$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft File: WjdsgAjWq9liNBVj3SpNzK8VPLo.mft (raw, json) Hash identifier: tf0+a0LAGp9wpg8f1XCIs3IJKJJRbpIdMj9SmHGHmnQ= Subject key identifier: 07:A6:3A:B0:9B:B7:31:90:FE:9B:5F:E8:C2:E4:B6:40:E7:F5:70:8F Authority key identifier: 5A:37:6C:80:08:D6:AB:D9:62:34:15:63:DD:2A:4D:CC:AF:15:3C:BA Certificate issuer: /CN=5a376c8008d6abd962341563dd2a4dccaf153cba Certificate serial: 01977F0C948D3CEC2678E80A900DF1DF0000 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft Manifest number: 1501 Signing time: Tue 17 Jun 2025 18:00:20 +0000 Manifest this update: Tue 17 Jun 2025 18:00:20 +0000 Manifest next update: Wed 18 Jun 2025 18:00:20 +0000 Files and hashes: 1: 9ioTTouwDAdjti2UptXcOCsh1Po.roa (hash: XfQ02KBk81Ha8U23R9wuoKXx9mN0uM0n5PPDDr+U6Iw=) 2: EKyKkfExKOAAfgUa49KGNc0Qw50.roa (hash: T6try+upukSYveRrF7Ngn0n48Pen4Fo2hLE/yndxdPw=) 3: UtIToTT3ux8XXdreVVh-fgtF4EM.roa (hash: Zfj+rc5eqdy5LLDisheb00XcoM/0Aa2BkpeAquuq3GI=) 4: WjdsgAjWq9liNBVj3SpNzK8VPLo.crl (hash: 0my94SLZ4XPHVzpBSbEJUGdfIPdJ+gJa1Jua/Y8gkr0=) 5: YTt-w92v-yglPtABnig5iH6xH6I.roa (hash: p/KD+Q5hRnH7xR7jl3dB3wnRrz1Be4KgzVQqkbYpwvI=) 6: d15xqRAnKAAHzf4cOWP5GpMA26U.roa (hash: BSGf+nc0kXxGqfwctZauJAHJAYXY4Sl7m0vyGO3LlUY=) 7: dpe_f3yMpnjw9YR6OHNOsWUso2M.roa (hash: DeAk7ys+DAS/JWs8unj6/6ajATyweyijk2iB3Ci6BGc=) 8: nfD7LT9GPb8B3IWXrNgp9yNRKFM.roa (hash: b36GHnPs6yg9PaGmKtpH7d96QFYypHwjs6V3s7xb87Q=) 9: pifimVDv85PglaCrpv2aovKKBOw.roa (hash: 4burZ4msm3NFIAmTTb3XGkpBVR6gJT/l7KX/I56Rfyw=) 10: sebyor6upBoiHgbxsrkZxw7Vey0.roa (hash: DtPsXiVyhLLqXKtLDteGJryb2rrevAa/dyXKJS9Y6mc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.crl rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 18 Jun 2025 18:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:7f:0c:94:8d:3c:ec:26:78:e8:0a:90:0d:f1:df:00:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a376c8008d6abd962341563dd2a4dccaf153cba Validity Not Before: Jun 17 18:00:20 2025 GMT Not After : Jun 18 18:00:20 2025 GMT Subject: CN=07a63ab09bb73190fe9b5fe8c2e4b640e7f5708f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e9:ea:e9:5e:b9:22:42:72:36:44:d7:e0:f4: 76:e7:be:7d:ca:c6:04:3d:5e:8f:46:23:08:87:7c: 95:14:91:7a:bd:e6:1b:a2:f4:31:b6:b4:78:12:31: e1:d4:c3:ef:c3:28:c5:64:e9:69:1f:6b:fe:0a:f8: 84:b1:5c:0b:5e:34:44:d2:78:52:84:eb:a4:34:be: 3c:21:b4:50:e1:01:1a:06:c7:48:00:a7:8a:af:9b: 96:e5:fa:9e:f1:e8:5e:1e:a6:07:b8:03:d0:9d:87: 59:6d:3c:0f:68:9c:5a:7b:07:00:82:23:d5:54:04: 5a:09:be:a6:ef:72:3c:e5:4c:b0:b8:6f:2c:78:24: 7e:c8:d9:64:12:67:d6:74:8b:ac:e2:36:73:62:49: 09:ae:ad:4a:f7:c1:87:e2:10:d8:1d:e5:ab:b9:7e: 1c:36:14:d1:79:aa:3b:e5:c3:c5:2e:17:8f:20:2c: c8:c8:31:6e:ce:2c:28:24:4e:01:17:df:d6:fd:62: b8:4b:8f:b6:87:b1:26:5a:f6:a4:5b:e3:dd:ee:01: 36:e5:82:9e:82:6a:bc:5b:a9:1c:be:95:27:9b:a7: 84:d9:d4:09:b6:00:f1:4c:6c:28:b5:ff:4c:ca:e3: c4:34:23:97:63:d0:3f:bc:8a:12:37:64:78:95:18: a0:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:A6:3A:B0:9B:B7:31:90:FE:9B:5F:E8:C2:E4:B6:40:E7:F5:70:8F X509v3 Authority Key Identifier: keyid:5A:37:6C:80:08:D6:AB:D9:62:34:15:63:DD:2A:4D:CC:AF:15:3C:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:fe:20:c6:58:63:a8:4d:e1:31:bf:6f:d8:d1:e1:8a:8b:b6: e7:ef:1c:64:67:54:f6:02:f5:c2:16:64:7c:c7:a5:fd:23:72: 98:88:f3:72:dc:bb:99:47:13:3a:55:04:da:72:e7:29:6e:f1: 8b:00:38:d4:3c:76:1a:1a:80:7b:40:07:76:73:e6:7a:c0:bb: 51:15:cb:11:d6:08:24:d5:53:3c:ef:21:b9:79:b9:78:7e:34: a5:4f:af:f1:b6:a4:75:df:dd:f1:9a:c9:83:d2:de:36:71:8e: e9:14:54:d1:7d:82:00:19:0d:28:61:82:fb:fe:40:80:26:14: 41:3c:ec:7a:ff:20:df:8b:e9:88:0e:d1:d8:14:5d:39:8f:c5: 3d:e8:78:60:52:b3:19:ed:6d:9f:42:17:ba:f9:2c:d3:0d:dd: 04:2e:9f:46:15:8f:ce:eb:7a:e8:28:eb:33:fa:12:d4:4d:01: 03:10:92:85:35:46:f5:74:b9:cd:36:48:cb:0e:06:5f:9f:b7: b3:f3:8b:af:7f:a4:36:bf:1b:94:69:34:9f:19:f3:16:af:60: d1:79:75:9c:58:61:b5:df:20:2f:79:51:82:90:f7:23:b8:27: 61:0b:2d:cc:39:ec:9e:81:53:ea:99:ee:4c:87:cc:d4:cf:ba: e5:27:34:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZd/DJSNPOwmeOgKkA3x3wAAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhMzc2YzgwMDhkNmFiZDk2MjM0MTU2M2RkMmE0ZGNjYWYx NTNjYmEwHhcNMjUwNjE3MTgwMDIwWhcNMjUwNjE4MTgwMDIwWjAzMTEwLwYDVQQD EygwN2E2M2FiMDliYjczMTkwZmU5YjVmZThjMmU0YjY0MGU3ZjU3MDhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuenq6V65IkJyNkTX4PR25759ysYE PV6PRiMIh3yVFJF6veYbovQxtrR4EjHh1MPvwyjFZOlpH2v+CviEsVwLXjRE0nhS hOukNL48IbRQ4QEaBsdIAKeKr5uW5fqe8eheHqYHuAPQnYdZbTwPaJxaewcAgiPV VARaCb6m73I85UywuG8seCR+yNlkEmfWdIus4jZzYkkJrq1K98GH4hDYHeWruX4c NhTReao75cPFLhePICzIyDFuziwoJE4BF9/W/WK4S4+2h7EmWvakW+Pd7gE25YKe gmq8W6kcvpUnm6eE2dQJtgDxTGwotf9MyuPENCOXY9A/vIoSN2R4lRigfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAemOrCbtzGQ/ptf6MLktkDn9XCPMB8GA1UdIwQY MBaAFFo3bIAI1qvZYjQVY90qTcyvFTy6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2pkc2dBaldxOWxpTkJWajNTcE56SzhWUExvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9jYWE3NDMtMWMxMy00YTI1LTlmNmEt NjViZTU1MDMxNjVkLzEvV2pkc2dBaldxOWxpTkJWajNTcE56SzhWUExvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9jYWE3NDMtMWMxMy00YTI1LTlmNmEtNjViZTU1MDMxNjVk LzEvV2pkc2dBaldxOWxpTkJWajNTcE56SzhWUExvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIP4gxlhj qE3hMb9v2NHhiou25+8cZGdU9gL1whZkfMel/SNymIjzcty7mUcTOlUE2nLnKW7x iwA41Dx2GhqAe0AHdnPmesC7URXLEdYIJNVTPO8huXm5eH40pU+v8bakdd/d8ZrJ g9LeNnGO6RRU0X2CABkNKGGC+/5AgCYUQTzsev8g34vpiA7R2BRdOY/FPeh4YFKz Ge1tn0IXuvks0w3dBC6fRhWPzut66CjrM/oS1E0BAxCShTVG9XS5zTZIyw4GX5+3 s/OLr3+kNr8blGk0nxnzFq9g0Xl1nFhhtd8gL3lRgpD3I7gnYQstzDnsnoFT6pnu TIfM1M+65Sc0hQ== -----END CERTIFICATE-----Generated at Wed Jun 18 02:35:58 2025 by rpki-client