:e4:7d:e5:67:82:2f:4e:4a: 1e:87:3b:d4:d0:d8:36:96:02:69:2b:01:e4:c3:8a: 81:65:25:21:5f:da:53:9a:1f:3d:c9:07:c3:6f:09: 2c:a2:f3:16:c4:8b:ae:82:be:9b:3c:ea:08:19:56: 7d:dc:77:ff:e1:82:04:b7:a9:ef:65:8c:a9:3c:47: 8e:61:a4:8f:d5:3c:1c:33:99:59:c8:68:ff:de:fe: ad:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:86:42:9B:0A:F4:C9:5B:82:1C:38:95:2F:5C:71:11:5A:A6:75:A9 X509v3 Authority Key Identifier: keyid:29:40:B6:94:BB:A0:95:34:4E:4B:DB:99:F5:1E:1F:10:23:BE:57:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:6f:61:33:b5:8f:00:83:b8:45:1f:a5:b9:9d:8a:b3:6b:7d: e0:b6:23:02:90:34:c3:e4:7a:77:3c:a2:26:0a:75:ed:34:9d: 6e:4c:da:0a:c6:55:a3:29:0b:d6:c6:57:42:16:aa:69:b2:e5: a4:84:4a:a1:87:57:21:9d:cf:a3:42:88:32:3f:bf:fd:c7:ea: 70:20:b5:3d:7c:54:9a:5a:c4:b9:76:e1:0b:ae:e8:80:9e:a3: fb:1a:42:eb:98:b0:a0:c7:18:b6:68:ab:e5:cf:0b:50:70:55: f6:2a:68:09:6f:6e:e7:ed:c7:52:f0:0d:db:7b:4f:6b:9d:20: a2:83:2c:fd:e5:75:c1:5d:7e:c6:db:36:0e:ef:b9:b2:6e:e4: 01:0e:3a:a2:0a:05:6f:e1:96:0a:11:ef:60:50:97:74:37:60: d0:92:30:9f:cc:fb:0b:b8:9f:cf:ff:ad:84:47:19:2e:51:3c: b0:6f:1a:e9:98:22:77:09:b0:96:8f:28:11:63:e8:0e:d5:85: 06:3e:5c:93:5b:d2:56:52:35:70:ab:c0:1f:be:b8:56:cf:1a: df:ef:d8:d7:de:f7:f3:f5:c8:35:82:eb:eb:e8:c3:74:97:75: a8:9b:da:1a:a2:90:1e:de:e9:e6:09:47:e6:5a:38:84:9e:97: 71:9a:00:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZY/+WR4xLavQ7xMTnshDlt5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NDBiNjk0YmJhMDk1MzQ0ZTRiZGI5OWY1MWUxZjEwMjNi ZTU3Y2UwHhcNMjUwNDE2MTkwMDMwWhcNMjUwNDE3MTkwMDMwWjAzMTEwLwYDVQQD EyhjMDg2NDI5YjBhZjRjOTViODIxYzM4OTUyZjVjNzExMTVhYTY3NWE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8em3WGIXMr9PBdZ0Qi65mzj1BD61 MO+KgkZ+NyzNT6BWUz5mHS5fQyMQ1dPKO50RY8/cb7Yt+C7Kzg1KSj6W95qx5B1q 7awuHSHGrprjhSWWmHYX7/RbKyod0gAhmCKeJxqFj4GnSdVFZkzgrF5QrY7UY5NE tH4k4weupoZCvW0LNHFAY7SehYQykhY9vRwqTAgkYNxIgfUKS2Jlw8DKknAqvXJe Kj8lCuOw5H3lZ4IvTkoehzvU0Ng2lgJpKwHkw4qBZSUhX9pTmh89yQfDbwksovMW xIuugr6bPOoIGVZ93Hf/4YIEt6nvZYypPEeOYaSP1TwcM5lZyGj/3v6tXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMCGQpsK9Mlbghw4lS9ccRFapnWpMB8GA1UdIwQY MBaAFClAtpS7oJU0TkvbmfUeHxAjvlfOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1VDMmxMdWdsVFJPUzl1WjlSNGZFQ08tVjg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi82MTA3ZTQtNDM5My00Y2JlLWE2YzIt MjdjMWEzNTk3NmRlLzEvS1VDMmxMdWdsVFJPUzl1WjlSNGZFQ08tVjg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi82MTA3ZTQtNDM5My00Y2JlLWE2YzItMjdjMWEzNTk3NmRl LzEvS1VDMmxMdWdsVFJPUzl1WjlSNGZFQ08tVjg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARW9hM7WP AIO4RR+luZ2Ks2t94LYjApA0w+R6dzyiJgp17TSdbkzaCsZVoykL1sZXQhaqabLl pIRKoYdXIZ3Po0KIMj+//cfqcCC1PXxUmlrEuXbhC67ogJ6j+xpC65iwoMcYtmir 5c8LUHBV9ipoCW9u5+3HUvAN23tPa50gooMs/eV1wV1+xts2Du+5sm7kAQ46ogoF b+GWChHvYFCXdDdg0JIwn8z7C7ifz/+thEcZLlE8sG8a6Zgidwmwlo8oEWPoDtWF Bj5ck1vSVlI1cKvAH764Vs8a3+/Y19738/XINYLr6+jDdJd1qJvaGqKQHt7p5glH 5lo4hJ6XcZoAHQ== -----END CERTIFICATE-----Generated at Thu Apr 17 00:14:29 2025 by rpki-client