$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.mft File: gci3Ore963b_SLLKCZYW7b5xxCY.mft (raw, json) Hash identifier: T7jJo71sK3skZO+Pn67qoOkbyZfhB3nQO5oetDopBFQ= Subject key identifier: 67:29:A9:82:6E:E8:79:77:D8:05:BE:99:EE:13:8C:75:F5:CE:51:F6 Authority key identifier: 81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26 Certificate issuer: /CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426 Certificate serial: 0197741B5A9DA4BCFE03411ECFFC310FA255 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.mft Manifest number: 14F5 Signing time: Sun 15 Jun 2025 15:00:38 +0000 Manifest this update: Sun 15 Jun 2025 15:00:38 +0000 Manifest next update: Mon 16 Jun 2025 15:00:38 +0000 Files and hashes: 1: 1-VPDuonC2Hi8dBlT4tvnOiHdYOg.roa (hash: WJKUvuV0JjUpEwzD0WN1y14bM/NihUUNvR+FCbd/Y2g=) 2: 5_qbUTNJTKmDx-VPoCyg5GiF_44.roa (hash: upLH1FeLhYFLc3B1AG7zDO/VAd2waobao5HIF19Yrvo=) 3: InIRujvheMSnuntsvHJjTs5su2U.roa (hash: IqMDfUGWehH9FGcRRehcGH1gUKY9FO7UHo3vHht1RFY=) 4: YYbT8lbyVWv6yQ3daL3nywYGpE0.roa (hash: H/Qcg0aplqNTHmTWbVVGR+IQ4V4ag89xamHIQ20iGuk=) 5: dQWEtMXACcbFK-O5sfKYo_f8Y4o.roa (hash: vHyoYTb8eVOfU/syk4YrhtN9pnkC2H/rIICxrgnsNBI=) 6: gci3Ore963b_SLLKCZYW7b5xxCY.crl (hash: TJFY7PrENJDUbloiYzEqgmkFWqgBWCmAwqlzoS5dzug=) 7: gio6F55GO42GZsRq8FQUo7P8nrk.roa (hash: 80TfPfy6fsm8Hf2Ac1l9Gq3x9An3ECfANZIa/nM0IVY=) 8: hPi3Yz-IQfnghVcK_tG22EcMbZk.roa (hash: eBUVvaZgDfjhvtgjU9lOaAKzUUmY7IXYS3AoPIKzIbQ=) 9: ipyYMMpWH0Tjg9MMcWcxDVXBhDI.roa (hash: jwUnq34H3x2DDYiun7O3jFMVM618SNic53iAmXCX+Z4=) 10: lWJoF_swBr2Lu5mO-Q5os-z2oAU.roa (hash: GwiPt4R6jhk5qWspCacWYlKa/6jGmdnZmiVjiKnYhHQ=) 11: pocLo2IUa96EYAO9rbTb3m68VAo.roa (hash: Z7HB26uR5mWKPIqwiHiyjqm7+3tugkPZzITbgrY+cl4=) 12: sL_8jT6F9be0gHpzuWYJ5NRFk7Y.roa (hash: tTSTzWjgCJKHY0qcH5mPggHS+UBYeFmuuzH6UrgFPas=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.crl rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.mft rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Jun 2025 15:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:74:1b:5a:9d:a4:bc:fe:03:41:1e:cf:fc:31:0f:a2:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426 Validity Not Before: Jun 15 15:00:38 2025 GMT Not After : Jun 16 15:00:38 2025 GMT Subject: CN=6729a9826ee87977d805be99ee138c75f5ce51f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:53:f6:59:5e:5a:3c:80:ac:cf:5d:a0:89:d6: 08:01:54:2c:01:e2:6b:0b:1d:32:80:1f:64:22:8f: 29:bf:79:5c:c0:cc:01:6f:a1:52:08:15:ea:90:d6: 2f:51:e9:aa:00:9a:d6:06:88:7b:01:0a:67:b3:76: fc:62:ef:da:d8:40:61:3b:e2:40:6e:de:5d:cb:60: b5:d2:a3:34:f4:77:cf:90:e8:70:4f:44:72:b8:84: 50:9b:e9:02:ca:60:0f:77:d2:36:ee:37:90:c5:84: 04:95:9c:4a:5c:4b:79:5d:38:7d:c2:ff:81:e5:5c: 21:33:0a:7d:b6:d8:8d:41:92:c1:7a:ab:64:3f:30: e0:26:70:4d:bc:8d:ca:16:65:1c:53:8d:ed:c5:c5: 0e:cc:1c:41:de:ea:2a:24:a9:48:39:ee:db:72:e7: 67:0c:b0:41:73:ce:ee:80:7f:94:f6:44:66:eb:ef: ca:2d:1e:5f:3a:73:ec:be:5d:02:c5:62:cd:ce:e5: 69:d3:73:4e:81:59:66:b6:9d:47:d8:4b:53:b3:34: c4:53:56:1f:15:e2:0f:de:90:c6:4e:68:a7:f4:19: 93:aa:bc:94:f7:7f:32:7e:9f:b8:a5:b7:4c:13:8b: a6:f0:e0:8d:c2:65:70:26:5a:e8:10:9d:16:81:64: 2f:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:29:A9:82:6E:E8:79:77:D8:05:BE:99:EE:13:8C:75:F5:CE:51:F6 X509v3 Authority Key Identifier: keyid:81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:f6:e2:e1:1e:be:2f:1c:9a:2b:fa:6d:99:b9:60:83:00:f7: 45:9b:1c:13:06:34:2d:d7:83:b5:7b:e7:45:9d:97:82:b1:28: 4f:fb:cd:9f:68:8d:65:cd:04:2d:d0:b7:03:da:53:b4:cf:9f: 9d:2f:ed:42:48:72:3d:b8:e9:33:49:48:38:b5:81:dd:5c:db: ab:a2:56:eb:28:a8:db:ff:c4:a5:a2:54:83:aa:b3:17:b1:39: 8a:13:52:53:2b:04:d8:ff:9a:53:aa:cc:0d:56:8d:68:14:72: c1:dd:36:6d:15:4f:08:e6:7d:48:51:fb:f4:25:b1:3e:d3:63: 37:43:e7:f4:63:e5:e0:e5:34:33:a3:29:85:7e:35:32:1d:f7: 9f:15:c3:a1:52:cf:44:d1:fd:f6:c8:c7:1e:73:60:b0:2f:72: 71:e2:2d:2d:41:73:61:34:3b:1b:05:2f:0a:5c:6c:70:36:39: aa:c7:7a:d0:fe:11:bc:ef:23:90:7f:c1:72:df:a8:4c:81:b0: 52:df:24:0f:26:86:44:9e:52:02:0c:ce:db:7d:19:22:3f:ec: 98:de:96:88:53:9b:24:03:76:55:5b:5e:9a:d4:47:c5:27:f3: 2d:e8:2d:8c:43:87:b0:ee:31:20:8d:32:d6:f9:c7:50:95:cc: b9:56:8c:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZd0G1qdpLz+A0Eez/wxD6JVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxYzhiNzNhYjdiZGViNzZmZjQ4YjJjYTA5OTYxNmVkYmU3 MWM0MjYwHhcNMjUwNjE1MTUwMDM4WhcNMjUwNjE2MTUwMDM4WjAzMTEwLwYDVQQD Eyg2NzI5YTk4MjZlZTg3OTc3ZDgwNWJlOTllZTEzOGM3NWY1Y2U1MWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1P2WV5aPICsz12gidYIAVQsAeJr Cx0ygB9kIo8pv3lcwMwBb6FSCBXqkNYvUemqAJrWBoh7AQpns3b8Yu/a2EBhO+JA bt5dy2C10qM09HfPkOhwT0RyuIRQm+kCymAPd9I27jeQxYQElZxKXEt5XTh9wv+B 5VwhMwp9ttiNQZLBeqtkPzDgJnBNvI3KFmUcU43txcUOzBxB3uoqJKlIOe7bcudn DLBBc87ugH+U9kRm6+/KLR5fOnPsvl0CxWLNzuVp03NOgVlmtp1H2EtTszTEU1Yf FeIP3pDGTmin9BmTqryU938yfp+4pbdME4um8OCNwmVwJlroEJ0WgWQvLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGcpqYJu6Hl32AW+me4TjHX1zlH2MB8GA1UdIwQY MBaAFIHItzq3vet2/0iyygmWFu2+ccQmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2NpM09yZTk2M2JfU0xMS0NaWVc3YjV4eENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8yMDc5MzQtOWVkYy00YTg5LTgyMGUt ZDg0ODhiM2FiNDJmLzEvZ2NpM09yZTk2M2JfU0xMS0NaWVc3YjV4eENZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC8yMDc5MzQtOWVkYy00YTg5LTgyMGUtZDg0ODhiM2FiNDJm LzEvZ2NpM09yZTk2M2JfU0xMS0NaWVc3YjV4eENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANPbi4R6+ LxyaK/ptmblggwD3RZscEwY0LdeDtXvnRZ2XgrEoT/vNn2iNZc0ELdC3A9pTtM+f nS/tQkhyPbjpM0lIOLWB3Vzbq6JW6yio2//EpaJUg6qzF7E5ihNSUysE2P+aU6rM DVaNaBRywd02bRVPCOZ9SFH79CWxPtNjN0Pn9GPl4OU0M6MphX41Mh33nxXDoVLP RNH99sjHHnNgsC9yceItLUFzYTQ7GwUvClxscDY5qsd60P4RvO8jkH/Bct+oTIGw Ut8kDyaGRJ5SAgzO230ZIj/smN6WiFObJAN2VVtemtRHxSfzLegtjEOHsO4xII0y 1vnHUJXMuVaMtQ== -----END CERTIFICATE-----Generated at Mon Jun 16 00:07:00 2025 by rpki-client