$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft File: rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft (raw, json) Hash identifier: WefLU8SrREWn97FYEtDDugGStJjT+Zx4osSGDkcJ568= Subject key identifier: 14:38:94:41:C2:51:20:FC:32:5A:3E:B6:DB:6E:CD:B7:9E:40:8E:CC Authority key identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5 Certificate issuer: /CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5 Certificate serial: 01976BBCEBD13825D9B4D4922F95A32A4170 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft Manifest number: 15D0 Signing time: Sat 14 Jun 2025 00:00:32 +0000 Manifest this update: Sat 14 Jun 2025 00:00:32 +0000 Manifest next update: Sun 15 Jun 2025 00:00:32 +0000 Files and hashes: 1: 0SyYaQgLQzTmHyjwALNgjgW6Ips.roa (hash: 9FZRGxKEG0jtfYGiry8IM0OKO6/JFkO8TxODVgljdw8=) 2: 14T-yR595pYQLnI4P4fbXUmbkNI.roa (hash: ujAl/ku+dkQ5mGeO+VIy0fpmzvNm5EBe8cbs1OH3tig=) 3: 1oM3GP4XRi0mqDBcN0k0C4RTdHY.roa (hash: Eqko1gSCAK/Ec5hGsjBzpPB0Hmmto77uxcqKM6nkuos=) 4: 4rBl4Xgj-eyO-Qb6KkYRdP_q3yA.roa (hash: 9Fg4JBY24DsNxM7h9nmxlQnxm85kk0BWdXCDra924l8=) 5: D-_QiVeAYymMyrqyEwwxZVlJ77w.roa (hash: pLHDIfQfn00HxVAd67SY9GUFCYPJH9fT0t4z495xhcU=) 6: I49sO32imbdn9nfJ0l-il2Ef_jY.roa (hash: k2Ksa8ZIkYwAdo7qnIBXutPiCFJfdjd5EjsrD8efaro=) 7: OCbmP2iMJt0_XPXBB5jaqEMkU2c.roa (hash: Xv4eg71BjP19EHxS0bLmkPXFLa/G9u+oGKVTqmz32C8=) 8: PQ4JRK_v8Rb4S6Y1Hjjg1mh8-RM.roa (hash: 6S6SDi+NoevpWtxjp+Phs+mUreAi/RCvfLId1bbLsWc=) 9: SHESx2HqUfWZxboQ6jP2hImYKmU.roa (hash: OlCdziBdwRc0FY5ejIFVQ8Nt867ISEKKLNxKfPnLzFA=) 10: TevPA31zpqIvq6GeQSDxtNa30UQ.roa (hash: 2nDbpMbvjKPaiiXiHqb4sCzw1FXoCOAaM9XlGLGbhC8=) 11: U2a4Mi5anG6MoVx-kSkOlCHuZ9U.roa (hash: WzVg8UcZ00h0mbpXiGBDaneFB3IZyzn0LFRbQNJ9OXc=) 12: UU4qmywXJeD0s-bEtA06YqQJbXY.roa (hash: U8vbKeUDnyxjI4tldoiMN64co7xQZg9nWw+wDHbmz3c=) 13: bHfPn3msgwx5FPQ-Adt7HpQNCIk.roa (hash: mn8L9NM8fYmycQe3GG9bUyJmLWRnJsF0fPb8aD5LaTM=) 14: bicuo27VbekDKZ2baxGyIAeBOBw.roa (hash: SWEpCpnN+xzcUkxLs6Bt4xTFqOqzIoS1IpAm8o8Z7uw=) 15: cbX3FwOgi9rS1ENe_k5BLCxVdg4.roa (hash: 35j9cePlwM12en+EIoj2uwLnq2TReRAiO2SX/9vwgDk=) 16: d15xz2wDYoFUwdFtDFCYutWPOZE.roa (hash: iUtxP8YPi9EAjdDD2kqSiWotelk+W31zZ06ojPLu7Ao=) 17: icTWsoKn_xk3KExZZn417x-Qv84.roa (hash: o9OMiruJYKHV5Ad+C6iuA4/zkZ1aBjsbg8MEUFVbq0o=) 18: nwRRU278nZ-OoZkxunLEdDGvAcI.roa (hash: XtojZB9yoPUFiPBHYDNCJYd8iy1TyLCfmu2Ry8BmvwU=) 19: rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl (hash: 9nOmeKEm1MyvIdhwyATr9ChRt7kUmOcj8ZbtIUyVZpg=) 20: xZHK8sMXJRR9tFEPi8Dz0m2XwJE.roa (hash: P4VjA7AD0Rq8qJwX9hUh9U04YYNDoPlLqjbXRLiEoic=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Jun 2025 00:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:6b:bc:eb:d1:38:25:d9:b4:d4:92:2f:95:a3:2a:41:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5 Validity Not Before: Jun 14 00:00:32 2025 GMT Not After : Jun 15 00:00:32 2025 GMT Subject: CN=14389441c25120fc325a3eb6db6ecdb79e408ecc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:12:c2:51:02:c9:ff:4f:b1:49:ec:c5:5b:02: 6a:d5:7f:95:81:86:70:14:ec:05:b9:ca:78:64:7e: 76:64:be:08:6f:4b:b1:5d:46:42:16:85:44:9f:92: a2:6e:f4:58:40:c5:f2:91:37:61:48:0c:3e:5f:db: 60:ba:65:98:52:17:a7:96:31:12:3a:22:9b:0a:39: 8e:03:4a:d7:58:e5:9b:01:b2:17:68:c3:56:ee:f7: 2d:e2:f4:27:ad:44:7f:e9:c5:2e:a6:ba:c7:c4:56: 81:b1:79:72:b1:49:20:6c:92:fe:24:62:22:9f:9b: 92:e0:02:a8:68:9d:59:ee:ab:b7:fa:36:4e:fa:7d: 0e:60:e8:c7:6e:04:3f:f8:f8:5f:d5:52:20:55:c5: 75:1b:d9:6d:7d:48:ad:49:eb:67:41:24:49:91:b5: 58:74:ab:af:20:60:40:0e:1e:b9:58:03:78:bf:21: 4c:53:55:09:06:2b:87:4c:50:20:4a:1b:9e:2b:53: ae:96:ac:06:46:94:48:28:21:2d:f0:05:7a:7c:ff: ab:f9:c4:be:fc:8e:4e:fc:12:ae:91:9a:d5:96:d0: 49:b4:ce:31:a3:85:d4:4a:35:a1:b1:dc:b9:24:00: 84:e9:6b:69:43:64:a2:f6:07:e9:48:51:f2:86:2a: 6c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:38:94:41:C2:51:20:FC:32:5A:3E:B6:DB:6E:CD:B7:9E:40:8E:CC X509v3 Authority Key Identifier: keyid:AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:90:35:e0:1c:26:7f:84:00:a7:3c:07:0b:bf:2c:ac:fd:8c: 61:10:45:19:cc:84:93:97:a0:62:c3:5a:3c:64:8e:24:09:be: c7:70:fe:28:ac:2d:54:de:e3:f4:83:f4:b6:07:ae:89:c4:44: a0:60:31:0e:de:38:72:9a:56:e7:af:85:25:52:4e:be:e0:c0: a8:37:bb:28:6c:33:b1:c7:53:95:3c:cc:ec:16:d7:93:38:13: 76:ae:65:5d:14:30:9b:2f:43:fa:9f:c5:0f:d9:b8:9e:5f:54: 54:cb:d2:6f:d6:7c:c3:2b:a2:71:59:ed:a0:45:76:f9:f2:c7: e1:30:42:a9:1b:6e:26:24:9f:75:93:91:f4:25:d6:0d:b6:e8: e9:cc:1e:41:7d:72:09:32:4b:28:4f:a3:ed:f6:78:f9:d9:99: bf:d6:8a:3d:12:b0:d6:2b:a0:54:86:cd:0e:3e:cc:6c:f4:6c: 0d:98:6f:67:77:70:8e:e0:9c:62:93:fa:73:93:8a:6c:e1:51: 52:d2:86:57:b6:10:e2:c5:00:2e:fe:09:f9:b0:70:49:69:de: 93:b3:60:fb:7f:29:fc:64:5c:46:3e:28:2e:d6:30:2a:a1:86: ab:13:b8:6d:cf:49:ae:fd:f7:62:19:37:4c:a5:7c:e4:ef:e1: 0e:01:ed:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdrvOvROCXZtNSSL5WjKkFwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkMGRhNDNiNGE1ZDNkYjc4YmEzZjc3NGU1YjMxYjc3MDM3 MjAyZDUwHhcNMjUwNjE0MDAwMDMyWhcNMjUwNjE1MDAwMDMyWjAzMTEwLwYDVQQD EygxNDM4OTQ0MWMyNTEyMGZjMzI1YTNlYjZkYjZlY2RiNzllNDA4ZWNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRLCUQLJ/0+xSezFWwJq1X+VgYZw FOwFucp4ZH52ZL4Ib0uxXUZCFoVEn5KibvRYQMXykTdhSAw+X9tgumWYUhenljES OiKbCjmOA0rXWOWbAbIXaMNW7vct4vQnrUR/6cUuprrHxFaBsXlysUkgbJL+JGIi n5uS4AKoaJ1Z7qu3+jZO+n0OYOjHbgQ/+Phf1VIgVcV1G9ltfUitSetnQSRJkbVY dKuvIGBADh65WAN4vyFMU1UJBiuHTFAgShueK1OulqwGRpRIKCEt8AV6fP+r+cS+ /I5O/BKukZrVltBJtM4xo4XUSjWhsdy5JACE6WtpQ2Si9gfpSFHyhips6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBQ4lEHCUSD8Mlo+tttuzbeeQI7MMB8GA1UdIwQY MBaAFK0NpDtKXT23i6P3dOWzG3cDcgLVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclEya08wcGRQYmVMb19kMDViTWJkd055QXRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9kZDgwOTYtMTRjYy00ODhkLTkyNTct YzUxNWYzNTRjYzVhLzEvclEya08wcGRQYmVMb19kMDViTWJkd055QXRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9kZDgwOTYtMTRjYy00ODhkLTkyNTctYzUxNWYzNTRjYzVh LzEvclEya08wcGRQYmVMb19kMDViTWJkd055QXRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV5A14Bwm f4QApzwHC78srP2MYRBFGcyEk5egYsNaPGSOJAm+x3D+KKwtVN7j9IP0tgeuicRE oGAxDt44cppW56+FJVJOvuDAqDe7KGwzscdTlTzM7BbXkzgTdq5lXRQwmy9D+p/F D9m4nl9UVMvSb9Z8wyuicVntoEV2+fLH4TBCqRtuJiSfdZOR9CXWDbbo6cweQX1y CTJLKE+j7fZ4+dmZv9aKPRKw1iugVIbNDj7MbPRsDZhvZ3dwjuCcYpP6c5OKbOFR UtKGV7YQ4sUALv4J+bBwSWnek7Ng+38p/GRcRj4oLtYwKqGGqxO4bc9Jrv33Yhk3 TKV85O/hDgHtZA== -----END CERTIFICATE-----Generated at Sat Jun 14 10:01:21 2025 by rpki-client