$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft File: lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft (raw, json) Hash identifier: 8yiEmg8P1UdAo0yaonyBJc4yrcjxROWbUkqfqL5KOxw= Subject key identifier: 02:08:C7:5E:38:D6:B0:D9:14:9D:BE:94:A5:28:56:DF:20:1E:77:EE Authority key identifier: 95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4 Certificate issuer: /CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4 Certificate serial: 019608D47FC6B78C4E901A37B7CBE0DD9708 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft Manifest number: 063B Signing time: Sun 06 Apr 2025 02:01:06 +0000 Manifest this update: Sun 06 Apr 2025 02:01:06 +0000 Manifest next update: Mon 07 Apr 2025 02:01:06 +0000 Files and hashes: 1: 1MaQ3UERADg_6Qg7JL_rTSZtSHY.roa (hash: +cHQwaDCYvHww4iP38T2uoBP4/k9EvIeJ4TrlPbtqZk=) 2: A4sFQqRFCKCwm3rOcDm1brgLh20.roa (hash: zpTrJTrbgAHaC1jzfyC84uX2bsnYBgkUeCbD1/ANlNA=) 3: Mw4DzLJ9A153q_gtADK6A3kEnBY.roa (hash: 9HhbT3XmjLkyekKYjCbpBZ8eHIVc8Kvm9P+X8Pv5KiY=) 4: UXNVLBT3IBBXzOrWFMP9VMwllaE.roa (hash: GA2FZzJZegA/bvzwAUTE7HtSxGzTmLYPoQhmd/XSkNc=) 5: dHqe2g1gPOsNegmLcIQI5U9SNfQ.roa (hash: 9F/5Kpf5xOdn6kNdotAo01R2YGp/WqJkDJDDXyXxvig=) 6: gWkZHgIkZd9yenAGLfTyA3gKWR4.roa (hash: l54n2yyzmR2WNOmjMKZ/OpFoKCDgQWPMUC6iItLiMEs=) 7: lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl (hash: LG5LGQdsQHVXp0SImZQkJI2/+PKnjmGQIVyyLw4wqDw=) 8: pogCClIVQuTAGHMrqdp_DRQP_iw.roa (hash: Tk0SJU87JQDfMtu6wpZcC4NHpxmpDCQmsFrb0+IhQkQ=) 9: whkGOZP4Q7wa7J5dbmXu5vPM1v0.roa (hash: 4Aaj5rdkc2lbz/0Cfp212ny3pIPA+JJbd5a/bPZM33w=) 10: yUoBCuAM3eeeS5PJtpm_h3BonbI.roa (hash: Yanbkga/qe67IvnuSRaM/Q9sdhNyEQ9ebYUC/TCNJFQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Apr 2025 22:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:08:d4:7f:c6:b7:8c:4e:90:1a:37:b7:cb:e0:dd:97:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4 Validity Not Before: Apr 6 02:01:06 2025 GMT Not After : Apr 7 02:01:06 2025 GMT Subject: CN=0208c75e38d6b0d9149dbe94a52856df201e77ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:17:89:c8:c8:c8:c4:66:27:c1:a8:47:e3:ed: 43:68:d0:c0:87:40:46:60:8b:6f:95:68:4b:8f:e2: 0b:10:0c:07:ac:76:28:3a:09:56:0a:1f:65:72:6d: 8e:93:67:10:57:06:54:d1:26:89:8f:5b:9e:ed:b9: ef:18:6c:c0:25:e7:6e:7c:d6:ce:fe:2d:ab:ac:b5: 51:4e:30:a4:6b:e5:02:51:5d:39:6f:98:91:5d:6b: 60:03:e1:04:77:e2:e7:38:fc:81:bf:dc:ae:88:3d: 02:0d:00:7a:f6:57:b5:0a:76:89:9f:07:d9:68:b2: 66:19:38:0c:ba:b1:12:4b:24:8d:d1:2c:01:95:3e: 8d:83:22:50:b3:36:68:da:97:30:a6:31:1d:86:a0: 24:c3:25:bf:64:48:27:ab:ff:5c:dd:54:54:3d:ba: 03:c5:d5:a1:e4:4a:60:8e:2f:6f:10:38:f4:00:07: 74:d9:41:64:5b:7a:b9:46:4d:ab:f0:85:5b:84:dc: 57:44:7a:f4:5c:1a:5d:cc:98:6c:95:7e:40:40:e0: 08:c6:f5:9c:df:b6:29:29:1d:7c:71:a1:f9:cd:cd: 08:15:52:b5:17:20:c8:b6:6b:60:fa:5d:ac:e7:4a: 1b:95:01:c3:77:73:c7:4f:5a:7f:0b:85:da:09:77: 82:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:08:C7:5E:38:D6:B0:D9:14:9D:BE:94:A5:28:56:DF:20:1E:77:EE X509v3 Authority Key Identifier: keyid:95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:ee:59:dc:d9:90:d9:44:df:42:27:a7:10:8f:18:ab:d3:bd: c6:7c:22:f9:e3:27:2c:a2:2c:84:3e:aa:e6:ad:ce:b0:95:16: 50:a5:e4:fb:b4:92:88:9d:d8:b8:79:ca:cd:b6:13:d8:08:0c: 37:41:12:19:49:21:a2:d1:71:ac:e2:fe:90:31:3e:3f:a2:f6: b4:00:66:2c:a3:13:e6:04:b3:e7:eb:29:64:c8:65:1b:4e:20: 63:82:46:f1:cd:eb:2d:57:35:bf:2a:00:56:35:fa:55:54:f3: a8:1c:e5:83:4d:3f:0a:1a:1f:87:38:b8:0d:9b:76:83:61:5c: 4d:0a:7e:86:6d:cf:f9:cc:95:2e:eb:50:a9:c7:e2:16:92:c0: db:91:b8:5a:29:61:db:cc:12:fc:00:c4:aa:b1:b2:1e:3b:39: a2:f5:b8:97:7c:0e:ec:df:4e:88:1e:46:0d:c1:68:53:6e:69: c9:d8:00:49:81:af:e0:a2:61:79:41:86:bd:a3:83:7a:ab:23: 59:ad:4c:12:f3:3b:14:db:f6:b8:d2:32:4b:0a:85:1f:ec:a9: 64:ea:75:bf:84:e2:95:48:b2:11:07:ef:cf:43:95:0c:7f:b8: 0d:2f:a2:e9:f9:52:9f:a9:32:79:7b:56:43:f0:a1:96:bd:b8: 5a:49:89:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZYI1H/Gt4xOkBo3t8vg3ZcIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1MjJhYjY3OTIyY2UwMjc1ZThjNjFhYmZhODJkMmE3NTRh ZjZkYzQwHhcNMjUwNDA2MDIwMTA2WhcNMjUwNDA3MDIwMTA2WjAzMTEwLwYDVQQD EygwMjA4Yzc1ZTM4ZDZiMGQ5MTQ5ZGJlOTRhNTI4NTZkZjIwMWU3N2VlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6heJyMjIxGYnwahH4+1DaNDAh0BG YItvlWhLj+ILEAwHrHYoOglWCh9lcm2Ok2cQVwZU0SaJj1ue7bnvGGzAJedufNbO /i2rrLVRTjCka+UCUV05b5iRXWtgA+EEd+LnOPyBv9yuiD0CDQB69le1CnaJnwfZ aLJmGTgMurESSySN0SwBlT6NgyJQszZo2pcwpjEdhqAkwyW/ZEgnq/9c3VRUPboD xdWh5Epgji9vEDj0AAd02UFkW3q5Rk2r8IVbhNxXRHr0XBpdzJhslX5AQOAIxvWc 37YpKR18caH5zc0IFVK1FyDItmtg+l2s50oblQHDd3PHT1p/C4XaCXeCTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAIIx1441rDZFJ2+lKUoVt8gHnfuMB8GA1UdIwQY MBaAFJUiq2eSLOAnXoxhq/qC0qdUr23EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy82ODkxOGUtZTlkYS00MDZiLTk5MzEt ZTUyNmE5NDA5ZmI4LzEvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy82ODkxOGUtZTlkYS00MDZiLTk5MzEtZTUyNmE5NDA5ZmI4 LzEvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYe5Z3NmQ 2UTfQienEI8Yq9O9xnwi+eMnLKIshD6q5q3OsJUWUKXk+7SSiJ3YuHnKzbYT2AgM N0ESGUkhotFxrOL+kDE+P6L2tABmLKMT5gSz5+spZMhlG04gY4JG8c3rLVc1vyoA VjX6VVTzqBzlg00/Chofhzi4DZt2g2FcTQp+hm3P+cyVLutQqcfiFpLA25G4Wilh 28wS/ADEqrGyHjs5ovW4l3wO7N9OiB5GDcFoU25pydgASYGv4KJheUGGvaODeqsj Wa1MEvM7FNv2uNIySwqFH+ypZOp1v4TilUiyEQfvz0OVDH+4DS+i6flSn6kyeXtW Q/Chlr24WkmJCg== -----END CERTIFICATE-----Generated at Sun Apr 6 07:11:22 2025 by rpki-client