$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft File: I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft (raw, json) Hash identifier: RmsFP6nYRwKxYEn/AAVtbWZsDROvGRkTOnHXGqjExRU= Subject key identifier: B6:66:E9:9C:17:78:30:C3:50:77:66:50:E4:4F:BC:9A:39:EE:D7:35 Authority key identifier: 23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47 Certificate issuer: /CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47 Certificate serial: 0197752DD455217AA2E6CDEA3AB5DD3D869A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft Manifest number: 12BE Signing time: Sun 15 Jun 2025 20:00:27 +0000 Manifest this update: Sun 15 Jun 2025 20:00:27 +0000 Manifest next update: Mon 16 Jun 2025 20:00:27 +0000 Files and hashes: 1: 0qZlk63Gwo6PVve3R8hoNJeSalk.roa (hash: 9K8bAvhRQIcuHPJMwOdonfj+LysEV1qKdWBg1zShX+0=) 2: 1aR-_v953E36WGgYgibzeTBiCDE.roa (hash: FoIR2LSFc6nQ5Kqt0WYRr1Y8u7rsf9kyNtd6rG0B9zM=) 3: 2S36hALNEuA4FHD_a934872Co8w.roa (hash: 7vbdkC8QrVhET/DTmD2itapsbG53efZ5NYts2gI1WdE=) 4: Aqln2oXW1vmV-PUzF6Cd9Q8xD70.roa (hash: KUC6ZVgJ309wVObTlhs383nGmhCFSSEIPpt/KXrwLus=) 5: I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl (hash: 0YAMMQk3Kutw6///ZlVhHaR5rH5koUDEO1GyQ+oy/iM=) 6: JiS1Tiph5HTmGNzZ0KtBUIEaf7A.roa (hash: Gom6zOjgSh5rBVSKZ2f6ZCcspQ3wfulcfmXimj0TCtQ=) 7: ZpGAbaG9iTc5mQjGkWx21egzJos.roa (hash: hVROdEr8DhK5izAOiu4sPZbk59hiOCePPc1b1fzj7Mc=) 8: aCwRSHVYBYpytuE1o9MjNgDXz9I.roa (hash: lR91pW0BeR+aoFpolYB6lJ9nl5KY3mWGfuxUgw4Zch4=) 9: hTDGmmn2FYXUzU7TBnMKhJwzgBA.roa (hash: 1eTmB0t+VZgY89Mes1TNlFqfs2UJeJff1ZjTxBLpw/g=) 10: jlKsVMX7wEteoIWfSN3Uc9eAuVQ.roa (hash: 5HOZUuYu7Rw+ksliSgplThO4PdfYnW2rqUfOLfK21mA=) 11: k8Tsh2igTKK0UWxKZTZKxjOauZg.roa (hash: 2YaWS9l2TW+UMAMDTk1uUSdz30uNtfJAEAiFghKc1/k=) 12: uIweupJOqhNaFZ9FFVay5RTc__M.roa (hash: t7JJhUA0yW4Du8+W3we/rUkzjJyZFVBXiW73J3eZJK8=) 13: z1a3i0frazTQqXgXDMZwXIVumzA.roa (hash: 8QcYCFJ7DbfNpdlzOwLSm6hk+eQgt4rWp4xCUkBVN6Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:75:2d:d4:55:21:7a:a2:e6:cd:ea:3a:b5:dd:3d:86:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47 Validity Not Before: Jun 15 20:00:27 2025 GMT Not After : Jun 16 20:00:27 2025 GMT Subject: CN=b666e99c177830c350776650e44fbc9a39eed735 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a7:f7:8e:a6:4d:29:72:8c:ed:f7:0c:e2:d8: 5f:d9:73:a3:9f:cc:95:9c:85:2e:42:54:c3:4d:c9: 7a:eb:c6:3f:13:c5:cf:3c:31:6f:fb:9e:8d:29:26: 2b:64:0a:5d:27:5d:3a:14:12:5b:84:2e:9c:b5:9d: 3b:30:ff:69:83:d7:23:51:4d:21:3b:a0:77:29:27: 8c:20:d3:79:63:43:2f:e6:77:42:89:98:a2:48:09: db:64:8c:78:22:99:53:23:47:d0:fd:63:b9:c8:56: 08:54:76:00:c0:b3:06:ba:64:32:b0:ab:bf:29:28: 19:fa:17:f0:57:6b:e7:1b:98:47:15:a5:08:b8:14: 04:08:a1:fa:54:77:0e:8a:02:5d:00:9e:7b:1b:7f: 05:b6:c8:41:b0:ff:ba:5f:36:22:3f:01:7c:29:45: 0f:75:e4:55:bf:b9:a2:83:23:9c:ba:e7:bb:7d:50: 54:e5:62:8a:9b:43:a4:8e:19:71:a4:85:83:fc:dc: fe:c0:1e:69:9b:41:e6:35:db:c0:f1:fb:1a:e6:0d: d0:25:46:9c:6e:d7:8c:e5:ad:b4:c1:7e:06:bf:d1: fb:97:b3:57:67:a5:75:3e:df:26:ad:0f:b6:e3:1c: 06:64:cd:4c:53:9b:5d:88:97:96:57:4f:2c:e6:f3: 6d:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:66:E9:9C:17:78:30:C3:50:77:66:50:E4:4F:BC:9A:39:EE:D7:35 X509v3 Authority Key Identifier: keyid:23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:bf:58:ca:35:9a:e8:22:60:ac:36:60:50:bc:0a:c6:a9:04: fe:60:cf:65:c9:c8:21:97:f1:b0:1d:80:58:71:65:68:2a:86: 04:30:26:3f:9c:55:56:3e:1d:9a:93:69:97:d7:77:f1:49:67: 40:fe:6a:2a:d8:77:b9:9c:0a:db:26:0f:4f:3f:d5:d6:6e:0a: f0:46:32:44:14:bc:e0:86:d2:dd:0f:17:ab:07:8b:99:4d:a3: 45:5e:2a:36:7f:4b:42:5f:48:41:eb:15:10:4d:e6:8b:72:7f: c2:2d:09:45:83:a3:27:88:7a:00:c2:25:1c:43:0f:20:89:09: ed:53:f2:dd:e7:d1:3d:8d:13:ec:4e:4e:26:43:46:04:cb:41: 04:a5:bc:4d:45:a2:27:b7:ad:e1:34:44:31:c7:66:c7:1d:f0: f5:45:0e:ce:fa:74:04:e8:23:f0:12:74:59:0b:25:8e:b0:db: 92:1f:60:c9:d6:11:85:5b:9d:c8:c5:cd:cb:22:96:be:47:21: a7:f6:89:87:52:37:c0:03:a9:9c:05:02:e6:f5:5d:98:e5:ab: a4:97:49:f8:bf:49:67:f0:ed:2c:f8:bb:87:86:d6:f8:a9:74: 83:48:f3:07:f9:3e:ba:69:c3:4b:ad:03:4d:e1:3f:d7:2f:3c: 5c:fa:f5:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZd1LdRVIXqi5s3qOrXdPYaaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzZTNkOTJiZmUxNjYxOWNhNTAwYzAzMjY3ZWZmYTlhYTdj YTBjNDcwHhcNMjUwNjE1MjAwMDI3WhcNMjUwNjE2MjAwMDI3WjAzMTEwLwYDVQQD EyhiNjY2ZTk5YzE3NzgzMGMzNTA3NzY2NTBlNDRmYmM5YTM5ZWVkNzM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaf3jqZNKXKM7fcM4thf2XOjn8yV nIUuQlTDTcl668Y/E8XPPDFv+56NKSYrZApdJ106FBJbhC6ctZ07MP9pg9cjUU0h O6B3KSeMINN5Y0Mv5ndCiZiiSAnbZIx4IplTI0fQ/WO5yFYIVHYAwLMGumQysKu/ KSgZ+hfwV2vnG5hHFaUIuBQECKH6VHcOigJdAJ57G38FtshBsP+6XzYiPwF8KUUP deRVv7migyOcuue7fVBU5WKKm0OkjhlxpIWD/Nz+wB5pm0HmNdvA8fsa5g3QJUac bteM5a20wX4Gv9H7l7NXZ6V1Pt8mrQ+24xwGZM1MU5tdiJeWV08s5vNtMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLZm6ZwXeDDDUHdmUORPvJo57tc1MB8GA1UdIwQY MBaAFCPj2Sv+FmGcpQDAMmfv+pqnygxHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSS1QWktfNFdZWnlsQU1BeVotXzZtcWZLREVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC85YzJjOTAtYzdkNC00OGI3LTliYWYt ZjFiZjBjMzNhOTA4LzEvSS1QWktfNFdZWnlsQU1BeVotXzZtcWZLREVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC85YzJjOTAtYzdkNC00OGI3LTliYWYtZjFiZjBjMzNhOTA4 LzEvSS1QWktfNFdZWnlsQU1BeVotXzZtcWZLREVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM79YyjWa 6CJgrDZgULwKxqkE/mDPZcnIIZfxsB2AWHFlaCqGBDAmP5xVVj4dmpNpl9d38Uln QP5qKth3uZwK2yYPTz/V1m4K8EYyRBS84IbS3Q8XqweLmU2jRV4qNn9LQl9IQesV EE3mi3J/wi0JRYOjJ4h6AMIlHEMPIIkJ7VPy3efRPY0T7E5OJkNGBMtBBKW8TUWi J7et4TREMcdmxx3w9UUOzvp0BOgj8BJ0WQsljrDbkh9gydYRhVudyMXNyyKWvkch p/aJh1I3wAOpnAUC5vVdmOWrpJdJ+L9JZ/DtLPi7h4bW+Kl0g0jzB/k+umnDS60D TeE/1y88XPr1Ww== -----END CERTIFICATE-----Generated at Mon Jun 16 00:47:47 2025 by rpki-client