$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.mft File: C6yCgEcArTZTi_hvNMBz6XFDDaU.mft (raw, json) Hash identifier: imbvTT8f2yZK3mvg4gFWPspdIfi68SN+n887E5Cqt9o= Subject key identifier: 60:CE:DA:5A:AE:9B:2F:E6:04:0E:4A:91:80:DD:45:E3:AE:DF:AD:7F Authority key identifier: 0B:AC:82:80:47:00:AD:36:53:8B:F8:6F:34:C0:73:E9:71:43:0D:A5 Certificate issuer: /CN=0bac82804700ad36538bf86f34c073e971430da5 Certificate serial: 01977609AFA98F448E855B71AF5668F07E60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C6yCgEcArTZTi_hvNMBz6XFDDaU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.mft Manifest number: 15A1 Signing time: Mon 16 Jun 2025 00:00:35 +0000 Manifest this update: Mon 16 Jun 2025 00:00:35 +0000 Manifest next update: Tue 17 Jun 2025 00:00:35 +0000 Files and hashes: 1: 1Rd2o3xUjPYq6-ROGbojsnIAO7o.roa (hash: cJibfgam1opzds5Qh9r7Y5ffttnidwSOVT40ptzFnqs=) 2: 3BgoLFWZ9YgbC6oPkKTi3o_J_gQ.roa (hash: S8E8XfDmes95rq1PbjLgkDvVZJpWeDUS/8l576aU10U=) 3: 7bJ_SXsvQs5jd90zxR_xlvABeGo.roa (hash: m0ZQ2Y2DbXV8jV6KvTNs6fUZ/bk3yiFcpgd8GYS9O7Q=) 4: C6yCgEcArTZTi_hvNMBz6XFDDaU.crl (hash: UCMuM9eYBUvJHnJyG+C+h1soqAJVujkvn3pcyrwr0L0=) 5: EJIUsUOKvSLerwNQFS-Out5zZuM.roa (hash: D433E6UiMyX9KdcjAcomX19JFn+CfTOeAqT8DsBwSkY=) 6: IYymNdWawqstgCP4XTcQ0LRxyO4.roa (hash: zZeH4Zhf/0r9N1702in9DCWq7U55L0ULISwTrHj2H68=) 7: L1Bz6qAa7Tw2r0koEROI1LNkc8U.roa (hash: DocEMWhWVMmnhBegXTSWZpGGhsBAl4jcHIRujEDNT44=) 8: b_Dm6TuKr2O9F9em_a6cktDchPg.roa (hash: ehArjKJWDMxsQnB7k5Ijrml5MK5YWi9DCvAWzUWkArc=) 9: vdMwrE1WRBo6tPAM0c8ANEH4m7w.roa (hash: aAOimEwL2ZyXBynFWKnhjaaS/YCd7rqkh4wnbJ4qboQ=) 10: xkRsFChgw8FgF1z4ealSBYfjSiw.roa (hash: c2XTA6ndUBR9DMhPW66OSPqlDjn7RwF/yQC+0Ynbm/Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.mft rsync://rpki.ripe.net/repository/DEFAULT/C6yCgEcArTZTi_hvNMBz6XFDDaU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Jun 2025 20:59:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:76:09:af:a9:8f:44:8e:85:5b:71:af:56:68:f0:7e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0bac82804700ad36538bf86f34c073e971430da5 Validity Not Before: Jun 16 00:00:35 2025 GMT Not After : Jun 17 00:00:35 2025 GMT Subject: CN=60ceda5aae9b2fe6040e4a9180dd45e3aedfad7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:9e:f4:8e:4e:0c:d0:bb:bc:f9:a6:da:8f:c5: bf:bb:b6:01:92:e1:ab:cd:b1:b2:a8:87:e3:7c:c3: 26:f5:0b:06:a6:ac:00:94:70:bc:e8:63:d1:14:00: 5a:9e:62:65:a0:1f:9e:3e:06:cc:2e:21:65:0e:03: 26:5f:13:e3:83:07:d5:86:0b:18:f6:f7:0f:be:74: 3e:a5:d2:de:69:bf:89:18:3b:4a:0d:4c:fa:96:d5: e2:59:87:09:17:13:9b:8d:68:61:e0:04:88:0b:20: 94:70:d9:72:6d:a6:29:9d:c2:5e:4c:8a:97:8c:0c: a8:dd:e1:97:87:20:be:5b:eb:79:22:dd:f4:a0:24: 98:ea:ae:e5:ca:a8:a8:ec:f0:3e:42:ad:22:79:84: 0d:e9:4a:84:73:a4:33:2d:95:9c:bd:2e:63:6a:51: af:fc:16:aa:eb:92:b1:c4:43:8a:a0:6f:fe:b9:31: 3c:cb:8e:d1:35:81:fe:39:ad:2b:4d:52:61:f1:37: f7:71:14:15:c4:93:5c:df:df:5f:1b:2b:dd:c4:9d: 2e:c6:6c:8b:41:2b:20:a2:bb:47:41:76:7a:c5:5b: 42:2b:b2:5b:f5:cb:1c:5e:56:41:4e:bc:93:77:80: 3d:1e:88:d9:f3:ac:4d:e2:9b:9e:09:bd:6a:54:de: ca:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:CE:DA:5A:AE:9B:2F:E6:04:0E:4A:91:80:DD:45:E3:AE:DF:AD:7F X509v3 Authority Key Identifier: keyid:0B:AC:82:80:47:00:AD:36:53:8B:F8:6F:34:C0:73:E9:71:43:0D:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6yCgEcArTZTi_hvNMBz6XFDDaU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:6a:d8:b8:67:f0:ce:61:b1:6a:9f:49:a0:f0:1e:ea:e4:d1: 27:7d:8e:54:5b:df:84:a0:0e:d9:cf:bb:50:ea:d3:0f:68:2a: 34:7d:8e:6d:b6:5c:24:59:d2:58:ac:b6:59:32:5f:68:96:00: 9d:12:cb:73:5a:5b:bf:e4:f6:2a:d8:6c:69:2c:2a:cd:f9:f1: 53:ac:a5:91:12:74:ae:a1:76:53:08:a0:e4:9f:bd:9c:f9:b4: fb:81:ba:89:d2:aa:5f:56:48:af:68:17:73:c6:77:a2:34:ac: b0:89:f7:b1:74:a0:7e:50:23:e2:84:b2:07:3d:03:aa:b9:63: b8:51:b0:a5:65:f6:f9:40:c2:5f:87:aa:c8:ea:19:30:73:ed: fb:c4:37:5b:d8:48:de:d8:87:60:46:8b:7c:05:bd:65:3f:5b: 00:02:7e:10:38:38:cb:6f:d7:24:39:5c:d6:4a:ee:5e:01:25: 98:7f:19:e8:68:2a:01:f4:2d:a3:30:8e:c2:3c:a1:9a:3f:c4: f6:af:07:34:3b:b0:aa:71:5a:3f:0d:8d:6d:a4:14:dc:46:90: 9c:9b:57:c1:1c:29:16:e0:b7:34:b6:fb:2b:7f:eb:e2:3a:1a: 16:d2:60:c1:05:58:43:4b:aa:9c:f3:39:7f:dd:3a:e8:37:f8: d9:06:d3:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZd2Ca+pj0SOhVtxr1Zo8H5gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiYWM4MjgwNDcwMGFkMzY1MzhiZjg2ZjM0YzA3M2U5NzE0 MzBkYTUwHhcNMjUwNjE2MDAwMDM1WhcNMjUwNjE3MDAwMDM1WjAzMTEwLwYDVQQD Eyg2MGNlZGE1YWFlOWIyZmU2MDQwZTRhOTE4MGRkNDVlM2FlZGZhZDdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4570jk4M0Lu8+abaj8W/u7YBkuGr zbGyqIfjfMMm9QsGpqwAlHC86GPRFABanmJloB+ePgbMLiFlDgMmXxPjgwfVhgsY 9vcPvnQ+pdLeab+JGDtKDUz6ltXiWYcJFxObjWhh4ASICyCUcNlybaYpncJeTIqX jAyo3eGXhyC+W+t5It30oCSY6q7lyqio7PA+Qq0ieYQN6UqEc6QzLZWcvS5jalGv /Baq65KxxEOKoG/+uTE8y47RNYH+Oa0rTVJh8Tf3cRQVxJNc399fGyvdxJ0uxmyL QSsgortHQXZ6xVtCK7Jb9cscXlZBTryTd4A9HojZ86xN4pueCb1qVN7KVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGDO2lqumy/mBA5KkYDdReOu361/MB8GA1UdIwQY MBaAFAusgoBHAK02U4v4bzTAc+lxQw2lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzZ5Q2dFY0FyVFpUaV9odk5NQno2WEZERGFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9hNzI4OTEtZGUyZi00MTU2LWEwMTEt NDNmNjRiY2VhOTlkLzEvQzZ5Q2dFY0FyVFpUaV9odk5NQno2WEZERGFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS9hNzI4OTEtZGUyZi00MTU2LWEwMTEtNDNmNjRiY2VhOTlk LzEvQzZ5Q2dFY0FyVFpUaV9odk5NQno2WEZERGFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbWrYuGfw zmGxap9JoPAe6uTRJ32OVFvfhKAO2c+7UOrTD2gqNH2ObbZcJFnSWKy2WTJfaJYA nRLLc1pbv+T2KthsaSwqzfnxU6ylkRJ0rqF2Uwig5J+9nPm0+4G6idKqX1ZIr2gX c8Z3ojSssIn3sXSgflAj4oSyBz0DqrljuFGwpWX2+UDCX4eqyOoZMHPt+8Q3W9hI 3tiHYEaLfAW9ZT9bAAJ+EDg4y2/XJDlc1kruXgElmH8Z6GgqAfQtozCOwjyhmj/E 9q8HNDuwqnFaPw2NbaQU3EaQnJtXwRwpFuC3NLb7K3/r4joaFtJgwQVYQ0uqnPM5 f9066Df42QbTKg== -----END CERTIFICATE-----Generated at Mon Jun 16 06:32:57 2025 by rpki-client