$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft File: KIVYUqS80b8eyBPzwTsPHzcvOXE.mft (raw, json) Hash identifier: 2AhWJked4/QR6bSP9I8i7uRZxdgTm9jFxDckmFyTqHk= Subject key identifier: 28:BA:0A:FE:56:A7:4C:45:C6:CB:50:A8:69:9D:CA:4C:E9:4C:D8:BE Authority key identifier: 28:85:58:52:A4:BC:D1:BF:1E:C8:13:F3:C1:3B:0F:1F:37:2F:39:71 Certificate issuer: /CN=28855852a4bcd1bf1ec813f3c13b0f1f372f3971 Certificate serial: 0197790A916D87C47F1B96F05E7C035BCC55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft Manifest number: 15B1 Signing time: Mon 16 Jun 2025 14:00:25 +0000 Manifest this update: Mon 16 Jun 2025 14:00:25 +0000 Manifest next update: Tue 17 Jun 2025 14:00:25 +0000 Files and hashes: 1: 0QJCOt-53tnbei-BBNpPRqd93lA.roa (hash: SxpfZus2XMCNBzDteZgXEjPeCC02JP1wgshR4fmnE74=) 2: KIVYUqS80b8eyBPzwTsPHzcvOXE.crl (hash: mPMI/fu1fVGTajrAaTgrJOYyTrg7vNGrJPdMNFSpQTA=) 3: PQE-MW_ft7NOulI3nuA3Ttqd9zM.roa (hash: tS26IQNDjX0XuEf3rRKTOSs366e2zvh7MCyAP+zqiiA=) 4: S87F6thVxwCZscy_VovEDJcB8HM.roa (hash: E4K0X+XV1CxBX46EYMwd+oDIHEvCmqQAB6iKbCet77s=) 5: VTDj_r3bXLmjYM4IT8BX3iK7e9U.roa (hash: ekN4wi00dh7ioFcXBha/Y6Vr/ITetrwuauLICkt3Dpw=) 6: Y8SRLYUIdW_joHTz3PksrXah_rw.roa (hash: VwC43mv96BdBo/MF0MD6doZlRHk6o8P7NRY9bJBrem0=) 7: aer8a26VEmmy2Cy7_8hze3JY1ak.roa (hash: 7q3S2TY/+jxhv9AP9xHCanK4ZXfND8pGXb4R0LjZhXM=) 8: haVl-IddpVIOhoadpyJZ_a5CgAY.roa (hash: xEVD5o+b6swUkv0iGkz/lglqYHWH3tPCrwBEj8vxyI4=) 9: kgTLGOsUBsYOKbWXNc3cqPzwgb4.roa (hash: ST4s4BtTU2rODHYfq5kax5E8/vHW7595/W9otyGkb80=) 10: pL_tDJmTdtKmoEEnGB3Z5Sqfoww.roa (hash: H1JfkznIuDny5RXJezYE6vZGSTmymf6VReWBmSqQlss=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.crl rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:79:0a:91:6d:87:c4:7f:1b:96:f0:5e:7c:03:5b:cc:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28855852a4bcd1bf1ec813f3c13b0f1f372f3971 Validity Not Before: Jun 16 14:00:25 2025 GMT Not After : Jun 17 14:00:25 2025 GMT Subject: CN=28ba0afe56a74c45c6cb50a8699dca4ce94cd8be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:6e:58:f5:20:f0:c2:a8:d3:8d:67:eb:8c:73: 1f:48:ad:d4:91:4b:08:2e:5e:d4:89:2c:d1:98:c5: a7:4d:34:8b:6c:84:fc:c7:a7:7f:cf:25:03:93:bd: 32:6e:78:dc:33:fc:67:64:c5:cf:8c:01:75:f2:93: 32:5e:14:35:43:b6:1f:56:6a:1e:72:b9:50:c2:6d: dd:ef:e6:30:c5:14:67:ff:ac:20:5f:42:86:36:2a: 5e:06:7a:1c:3a:cb:1b:17:16:fc:c7:68:9b:54:a4: 63:ce:34:39:ec:e0:74:da:46:8f:13:10:1d:25:f5: d1:0f:e3:a5:7b:8a:eb:12:86:e5:3b:76:22:b8:6b: a9:d1:1e:67:33:3f:e1:bc:0f:9e:ec:20:e6:12:2d: 2a:69:8f:07:36:b4:be:a7:7e:8f:2e:15:d4:ba:f2: 91:22:7a:4b:46:3b:a2:ef:77:0a:a2:96:69:07:cd: a9:c9:c8:9b:7a:f1:7a:c4:71:eb:53:a9:9d:73:2d: a9:7f:65:f2:72:6b:fa:2b:98:0a:38:6c:df:92:42: c7:bd:e7:b1:5d:65:29:6d:8f:e5:fa:7f:e6:23:81: 92:0c:2f:c7:29:87:99:99:6d:6c:b2:5f:59:e7:c2: 1b:26:9f:1b:8f:19:ab:90:f6:5c:84:7e:a7:9a:83: fb:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:BA:0A:FE:56:A7:4C:45:C6:CB:50:A8:69:9D:CA:4C:E9:4C:D8:BE X509v3 Authority Key Identifier: keyid:28:85:58:52:A4:BC:D1:BF:1E:C8:13:F3:C1:3B:0F:1F:37:2F:39:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:3c:63:17:f7:aa:40:bc:56:f9:eb:ab:32:91:7e:64:f7:c8: 22:4d:26:ef:d7:30:64:9f:07:83:40:34:7e:a8:8d:bc:b3:3b: bc:8e:cd:30:e4:3d:63:4e:0c:1a:54:41:d1:9f:a6:5f:42:e8: 1f:08:d4:02:22:9c:b5:32:9c:63:84:d3:65:81:28:32:a7:01: 65:be:25:76:34:54:91:e1:8e:29:69:51:60:65:3f:a1:80:10: d1:ad:68:57:b4:dc:d8:76:9d:77:20:a7:55:2e:0f:63:fd:c8: 87:eb:22:41:22:95:2d:b0:f0:43:c1:79:18:30:db:c5:87:06: b0:e8:b4:6e:e5:41:d9:a4:76:28:85:99:58:af:35:6b:02:04: de:53:95:65:63:0d:93:78:8e:20:bd:cd:68:fa:da:84:c9:20: dc:f9:5c:e0:b8:61:46:98:b4:a1:8f:5f:d8:e0:2a:75:6d:80: be:c2:f4:58:37:ee:42:73:9e:09:66:85:8e:7e:54:49:21:02: bc:e3:de:bb:e9:71:87:ad:d2:6d:2e:f9:34:32:9f:33:de:ec: 1b:9d:78:0d:39:df:89:eb:d1:66:a7:cd:2c:85:54:b1:2a:f7: 7e:58:50:37:82:a3:66:ff:ec:84:bb:ac:1f:8a:9d:20:12:b1: b7:2b:f3:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZd5CpFth8R/G5bwXnwDW8xVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4ODU1ODUyYTRiY2QxYmYxZWM4MTNmM2MxM2IwZjFmMzcy ZjM5NzEwHhcNMjUwNjE2MTQwMDI1WhcNMjUwNjE3MTQwMDI1WjAzMTEwLwYDVQQD EygyOGJhMGFmZTU2YTc0YzQ1YzZjYjUwYTg2OTlkY2E0Y2U5NGNkOGJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwW5Y9SDwwqjTjWfrjHMfSK3UkUsI Ll7UiSzRmMWnTTSLbIT8x6d/zyUDk70ybnjcM/xnZMXPjAF18pMyXhQ1Q7YfVmoe crlQwm3d7+YwxRRn/6wgX0KGNipeBnocOssbFxb8x2ibVKRjzjQ57OB02kaPExAd JfXRD+Ole4rrEoblO3YiuGup0R5nMz/hvA+e7CDmEi0qaY8HNrS+p36PLhXUuvKR InpLRjui73cKopZpB82pycibevF6xHHrU6mdcy2pf2Xycmv6K5gKOGzfkkLHveex XWUpbY/l+n/mI4GSDC/HKYeZmW1ssl9Z58IbJp8bjxmrkPZchH6nmoP7/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCi6Cv5Wp0xFxstQqGmdykzpTNi+MB8GA1UdIwQY MBaAFCiFWFKkvNG/HsgT88E7Dx83LzlxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0lWWVVxUzgwYjhleUJQendUc1BIemN2T1hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8wZTM2ZmMtYmEwYi00Y2U2LWFmNmEt NzA0NDYzZWJhZDM2LzEvS0lWWVVxUzgwYjhleUJQendUc1BIemN2T1hFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8wZTM2ZmMtYmEwYi00Y2U2LWFmNmEtNzA0NDYzZWJhZDM2 LzEvS0lWWVVxUzgwYjhleUJQendUc1BIemN2T1hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASjxjF/eq QLxW+eurMpF+ZPfIIk0m79cwZJ8Hg0A0fqiNvLM7vI7NMOQ9Y04MGlRB0Z+mX0Lo HwjUAiKctTKcY4TTZYEoMqcBZb4ldjRUkeGOKWlRYGU/oYAQ0a1oV7Tc2HaddyCn VS4PY/3Ih+siQSKVLbDwQ8F5GDDbxYcGsOi0buVB2aR2KIWZWK81awIE3lOVZWMN k3iOIL3NaPrahMkg3Plc4LhhRpi0oY9f2OAqdW2AvsL0WDfuQnOeCWaFjn5USSEC vOPeu+lxh63SbS75NDKfM97sG514DTnfievRZqfNLIVUsSr3flhQN4KjZv/shLus H4qdIBKxtyvzxg== -----END CERTIFICATE-----Generated at Mon Jun 16 21:47:15 2025 by rpki-client