$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.mft File: Kfp91j8uLYe194UAk8dDu_vhTkQ.mft (raw, json) Hash identifier: li+hPhh6xytHfAFURC9qPrNSmVgDKldWH2JiT94/iIw= Subject key identifier: 5D:D0:C1:44:76:88:B0:69:5B:F0:08:7E:18:16:94:FB:27:E4:0A:59 Authority key identifier: 29:FA:7D:D6:3F:2E:2D:87:B5:F7:85:00:93:C7:43:BB:FB:E1:4E:44 Certificate issuer: /CN=29fa7dd63f2e2d87b5f7850093c743bbfbe14e44 Certificate serial: 01976F9A0B517D2EA75ACDDFCC23A04116AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.mft Manifest number: 0441 Signing time: Sat 14 Jun 2025 18:00:55 +0000 Manifest this update: Sat 14 Jun 2025 18:00:55 +0000 Manifest next update: Sun 15 Jun 2025 18:00:55 +0000 Files and hashes: 1: 05o0ilxpLPFj724SFa-brN8vzXk.roa (hash: CPN9MrS7MYDAN7zH2nr9vN3ZoOoKTAOXjde0z1Y3r4g=) 2: 5h88FMdyJ4BKxPsdcgHQyCeiggw.roa (hash: Owv+GMEcs1uONJHFnOZ4mKs3NxskXYOAjZpyCXtz47Y=) 3: 7HfOX3VXYMpd2AIPBc7-S-uMs_8.roa (hash: k5M6cr3ux0zaC3HrK4AQu/eEDnL7gIrijJy4BZ0Nw4M=) 4: 7OOt-MnHsX07hiPdKHIMZaJ8wrg.roa (hash: 7nZ90mtRGZWhPbm1Puw7IzZkWIgR1R3W35D51WFY05w=) 5: BT9PpbhARp2PKEupubiiio8TvBc.roa (hash: PoRHUsj11iEWOHUhXg6p185DLswF97IfYO5dpNwM+4k=) 6: F1OWe033_DuZ-JjrisCh6PYvi1s.roa (hash: bLONjsizRZ/N6QYxCW6KHMn5K6t8a7PJWP3/t57vEJk=) 7: K3PHjFr5iZQBePAHzZD7020H3CQ.roa (hash: cYqNDwyqOAThtjZwtvIGK4yhgMYUiG7kHacZddA60SQ=) 8: Kfp91j8uLYe194UAk8dDu_vhTkQ.crl (hash: oZ9GNOJbnm260RHnxCb1A7/5higugHdRwr8aO76F9H4=) 9: PwDUcjqBkiIEULzXxKTVGmmTWG4.roa (hash: FRJ/j45X7Ib31MDYnkP96sRJLV09a4YTIEwHH8GRm+c=) 10: SGJaxM1tftN6eWW_JhWZIZdq6Hs.roa (hash: i3+GB/wkLsPOj8TleSkbJUTDI0kj7dMA6dFb0QRWP+8=) 11: X-V1c33BeHLMq6YPZ6efCsl3cMM.roa (hash: qD2GqEyAmd2okDBw6OR3DlzX+O8r0bDHBHVLHEg9U3g=) 12: X6A7ZOxQkF-N5TBF6hNZ0D-sPxQ.roa (hash: sOJamuYIhYJWJLrvAE1wd1xA2gh7NgXmer7n43KBLdc=) 13: Y68HM_eE8K1w4SS6fxm68_4816Q.roa (hash: j5XSBxx8t0t2IG8jaeix/JPoU5Vp2pcHE0yvoVN43nY=) 14: eM7RoSEq3C715iKtcwBUqsiVTDM.roa (hash: U7xNVv9g2fKrI4EOjzXQcIX1ekwna/aEJqfXxfKaR90=) 15: u-M1H4DlyfJcf3cI4KPf60AAf5E.roa (hash: rqvHkJ1B+GOatMUS6IQfjBMvmK91Ea22MfD3TS1yuVM=) 16: us6ukJjPwguMUHmhc8SpjnjeHOE.roa (hash: RuHDwxtF2zmik+S8Nhu0t8NrGvwHVQJraNmp1nORf/c=) 17: zvMqPtiLMOCgjOxqm6euJp83YNA.roa (hash: jIvx8RFgHAKB/kauSEcxDljiE/0sDn1/Jfcw3a0iCKU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Jun 2025 18:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:6f:9a:0b:51:7d:2e:a7:5a:cd:df:cc:23:a0:41:16:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29fa7dd63f2e2d87b5f7850093c743bbfbe14e44 Validity Not Before: Jun 14 18:00:55 2025 GMT Not After : Jun 15 18:00:55 2025 GMT Subject: CN=5dd0c1447688b0695bf0087e181694fb27e40a59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:3a:21:72:3f:f6:b3:cc:3b:14:fc:21:5e:e5: 78:93:b9:49:89:14:f3:9e:7e:59:91:3f:8e:2b:a3: 4e:86:37:2d:db:6d:50:09:b9:6b:53:d2:2c:e1:b2: 7a:58:c9:e0:7e:74:92:68:a4:09:fe:55:4f:74:a8: 25:59:5e:03:ef:c1:b8:9a:b3:5c:a0:56:31:87:69: ac:cb:de:61:f7:29:34:73:92:ed:57:a2:5e:2e:52: 5a:37:a8:4d:7c:7a:5e:e7:7c:1d:82:f3:85:67:1c: a0:0a:c6:8c:13:c3:6d:97:89:fa:c2:4e:27:40:a5: 26:d6:fd:b7:f4:50:60:08:61:73:62:5b:ec:f7:de: d4:62:d1:9b:b3:93:b4:3e:f2:a0:e9:ee:3b:9d:9d: 28:1e:ef:46:72:b1:fc:f9:d3:96:4d:26:2d:99:26: e8:4b:df:e8:fe:b6:fb:89:1f:43:82:17:02:ba:8e: 4c:1b:20:70:42:04:d3:24:a1:2a:a8:5b:1e:4d:96: 18:75:1f:56:c1:71:2a:fc:b3:2b:55:4f:59:01:2a: 1e:15:5e:3b:f9:05:eb:1f:2e:a3:8e:9e:49:66:7c: c4:0f:29:61:84:03:55:55:0d:55:42:9c:73:ad:6a: 0a:3a:26:63:59:32:65:7c:ad:de:be:44:93:e6:5f: b0:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:D0:C1:44:76:88:B0:69:5B:F0:08:7E:18:16:94:FB:27:E4:0A:59 X509v3 Authority Key Identifier: keyid:29:FA:7D:D6:3F:2E:2D:87:B5:F7:85:00:93:C7:43:BB:FB:E1:4E:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:f0:8e:c1:24:37:d1:4e:c9:7a:55:79:db:ac:f3:3c:2d:ae: 03:c9:8f:67:6c:ec:cf:b6:55:47:41:59:23:bd:35:f2:c4:22: 3d:c1:16:62:59:bf:b3:43:fc:c6:be:ca:b5:e8:87:59:b4:f3: da:ea:d3:7f:ac:1b:cf:c3:42:d4:59:9c:52:52:b2:41:c8:e8: 10:b3:4d:e3:bf:84:b9:de:8d:06:ca:ce:29:ae:85:ae:4b:18: b7:cb:f8:b6:5f:f9:cf:ed:85:cd:b6:db:e4:e0:66:dc:c5:2c: 58:71:73:c9:4c:8a:8c:3f:a3:4f:59:b2:73:35:c7:1a:02:65: a7:8b:7d:f5:57:35:82:ed:31:82:59:9e:71:cb:1a:64:9e:a8: 13:5c:d4:9c:72:48:25:dc:ad:01:96:fc:ab:d7:08:0d:be:45: 7e:5e:ff:40:be:32:9f:c7:d6:ce:70:0e:3c:cb:28:d5:b5:83: 08:7f:18:67:3a:3e:31:40:f0:fd:6d:70:bc:68:db:12:f6:03: d0:02:a1:41:a5:f8:7c:96:94:67:ba:aa:db:07:5b:2e:94:a3: 01:ed:90:9f:e2:22:e7:9d:af:3d:bb:5f:5b:ff:6f:6b:c4:1a: 87:8d:9e:a5:b8:ab:5c:67:54:dc:0e:a7:77:e4:d1:18:82:b3: f6:d4:c8:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdvmgtRfS6nWs3fzCOgQRauMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZmE3ZGQ2M2YyZTJkODdiNWY3ODUwMDkzYzc0M2JiZmJl MTRlNDQwHhcNMjUwNjE0MTgwMDU1WhcNMjUwNjE1MTgwMDU1WjAzMTEwLwYDVQQD Eyg1ZGQwYzE0NDc2ODhiMDY5NWJmMDA4N2UxODE2OTRmYjI3ZTQwYTU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Dohcj/2s8w7FPwhXuV4k7lJiRTz nn5ZkT+OK6NOhjct221QCblrU9Is4bJ6WMngfnSSaKQJ/lVPdKglWV4D78G4mrNc oFYxh2msy95h9yk0c5LtV6JeLlJaN6hNfHpe53wdgvOFZxygCsaME8Ntl4n6wk4n QKUm1v239FBgCGFzYlvs997UYtGbs5O0PvKg6e47nZ0oHu9GcrH8+dOWTSYtmSbo S9/o/rb7iR9DghcCuo5MGyBwQgTTJKEqqFseTZYYdR9WwXEq/LMrVU9ZASoeFV47 +QXrHy6jjp5JZnzEDylhhANVVQ1VQpxzrWoKOiZjWTJlfK3evkST5l+wCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF3QwUR2iLBpW/AIfhgWlPsn5ApZMB8GA1UdIwQY MBaAFCn6fdY/Li2HtfeFAJPHQ7v74U5EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2ZwOTFqOHVMWWUxOTRVQWs4ZER1X3ZoVGtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8yYzBjYmYtMTFmNy00YjZkLWI4OGUt NzlmN2I2ZWE3YzE0LzEvS2ZwOTFqOHVMWWUxOTRVQWs4ZER1X3ZoVGtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8yYzBjYmYtMTFmNy00YjZkLWI4OGUtNzlmN2I2ZWE3YzE0 LzEvS2ZwOTFqOHVMWWUxOTRVQWs4ZER1X3ZoVGtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOfCOwSQ3 0U7JelV526zzPC2uA8mPZ2zsz7ZVR0FZI7018sQiPcEWYlm/s0P8xr7KteiHWbTz 2urTf6wbz8NC1FmcUlKyQcjoELNN47+Eud6NBsrOKa6FrksYt8v4tl/5z+2Fzbbb 5OBm3MUsWHFzyUyKjD+jT1myczXHGgJlp4t99Vc1gu0xglmeccsaZJ6oE1zUnHJI JdytAZb8q9cIDb5Ffl7/QL4yn8fWznAOPMso1bWDCH8YZzo+MUDw/W1wvGjbEvYD 0AKhQaX4fJaUZ7qq2wdbLpSjAe2Qn+Ii552vPbtfW/9va8Qah42epbirXGdU3A6n d+TRGIKz9tTIvw== -----END CERTIFICATE-----Generated at Sun Jun 15 01:53:22 2025 by rpki-client