$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.mft File: dGOVwSZyrZWJIbYrncmyvNimip8.mft (raw, json) Hash identifier: RZJrLlH0D2TjO8NQ2uYcApydMPwqiS+/4kRtwD/wZYQ= Subject key identifier: 48:4C:89:BC:B3:F9:A2:AE:BC:68:AE:DA:87:65:54:E1:8C:14:B8:3B Authority key identifier: 74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F Certificate issuer: /CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f Certificate serial: 0197838EA929C61AC554A9CC63634ECE9645 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.mft Manifest number: 0DDE Signing time: Wed 18 Jun 2025 15:00:54 +0000 Manifest this update: Wed 18 Jun 2025 15:00:54 +0000 Manifest next update: Thu 19 Jun 2025 15:00:54 +0000 Files and hashes: 1: 49__1Mb6TJOq1lBE39sK0MqptNw.roa (hash: mUbErI4yr16L9KeXw+m7dZ8Q/W3G3H5gFLIPV4hSK+w=) 2: 5dh_b1RBPEedGPoH5jPrifwFpjk.roa (hash: FiUlLPDPpSS4NO4ecP0itIgJ8SGlTnSQQXsonHz0nWs=) 3: 9JRK7EwR6Rg_h37a1uMH5kLd-FE.roa (hash: seSeyyGJGHJLolRBA5CPiq9g6rFjmIDsp1xxdhmozxQ=) 4: D_DMWXe-SCxub8zdYhqregtOfgc.roa (hash: YdgWjYi7meP25wOXjFPlW12dueNlMrHsgbDj5lqUC/U=) 5: Gtrnpnu2EuvTaSZcq-k7Wc8SQpo.roa (hash: Ozf4xst6zqysHFFPHqPk6t9V4R5ZCQl3Sl9vytAN8Vc=) 6: LdIbymxNIXROKdCHKP82tGDACeU.roa (hash: kQyQUPIfVzFwJ1Jq+tF49xJ69eCwQR/ZkbVWbjv5vAI=) 7: SChPZPj9fTG0LMgBHiZShGaGesk.roa (hash: yiFf6ekegDw5R3MvDUcGOwB0KMvQ6EjjT4IN1JKBmzE=) 8: TBnbIzlh-BKbahkJ3E7jSuQuQaY.roa (hash: wANue+0BieEbIbGU0PO+SRCogjBRNdJwQ6IIP6xIdvM=) 9: dGOVwSZyrZWJIbYrncmyvNimip8.crl (hash: b39BUxHobpQDS9Kp10lwXPs8yxIe17un7eNx0gX5jto=) 10: h1ukNoxF9DJUl37AyGab6Erc1Gg.roa (hash: ZJoHXOQXc61UY5FcS2k+Dk9a8RGGZKOXsXXbXlt54JQ=) 11: py6UVbnGSCFD9UnKceZ9kgRxFEA.roa (hash: bcsPoMQcphhUQSwMWLfV++Vj4Ps638fSjd2kseADRTg=) 12: r1KzO2xl8ICSO7mqxB698PRuZNw.roa (hash: kEobsRqs12mPpmxJMO043I+VfPOn+9gNzHlkxfMSy8w=) 13: sji6IRKMxoDbfzOHSYIJXQ44kMU.roa (hash: J7ZKFCKuQD4fFS/N1oH5CYaWP7urJ+aNVO6F4VGrJVY=) 14: t5XPQX_yMIvCtklbQrF1q82oTKI.roa (hash: 7XrFoeiXGnOydV2Y9F7H+zsIgDxk1pwJqNALV9hG41A=) 15: zn28wDGOw3qBz9OqZJzgWf1QCv0.roa (hash: IFT8wg4FnvyKYbJvM5hiahqsDRtzob17zeYuwyl/UlM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.crl rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.mft rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 19 Jun 2025 15:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:83:8e:a9:29:c6:1a:c5:54:a9:cc:63:63:4e:ce:96:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f Validity Not Before: Jun 18 15:00:54 2025 GMT Not After : Jun 19 15:00:54 2025 GMT Subject: CN=484c89bcb3f9a2aebc68aeda876554e18c14b83b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ea:1c:3a:94:38:59:78:e6:c2:a8:86:7c:4f: da:25:81:fa:5b:87:ca:18:39:92:04:2a:31:dd:21: 1c:77:4c:1b:9d:49:20:f8:61:dc:57:99:6f:02:a3: 6d:e5:13:d7:1c:b1:72:fb:0e:f5:c6:b8:2e:f2:0c: 04:8c:ea:d4:d7:07:e6:c3:65:5f:5e:5e:97:cf:f5: 65:42:f1:18:cc:1a:b4:b2:b9:15:43:fb:0f:77:c8: 85:08:45:90:f8:82:30:d0:6b:55:a9:d3:39:ef:3e: 4c:87:e4:12:1f:59:29:3e:0d:c1:ae:a3:df:16:cf: 4d:d7:cc:9c:ce:e4:43:84:8b:bb:9a:85:3d:7d:21: 34:79:bf:0b:4a:8a:f9:20:45:98:cd:14:ee:65:56: 7d:ef:7f:8f:08:50:48:85:3a:09:0b:2c:e5:6e:f4: c5:03:68:cb:6b:19:d2:fe:9b:de:0c:99:ff:20:97: ba:c8:72:b6:e2:ab:41:f9:07:9f:34:be:03:aa:88: 53:ee:1d:52:aa:53:75:8f:90:8b:96:f6:60:de:23: f2:0c:6d:59:87:26:6a:12:b9:de:9c:90:ad:13:7f: 86:e8:1b:f0:ac:6e:20:40:6e:10:c6:ed:ed:ad:79: 4b:db:6d:88:a8:b9:ca:14:7a:5a:58:32:4d:39:97: 28:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:4C:89:BC:B3:F9:A2:AE:BC:68:AE:DA:87:65:54:E1:8C:14:B8:3B X509v3 Authority Key Identifier: keyid:74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:da:33:aa:29:4c:a6:60:3c:1d:57:93:3b:86:8c:7b:69:cf: 82:79:9d:fa:89:5f:5b:6a:ff:c2:9a:e6:46:49:d6:71:b8:18: 41:05:4c:93:a0:02:c4:2a:62:31:a2:cb:1f:4b:93:da:fb:41: 0a:00:58:ce:29:3f:84:3e:a5:12:d9:41:9f:10:08:a9:0c:cf: 6c:a4:09:d5:29:64:dc:a1:0f:eb:fb:cf:46:f5:1f:77:d6:40: 62:92:9e:7a:d4:e4:0c:6e:88:64:4e:f4:e4:8d:7c:fe:51:75: b0:c1:46:23:dd:3b:7c:1c:62:83:8c:41:51:10:ec:d3:f0:fb: 0f:4a:0a:3f:72:bb:dd:82:fa:6f:9a:ec:61:c6:bc:6a:59:dd: 09:70:7f:05:db:9b:c5:7c:65:75:3a:cd:81:77:62:df:24:8e: 88:3f:05:b2:93:3c:bd:db:38:1c:84:2c:b3:ea:97:78:d4:32: b2:3d:f7:6b:f1:f8:41:7d:9a:86:c9:cf:68:97:b5:19:c8:b1: 39:90:4a:0d:45:94:82:1c:62:f2:bc:ef:05:78:93:5f:a5:ae: 25:52:a3:10:7b:ab:d8:b5:69:9b:07:2c:a1:21:1b:88:dd:05: c0:ea:eb:8f:4d:bb:55:a6:46:f6:a2:9d:1c:6a:fb:b6:8e:dc: 01:78:a0:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZeDjqkpxhrFVKnMY2NOzpZFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0NjM5NWMxMjY3MmFkOTU4OTIxYjYyYjlkYzliMmJjZDhh NjhhOWYwHhcNMjUwNjE4MTUwMDU0WhcNMjUwNjE5MTUwMDU0WjAzMTEwLwYDVQQD Eyg0ODRjODliY2IzZjlhMmFlYmM2OGFlZGE4NzY1NTRlMThjMTRiODNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOocOpQ4WXjmwqiGfE/aJYH6W4fK GDmSBCox3SEcd0wbnUkg+GHcV5lvAqNt5RPXHLFy+w71xrgu8gwEjOrU1wfmw2Vf Xl6Xz/VlQvEYzBq0srkVQ/sPd8iFCEWQ+IIw0GtVqdM57z5Mh+QSH1kpPg3BrqPf Fs9N18yczuRDhIu7moU9fSE0eb8LSor5IEWYzRTuZVZ973+PCFBIhToJCyzlbvTF A2jLaxnS/pveDJn/IJe6yHK24qtB+QefNL4DqohT7h1SqlN1j5CLlvZg3iPyDG1Z hyZqErnenJCtE3+G6BvwrG4gQG4Qxu3trXlL222IqLnKFHpaWDJNOZcosQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEhMibyz+aKuvGiu2odlVOGMFLg7MB8GA1UdIwQY MBaAFHRjlcEmcq2ViSG2K53JsrzYpoqfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEdPVndTWnlyWldKSWJZcm5jbXl2TmltaXA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi85ZTIzNTEtOGRkMC00YjcwLWE1ZmMt ZmI3NzRhYmRmYWMyLzEvZEdPVndTWnlyWldKSWJZcm5jbXl2TmltaXA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi85ZTIzNTEtOGRkMC00YjcwLWE1ZmMtZmI3NzRhYmRmYWMy LzEvZEdPVndTWnlyWldKSWJZcm5jbXl2TmltaXA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb9ozqilM pmA8HVeTO4aMe2nPgnmd+olfW2r/wprmRknWcbgYQQVMk6ACxCpiMaLLH0uT2vtB CgBYzik/hD6lEtlBnxAIqQzPbKQJ1Slk3KEP6/vPRvUfd9ZAYpKeetTkDG6IZE70 5I18/lF1sMFGI907fBxig4xBURDs0/D7D0oKP3K73YL6b5rsYca8alndCXB/Bdub xXxldTrNgXdi3ySOiD8FspM8vds4HIQss+qXeNQysj33a/H4QX2ahsnPaJe1Gcix OZBKDUWUghxi8rzvBXiTX6WuJVKjEHur2LVpmwcsoSEbiN0FwOrrj027VaZG9qKd HGr7to7cAXigrw== -----END CERTIFICATE-----Generated at Thu Jun 19 00:50:11 2025 by rpki-client