$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft File: CoH-kFn2ggvBitWALy8fynfSVLc.mft (raw, json) Hash identifier: QIVP3fvN14dze9itutGhV5+xgsEhrJ9nR9iDK/exhfI= Subject key identifier: 12:4C:D0:CD:2B:B9:9F:D2:70:0E:C5:43:FD:FF:6E:23:67:FC:E6:D3 Authority key identifier: 0A:81:FE:90:59:F6:82:0B:C1:8A:D5:80:2F:2F:1F:CA:77:D2:54:B7 Certificate issuer: /CN=0a81fe9059f6820bc18ad5802f2f1fca77d254b7 Certificate serial: 01976F6319DC021910FEBA8FC7C121F46C7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft Manifest number: 08F1 Signing time: Sat 14 Jun 2025 17:00:55 +0000 Manifest this update: Sat 14 Jun 2025 17:00:55 +0000 Manifest next update: Sun 15 Jun 2025 17:00:55 +0000 Files and hashes: 1: 31z7eSu8--35kebgOlCIABBeVf8.roa (hash: Bo6lIvIlV0RX6xhodzhO7tuvgscKOLMBcfTJSKlUYZw=) 2: 7pPLJaN3OTQBK8i-P4GOQNKJPho.roa (hash: HpLQLLrJKx/bS+zdiKUm5TCX+jRSuh5jVP1YSt/MOZY=) 3: CoH-kFn2ggvBitWALy8fynfSVLc.crl (hash: QQ8BdYliA5AaxmmJ7WKckSdhVhjCDzsdnHjzu2LQM7M=) 4: EacbpO8P-LkG-h50-C35fVYJXyI.roa (hash: btUaf5jDz02025fLzDlihBUOmr88cX2MxuDiHPb5dc4=) 5: FstRBv2kO53NDHW81Q9Mg07SWg4.roa (hash: +uStvYqgj5hn3d6BL0rwAnmTzIsGb1x7W+G4jAHTkdA=) 6: Gf8Y2t4y9XW51teYl9-IOJM-QkE.roa (hash: JzLxoz0gWXWBbhQLZinkEP2bb0OKmAdUFJyyBJ71KUI=) 7: N0ylFt5LVYNjTI-_TsSgO84trzU.roa (hash: FGN5RCpPLee+DVEx92LqF5VUyDDoLbxxrafkYHnOVZg=) 8: PEEbtcraLxJZAPZLAW5H_KDLDwQ.roa (hash: wU0HPJ884+fnbW1G1BaCynti9gWD3Sn+0YrIsJUp3ns=) 9: hLdZE5q1FOXSO44ZofCjRXN9z7I.roa (hash: CmOCZv7BugezIWG5ZPHeIaee5S3CP9UP9zRJfwRzazg=) 10: i1bI7bZVKfcJ9vCnWPYEzcCSqOc.roa (hash: I9SME80ARJLDqvqmW5BBXCvNlxHc4Su4PKuf6AZPdG4=) 11: n_d7GjbZ9YbYK045nkHL_lX76pM.roa (hash: L6McSAJwh8T7ZY3ArgurepjkJRDGFkS06sAchDylLyc=) 12: pW-Kl5UPWqu6KG3_J4t1h52HuR0.roa (hash: 0HOBimxzzdToQy38vYlAJbGZVaBtPNrg0qioOLxF/+Q=) 13: tlqKEYYvFMWYK-JPntFn1nyKI1U.roa (hash: /wIoPxgkbhHCyNQ8NB2J0bNqG5fb1wxitY8EONuXMt0=) 14: yFPiywRMEHaITt3TRPzJux8bzAU.roa (hash: WnTskmfJ1KLR7sA0SYoAyMqXx6u45IJAhh3f7ztydOk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.crl rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Jun 2025 10:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:6f:63:19:dc:02:19:10:fe:ba:8f:c7:c1:21:f4:6c:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a81fe9059f6820bc18ad5802f2f1fca77d254b7 Validity Not Before: Jun 14 17:00:55 2025 GMT Not After : Jun 15 17:00:55 2025 GMT Subject: CN=124cd0cd2bb99fd2700ec543fdff6e2367fce6d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:02:5f:4d:ad:39:b5:e1:ed:12:0f:34:03:11: 06:36:4d:a2:1c:07:2d:03:b4:b7:90:d4:ed:02:52: 99:0e:4e:02:5b:d9:b8:98:c4:e7:11:cf:9d:b1:6f: aa:1a:e5:8c:9b:4f:60:7b:65:0a:66:04:89:71:ee: 5b:8a:a7:fa:57:cb:c4:01:4c:9e:f4:ee:1a:63:38: 7d:48:4b:f2:9a:e2:99:1e:8e:34:2f:3d:90:25:46: 77:56:50:2a:c4:0f:be:f6:2a:f0:f5:54:13:3c:8b: 2c:7d:e7:f7:a3:83:d9:70:0a:c2:d8:8c:74:f4:02: 59:0c:6e:9b:b9:40:1a:51:eb:10:85:8f:dd:ea:51: e3:01:7a:4a:a8:2e:9c:f5:7f:b6:87:8f:e1:5f:33: 72:64:33:76:51:8b:ce:45:b1:e6:af:26:e7:21:0e: 67:8f:94:4f:75:d5:73:ab:ec:86:65:99:0d:98:be: ee:28:74:ae:26:61:23:1f:7e:73:2d:cb:1d:dd:62: b6:74:ef:a0:9d:e5:d7:60:50:2c:ce:17:d4:e3:19: 6f:de:8e:fa:1b:63:e7:3b:48:28:31:dd:bd:e2:70: d5:39:2a:0e:42:d2:7f:f0:04:3e:e7:65:b4:f0:79: 28:df:82:16:c1:3f:bd:e9:c2:a8:ef:28:dd:58:7d: d1:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:4C:D0:CD:2B:B9:9F:D2:70:0E:C5:43:FD:FF:6E:23:67:FC:E6:D3 X509v3 Authority Key Identifier: keyid:0A:81:FE:90:59:F6:82:0B:C1:8A:D5:80:2F:2F:1F:CA:77:D2:54:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:81:0f:c9:ef:32:5a:e2:5c:8b:53:91:73:73:2a:07:21:db: d7:c4:8f:b7:4b:c8:53:00:b0:b6:c1:a6:c6:3b:ef:a8:0b:d2: c1:31:0c:93:72:69:df:54:ca:2b:0d:93:1a:9b:14:81:23:dd: b5:c0:d3:78:94:27:3a:11:bc:f2:a5:45:f0:28:21:aa:94:fa: 3e:7c:ce:a5:03:61:7c:0e:e1:15:fe:b3:b4:8c:e1:e7:d9:80: b0:f5:42:d7:82:9a:5d:38:25:b8:d2:f1:e5:9b:f9:57:80:82: 42:0c:c3:a7:94:a6:54:f5:70:8c:b3:6a:0e:38:c0:e8:ed:fa: 3c:a5:5b:2d:8d:5d:f3:6b:17:cf:dc:b8:e9:18:00:54:b1:01: d5:c4:3f:c7:92:31:6e:48:a6:15:f9:d0:a8:98:57:3a:ae:9e: 8f:d9:01:4c:1f:32:f5:80:0e:3d:bd:48:c2:36:0f:47:6d:38: 39:57:e6:8e:ce:66:06:87:a1:27:0e:88:c2:4d:05:14:51:18: ad:f5:f2:0d:b5:65:60:75:da:9c:88:81:cd:fc:42:01:9a:ab: db:9b:9d:58:d0:2a:ba:98:60:d1:69:4e:8d:0b:17:26:88:c6: 86:06:5d:08:31:58:43:b6:5e:bb:bd:cb:b8:30:5e:ff:a4:ea: dc:12:4c:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdvYxncAhkQ/rqPx8Eh9Gx+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhODFmZTkwNTlmNjgyMGJjMThhZDU4MDJmMmYxZmNhNzdk MjU0YjcwHhcNMjUwNjE0MTcwMDU1WhcNMjUwNjE1MTcwMDU1WjAzMTEwLwYDVQQD EygxMjRjZDBjZDJiYjk5ZmQyNzAwZWM1NDNmZGZmNmUyMzY3ZmNlNmQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgJfTa05teHtEg80AxEGNk2iHAct A7S3kNTtAlKZDk4CW9m4mMTnEc+dsW+qGuWMm09ge2UKZgSJce5biqf6V8vEAUye 9O4aYzh9SEvymuKZHo40Lz2QJUZ3VlAqxA++9irw9VQTPIssfef3o4PZcArC2Ix0 9AJZDG6buUAaUesQhY/d6lHjAXpKqC6c9X+2h4/hXzNyZDN2UYvORbHmrybnIQ5n j5RPddVzq+yGZZkNmL7uKHSuJmEjH35zLcsd3WK2dO+gneXXYFAszhfU4xlv3o76 G2PnO0goMd294nDVOSoOQtJ/8AQ+52W08Hko34IWwT+96cKo7yjdWH3ROQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBJM0M0ruZ/ScA7FQ/3/biNn/ObTMB8GA1UdIwQY MBaAFAqB/pBZ9oILwYrVgC8vH8p30lS3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ29ILWtGbjJnZ3ZCaXRXQUx5OGZ5bmZTVkxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC80OTg0ZGYtNmRiMi00ZTBhLTkxZjgt YmYwNWFjYzgyYmQxLzEvQ29ILWtGbjJnZ3ZCaXRXQUx5OGZ5bmZTVkxjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC80OTg0ZGYtNmRiMi00ZTBhLTkxZjgtYmYwNWFjYzgyYmQx LzEvQ29ILWtGbjJnZ3ZCaXRXQUx5OGZ5bmZTVkxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlIEPye8y WuJci1ORc3MqByHb18SPt0vIUwCwtsGmxjvvqAvSwTEMk3Jp31TKKw2TGpsUgSPd tcDTeJQnOhG88qVF8CghqpT6PnzOpQNhfA7hFf6ztIzh59mAsPVC14KaXTgluNLx 5Zv5V4CCQgzDp5SmVPVwjLNqDjjA6O36PKVbLY1d82sXz9y46RgAVLEB1cQ/x5Ix bkimFfnQqJhXOq6ej9kBTB8y9YAOPb1IwjYPR204OVfmjs5mBoehJw6Iwk0FFFEY rfXyDbVlYHXanIiBzfxCAZqr25udWNAquphg0WlOjQsXJojGhgZdCDFYQ7Zeu73L uDBe/6Tq3BJMEA== -----END CERTIFICATE-----Generated at Sat Jun 14 19:54:30 2025 by rpki-client