$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft File: BVFgW2dezk4PznF1rjGpP6gnK6Y.mft (raw, json) Hash identifier: Ukaz7pXvvCVPbo5zxkwTvJZ6IUdpk1g+Tk7nK18ZiRg= Subject key identifier: EA:1F:21:AB:2B:62:C9:76:C8:F8:6F:3B:10:9B:85:98:E8:50:52:3C Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6 Certificate issuer: /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6 Certificate serial: 01977CB1100F7B849D1CDB11D923DD118523 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft Manifest number: 15C9 Signing time: Tue 17 Jun 2025 07:01:08 +0000 Manifest this update: Tue 17 Jun 2025 07:01:08 +0000 Manifest next update: Wed 18 Jun 2025 07:01:08 +0000 Files and hashes: 1: 5t_gEPyzONNwmcX_6ew0Ih3Mk2Q.roa (hash: vkkst1UDRXFHGnw3oCIz/VahP4EJhU4cLye1AO0QLS0=) 2: B-VB7mD6d3yYH8PU8AgFih1fMDc.roa (hash: T5HGrFxvsUPySvUxTWFtkDKWgc+DSV2mLNavrR7oxEo=) 3: BVFgW2dezk4PznF1rjGpP6gnK6Y.crl (hash: Imcgz1RWXzXCBFgiK3OpHdwLTBN3J1u5xGxf9z/Iu5E=) 4: FQTXSvb27ypAWeWR6u4PUk-NFzc.roa (hash: oVmw4Wr4zacFRrwMuuDV+itYXymrywavxqZKYRr/zHc=) 5: GIdtnYTfB_OfNmkj58C5zvwyoiY.roa (hash: mrolhVBCf9ezcIiNdke1ILuseOXCo3lGnZtCw7CJdqk=) 6: JIWScFv9Kksz3-WjVTMxXPLjiWo.roa (hash: 9Ejcda+LEF9Prza7a6M4k8Cqx+Jsocz8uwzratsGHfs=) 7: Ry99V7wdnB63QA0YiggryZhHU-U.roa (hash: mMBh91Bzq2gPCtQkwNpkOUuuvLHWXUK22LlIXX1xS/g=) 8: T2zf4MlLIMSvzzuDsJMAjIOyKkY.roa (hash: ueRz8nTweEwyQ4f6p4yvV8towA7SPGMkaN88JD99IhM=) 9: WTBCbSxb7h1w4Up4KNg9SZTnE6c.roa (hash: zGDl99MvN6NddN0ACg6xKrKwSNupTCXGaQXZUdGsWZY=) 10: Wgn-Z3i6lXU4mVGYn9zEOu2Y5uo.roa (hash: KDlQZdCuo/nIV3/PuDzNC2v7AGRYnk63vIIL7+xFyqo=) 11: ZNVBvSaI1BNlFT5y4meV0Zbgnzw.roa (hash: bWlw2kG0F8Yo+irCKVO4en+85QCKnglxRBdSlkv67r0=) 12: ZmV3RrHyNbdlPpXWHxyJNKlqz_0.roa (hash: duiYNAfkU9vNSfSeoTIVT6MoGsXF5yCoHKwjI4a3RZo=) 13: bLACyeWnCQUwWZqE5WZ_BrmQU6Y.roa (hash: uwoE5/d36cX/Ks6beQm+PxMT5NEUJYwmYJZfciGwpzU=) 14: lSQaQo1pT929AIuNEO-jfbBj_uI.roa (hash: aky/WPIxzMhPYRkj4RXOkjGc0PhL0aXcIKo/I7TPgXM=) 15: lmjGoIkmtRARzMHJ3Iv6xZvWT5U.roa (hash: D1V3yIkbb8Fb2YGAP6nceG/MedRCxNzvPEgyVbvAN7Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 18 Jun 2025 07:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:7c:b1:10:0f:7b:84:9d:1c:db:11:d9:23:dd:11:85:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6 Validity Not Before: Jun 17 07:01:08 2025 GMT Not After : Jun 18 07:01:08 2025 GMT Subject: CN=ea1f21ab2b62c976c8f86f3b109b8598e850523c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:4d:14:11:46:76:10:c8:43:86:84:97:01:60: de:18:bd:81:c9:a1:1a:cb:cb:7a:36:b0:d8:1f:20: e4:e6:64:35:ff:d3:c1:c1:4f:d5:fb:ad:98:8a:80: 07:cb:7b:53:d9:0c:33:e2:e3:34:a4:20:91:aa:8a: 1c:35:67:a7:9d:69:bd:c4:96:1f:a9:99:ae:c9:62: 87:fc:11:2d:1f:c6:15:2e:c3:1e:5b:54:81:b5:b3: 65:9c:d6:5c:36:c5:74:ea:66:e5:7e:9d:b3:f4:5b: 69:37:f1:5a:4f:46:f2:3c:9c:10:67:32:68:d7:d4: 06:3d:ea:99:c8:82:56:3c:28:e9:19:c8:01:47:60: f0:1f:d5:77:37:98:70:7d:f8:a8:8a:bf:e2:28:8d: 32:f3:80:44:de:b6:56:53:78:67:10:af:56:bd:e7: e9:a5:45:cb:0c:4a:a2:ee:ba:ab:9b:b8:9a:1a:b8: b8:ad:3c:d2:c8:d1:31:29:d3:f8:87:3d:83:2e:5a: b5:dc:54:ab:18:d7:4f:4e:84:83:db:fd:6c:79:cf: ad:f3:2a:8e:51:64:a2:1e:52:56:db:47:3c:42:7f: ec:2b:85:1d:7d:fd:0d:d3:5a:0b:31:53:2d:30:4f: c4:a4:50:ed:07:65:22:3d:84:61:09:5a:a3:71:5f: ae:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:1F:21:AB:2B:62:C9:76:C8:F8:6F:3B:10:9B:85:98:E8:50:52:3C X509v3 Authority Key Identifier: keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:2a:72:8a:39:ef:df:f4:04:a2:cd:5b:70:97:a0:15:79:10: 72:6c:ce:87:fd:a3:64:85:47:9a:40:29:7b:ba:b8:ac:d6:a7: 09:42:6b:62:a5:d6:b1:80:71:c2:0c:66:93:42:3d:c2:f2:92: 9a:89:a0:0e:47:8d:27:ec:b8:b5:2a:8e:46:ed:3b:4d:a6:05: 94:61:c9:2e:37:24:75:5d:1d:77:48:1a:e6:61:bb:ab:7b:28: 96:cc:84:6f:17:35:78:f8:19:7d:4f:55:86:05:86:c6:0e:30: 4a:cc:5d:09:4e:6c:87:78:a4:3e:bf:37:72:da:cf:7f:f4:48: 49:0a:e7:53:fe:98:3d:f7:20:32:db:c7:f0:84:42:7c:47:5f: a4:41:78:35:b9:a7:d0:39:50:e4:d7:98:99:0d:c8:67:31:84: 52:f1:c3:2e:2d:61:47:52:7f:c1:4c:f5:46:33:ab:a4:98:5e: e3:c8:e6:a6:21:dd:76:f8:d7:cc:65:ad:15:bc:eb:74:f8:b5: 57:85:bb:b5:0c:53:3c:f8:dd:dd:f6:01:81:c0:e5:c3:e2:c9: 13:d8:a2:7e:31:e5:64:79:1a:66:88:37:30:c4:26:19:0b:9b: 62:46:24:06:1c:1a:db:48:d0:d2:a2:b1:54:87:a2:4d:28:22: e8:88:26:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZd8sRAPe4SdHNsR2SPdEYUjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NTE2MDViNjc1ZWNlNGUwZmNlNzE3NWFlMzFhOTNmYTgy NzJiYTYwHhcNMjUwNjE3MDcwMTA4WhcNMjUwNjE4MDcwMTA4WjAzMTEwLwYDVQQD EyhlYTFmMjFhYjJiNjJjOTc2YzhmODZmM2IxMDliODU5OGU4NTA1MjNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArk0UEUZ2EMhDhoSXAWDeGL2ByaEa y8t6NrDYHyDk5mQ1/9PBwU/V+62YioAHy3tT2Qwz4uM0pCCRqoocNWennWm9xJYf qZmuyWKH/BEtH8YVLsMeW1SBtbNlnNZcNsV06mblfp2z9FtpN/FaT0byPJwQZzJo 19QGPeqZyIJWPCjpGcgBR2DwH9V3N5hwffioir/iKI0y84BE3rZWU3hnEK9Wvefp pUXLDEqi7rqrm7iaGri4rTzSyNExKdP4hz2DLlq13FSrGNdPToSD2/1sec+t8yqO UWSiHlJW20c8Qn/sK4Udff0N01oLMVMtME/EpFDtB2UiPYRhCVqjcV+u9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOofIasrYsl2yPhvOxCbhZjoUFI8MB8GA1UdIwQY MBaAFAVRYFtnXs5OD85xda4xqT+oJyumMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlZGZ1cyZGV6azRQem5GMXJqR3BQNmduSzZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yOGVhNDUtN2QzMC00NmRmLThmMmEt MDc3OWY0OGVjZWEwLzEvQlZGZ1cyZGV6azRQem5GMXJqR3BQNmduSzZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8yOGVhNDUtN2QzMC00NmRmLThmMmEtMDc3OWY0OGVjZWEw LzEvQlZGZ1cyZGV6azRQem5GMXJqR3BQNmduSzZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiypyijnv 3/QEos1bcJegFXkQcmzOh/2jZIVHmkApe7q4rNanCUJrYqXWsYBxwgxmk0I9wvKS momgDkeNJ+y4tSqORu07TaYFlGHJLjckdV0dd0ga5mG7q3solsyEbxc1ePgZfU9V hgWGxg4wSsxdCU5sh3ikPr83ctrPf/RISQrnU/6YPfcgMtvH8IRCfEdfpEF4Nbmn 0DlQ5NeYmQ3IZzGEUvHDLi1hR1J/wUz1RjOrpJhe48jmpiHddvjXzGWtFbzrdPi1 V4W7tQxTPPjd3fYBgcDlw+LJE9iifjHlZHkaZog3MMQmGQubYkYkBhwa20jQ0qKx VIeiTSgi6IgmZQ== -----END CERTIFICATE-----Generated at Tue Jun 17 13:10:07 2025 by rpki-client