$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft File: Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft (raw, json) Hash identifier: ExL3z6sY2iNUR3XoIGRaucS6cfktngHRAu5tR9KTnNM= Subject key identifier: 55:34:75:2D:E9:0A:4C:B9:98:3A:9F:5B:09:E8:35:00:6E:09:7C:D5 Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65 Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65 Certificate serial: 01977941EE724FE78B7571CDEC021E0541B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft Manifest number: 08ED Signing time: Mon 16 Jun 2025 15:00:53 +0000 Manifest this update: Mon 16 Jun 2025 15:00:53 +0000 Manifest next update: Tue 17 Jun 2025 15:00:53 +0000 Files and hashes: 1: 0UnS-IxSrSbJu0LMwZGgrlOMQaY.roa (hash: RlE1mBt+QrDUuTHvHAH0++Dmsi2Z+uRQ/Byv5g9xWBY=) 2: 1-MsC5JIxdLnLZFyHuf6RgL5WGhc.roa (hash: pKBlmn1z+pps27wu7UmvO8rAolauod4xSkZZnJ9W1vs=) 3: 2pvIQqdrnc-BOV2vOiV82aU9KnE.roa (hash: JAA8g6YNbUGTGs3DmgxNRM+sH++rPd6SoVFBQv/ksXw=) 4: 5iTlOOubPJODXH7vsUI7Wpq0ba8.roa (hash: VCwAilQGOK0VnPyRzIvdM0YYC7WGdN3kdeSa5Bw3IAA=) 5: 9O5dSbjYP7CKebfq3udyDWQ-8qo.roa (hash: dSfT3SWrTibx/fqvSGXLvGAtplCZ8CPdd3iXIRIH8Vo=) 6: FMB-bLkFzuyKrNP2ugJeFR5FvcA.roa (hash: b4QarnLE9DJEtGHI3hEpn5pxBgsxCwePllqAAi4lx4c=) 7: Pd7_BuMRngySvCOEXZzIMz9jyRk.roa (hash: sixeKX7UtbFferQNxLx2jnfuNmnIKZsouzMYORIygXY=) 8: RkzLHfWs_BL956tVkCeC3dIaNec.roa (hash: wKD0RAlNUVNkdZZ5vl809Igsg9tUDfvk8Sh/yVsSt8s=) 9: U-0XoRYDV1K8NeLT79sQu_iy4t8.roa (hash: QAJ2fJtDmsN9XNVxW3a/dJEvqFcETnDiO1SCagG2pSk=) 10: X9nzYcXU9EgIVl_7ZZWxlGNl4g4.roa (hash: wL/WH3TZ58EyBKIgJ0ej+sAXqdnuotdQ0gWq1xiVtwU=) 11: Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl (hash: i6cOY5CU9olhFXvTUYB1SVnXO/LT7D9PrZU/idRZidU=) 12: ZUGOIAUF7QcfJjyar2KLvgczs3w.roa (hash: hYWt23TW4POZBD00pdsn3rVpmOTF/64UdGALhmAlXk0=) 13: aQ7JsCHnSB2G4dfY_3yHXhj3Wo8.roa (hash: jc74/wQHOsinC7epcPYWAUkOMi5kreIozg0B86UPDDA=) 14: a_6EfM_eUhmEh3H7meW3ObA4-Go.roa (hash: NcCAQGLpBENo3heEl3G42fQyl7X50upMygvTrvmVy/A=) 15: bXxx-llWekyrtBewA8UESiAygSk.roa (hash: CVAUCXJbLgxcc/u+sDImVr2cGi4Am9sXCXZAdGDnVHY=) 16: lO_bhdVoi0rApHqZUYrR4e0dET0.roa (hash: L6ri99HTG/n8zl4aG6bBJmgMqEKOzJ8HTJ12NQEy2Ow=) 17: yH-qgMAP1a-ONlIbLyS-3YiA-v8.roa (hash: 5ALF18aBSR3V/0UBc56QwyH3CpaKIq6eI34/1+3sXLg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 17 Jun 2025 14:25:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:79:41:ee:72:4f:e7:8b:75:71:cd:ec:02:1e:05:41:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67499595a65aab0b53768def08091e31061e9e65 Validity Not Before: Jun 16 15:00:53 2025 GMT Not After : Jun 17 15:00:53 2025 GMT Subject: CN=5534752de90a4cb9983a9f5b09e835006e097cd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4b:aa:f1:f3:36:96:54:a8:7e:41:30:e0:3f: a5:f3:3f:20:63:84:f9:88:0d:c8:1a:5c:0e:bb:32: c8:de:fe:c0:ea:1e:4b:2c:20:38:38:df:90:a5:a9: cf:3a:a3:ec:f1:88:0a:87:75:bd:60:00:fe:10:15: 5e:4d:61:5f:0b:c9:b3:02:bc:0a:ff:10:96:9d:74: 25:66:9a:e2:c9:fd:d4:f2:6d:45:1b:e1:f0:19:68: 03:cf:82:47:4c:b2:cd:61:cd:eb:a3:c2:48:fd:f2: 44:fe:1c:44:81:ca:32:df:47:b6:ae:1c:4f:97:46: bf:1c:71:f8:a3:f0:5f:2c:ce:c8:0c:97:b7:e1:35: 04:dd:27:36:75:45:86:fb:b3:e2:d5:37:94:3f:bb: dc:5b:15:e3:02:f9:8f:0d:42:46:99:1e:72:95:ba: 36:55:0f:47:49:ec:80:bf:cf:5a:00:1d:c4:cc:21: 06:f7:f7:5d:94:59:f5:1a:9b:49:b3:5a:78:c8:d3: a5:77:fe:dd:18:cf:11:de:75:48:72:e5:08:26:21: ed:cf:d5:8d:25:87:6e:c8:3e:b0:4a:d4:70:95:68: b2:9a:fc:73:7c:9d:cb:ab:a7:fe:1e:17:57:e0:40: 44:31:c3:56:c2:97:13:cd:71:2c:51:77:3c:fb:b6: b0:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:34:75:2D:E9:0A:4C:B9:98:3A:9F:5B:09:E8:35:00:6E:09:7C:D5 X509v3 Authority Key Identifier: keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:5d:01:de:c7:30:45:18:45:ac:2e:1a:be:7c:ac:2c:66:95: e6:2e:63:80:5f:41:79:df:8a:22:6a:4a:31:43:ff:6b:c4:91: 99:9c:47:ea:0e:7c:4d:50:d2:04:dc:a7:b0:90:7f:8b:b8:f1: 3d:c5:8a:eb:c4:05:d0:c6:8f:04:87:50:a9:dd:8f:fa:49:1b: 29:89:ec:2e:5b:e4:b6:0a:f2:40:bf:c6:9e:d2:33:a5:b9:d4: 56:f4:6b:7c:af:70:23:65:66:29:90:3a:46:ad:2d:e8:d9:0f: e4:6e:c8:57:c8:71:d2:11:36:78:5c:db:ab:b0:f3:a2:72:e6: 7d:eb:53:f6:9a:98:96:88:2e:30:8f:96:2c:ff:e3:05:28:de: c5:33:0c:02:8f:c9:2a:1f:e1:52:34:46:0b:09:42:d5:d1:a4: 81:a9:09:cf:53:2f:32:77:db:70:fb:ef:b7:bf:09:92:37:2f: 3c:04:c2:3a:03:5a:96:31:6f:3e:a0:a3:73:e2:13:69:f4:39: 2d:32:a6:8d:ef:96:21:b7:d0:b3:63:dd:b7:e8:37:4c:58:14: 22:6c:81:8e:33:f8:dd:93:b4:ef:63:93:11:8a:94:a7:d7:7b: 65:69:05:87:c7:a7:c4:a5:08:3c:1f:84:f2:e5:3b:de:21:6b: 48:0e:4c:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZd5Qe5yT+eLdXHN7AIeBUG5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3NDk5NTk1YTY1YWFiMGI1Mzc2OGRlZjA4MDkxZTMxMDYx ZTllNjUwHhcNMjUwNjE2MTUwMDUzWhcNMjUwNjE3MTUwMDUzWjAzMTEwLwYDVQQD Eyg1NTM0NzUyZGU5MGE0Y2I5OTgzYTlmNWIwOWU4MzUwMDZlMDk3Y2Q1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukuq8fM2llSofkEw4D+l8z8gY4T5 iA3IGlwOuzLI3v7A6h5LLCA4ON+QpanPOqPs8YgKh3W9YAD+EBVeTWFfC8mzArwK /xCWnXQlZpriyf3U8m1FG+HwGWgDz4JHTLLNYc3ro8JI/fJE/hxEgcoy30e2rhxP l0a/HHH4o/BfLM7IDJe34TUE3Sc2dUWG+7Pi1TeUP7vcWxXjAvmPDUJGmR5ylbo2 VQ9HSeyAv89aAB3EzCEG9/ddlFn1GptJs1p4yNOld/7dGM8R3nVIcuUIJiHtz9WN JYduyD6wStRwlWiymvxzfJ3Lq6f+HhdX4EBEMcNWwpcTzXEsUXc8+7awCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFU0dS3pCky5mDqfWwnoNQBuCXzVMB8GA1UdIwQY MBaAFGdJlZWmWqsLU3aN7wgJHjEGHp5lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iNzQ0YjgtZjM5ZC00OTViLWIyMTct MzU1MDgwNDE2NTJkLzEvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9iNzQ0YjgtZjM5ZC00OTViLWIyMTctMzU1MDgwNDE2NTJk LzEvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeF0B3scw RRhFrC4avnysLGaV5i5jgF9Bed+KImpKMUP/a8SRmZxH6g58TVDSBNynsJB/i7jx PcWK68QF0MaPBIdQqd2P+kkbKYnsLlvktgryQL/GntIzpbnUVvRrfK9wI2VmKZA6 Rq0t6NkP5G7IV8hx0hE2eFzbq7DzonLmfetT9pqYloguMI+WLP/jBSjexTMMAo/J Kh/hUjRGCwlC1dGkgakJz1MvMnfbcPvvt78JkjcvPATCOgNaljFvPqCjc+ITafQ5 LTKmje+WIbfQs2Pdt+g3TFgUImyBjjP43ZO072OTEYqUp9d7ZWkFh8enxKUIPB+E 8uU73iFrSA5MyA== -----END CERTIFICATE-----Generated at Mon Jun 16 20:08:29 2025 by rpki-client