$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft File: CnMngF3yD7XB1vTokHR0PK6ySvc.mft (raw, json) Hash identifier: Gt4K6/hpuwM3bZowMXp0BzS4OzHdDHMelnHDkKzikfk= Subject key identifier: 6C:82:46:B8:7A:61:6C:C8:A3:2E:B2:2A:FF:00:73:4C:BE:50:95:06 Authority key identifier: 0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7 Certificate issuer: /CN=0a7327805df20fb5c1d6f4e89074743caeb24af7 Certificate serial: 01976BF4837C5A41ED83A8D770EDA1CFF55D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft Manifest number: 15A1 Signing time: Sat 14 Jun 2025 01:01:15 +0000 Manifest this update: Sat 14 Jun 2025 01:01:15 +0000 Manifest next update: Sun 15 Jun 2025 01:01:15 +0000 Files and hashes: 1: 3cfolha5-Y-keIgl3j-ukMRu5nQ.roa (hash: BQrU5Phy/xAtort4zjZjH8gAv4mg2agVu08FECKFlvU=) 2: CQxWaB1OicMMrqXCoQ0fopCoxdU.roa (hash: WjfHWnkqbfHKaqxUShNyRq++rhQwjg3tNVjy17YQNc4=) 3: CnMngF3yD7XB1vTokHR0PK6ySvc.crl (hash: A3Q4uOiT93n6mlpg4zcc28SpZrwEGUhVZ1J+7esvG50=) 4: GopMrpyToOz7hTEn02tSlWTChNc.roa (hash: PWyNZm9NNDQb4vDrYexwTILfoeBvuqO0/ZesnD+rBMg=) 5: QY3FsKWsHL7VlMduaclRNJ3pt_U.roa (hash: H5vPCo3lKDFJhLJsXdyGxkbSr+CZKxnZxfEUf2naVGc=) 6: Zla6xxqlwjD5HGAN16Pzo29Tijg.roa (hash: XT7/Z4sfo6kElFtdLFq3BhRYhs4vxj89ZfDzgHu8Ge4=) 7: eeob2ee4lfFzOOMEsHvp08f6qTk.roa (hash: 0B+jfajS9x0UOg+XsVtGs3LZcCLSBc/7t9eJKjvj4DM=) 8: hnMtsx259zWb5DPTAskFt19vieA.roa (hash: IS/K0LmABWhq/hUi5ijfbnkS8QGQcUBWRW0f7gTisD4=) 9: izRl0EDK4B0qzWxxkTnsFaQUD9I.roa (hash: deGltujGMo6zRw49YCgwFhp3rs4UuELASdCXPlgWHmM=) 10: ydOhopDpEgxJrzwZy5o2ywKpW8w.roa (hash: cGNA9jtDwM6OD4vlqV4K4uD26uy/JQnhTPG3oY/YMmA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Jun 2025 01:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:6b:f4:83:7c:5a:41:ed:83:a8:d7:70:ed:a1:cf:f5:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7327805df20fb5c1d6f4e89074743caeb24af7 Validity Not Before: Jun 14 01:01:15 2025 GMT Not After : Jun 15 01:01:15 2025 GMT Subject: CN=6c8246b87a616cc8a32eb22aff00734cbe509506 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:46:96:41:8c:ed:6e:f0:2f:1d:ee:f5:18:1a: fd:10:f0:10:ea:d1:b2:e1:bd:fc:51:00:f0:96:16: 7f:b8:c4:2d:39:67:bd:63:d7:7c:89:af:16:4f:b6: 4d:09:83:72:6e:67:19:89:97:ca:ee:0c:f0:83:e9: f6:3f:01:68:c6:1e:af:61:c4:f3:a3:c5:a7:5b:ac: 81:d6:10:45:1d:6d:4c:70:5b:79:c9:79:71:c7:85: 6a:5d:de:a1:62:ae:5e:62:4c:f8:5c:28:b3:58:b9: be:33:3d:eb:3e:23:ac:d5:29:63:71:95:b4:cd:08: 1a:f3:fe:25:2b:c2:cf:1e:49:ab:76:04:33:ca:e7: 70:79:65:d4:b8:4f:1a:66:0c:9d:36:5f:cb:db:cd: ee:9e:f1:c8:fd:81:3f:6e:b8:75:86:95:c7:17:07: 56:6b:3c:75:90:00:03:19:9a:84:a5:9e:e7:58:b6: a4:c6:b3:c6:b1:bf:f7:a1:2a:86:dd:f2:ea:1d:cc: d0:fb:55:0f:c8:3e:2f:1c:10:8e:44:a9:f0:f2:6f: bc:c2:65:7d:15:83:bc:2f:3f:db:5a:a7:1f:72:44: 39:d3:7d:15:0a:ad:a8:f3:33:37:7a:07:9d:17:8a: 3f:9f:c3:92:05:90:dc:be:7d:cc:c9:24:f5:0b:d7: 20:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:82:46:B8:7A:61:6C:C8:A3:2E:B2:2A:FF:00:73:4C:BE:50:95:06 X509v3 Authority Key Identifier: keyid:0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:7b:07:bd:64:d0:55:08:33:e6:81:b6:6b:1b:b7:1b:df:cf: e7:76:6a:21:6e:1d:27:85:22:ee:fe:a8:11:23:2b:e5:04:ab: 10:e2:4a:af:7c:e8:e3:cd:f2:e0:70:c7:71:c8:2c:d1:90:7d: 0e:a1:80:96:17:ba:3c:c5:43:8b:c7:95:a2:53:46:a2:d7:85: 18:1e:77:4f:d6:b1:cb:a5:fb:07:3e:0d:04:a3:50:09:e0:cb: ac:96:58:0e:61:31:52:aa:d9:ea:66:8c:d1:aa:17:3c:ec:58: 52:c8:c7:80:7f:a0:b3:68:3c:b2:30:e4:cf:8f:52:25:c6:5a: 38:dc:a7:8c:33:e7:63:37:27:88:1e:51:c2:dc:e0:e4:ca:e3: 4f:c2:81:56:0f:e5:47:16:d6:85:36:73:3c:ae:70:ae:1e:a4: f4:c4:c7:f7:19:85:3e:0d:49:5e:15:1a:9e:c2:6d:d7:a4:bd: 1c:69:48:e6:1b:f3:f7:56:55:f2:b5:54:dd:56:ff:15:80:7f: 31:0b:b2:e1:cb:4a:f6:0b:19:c3:2d:0b:66:48:61:e5:12:8a: 44:a3:0a:68:e5:46:c6:68:98:87:ee:3d:2a:a1:41:48:13:dd: 6b:9e:d6:67:e5:83:66:ee:02:03:7e:a4:1b:2b:29:20:2d:b3: 3a:a2:de:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdr9IN8WkHtg6jXcO2hz/VdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhNzMyNzgwNWRmMjBmYjVjMWQ2ZjRlODkwNzQ3NDNjYWVi MjRhZjcwHhcNMjUwNjE0MDEwMTE1WhcNMjUwNjE1MDEwMTE1WjAzMTEwLwYDVQQD Eyg2YzgyNDZiODdhNjE2Y2M4YTMyZWIyMmFmZjAwNzM0Y2JlNTA5NTA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0aWQYztbvAvHe71GBr9EPAQ6tGy 4b38UQDwlhZ/uMQtOWe9Y9d8ia8WT7ZNCYNybmcZiZfK7gzwg+n2PwFoxh6vYcTz o8WnW6yB1hBFHW1McFt5yXlxx4VqXd6hYq5eYkz4XCizWLm+Mz3rPiOs1SljcZW0 zQga8/4lK8LPHkmrdgQzyudweWXUuE8aZgydNl/L283unvHI/YE/brh1hpXHFwdW azx1kAADGZqEpZ7nWLakxrPGsb/3oSqG3fLqHczQ+1UPyD4vHBCORKnw8m+8wmV9 FYO8Lz/bWqcfckQ5030VCq2o8zM3egedF4o/n8OSBZDcvn3MyST1C9cg/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGyCRrh6YWzIoy6yKv8Ac0y+UJUGMB8GA1UdIwQY MBaAFApzJ4Bd8g+1wdb06JB0dDyuskr3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ25NbmdGM3lEN1hCMXZUb2tIUjBQSzZ5U3ZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS84YjFmYWMtNWEyMS00ODQ4LWE2NmEt MTBiYjQ1NzlkNTI4LzEvQ25NbmdGM3lEN1hCMXZUb2tIUjBQSzZ5U3ZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS84YjFmYWMtNWEyMS00ODQ4LWE2NmEtMTBiYjQ1NzlkNTI4 LzEvQ25NbmdGM3lEN1hCMXZUb2tIUjBQSzZ5U3ZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABnsHvWTQ VQgz5oG2axu3G9/P53ZqIW4dJ4Ui7v6oESMr5QSrEOJKr3zo483y4HDHccgs0ZB9 DqGAlhe6PMVDi8eVolNGoteFGB53T9axy6X7Bz4NBKNQCeDLrJZYDmExUqrZ6maM 0aoXPOxYUsjHgH+gs2g8sjDkz49SJcZaONynjDPnYzcniB5Rwtzg5MrjT8KBVg/l RxbWhTZzPK5wrh6k9MTH9xmFPg1JXhUansJt16S9HGlI5hvz91ZV8rVU3Vb/FYB/ MQuy4ctK9gsZwy0LZkhh5RKKRKMKaOVGxmiYh+49KqFBSBPda57WZ+WDZu4CA36k GyspIC2zOqLeSA== -----END CERTIFICATE-----Generated at Sat Jun 14 11:12:05 2025 by rpki-client