$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft File: KUC2lLuglTROS9uZ9R4fECO-V84.mft (raw, json) Hash identifier: AdIEZZ1+ZaUvx4Cm9tmoHUQreBsmCV/UEO8EvlYYThw= Subject key identifier: 93:72:AA:9F:DF:3C:47:18:2B:A3:A6:E1:61:10:98:B6:C4:64:45:D7 Authority key identifier: 29:40:B6:94:BB:A0:95:34:4E:4B:DB:99:F5:1E:1F:10:23:BE:57:CE Certificate issuer: /CN=2940b694bba095344e4bdb99f51e1f1023be57ce Certificate serial: 0195903D1FC4FED005A2CB12F8BFB5D4A2C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft Manifest number: 10E9 Signing time: Thu 13 Mar 2025 16:01:19 +0000 Manifest this update: Thu 13 Mar 2025 16:01:19 +0000 Manifest next update: Fri 14 Mar 2025 16:01:19 +0000 Files and hashes: 1: 1ovUioPSRpwIq2x5dlTtKSWuJt4.roa (hash: glwS98kItQ5aoRJZQt2/p+Tl6Vu2+KBQ6fnWyRCpxeE=) 2: 5ukXNC3ufs5Ifk5kp-hI7U2U8bk.roa (hash: 7ZgXZStDcuyKQtO7JFrlQRnqUqaRLXXlsW/IZ58nkBY=) 3: 6RkSnq1YobTmQ_SgAx2wlTkM2hY.roa (hash: Qt/KZiThTuHL2rOKsl4Ng5FOwbzizcKz0/dUQrpTSQc=) 4: B5wkeGWZjqgz1y_Wsk4MaKTCZiQ.roa (hash: ygucH/c6MgSrKR9IgUN2NMGsbIDgc3W5HpOJEaJUGPw=) 5: BXsWIMS27-emUbxg3N856ta0Zhs.roa (hash: VLEvZClMBOllgwcFIEd17EnHHY/+y56YDL+ioA9gy2o=) 6: KUC2lLuglTROS9uZ9R4fECO-V84.crl (hash: Ugx38+EPxdXNjUHjyTu0T9qc7okX9o+9m0HX6AsBoQw=) 7: YCe-DX5vspCo53n_t9ku3ipwr0c.roa (hash: bsw052ayicKeBY1zBDEewyIk2nJP8d+tgqf/wW7oirc=) 8: i4f1t__SHD-QTSI70hcDe0-iLuE.roa (hash: x5mSq7hcGWnjVGsMlKR9T5XBSWXyZ8MGhLOD1IalJyI=) 9: nlwD__Rr_Kz3vDBdg3j2YS8w3UU.roa (hash: oYim5zXBclNnekk/jArnYzaiEFQpBbNaF9nzqE+fJWU=) 10: t_T_n2rHgRaUg9w286JLApHuPsY.roa (hash: Xw7YLCCdVoaSNcuVfBLtogrNakQDxTgFieuFH7n8sSI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 14 Mar 2025 15:28:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:95:90:3d:1f:c4:fe:d0:05:a2:cb:12:f8:bf:b5:d4:a2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2940b694bba095344e4bdb99f51e1f1023be57ce Validity Not Before: Mar 13 16:01:19 2025 GMT Not After : Mar 14 16:01:19 2025 GMT Subject: CN=9372aa9fdf3c47182ba3a6e1611098b6c46445d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:28:43:1a:a2:f9:bf:1a:1e:5b:72:8f:61:4a: 03:dd:cd:a6:8f:ab:99:ee:3c:65:77:c7:15:bc:37: 86:3d:77:6f:6a:d4:e4:19:38:61:02:59:ae:d0:4a: 8f:c5:97:17:86:0f:58:1f:f2:87:56:78:8c:b6:d1: 70:42:b6:fa:e3:b7:2f:24:4d:2d:48:4a:5b:d2:ea: ba:5b:8c:4d:d9:dd:28:3e:3c:b2:17:e4:14:7f:b5: 8e:88:b3:1e:3f:43:bd:51:f1:41:33:35:31:65:b8: 2d:a9:fa:68:ad:17:73:6b:0e:eb:f6:45:eb:2c:1f: 23:27:e2:5d:76:68:98:24:ce:29:1b:f5:6b:63:5e: 6a:43:71:7f:b7:9d:c0:a6:c9:41:a0:86:65:e3:3b: fc:f8:ef:30:d4:4c:ec:a7:70:f4:0e:31:7c:5a:e9: 8a:20:7c:2a:14:ee:1e:5d:e7:3b:b8:b3:53:84:04: 5a:2d:fb:ad:b9:fb:bb:d9:61:14:4d:0a:c4:c7:83: f1:bb:e9:c1:00:54:c9:4a:0f:5d:56:44:96:be:24: 8e:f8:19:1d:52:2e:da:28:cb:3d:fa:f2:42:5d:b6: 9b:6b:81:36:b8:0c:26:9e:4f:34:c7:43:f5:3f:77: b6:50:7b:8e:2b:9e:84:34:2e:e3:99:dc:3f:ee:b1: 79:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:72:AA:9F:DF:3C:47:18:2B:A3:A6:E1:61:10:98:B6:C4:64:45:D7 X509v3 Authority Key Identifier: keyid:29:40:B6:94:BB:A0:95:34:4E:4B:DB:99:F5:1E:1F:10:23:BE:57:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:02:55:e8:8c:0b:ce:ea:fc:ff:9c:2f:af:bb:11:50:53:09: e1:d4:4a:01:b0:22:2a:fd:af:a5:93:82:3e:d7:3d:c2:fa:8f: cb:f4:f3:3f:55:ad:13:87:0c:8c:bb:17:82:e9:07:53:2a:d2: 90:9b:66:76:0d:94:43:eb:0c:dc:9e:14:88:2e:de:87:82:a8: 67:fb:90:49:f4:2f:98:6d:53:0d:d0:1e:85:86:43:f0:66:32: 2b:28:b1:31:63:f5:7d:63:0a:2a:a4:66:70:95:ad:35:44:4f: 92:f1:c2:b4:c0:65:c7:42:05:96:0f:7b:38:d0:ea:51:52:61: 10:52:95:56:e5:f7:15:32:9a:fd:17:7e:6f:7c:74:dd:ac:38: cd:cb:c3:e7:69:fb:bb:4d:23:c5:d9:82:65:c1:27:33:f7:1c: e4:4a:ee:72:41:fb:2e:d6:80:3e:d9:18:0c:52:3b:aa:3c:31: 10:bf:5d:2b:35:fc:12:81:e0:e1:2a:df:f4:68:2f:df:df:65: c0:4b:9a:1d:8f:cc:0d:92:8f:a2:c8:3f:56:66:13:5c:c4:fc: c5:be:dd:5b:ef:a1:6b:a8:3c:b2:ff:59:a1:f5:82:81:f5:e0: e0:ed:89:06:2f:d0:02:bb:6b:2a:e1:5f:13:ef:b7:1e:8e:de: 07:e3:9f:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZWQPR/E/tAFossS+L+11KLAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NDBiNjk0YmJhMDk1MzQ0ZTRiZGI5OWY1MWUxZjEwMjNi ZTU3Y2UwHhcNMjUwMzEzMTYwMTE5WhcNMjUwMzE0MTYwMTE5WjAzMTEwLwYDVQQD Eyg5MzcyYWE5ZmRmM2M0NzE4MmJhM2E2ZTE2MTEwOThiNmM0NjQ0NWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyhDGqL5vxoeW3KPYUoD3c2mj6uZ 7jxld8cVvDeGPXdvatTkGThhAlmu0EqPxZcXhg9YH/KHVniMttFwQrb647cvJE0t SEpb0uq6W4xN2d0oPjyyF+QUf7WOiLMeP0O9UfFBMzUxZbgtqfporRdzaw7r9kXr LB8jJ+JddmiYJM4pG/VrY15qQ3F/t53ApslBoIZl4zv8+O8w1Ezsp3D0DjF8WumK IHwqFO4eXec7uLNThARaLfutufu72WEUTQrEx4Pxu+nBAFTJSg9dVkSWviSO+Bkd Ui7aKMs9+vJCXbaba4E2uAwmnk80x0P1P3e2UHuOK56ENC7jmdw/7rF5WwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJNyqp/fPEcYK6Om4WEQmLbEZEXXMB8GA1UdIwQY MBaAFClAtpS7oJU0TkvbmfUeHxAjvlfOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1VDMmxMdWdsVFJPUzl1WjlSNGZFQ08tVjg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi82MTA3ZTQtNDM5My00Y2JlLWE2YzIt MjdjMWEzNTk3NmRlLzEvS1VDMmxMdWdsVFJPUzl1WjlSNGZFQ08tVjg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi82MTA3ZTQtNDM5My00Y2JlLWE2YzItMjdjMWEzNTk3NmRl LzEvS1VDMmxMdWdsVFJPUzl1WjlSNGZFQ08tVjg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbQJV6IwL zur8/5wvr7sRUFMJ4dRKAbAiKv2vpZOCPtc9wvqPy/TzP1WtE4cMjLsXgukHUyrS kJtmdg2UQ+sM3J4UiC7eh4KoZ/uQSfQvmG1TDdAehYZD8GYyKyixMWP1fWMKKqRm cJWtNURPkvHCtMBlx0IFlg97ONDqUVJhEFKVVuX3FTKa/Rd+b3x03aw4zcvD52n7 u00jxdmCZcEnM/cc5EruckH7LtaAPtkYDFI7qjwxEL9dKzX8EoHg4Srf9Ggv399l wEuaHY/MDZKPosg/VmYTXMT8xb7dW++ha6g8sv9ZofWCgfXg4O2JBi/QArtrKuFf E++3Ho7eB+OfSg== -----END CERTIFICATE-----Generated at Thu Mar 13 20:58:43 2025 by rpki-client