$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft File: dmcCNs0OA4aEozGUvefUuVrcZvc.mft (raw, json) Hash identifier: xL9AY5dEgggv3tc6L0+x9c7704Vn1MHKZJNHVh+svuI= Subject key identifier: A8:C2:C9:9A:79:62:37:75:7E:9E:EE:99:5E:D2:BD:C6:2B:32:F7:C0 Authority key identifier: 76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7 Certificate issuer: /CN=76670236cd0e038684a33194bde7d4b95adc66f7 Certificate serial: 01976C6257AE07C4D803F9D6EDEA92231392 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft Manifest number: 0D78 Signing time: Sat 14 Jun 2025 03:01:13 +0000 Manifest this update: Sat 14 Jun 2025 03:01:13 +0000 Manifest next update: Sun 15 Jun 2025 03:01:13 +0000 Files and hashes: 1: 3aGZcGWIs_eMlaFgLeBFbbKoNDQ.roa (hash: TFkuucN4UO3fh05NKBE3AbRffgRyYyePtYVgR0x7i+c=) 2: VxpPmjuX-xDJQCZmjad0BLzyqaQ.roa (hash: scQCA4WB1SH7VqMcUYx00R9CCsEQG1/Vi2LqLMj0V5E=) 3: YX6TdSLrfQISm2CR9jSMfrWeHto.roa (hash: thQkWvF4nLGlemNm7VcbLLVFDEUCum3r3Jy72QYLpXE=) 4: _EShF3PxGOJE5SZRfQySmvZg1kg.roa (hash: Fv1ecycEXgD6srZq4/0n/myzWwH/n6NbHepwG+mEp58=) 5: a6q6SMppTrXBxB1ybsHve0I84N0.roa (hash: zWAoSAHCDkJxMs7sBHL6WOI4Hvocxl0YCPnrC6K64Fc=) 6: bH5bF_8mxPt1PuFzjL55ZoPT9u4.roa (hash: 61i/OUkjcDYfRXVmFio9adx3zcL9HFjQz1PgrGFxL9g=) 7: dmcCNs0OA4aEozGUvefUuVrcZvc.crl (hash: aRPjllaNAdIwqa+gD88FKmPApr+pk2111TgG9ymS0po=) 8: fMMGd3zJDjytcmyhyCVTpEhw1kU.roa (hash: 8DAdzVawL9mvA1o+Hlejvqrd7KSs7UEw/UCVjERrvbY=) 9: w0j3028GTs0XxpRerIzPD_MNXeU.roa (hash: lraXgIU7h+zQb9zRqFGVcDbnN4LuLIfjAyKAE8V60jM=) 10: xHUWp-IhZmk_U8CwKK_n9BGOcbI.roa (hash: 2RFD3xexMzAEEdEVrKN657pvNZq2T3uOKQ0MCXLlbXI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Jun 2025 01:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:6c:62:57:ae:07:c4:d8:03:f9:d6:ed:ea:92:23:13:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76670236cd0e038684a33194bde7d4b95adc66f7 Validity Not Before: Jun 14 03:01:13 2025 GMT Not After : Jun 15 03:01:13 2025 GMT Subject: CN=a8c2c99a796237757e9eee995ed2bdc62b32f7c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:0a:89:dc:9e:3b:fd:a0:38:c0:6b:99:16:40: 7e:27:04:29:86:96:e8:a4:49:6a:9d:3e:61:bb:d7: 6f:72:54:bb:a1:a3:ff:88:b8:f9:53:9a:bf:88:73: 5a:ef:1f:02:71:c0:1c:3a:92:d5:3d:63:e5:45:06: bb:dc:7c:07:78:7c:e3:fb:45:38:9e:9e:b7:ac:87: b7:3d:69:74:74:9d:b3:3d:24:f5:a2:15:53:37:82: 78:60:6d:48:f2:b7:1b:b0:30:d3:ac:93:68:fd:58: a7:bd:2f:1d:99:bd:86:3d:2d:d4:cd:9b:e6:94:79: fa:7f:58:82:6d:60:6f:40:3c:40:fc:3b:6e:83:2a: 57:19:38:99:b9:dd:a4:cc:1c:4d:3d:28:95:28:fd: 27:fd:9b:85:b2:23:d5:8e:15:8c:58:88:34:41:b8: bd:6e:34:be:49:d8:3d:a1:5f:5d:e2:fd:6f:be:a2: 24:b4:84:b2:0b:3f:4c:a2:96:54:3e:86:aa:6b:19: a9:d0:1a:c9:ce:b0:ae:1e:b4:37:ec:e9:09:17:b0: ce:bb:70:53:c0:9b:89:fd:d0:71:4e:4d:22:3d:77: dc:af:37:73:6c:3f:e8:09:03:bc:57:08:7e:73:52: 09:e5:54:ac:7f:c9:61:93:12:7b:92:af:b5:f2:d2: b2:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:C2:C9:9A:79:62:37:75:7E:9E:EE:99:5E:D2:BD:C6:2B:32:F7:C0 X509v3 Authority Key Identifier: keyid:76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:ee:24:d2:5a:61:42:20:1f:f8:94:a8:00:04:95:eb:3e:d5: 77:c9:6a:64:48:57:6d:10:e8:f0:d1:be:8a:72:7d:49:de:da: 3a:ee:24:a2:21:26:f9:d0:97:7c:e7:52:98:3f:7d:22:a5:de: bf:0d:0d:2d:39:af:e4:b5:a8:8f:e6:1a:f4:cf:ae:9a:e6:f6: 5b:54:14:7c:a1:f7:ad:05:cb:dc:72:63:1a:3a:df:c4:e8:74: 3c:ce:16:f7:fa:ff:d3:0a:94:68:09:94:3b:fb:35:a5:21:cd: e9:95:c3:ec:b7:50:4f:87:37:a7:8a:52:50:d9:d9:25:e8:d5: 1e:1b:4d:9b:64:fc:8f:72:17:cf:66:82:34:a7:c5:19:4a:75: 9d:53:bf:3a:4c:98:4b:a2:85:03:5e:ef:11:f8:d9:de:c3:5c: 57:14:f4:3d:1b:96:b7:5c:1a:ef:bf:69:b5:5e:78:4a:e4:d8: 48:7f:68:55:5b:b5:66:bf:13:ab:74:91:3f:63:90:6f:05:07: 6b:b2:db:c5:d7:08:ba:dc:9f:b7:a1:15:95:d2:d2:cf:bd:10: f3:9a:b6:9e:c6:fd:76:13:ff:ac:b4:4f:ff:27:ae:d9:0f:dd: d5:a5:46:b7:ed:fc:7c:5e:d9:2c:06:cc:3f:89:c4:ae:ff:73: 6e:30:75:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdsYleuB8TYA/nW7eqSIxOSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2NjcwMjM2Y2QwZTAzODY4NGEzMzE5NGJkZTdkNGI5NWFk YzY2ZjcwHhcNMjUwNjE0MDMwMTEzWhcNMjUwNjE1MDMwMTEzWjAzMTEwLwYDVQQD EyhhOGMyYzk5YTc5NjIzNzc1N2U5ZWVlOTk1ZWQyYmRjNjJiMzJmN2MwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkAqJ3J47/aA4wGuZFkB+JwQphpbo pElqnT5hu9dvclS7oaP/iLj5U5q/iHNa7x8CccAcOpLVPWPlRQa73HwHeHzj+0U4 np63rIe3PWl0dJ2zPST1ohVTN4J4YG1I8rcbsDDTrJNo/VinvS8dmb2GPS3UzZvm lHn6f1iCbWBvQDxA/DtugypXGTiZud2kzBxNPSiVKP0n/ZuFsiPVjhWMWIg0Qbi9 bjS+Sdg9oV9d4v1vvqIktISyCz9MopZUPoaqaxmp0BrJzrCuHrQ37OkJF7DOu3BT wJuJ/dBxTk0iPXfcrzdzbD/oCQO8Vwh+c1IJ5VSsf8lhkxJ7kq+18tKyAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKjCyZp5Yjd1fp7umV7SvcYrMvfAMB8GA1UdIwQY MBaAFHZnAjbNDgOGhKMxlL3n1Lla3Gb3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8xODA5ZGEtMWM2Zi00NGRiLWFhMjgt YmE0ZmMyMzQ2ODNlLzEvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8xODA5ZGEtMWM2Zi00NGRiLWFhMjgtYmE0ZmMyMzQ2ODNl LzEvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhe4k0lph QiAf+JSoAASV6z7Vd8lqZEhXbRDo8NG+inJ9Sd7aOu4koiEm+dCXfOdSmD99IqXe vw0NLTmv5LWoj+Ya9M+umub2W1QUfKH3rQXL3HJjGjrfxOh0PM4W9/r/0wqUaAmU O/s1pSHN6ZXD7LdQT4c3p4pSUNnZJejVHhtNm2T8j3IXz2aCNKfFGUp1nVO/OkyY S6KFA17vEfjZ3sNcVxT0PRuWt1wa779ptV54SuTYSH9oVVu1Zr8Tq3SRP2OQbwUH a7LbxdcIutyft6EVldLSz70Q85q2nsb9dhP/rLRP/yeu2Q/d1aVGt+38fF7ZLAbM P4nErv9zbjB17A== -----END CERTIFICATE-----Generated at Sat Jun 14 12:09:04 2025 by rpki-client