$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.mft File: CR7HzPD6dh7Zm8WnqewNDusL8FU.mft (raw, json) Hash identifier: tI1fU+tML3PLqcgP1dR0rDXzK8Yu1JDTus26EPsdrvg= Subject key identifier: B2:F3:13:CB:BF:41:4D:49:C2:AA:3B:0F:F7:DC:EE:3C:A5:BC:39:4A Authority key identifier: 09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55 Certificate issuer: /CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055 Certificate serial: 019778D43C815E45796ABC05FEDD10A92ECE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.mft Manifest number: 0F2D Signing time: Mon 16 Jun 2025 13:01:04 +0000 Manifest this update: Mon 16 Jun 2025 13:01:04 +0000 Manifest next update: Tue 17 Jun 2025 13:01:04 +0000 Files and hashes: 1: 6CBdZpFqQHLueJb6CKqTG45G2Do.roa (hash: dj4EPskWd6dodaTyYk3j6mPnQBbAzXVtWQf8sMH8W0g=) 2: 6SIE7lIPAfETfqeGKwz9qsqTDpo.roa (hash: baJLkGQNPC/ayO1BdamNx0wTnQsH1JjYTd+EvvvO47U=) 3: B5NGdVBBF38v7I807spD9rlndCk.roa (hash: Ij2UQybHDi9rCMOEdxuL3uK0WnnQkl2pfO/6vc3aPyM=) 4: BvGloeMd1pr-0RarsG3frbQCits.roa (hash: GcGKUXns2ciEuVorqL/ux5XGAMK5utLWLfmy9SJ0sbM=) 5: CR7HzPD6dh7Zm8WnqewNDusL8FU.crl (hash: KW1B8MXQo/E7PPBwcDkNf5g+1eWGqcw9NrHGGe+uP1I=) 6: JNXkfS8Gevyb4Dt3MskQFKOQyBE.roa (hash: xyI4i/7FZY7J0bkn5v2Hrfk5UEeVMBFfBsSKz6DAPY0=) 7: Jfbp60TqKTaaXrwQL7LgGpAWEpg.roa (hash: 77aXq5T/xLpRDc/RPjSdhF/Q92mfSJbZ1p52uiAiKLY=) 8: L2H6UwduWaJxFicdgN2P7eBtiHA.roa (hash: P4+4JbqGYS4bGYqfrHMMZckY8WsOqty8P+Ix09bzckQ=) 9: O9iLiDukjzuEHVR92JODiliJ4ts.roa (hash: Hfo7TZQBS0qIDHTaKxdlPp0dObysmORzpRJwx7Y2W20=) 10: T1gh1hk6ej12g4Ihw5JL9jevaLA.roa (hash: S9ngvgv1d+3Twe9rVRGrD4AR8LO9wBk9cDUOi8GIi4o=) 11: THvQYIa2SprhVvWK5-tWknfJY9w.roa (hash: 5zmsJFBP7NnBZaNurwDsUUuS1oMZV7G7pUdzHmeMsEI=) 12: _2x-4OGJJSoKcxtXyC5heNpC1Lk.roa (hash: vkhFS/TDoPtaxHhXWGchXfwiYEYa7shcVneeg8uj/S8=) 13: cBFi45ZytFKgnNo2imsLe1_V7q8.roa (hash: r9FtBlSO2l8QxP7DU1HrwjHWsN6WkSKa/BKGiXhnmRk=) 14: chc7NZYTY8TAAm4omvxtyabyq7Y.roa (hash: D4ml84hX/IF5k6NvrzKJg2mEZ4TzfgqpdYCT4BEMOzQ=) 15: durT3uh2Ky_24MEFwd5Si3_aqOE.roa (hash: i0j2EhlYHuhS0ygdpSwrmJ+zKaf6MX39QT07/Pv8Mlw=) 16: hhzSm6GjX7s3vRc-UjvW8KahBO0.roa (hash: Ee9hXcXaMVLm37/p4g8p7BURdDDaz2FT+WhXrMvmGFM=) 17: rPciKNxouTUmkCLDkFKKyn388Cc.roa (hash: zI+gdKXH7CP5oPaL5HXMew7Kewt2hB10+HNYNloE0UY=) 18: vel8G0_GwQFflB8Mgko4kMTZKps.roa (hash: rEt+VHHycH8jAHwOJN7GUU5Y5p8vUpqH1HAPUwtitdw=) 19: yD-f7eB1dLOlfB3XPEqKpj98uCs.roa (hash: DRQJzu4HOqcnsIOmtzgmjk/hQ2C15/cPalIQczCWniU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.mft rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 17 Jun 2025 13:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:78:d4:3c:81:5e:45:79:6a:bc:05:fe:dd:10:a9:2e:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055 Validity Not Before: Jun 16 13:01:04 2025 GMT Not After : Jun 17 13:01:04 2025 GMT Subject: CN=b2f313cbbf414d49c2aa3b0ff7dcee3ca5bc394a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:dc:53:5a:25:fb:7b:eb:1b:cb:04:25:72:62: 4f:1c:94:54:7a:2f:40:ea:88:6a:7c:d8:b0:14:9e: dd:78:87:c9:ea:0f:df:40:ab:1b:29:79:7a:a6:f9: 28:c7:a4:be:70:dc:bb:30:8f:cc:e6:e7:38:c8:f8: 0d:62:94:35:35:41:8b:ab:8c:05:ee:a7:c6:bd:d5: cd:be:98:8b:1d:5e:e9:47:ba:d4:f0:88:81:91:f9: 1d:c2:62:50:15:67:50:8c:26:50:2a:0f:96:83:40: 42:aa:7f:9d:a2:86:01:42:cf:cf:ce:96:b2:62:17: e2:a3:6a:f6:a2:44:a4:80:8f:af:94:9d:fc:1a:3d: 2f:72:b4:f2:53:ad:36:32:8c:99:3f:fd:f2:8b:be: 07:f7:4b:8f:33:be:fa:91:a1:76:88:80:74:ba:11: d9:5a:00:c6:be:44:98:48:29:fb:b4:38:be:d9:3d: 0a:e1:ce:41:90:df:c1:6b:ec:f0:75:2d:44:44:39: e1:84:d0:84:23:ca:c0:17:4c:46:1b:55:71:de:98: 4b:4b:62:71:88:b0:25:bb:92:fa:3b:43:dc:59:73: 2f:5f:40:a1:e0:a3:17:c3:eb:3b:1d:56:67:5c:43: b2:46:66:95:70:23:04:a0:d6:8c:2b:e9:67:48:57: 24:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:F3:13:CB:BF:41:4D:49:C2:AA:3B:0F:F7:DC:EE:3C:A5:BC:39:4A X509v3 Authority Key Identifier: keyid:09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:b5:36:a7:a1:ed:ef:12:3f:8b:2b:46:51:d8:c0:6e:69:c8: 5d:0d:4f:e5:2d:44:a5:f4:80:d0:25:ee:ed:1d:39:c0:3f:3b: 60:e5:ca:7b:66:aa:a8:2c:df:d0:b7:15:4e:7f:df:7a:52:0e: f9:87:58:de:9c:5b:35:0d:a7:c6:7d:ed:d1:63:23:f1:cc:68: 01:90:b1:ff:fa:b7:04:d9:05:04:08:d5:e9:d9:54:66:51:f6: 02:b8:2e:67:f8:4b:57:e0:a8:6a:6f:e6:18:56:f7:5f:a6:eb: a0:51:a2:59:7d:fe:5e:6d:06:54:9e:6b:c6:ae:d6:11:ca:fa: 0b:30:4a:96:3b:45:6a:e1:3e:d7:91:38:bd:ab:23:1c:42:89: 3d:4f:36:05:e6:5b:7f:ee:96:6a:03:30:52:81:3e:1d:84:2c: 5d:2f:9e:37:c8:7f:93:0e:45:bf:20:be:a5:53:34:c0:9b:f2: b7:aa:48:77:3c:2f:89:cb:64:e3:9d:ce:4e:9e:d8:20:09:be: a5:6d:cf:aa:25:a7:bf:0b:61:fa:43:48:f2:16:31:0f:8c:f2: 9e:68:11:e2:e6:31:70:83:8a:c8:9c:46:53:03:10:00:a9:2c: 92:40:de:b8:de:15:fa:d0:fb:cc:ed:e5:36:f2:a8:f1:ad:2e: 03:52:ff:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZd41DyBXkV5arwF/t0QqS7OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MWVjN2NjZjBmYTc2MWVkOTliYzVhN2E5ZWMwZDBlZWIw YmYwNTUwHhcNMjUwNjE2MTMwMTA0WhcNMjUwNjE3MTMwMTA0WjAzMTEwLwYDVQQD EyhiMmYzMTNjYmJmNDE0ZDQ5YzJhYTNiMGZmN2RjZWUzY2E1YmMzOTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2NxTWiX7e+sbywQlcmJPHJRUei9A 6ohqfNiwFJ7deIfJ6g/fQKsbKXl6pvkox6S+cNy7MI/M5uc4yPgNYpQ1NUGLq4wF 7qfGvdXNvpiLHV7pR7rU8IiBkfkdwmJQFWdQjCZQKg+Wg0BCqn+dooYBQs/Pzpay Yhfio2r2okSkgI+vlJ38Gj0vcrTyU602MoyZP/3yi74H90uPM776kaF2iIB0uhHZ WgDGvkSYSCn7tDi+2T0K4c5BkN/Ba+zwdS1ERDnhhNCEI8rAF0xGG1Vx3phLS2Jx iLAlu5L6O0PcWXMvX0Ch4KMXw+s7HVZnXEOyRmaVcCMEoNaMK+lnSFck4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLLzE8u/QU1Jwqo7D/fc7jylvDlKMB8GA1UdIwQY MBaAFAkex8zw+nYe2ZvFp6nsDQ7rC/BVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1I3SHpQRDZkaDdabThXbnFld05EdXNMOEZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9lNjQ3OGEtN2I3My00NzU4LWFkZGQt NDVjZmM4NTdkZGRkLzEvQ1I3SHpQRDZkaDdabThXbnFld05EdXNMOEZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS9lNjQ3OGEtN2I3My00NzU4LWFkZGQtNDVjZmM4NTdkZGRk LzEvQ1I3SHpQRDZkaDdabThXbnFld05EdXNMOEZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXrU2p6Ht 7xI/iytGUdjAbmnIXQ1P5S1EpfSA0CXu7R05wD87YOXKe2aqqCzf0LcVTn/felIO +YdY3pxbNQ2nxn3t0WMj8cxoAZCx//q3BNkFBAjV6dlUZlH2ArguZ/hLV+Coam/m GFb3X6broFGiWX3+Xm0GVJ5rxq7WEcr6CzBKljtFauE+15E4vasjHEKJPU82BeZb f+6WagMwUoE+HYQsXS+eN8h/kw5FvyC+pVM0wJvyt6pIdzwvictk453OTp7YIAm+ pW3PqiWnvwth+kNI8hYxD4zynmgR4uYxcIOKyJxGUwMQAKkskkDeuN4V+tD7zO3l NvKo8a0uA1L/wQ== -----END CERTIFICATE-----Generated at Mon Jun 16 17:07:54 2025 by rpki-client