$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.mft File: BpLF8WMTZTQlvEZxBYdeOil8_5s.mft (raw, json) Hash identifier: go4YT2Ij6cx7r+1r1XihDqnhzPNSsZ/wwhc9HwDXE5k= Subject key identifier: 36:AD:30:C6:0E:F0:5E:11:39:18:AD:A2:3D:98:0F:3B:21:E4:27:54 Authority key identifier: 06:92:C5:F1:63:13:65:34:25:BC:46:71:05:87:5E:3A:29:7C:FF:9B Certificate issuer: /CN=0692c5f16313653425bc467105875e3a297cff9b Certificate serial: 019783580A09E24706C719CB22C803913B53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BpLF8WMTZTQlvEZxBYdeOil8_5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.mft Manifest number: 086E Signing time: Wed 18 Jun 2025 14:01:14 +0000 Manifest this update: Wed 18 Jun 2025 14:01:14 +0000 Manifest next update: Thu 19 Jun 2025 14:01:14 +0000 Files and hashes: 1: 6m4iBU1uV9OjtT-yI0kHDyi4gLg.roa (hash: N5jGzrk7sta0axX9QvqTjHgaFwV4arIObuPbt2KJNnM=) 2: 7tTZk2wCmakp5M5T1YuiU8TuWxw.roa (hash: 8JeqZuwRL8gNhmaq+aEKdQ907Eg7DEpF3/RheOxRpLQ=) 3: 84TrX0qs1Y4yZ95W-q51Grc9rH0.roa (hash: sAIYXtIgwoe7qa6SiMh9Mq7V0vDYEf6NPqM5EjqisbM=) 4: BpLF8WMTZTQlvEZxBYdeOil8_5s.crl (hash: xQ8l1TvGcFonXtbmxXBDhBdM0FZCJz5ROJTft9Fzkig=) 5: DH2KmHptf0XCrxVYDl8SWJ6n_OU.roa (hash: 1p3/Uw0Hzg9UQAF7EIOu+m40aaRU5MBeT7UYxTAJl5M=) 6: I0lZ-wnGmJHIeWk4JSccdYLGI-0.roa (hash: LnR75ICh/pu9YTgE61/TkYN/sNwF0ls7eWnRXUdZNeI=) 7: Qgkw5GtNRcsOFSShf-z0xF_tI6I.roa (hash: mZ0NWqp/jNCXFtNZo5WbQ6xy8wKTYFTecNdM8OwQcds=) 8: _6aivCsAWH-kqctPZhR5amDxfsA.roa (hash: nWAJSN6GSWrgvbg0VuNNKDg0OVs+juuAy8NmC7uqE34=) 9: acXjyXZbDzNfFna5ZWRHDz6K5YE.roa (hash: sm9lkJZIavBC2tJvS1A50JKwZEAycxeog0lweVtHcXM=) 10: e31KG_8dad-8ny4PFtbT297H7Sw.roa (hash: GQmunQnH91NAJBx06ug5Vq/w7qs39J3e7sMnlc2OutE=) 11: ej-rBCJmnu-miAXBE5PIqlt8TFo.roa (hash: Z10wztRjBSEGOvVc7tXz4TILdxZp89J4+J08gFrTvVU=) 12: gcpaoxI47uAbfYR_M1Dl9LctMNk.roa (hash: hG0WyItsQE7UjKos3HOIuobdbMTAqgbbv6pzl/cN/6g=) 13: pSbX-PyBbCbb6sLnIu1jAWYX5ak.roa (hash: GoC5K97gl9mRDyYEwiwyowaJojmTfgrX+bjBIRbHQpg=) 14: xe-KS40JXwA4DSnnilL2aYekU18.roa (hash: trUq9aYHMLBwRD59FTvYVzHcchsIZi2f2vJplQh7+rM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.mft rsync://rpki.ripe.net/repository/DEFAULT/BpLF8WMTZTQlvEZxBYdeOil8_5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 19 Jun 2025 14:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:83:58:0a:09:e2:47:06:c7:19:cb:22:c8:03:91:3b:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0692c5f16313653425bc467105875e3a297cff9b Validity Not Before: Jun 18 14:01:14 2025 GMT Not After : Jun 19 14:01:14 2025 GMT Subject: CN=36ad30c60ef05e113918ada23d980f3b21e42754 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ce:00:df:12:d4:76:67:6d:f8:e7:c7:ae:40: e5:58:2b:95:9c:0f:b5:97:01:ac:3f:9a:33:8b:af: 0e:23:7a:92:45:93:65:48:8a:d7:29:70:90:9d:bb: 4d:bc:65:a0:5a:dd:d3:2f:43:53:a7:3a:c6:ce:ea: 0a:1c:2b:1e:c0:bf:0c:8c:e8:ea:85:75:18:74:9e: 7e:de:ac:77:43:f9:ac:fc:84:0c:c9:27:a8:14:f4: 12:2b:37:4f:4d:20:4a:0f:b8:75:1f:19:a6:01:90: 3f:81:b0:e5:37:08:d0:ff:74:47:c0:eb:b6:59:81: d5:a3:59:bd:c4:00:32:6d:b0:97:69:c3:46:6e:02: d1:20:a1:a5:b9:f6:5f:56:14:39:fb:2e:0d:7d:96: c8:d3:5c:ab:18:d7:47:08:54:d0:02:3e:59:f3:29: 33:a3:b4:03:9a:0d:25:01:5f:57:7a:d9:07:90:a8: 2b:f4:d8:3d:7f:c2:31:d1:64:df:66:7d:26:8f:ae: 42:c3:e4:9d:d7:72:62:aa:4d:e9:b0:bf:63:83:09: ac:72:93:60:ac:ac:a3:21:38:cb:42:40:92:f9:1e: 8a:d4:f6:89:42:f9:b5:a2:25:38:35:ea:48:27:b2: 46:a2:0e:93:89:cb:a8:a7:84:f8:d9:0c:98:d0:41: 04:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:AD:30:C6:0E:F0:5E:11:39:18:AD:A2:3D:98:0F:3B:21:E4:27:54 X509v3 Authority Key Identifier: keyid:06:92:C5:F1:63:13:65:34:25:BC:46:71:05:87:5E:3A:29:7C:FF:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpLF8WMTZTQlvEZxBYdeOil8_5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:cf:55:ea:47:1c:cb:62:70:26:d7:ba:e4:d9:77:7f:6a:2a: ec:dd:f1:f5:70:9d:f1:79:53:98:d3:be:77:5f:73:63:57:57: 08:db:b1:20:97:66:40:16:3f:58:cd:80:43:94:54:05:ae:cd: b1:46:eb:38:58:80:1a:25:cc:ff:5d:b4:95:c2:36:d7:ee:56: 39:b0:68:4a:ac:95:3b:21:6e:11:9f:d8:b1:c2:9c:02:d5:bb: 24:d2:cc:9a:29:b1:07:1e:05:84:ed:19:8d:65:3a:a1:e2:f8: 3a:66:1c:12:f5:02:e8:6d:19:75:94:7f:d2:51:49:68:98:81: 7f:ad:ea:65:b6:70:5e:53:ce:8c:e0:78:06:b2:56:dd:59:a9: 08:cf:d1:d6:55:62:06:c0:5a:7d:71:ff:2b:1f:3f:0b:46:b4: 6e:76:11:b6:c5:94:74:8b:e7:bd:76:2e:c5:7c:54:c2:de:17: b5:9b:ed:d9:fb:97:48:67:fd:89:c0:df:49:d6:40:44:1a:0c: 58:07:88:cb:18:e9:e1:da:21:d4:d8:8e:7c:a8:22:21:ef:3f: 2b:d6:ae:1d:2a:9c:a4:fa:08:53:1b:55:60:24:2b:3f:20:48: 39:5d:b6:21:9f:92:25:2b:1e:e3:b2:52:cc:35:69:42:f1:e8: c2:39:17:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZeDWAoJ4kcGxxnLIsgDkTtTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2OTJjNWYxNjMxMzY1MzQyNWJjNDY3MTA1ODc1ZTNhMjk3 Y2ZmOWIwHhcNMjUwNjE4MTQwMTE0WhcNMjUwNjE5MTQwMTE0WjAzMTEwLwYDVQQD EygzNmFkMzBjNjBlZjA1ZTExMzkxOGFkYTIzZDk4MGYzYjIxZTQyNzU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApM4A3xLUdmdt+OfHrkDlWCuVnA+1 lwGsP5ozi68OI3qSRZNlSIrXKXCQnbtNvGWgWt3TL0NTpzrGzuoKHCsewL8MjOjq hXUYdJ5+3qx3Q/ms/IQMySeoFPQSKzdPTSBKD7h1HxmmAZA/gbDlNwjQ/3RHwOu2 WYHVo1m9xAAybbCXacNGbgLRIKGlufZfVhQ5+y4NfZbI01yrGNdHCFTQAj5Z8ykz o7QDmg0lAV9XetkHkKgr9Ng9f8Ix0WTfZn0mj65Cw+Sd13Jiqk3psL9jgwmscpNg rKyjITjLQkCS+R6K1PaJQvm1oiU4NepIJ7JGog6Ticuop4T42QyY0EEEAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDatMMYO8F4RORitoj2YDzsh5CdUMB8GA1UdIwQY MBaAFAaSxfFjE2U0JbxGcQWHXjopfP+bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnBMRjhXTVRaVFFsdkVaeEJZZGVPaWw4XzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS83Nzk5MjgtODgxYy00MzNhLWIyNDMt YzlmNTdlOTU5ZWYxLzEvQnBMRjhXTVRaVFFsdkVaeEJZZGVPaWw4XzVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS83Nzk5MjgtODgxYy00MzNhLWIyNDMtYzlmNTdlOTU5ZWYx LzEvQnBMRjhXTVRaVFFsdkVaeEJZZGVPaWw4XzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo89V6kcc y2JwJte65Nl3f2oq7N3x9XCd8XlTmNO+d19zY1dXCNuxIJdmQBY/WM2AQ5RUBa7N sUbrOFiAGiXM/120lcI21+5WObBoSqyVOyFuEZ/YscKcAtW7JNLMmimxBx4FhO0Z jWU6oeL4OmYcEvUC6G0ZdZR/0lFJaJiBf63qZbZwXlPOjOB4BrJW3VmpCM/R1lVi BsBafXH/Kx8/C0a0bnYRtsWUdIvnvXYuxXxUwt4XtZvt2fuXSGf9icDfSdZARBoM WAeIyxjp4doh1NiOfKgiIe8/K9auHSqcpPoIUxtVYCQrPyBIOV22IZ+SJSse47JS zDVpQvHowjkXSw== -----END CERTIFICATE-----Generated at Wed Jun 18 21:19:38 2025 by rpki-client