$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.mft File: EbabWdGfKYfknxhS1guxd3-AowE.mft (raw, json) Hash identifier: otW3X0725GGF0zQIGFOhGE2/3+dUF3jk3Xb8KKvNEKI= Subject key identifier: 55:69:1D:75:90:9B:76:86:EA:72:33:B6:B2:9B:DA:50:A5:D7:C1:DB Authority key identifier: 11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01 Certificate issuer: /CN=11b69b59d19f2987e49f1852d60bb1777f80a301 Certificate serial: 01978545D5ECB3809C9FF96CF4EC58A6A3FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.mft Manifest number: 1668 Signing time: Wed 18 Jun 2025 23:00:35 +0000 Manifest this update: Wed 18 Jun 2025 23:00:35 +0000 Manifest next update: Thu 19 Jun 2025 23:00:35 +0000 Files and hashes: 1: 00MgoZoYQtZGwQrOezTGMFJxBeQ.roa (hash: yEhoJZzpLJl/SN7s0GnAIUxYjWxoW/1J4yfFxR29F7o=) 2: 1--WDAhFOBW7ncSoM8jfxu_x_aPA.roa (hash: 5hRd7iHG9OvxZkn9587WnUFx5p+RxhyhidWTwSlJ2mE=) 3: 1-ii9BpktvLfKL9NdP4Xjw34dxzo.roa (hash: IVdrSR5yCIuLGaH/M5dJy9ZYu3Jaw204rMz6G3hTE1o=) 4: 8vOQtL27_x_KP4AhmfFLg_3M8lc.roa (hash: Vic6GWLdc64ivVnZQrYMtxCZB0oo/LOszabqlqUsxLw=) 5: 9de0VEdjbWo-tUqmz8gijTg6IaE.roa (hash: f2qUpX3qXVm+Q2CbUSag5dNIyDCVc83yVIgmgfZphx0=) 6: EbabWdGfKYfknxhS1guxd3-AowE.crl (hash: IV1EL6xfLBQAPeATH314gkPA9Yh1uC6z1RM59iv3VFQ=) 7: EiEIQCc_qMer4lOJnSDqRcuD1Lc.roa (hash: ijZabFruWckgrMPN8StTP6ptBpbQ5XdRowFLqAhy8V0=) 8: JIWcXiw5e-DMCtEQjl82_rCum6M.roa (hash: aum4OzbjHbjDqqRbPTuypoabo0V5INMyV5rJ/7+2kJk=) 9: hh5gFEvny7iJIP363sERSCjh-rs.roa (hash: nHmDgAhsTOhkwPJGUNXsbu1PrrGNS0xivvoOwxQO9Og=) 10: ke7Pxta8VpaoIZehaqEkUOxJVjY.roa (hash: /w8HaARGeZYUDrzIiinqB3uzBNqHoroNWtdxiuibk3g=) 11: mpiw9JhQM7LKtUVCRbcJs0dukrY.roa (hash: 6u6djeisAdzHv9sPzUqJK6BMNgw7cN5OEZXaoLYZmKY=) 12: pJ5WVqz27sc4GN_2TdiId1RFRS8.roa (hash: G9CNm7jTF73M1GlxFCdHMqAq+/05g/o+kvhEPuf5Cdo=) 13: pgY7a6E6tgPcuDGaJ9In9AClvQU.roa (hash: LI5gLLz864YQ5E9OGWp9/KKXRdmX9ZlNd6zL73F9k74=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.crl rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.mft rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 19 Jun 2025 23:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:85:45:d5:ec:b3:80:9c:9f:f9:6c:f4:ec:58:a6:a3:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11b69b59d19f2987e49f1852d60bb1777f80a301 Validity Not Before: Jun 18 23:00:35 2025 GMT Not After : Jun 19 23:00:35 2025 GMT Subject: CN=55691d75909b7686ea7233b6b29bda50a5d7c1db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:44:00:2f:9b:48:43:f5:a8:15:fe:57:93:59: 9a:2e:bb:01:53:9c:2d:08:3f:bb:37:0a:fe:bf:98: 9d:8f:6a:b4:95:15:83:e2:62:47:68:66:98:4f:15: 3a:2d:b4:ac:e8:5e:2f:8d:65:2d:8c:c3:45:0f:34: e7:78:5d:31:68:19:5f:8d:c9:a6:95:6a:44:db:21: 5f:e7:6d:5c:e6:4a:ea:5f:25:84:3f:b4:11:7b:be: 6b:a8:2b:f7:a1:f0:69:0b:03:b9:f1:c0:6b:c3:2a: b9:6f:58:dc:1d:1b:c0:1f:44:ae:d1:ed:b5:bc:b2: 9f:26:eb:d3:09:10:d1:52:21:43:60:cf:12:84:58: e4:7b:53:b6:c1:01:80:9b:87:16:19:ad:26:25:6e: 7f:b2:fa:8d:27:e3:90:63:cf:6b:88:71:51:1c:aa: 79:ea:af:20:22:ce:66:68:3b:c5:53:b4:2d:4d:03: e5:92:88:2d:ac:09:bb:ac:2e:22:53:dc:99:7b:4b: 86:d6:b7:37:41:18:62:b0:51:37:2a:72:bb:d3:d8: 7a:62:68:e9:78:67:ee:66:6b:c7:82:04:0e:ad:b4: a1:c1:17:2d:bf:e0:32:5b:9f:df:f1:1f:4a:1b:91: af:fd:1e:9f:1c:12:5b:9b:d5:b4:03:09:84:05:6b: 5d:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:69:1D:75:90:9B:76:86:EA:72:33:B6:B2:9B:DA:50:A5:D7:C1:DB X509v3 Authority Key Identifier: keyid:11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:bf:db:12:c9:09:5a:3e:ff:90:c7:ce:af:6b:50:4e:9e:a4: ab:e7:d5:87:ed:d4:5d:0b:b0:4d:ab:2a:b2:46:17:af:a3:26: 0f:8a:5d:6f:5b:6c:b4:d3:4e:6d:92:76:d7:12:cb:61:3a:9b: d2:77:89:5a:ff:5b:8f:39:bb:dd:b8:4c:2f:eb:b6:0e:53:e8: be:48:59:55:d4:a9:6b:fe:9c:3c:4f:ed:ee:a2:ed:fe:d3:d6: 7a:2c:6f:8d:59:dd:b0:3c:39:37:59:c9:e7:76:f1:c2:61:dd: c7:82:4c:50:2d:b4:56:9f:1f:e8:8a:be:15:ce:ee:ae:44:04: 66:7a:00:a8:c5:83:f3:11:e2:f1:a3:2a:21:55:e5:b5:91:1e: 08:71:a6:0b:ba:84:dd:37:ea:61:2c:27:79:5c:7f:fd:e7:b8: 7b:4f:94:82:98:8e:0c:0d:d8:4f:b0:b8:ba:a7:bd:87:cd:3b: f7:66:7b:bd:f8:ad:b9:c4:ab:6c:20:44:35:ea:78:0a:aa:d5: 34:23:cf:64:e6:88:5a:b7:34:ac:1d:74:5b:39:64:a9:1e:d1: eb:0c:2e:ed:bc:31:cc:b5:c9:80:47:67:b1:3f:83:dd:01:7f: ce:9f:66:e6:ba:26:ec:1a:05:0a:a6:bd:05:0a:47:d9:29:0f: b4:f1:34:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZeFRdXss4Ccn/ls9OxYpqP7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExYjY5YjU5ZDE5ZjI5ODdlNDlmMTg1MmQ2MGJiMTc3N2Y4 MGEzMDEwHhcNMjUwNjE4MjMwMDM1WhcNMjUwNjE5MjMwMDM1WjAzMTEwLwYDVQQD Eyg1NTY5MWQ3NTkwOWI3Njg2ZWE3MjMzYjZiMjliZGE1MGE1ZDdjMWRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2EQAL5tIQ/WoFf5Xk1maLrsBU5wt CD+7Nwr+v5idj2q0lRWD4mJHaGaYTxU6LbSs6F4vjWUtjMNFDzTneF0xaBlfjcmm lWpE2yFf521c5krqXyWEP7QRe75rqCv3ofBpCwO58cBrwyq5b1jcHRvAH0Su0e21 vLKfJuvTCRDRUiFDYM8ShFjke1O2wQGAm4cWGa0mJW5/svqNJ+OQY89riHFRHKp5 6q8gIs5maDvFU7QtTQPlkogtrAm7rC4iU9yZe0uG1rc3QRhisFE3KnK709h6Ymjp eGfuZmvHggQOrbShwRctv+AyW5/f8R9KG5Gv/R6fHBJbm9W0AwmEBWtdcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFVpHXWQm3aG6nIztrKb2lCl18HbMB8GA1UdIwQY MBaAFBG2m1nRnymH5J8YUtYLsXd/gKMBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWJhYldkR2ZLWWZrbnhoUzFndXhkMy1Bb3dFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC81ZWRmN2EtYWI5YS00NWU3LWE2MTIt ZDE2OWMwODhiNDEyLzEvRWJhYldkR2ZLWWZrbnhoUzFndXhkMy1Bb3dFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC81ZWRmN2EtYWI5YS00NWU3LWE2MTItZDE2OWMwODhiNDEy LzEvRWJhYldkR2ZLWWZrbnhoUzFndXhkMy1Bb3dFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhL/bEskJ Wj7/kMfOr2tQTp6kq+fVh+3UXQuwTasqskYXr6MmD4pdb1tstNNObZJ21xLLYTqb 0neJWv9bjzm73bhML+u2DlPovkhZVdSpa/6cPE/t7qLt/tPWeixvjVndsDw5N1nJ 53bxwmHdx4JMUC20Vp8f6Iq+Fc7urkQEZnoAqMWD8xHi8aMqIVXltZEeCHGmC7qE 3TfqYSwneVx//ee4e0+UgpiODA3YT7C4uqe9h80792Z7vfitucSrbCBENep4CqrV NCPPZOaIWrc0rB10WzlkqR7R6wwu7bwxzLXJgEdnsT+D3QF/zp9m5rom7BoFCqa9 BQpH2SkPtPE09Q== -----END CERTIFICATE-----Generated at Thu Jun 19 06:04:18 2025 by rpki-client