$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft File: 52ASbc54vBbmbC5udjWEisRoRq8.mft (raw, json) Hash identifier: Mgykqce1upIA1H+xm1/Kx3NztN8Gg3Ai70gcrVZcPSw= Subject key identifier: B2:1E:8A:C4:52:EA:8F:20:9D:27:F6:6B:F3:41:85:71:80:B2:2C:F2 Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af Certificate serial: 0196029C28442DB8D9D427270337A4D2CD5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft Manifest number: 1516 Signing time: Fri 04 Apr 2025 21:01:50 +0000 Manifest this update: Fri 04 Apr 2025 21:01:50 +0000 Manifest next update: Sat 05 Apr 2025 21:01:50 +0000 Files and hashes: 1: 2mVfV49Z4VOJNxOYjQ8U5su-jXI.roa (hash: 4B8NDf79dTd1lmhu+DlgTxMCto2uI5jnWGoSRhBcicE=) 2: 52ASbc54vBbmbC5udjWEisRoRq8.crl (hash: twvF3Q6Xzwld/sV3K/zxThuM2UVEylCKIjxVoX4MPEo=) 3: 7tiEv9a2cte9CpBTPcqjs8xnBKQ.roa (hash: Lp0nRST7H/IZB0m5wIyra+a/lX3Kx1yfYMfJAqiypu0=) 4: MrqpvKVhGghgWqjcBqKvEuXDI-w.roa (hash: 2m6ct1yYKNn97oNHEpEMtqOhuEyZV5Dslxg+dpwmv70=) 5: cHgsLum03vUPk1ZqgWFlR06D1Gs.roa (hash: cQZtsmDbQpAD/17b4zQranEZKH1IDqAE5jHDvC9CNKs=) 6: kPSNnw4_4qELTdWvaGuzZV1m1HA.roa (hash: 4wdK73NzeZ3ZvPINCQjy0JUV5WCBpYsSrh/XOjnZGIg=) 7: l-ZGsydBxlaDCYmuUrju9FPVJ5k.roa (hash: YsEoIsYTsiy+kVjmNva3VAJhJXaXEqZJGws2DjhqC2w=) 8: opmTxamDTTGhXXB97pQEAvfnlEA.roa (hash: +a21sRDHCzkVFGym6Uca5XjXTPbBTo6ZNir2uKNCj3g=) 9: uQU12zYitg_amaVlwJpXM9XCEAY.roa (hash: IYdpyZTPtIiqFILl8uMqJOM+CkHBFW5wOhN+3p4JTWU=) 10: vfMSVp4XTyEruVHZ0YrpNiPStvU.roa (hash: 2s9I3jze/b4F9Z53KMQkFVMQoIYg81frFvNsI+IKcNg=) 11: yQbINQJvUHC1dH3mQkH5rb1td-g.roa (hash: DnYO/+H1u/BVnwIyhPJluAtSzIgI8JTlUaWCc03ojok=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Apr 2025 19:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:02:9c:28:44:2d:b8:d9:d4:27:27:03:37:a4:d2:cd:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af Validity Not Before: Apr 4 21:01:50 2025 GMT Not After : Apr 5 21:01:50 2025 GMT Subject: CN=b21e8ac452ea8f209d27f66bf341857180b22cf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b7:a0:93:79:5d:2a:41:82:20:07:ce:0b:2c: b0:c3:10:2f:35:26:87:26:f0:68:2d:9c:09:47:b1: 04:52:8b:3a:43:88:c8:cf:6f:f5:f9:88:d5:ea:58: ea:b4:b9:7c:5f:37:be:08:ae:02:dc:3a:f2:52:cd: 52:d4:93:be:a1:ae:37:ad:53:89:9e:e9:f2:41:d1: ac:53:36:ad:d3:71:e2:ec:90:60:23:c2:4d:8d:5e: 30:ab:de:14:9c:79:b4:d2:36:92:94:ac:6a:b1:45: 56:a9:64:9c:0b:8b:28:56:5b:d9:3c:24:cc:78:cb: 1f:75:b5:20:0c:7d:18:d2:cf:27:09:b5:71:43:c4: 2b:2d:22:bf:e2:a7:80:b9:9c:9d:c2:76:5b:91:83: dd:79:81:1b:92:57:ff:04:27:d0:7f:10:a7:0d:bb: b0:27:0c:46:ae:33:5a:90:8b:52:c4:78:dd:13:5c: 9f:f7:e8:90:0a:d2:21:85:a3:e6:af:4c:95:cd:07: 82:9e:96:7a:29:ae:ca:b8:17:0a:08:a2:70:55:84: 79:ce:6f:21:0a:03:d3:26:f2:ce:3e:d0:e0:b4:bf: 21:96:d3:88:b0:28:bf:b8:e2:9e:6c:e5:f5:4d:29: f8:17:05:02:e7:d3:c1:00:3f:66:13:d3:0d:cb:7d: 05:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:1E:8A:C4:52:EA:8F:20:9D:27:F6:6B:F3:41:85:71:80:B2:2C:F2 X509v3 Authority Key Identifier: keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:1b:53:0d:1e:7c:89:b6:dd:fd:1b:01:8f:2c:49:35:25:77: 1c:68:a2:e6:49:1f:7c:1f:b6:af:1b:a1:ed:d0:6b:91:bc:aa: 56:fa:38:8e:25:ff:83:63:1f:43:41:d6:6c:14:ba:1a:a9:8c: 8b:87:e5:b5:d3:e3:d0:df:82:2a:6d:ae:21:dd:30:ce:72:57: 55:44:5d:30:6a:c1:31:d9:c2:dc:8e:4c:90:16:18:32:92:7a: 94:e7:bb:23:f9:58:dd:2b:ae:86:38:3a:e9:c2:e7:29:b8:f6: 9e:50:3b:c7:0f:b3:fd:51:4f:f4:fa:02:cf:ec:76:5d:54:8e: ce:95:7f:9b:93:bb:2c:b5:33:0c:1a:e4:b1:32:01:43:92:b8: a8:99:5b:11:58:c2:fc:ed:82:f6:5a:b0:2e:b4:90:31:d6:f1: 47:ba:58:7a:90:a5:1c:ce:58:47:83:3b:1d:c7:1c:40:8c:33: 31:2b:ea:f9:da:ba:e5:89:23:17:fd:b5:aa:c2:b0:dc:28:f8: 22:c3:e0:47:62:b1:46:8d:44:54:aa:b4:38:4b:5b:35:e6:1f: bf:47:76:0b:ac:06:7e:8f:6f:84:3b:6a:4a:03:6e:1b:b4:64: 8b:31:a2:86:96:d6:92:98:b0:43:18:fa:8b:6d:b4:fe:0a:44: 8f:ee:be:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZYCnChELbjZ1CcnAzek0s1eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3NjAxMjZkY2U3OGJjMTZlNjZjMmU2ZTc2MzU4NDhhYzQ2 ODQ2YWYwHhcNMjUwNDA0MjEwMTUwWhcNMjUwNDA1MjEwMTUwWjAzMTEwLwYDVQQD EyhiMjFlOGFjNDUyZWE4ZjIwOWQyN2Y2NmJmMzQxODU3MTgwYjIyY2YyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLegk3ldKkGCIAfOCyywwxAvNSaH JvBoLZwJR7EEUos6Q4jIz2/1+YjV6ljqtLl8Xze+CK4C3DryUs1S1JO+oa43rVOJ nunyQdGsUzat03Hi7JBgI8JNjV4wq94UnHm00jaSlKxqsUVWqWScC4soVlvZPCTM eMsfdbUgDH0Y0s8nCbVxQ8QrLSK/4qeAuZydwnZbkYPdeYEbklf/BCfQfxCnDbuw JwxGrjNakItSxHjdE1yf9+iQCtIhhaPmr0yVzQeCnpZ6Ka7KuBcKCKJwVYR5zm8h CgPTJvLOPtDgtL8hltOIsCi/uOKebOX1TSn4FwUC59PBAD9mE9MNy30FdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLIeisRS6o8gnSf2a/NBhXGAsizyMB8GA1UdIwQY MBaAFOdgEm3OeLwW5mwubnY1hIrEaEavMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTJBU2JjNTR2QmJtYkM1dWRqV0Vpc1JvUnE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS80ODhmNjEtMmYwMC00NjM5LTk3Yjgt ZDI0ZjU2MmRlZGQyLzEvNTJBU2JjNTR2QmJtYkM1dWRqV0Vpc1JvUnE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS80ODhmNjEtMmYwMC00NjM5LTk3YjgtZDI0ZjU2MmRlZGQy LzEvNTJBU2JjNTR2QmJtYkM1dWRqV0Vpc1JvUnE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFhtTDR58 ibbd/RsBjyxJNSV3HGii5kkffB+2rxuh7dBrkbyqVvo4jiX/g2MfQ0HWbBS6GqmM i4fltdPj0N+CKm2uId0wznJXVURdMGrBMdnC3I5MkBYYMpJ6lOe7I/lY3Suuhjg6 6cLnKbj2nlA7xw+z/VFP9PoCz+x2XVSOzpV/m5O7LLUzDBrksTIBQ5K4qJlbEVjC /O2C9lqwLrSQMdbxR7pYepClHM5YR4M7HcccQIwzMSvq+dq65YkjF/21qsKw3Cj4 IsPgR2KxRo1EVKq0OEtbNeYfv0d2C6wGfo9vhDtqSgNuG7RkizGihpbWkpiwQxj6 i220/gpEj+6+Hw== -----END CERTIFICATE-----Generated at Fri Apr 4 23:29:16 2025 by rpki-client