$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft File: wsErUnpdH4uLzyMOthH1LxHVK78.mft (raw, json) Hash identifier: fdPwCPJNj3KAyhjcGyDhHiXhdurmfg1EsxE2qI/W/6U= Subject key identifier: 3E:13:96:F6:87:2E:A7:BF:E0:C8:E7:E4:BA:B3:15:95:4A:A1:F0:A6 Authority key identifier: C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF Certificate issuer: /CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf Certificate serial: 0197696169A5C6861D5DC3B23A0D5C68576D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft Manifest number: 15AB Signing time: Fri 13 Jun 2025 13:01:21 +0000 Manifest this update: Fri 13 Jun 2025 13:01:21 +0000 Manifest next update: Sat 14 Jun 2025 13:01:21 +0000 Files and hashes: 1: 1-g043uZGbcoJpf0hDKUAK6KYjMY.roa (hash: oXh/AdBAL+hhAJ60ylz2T4fDifmqPlRHNnfI4LxfO4g=) 2: 4UV2kYJsBRO1Uo0sYaR8d-zWu7M.roa (hash: 4lr6xQLhcUwRUwjrbz/Q9ig+qZGJYjRtsOrl+llFTZI=) 3: 7Df7JRlOKH8gDykOMVukqaTvgiY.roa (hash: Uk5pTOJ/i2noBJtpzBqTt/F61tyL656kiSZXzf/FEP0=) 4: 8yYiY1YNwyk677GprCpY-cRpwSM.roa (hash: eqdijA/aHk9KZOfgIpUzQWlBgXMp62c/42Y4/ug1w4U=) 5: 9YFs85YsKGTIVDBM56breEqVtxA.roa (hash: qqV3B5vzjjlBmuMS8CdNVBF1exlyNiMWJZdCD+80Tlg=) 6: 9oF_YBPk2N7TBl4840GxsFnZQ7I.roa (hash: AlGFLtN9GjJwBPE0gCs6Q6TU04FkoUZ/Kroy0jMJUjM=) 7: BjjnvskFHojAmLtOcKHf6cIeor4.roa (hash: 68wQkVvr9s70ErwyewLwg/v+Sn8FP7xN+7ToSgJC2eQ=) 8: O82D9-Sl5TuPA51YDMjd3oEQ_Bw.roa (hash: GpWxPeguh9vxIQvIL/oOPSEMASvNh0GDzUvixDoM4bM=) 9: VklwYAMB76GdFlZEPkNhX4QuNYk.roa (hash: 8+ZNddyslsyHAQNuItAdRnRBvt4AbAN/VlPdsNqo93A=) 10: jQVct_I-Q9u8SJsbhp_aBJKmAO4.roa (hash: Goq6CQ+X0WEoVfwAUI4pBsxNxBCuYLwqrXAabZR3bPo=) 11: kxW1ACFlthp6zFliAhXG5aZtJrg.roa (hash: gl4ysipzIWR3k1Nea68+h+I7SDKD7ZPTCg44K0WQbck=) 12: nV6d6dYJokqR_WNJ0e5S9DIoVtk.roa (hash: ZHD4y/aBIOK9FnRbF/fVjipRuAyUMG3sRGTAcZNGLRk=) 13: pO3sjHr6a0aftr_c4hFnOCTpu-k.roa (hash: 0HEZ96PPuctS/ZloTVzx6CjdJPtvxwr82RYy3GTaOCE=) 14: ri2xAd-oHR-fT9LflEmMOZqy2Kw.roa (hash: hVv7MJmhWiXR3Iis6smsr081jaLjufwCt16mF67L6FU=) 15: wsErUnpdH4uLzyMOthH1LxHVK78.crl (hash: CY5RIhWsDYWJzJsqkVUaKP5Zp+uBp8hxifAjVZKTbnY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 14 Jun 2025 13:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:69:61:69:a5:c6:86:1d:5d:c3:b2:3a:0d:5c:68:57:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf Validity Not Before: Jun 13 13:01:21 2025 GMT Not After : Jun 14 13:01:21 2025 GMT Subject: CN=3e1396f6872ea7bfe0c8e7e4bab315954aa1f0a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:08:49:66:60:81:8a:45:ab:98:b6:35:74:60: 60:1f:83:3c:74:94:b6:9d:dc:c2:52:94:41:53:4d: 94:b8:ff:ce:fe:b1:0f:c1:ac:8b:43:67:38:4e:fa: fd:d0:05:63:f3:73:f1:30:aa:00:31:0c:75:af:be: bc:81:01:61:36:d7:6d:bf:13:59:24:af:ae:fd:eb: 14:3f:8c:8a:03:ae:2e:51:5b:d9:58:6d:5c:fc:66: 75:91:08:8c:34:ac:0b:12:67:22:44:9b:e1:69:a7: 46:c1:75:e8:c1:96:99:e3:04:2b:9d:46:ec:f1:ad: ac:28:0d:36:0d:92:3b:5f:63:6b:60:b3:bd:f4:d9: 54:f0:04:7f:6e:1c:af:00:ea:5f:6e:97:64:7c:d3: 08:92:db:49:05:7a:03:75:61:03:3f:6c:e9:4c:bf: bf:a2:ae:5c:81:e7:ca:1c:f5:c4:0a:a5:5f:65:81: cf:9b:fa:7a:1a:cd:80:9e:a0:9e:5b:e9:a6:49:c0: 5f:d6:32:28:4e:5d:fb:4c:9e:34:12:5e:e4:fd:a8: 1d:58:33:dd:38:9e:8d:3f:36:c9:73:d7:cf:25:bd: ab:a7:40:1b:38:5e:39:f7:e8:d4:00:32:c4:bd:de: ec:c2:60:ba:8f:d6:b5:0e:32:b9:8f:27:06:75:e2: 32:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:13:96:F6:87:2E:A7:BF:E0:C8:E7:E4:BA:B3:15:95:4A:A1:F0:A6 X509v3 Authority Key Identifier: keyid:C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:a8:25:64:55:10:76:7b:80:29:e9:2d:70:47:a9:55:99:d4: 17:35:f9:eb:71:4f:6a:75:4b:09:41:05:3d:83:05:15:66:2f: c3:bd:68:d6:73:60:32:c0:db:fa:1c:3b:f7:39:b4:bc:e4:2c: db:a0:0b:fd:35:a8:90:4d:87:49:69:31:a0:ee:3a:a8:ba:a2: 74:e6:f4:85:35:f6:97:5e:c0:f3:46:da:ab:2f:d9:6d:19:70: a7:db:10:02:1f:b6:31:9d:f9:a8:97:98:b5:47:7d:5d:3d:af: 23:03:00:c2:de:39:34:c4:c6:5c:7d:93:0e:73:53:f6:23:ac: 5b:d2:f3:9d:0b:d2:ea:18:6e:e6:9a:70:7b:4b:eb:de:98:54: 91:b1:24:d8:74:af:47:bf:49:a7:49:b1:af:f3:88:b2:fc:fd: a6:83:67:b1:80:39:90:30:e1:1f:60:1b:f0:af:49:77:3d:5d: 96:4d:4e:ba:d2:21:54:c4:db:b0:96:7e:ae:75:0a:8b:62:ec: 9f:55:fd:d3:b5:2b:35:60:e8:33:dc:a2:60:25:fa:1a:4b:15: 12:44:32:c7:ac:07:a9:74:9e:52:d4:57:06:f8:1e:d7:58:6d: 09:fa:5e:b1:fb:86:f8:25:3a:91:c4:f8:7e:98:bb:39:9e:10: 91:f5:b7:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdpYWmlxoYdXcOyOg1caFdtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyYzEyYjUyN2E1ZDFmOGI4YmNmMjMwZWI2MTFmNTJmMTFk NTJiYmYwHhcNMjUwNjEzMTMwMTIxWhcNMjUwNjE0MTMwMTIxWjAzMTEwLwYDVQQD EygzZTEzOTZmNjg3MmVhN2JmZTBjOGU3ZTRiYWIzMTU5NTRhYTFmMGE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwhJZmCBikWrmLY1dGBgH4M8dJS2 ndzCUpRBU02UuP/O/rEPwayLQ2c4Tvr90AVj83PxMKoAMQx1r768gQFhNtdtvxNZ JK+u/esUP4yKA64uUVvZWG1c/GZ1kQiMNKwLEmciRJvhaadGwXXowZaZ4wQrnUbs 8a2sKA02DZI7X2NrYLO99NlU8AR/bhyvAOpfbpdkfNMIkttJBXoDdWEDP2zpTL+/ oq5cgefKHPXECqVfZYHPm/p6Gs2AnqCeW+mmScBf1jIoTl37TJ40El7k/agdWDPd OJ6NPzbJc9fPJb2rp0AbOF459+jUADLEvd7swmC6j9a1DjK5jycGdeIygQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD4TlvaHLqe/4Mjn5LqzFZVKofCmMB8GA1UdIwQY MBaAFMLBK1J6XR+Li88jDrYR9S8R1Su/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zZWJiNDYtYjlkZC00Njk1LTgxNWMt NDZlZTU3OGEwYmZlLzEvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zZWJiNDYtYjlkZC00Njk1LTgxNWMtNDZlZTU3OGEwYmZl LzEvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQqglZFUQ dnuAKektcEepVZnUFzX563FPanVLCUEFPYMFFWYvw71o1nNgMsDb+hw79zm0vOQs 26AL/TWokE2HSWkxoO46qLqidOb0hTX2l17A80baqy/ZbRlwp9sQAh+2MZ35qJeY tUd9XT2vIwMAwt45NMTGXH2TDnNT9iOsW9LznQvS6hhu5ppwe0vr3phUkbEk2HSv R79Jp0mxr/OIsvz9poNnsYA5kDDhH2Ab8K9Jdz1dlk1OutIhVMTbsJZ+rnUKi2Ls n1X907UrNWDoM9yiYCX6GksVEkQyx6wHqXSeUtRXBvge11htCfpesfuG+CU6kcT4 fpi7OZ4QkfW3vQ== -----END CERTIFICATE-----Generated at Fri Jun 13 19:07:44 2025 by rpki-client