$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft File: DnX7T1KoKdE24pqaAlxjbRmuMo4.mft (raw, json) Hash identifier: mg897VSr+XcXFOsj0h3+fqdnAYYHOwcNOaRqTjjjgnQ= Subject key identifier: A6:F7:EB:B2:46:EB:0D:4F:DD:B6:A1:9D:42:FB:80:94:AE:BB:34:B3 Authority key identifier: 0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E Certificate issuer: /CN=0e75fb4f52a829d136e29a9a025c636d19ae328e Certificate serial: 019773ADA1E0AA8854B6AE23C7CE9976028C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft Manifest number: 08E3 Signing time: Sun 15 Jun 2025 13:00:48 +0000 Manifest this update: Sun 15 Jun 2025 13:00:48 +0000 Manifest next update: Mon 16 Jun 2025 13:00:48 +0000 Files and hashes: 1: 2i2Vy05Tg_e1ak_1Uk12CnilxHg.roa (hash: NqduqZJuAkmB6MV5SKQihh3yDbwkeeFnfpDnTNMY130=) 2: 73x2Y8rtkrW56QrQQDyvuiFLG40.roa (hash: oxRcUfzeJXkoQZbB0gN4SvScUE5rLGzaBI9pXSTycUY=) 3: 9V0vcgO-bdJZakQILqcfcNUVDzs.roa (hash: rTVAfA+3goVyX4gfp8i16RQoEb4IWxA+yVUwUEUJp9c=) 4: 9wVDQpp0z04zwfoESc_S5u9etZ0.roa (hash: +x8r2JMNLKJOL0pGTh/MSwGY9V5+DOeggrdlCFNLMkg=) 5: DnX7T1KoKdE24pqaAlxjbRmuMo4.crl (hash: 613BtBtY3AvvExrGt2ayH2hHUyTHd+Y3SFoVvJTJpw4=) 6: GZgpng6Ot_FGRMQou9o62VcEekY.roa (hash: LX9b2Js5i118pOJ0Nzr+pm+rZAe5EZDelGHWiSHQOWA=) 7: KX36I7dSkLFi2aH0eqBcDdn1RlA.roa (hash: uMMjk83OkXZQb4cTo6pJ1weYcZ0/vJkq+xb1gidjyYA=) 8: OjaH7K6CfyojVS6c46fulaH1p-M.roa (hash: +oZE9RnQm2ybyt6c5+lMZS7HBhz+F/aKH1dTBent0OM=) 9: WggPonyi31b-yIkSaCuExsTR9U0.roa (hash: tkUrHPw54S3hnUlb390kJ2ECtbQXaVRTzWQhKus6rlQ=) 10: fkiMonxbwz3kZc8YkJyvn2qIywM.roa (hash: fqrrGCyxmQcRYifeeyyNsSENvJ1MUubmLT6QjBEi5nc=) 11: hirG0wCdPPp74UU2BJCRBx2I3xI.roa (hash: NoA4bfTe2eDgcbMz4bkkr7hReCXWcPMZ0ab/qV2+EuU=) 12: lY5lInv89iRxJVvC3a6rnPaLUZE.roa (hash: NXKmyIXzqyj9f0ZTzfiv0j+d+aicHdwiSS0J0/+KFtg=) 13: veJEUJlOM2CviEnGl10A91ot5GY.roa (hash: /hB3dvMinNmS8ydpLK9fobmCgmadtOoHLY0n+FVP1Cw=) 14: yQ91zssiLccRHA5nLDLCbHVrzwY.roa (hash: jHNMPrDscbkXMeLXgNIGaBErBrBnGqdgI+yTuRlxq7Q=) 15: yohJslaqJeqxG9ZdmhfVBivAGaE.roa (hash: SxCXBWVxQCB+hqHsFFhyla2B81f/O/PjbQmRobaYZP8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Jun 2025 13:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:73:ad:a1:e0:aa:88:54:b6:ae:23:c7:ce:99:76:02:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e75fb4f52a829d136e29a9a025c636d19ae328e Validity Not Before: Jun 15 13:00:48 2025 GMT Not After : Jun 16 13:00:48 2025 GMT Subject: CN=a6f7ebb246eb0d4fddb6a19d42fb8094aebb34b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:1e:39:b7:ee:87:d9:45:48:9f:2c:6d:4d:18: 71:40:a3:89:54:6f:ee:a2:56:55:37:58:bd:92:6b: e6:cb:8e:01:10:00:2f:a7:0e:80:47:19:87:e2:33: aa:b4:28:ec:c3:30:ce:b5:d6:ba:72:82:e3:90:3b: 7c:74:4c:50:53:8a:2a:56:95:74:ed:9a:ca:20:ed: 68:e5:53:bf:85:75:8c:6e:23:3e:1d:16:e0:68:1c: 97:30:cf:ce:d0:48:20:20:1b:32:52:61:c5:23:28: 73:65:41:3d:38:d3:1c:e8:c9:ff:08:7c:9b:99:e9: 02:5d:c4:d8:d2:a9:94:ec:b1:09:6d:9a:e9:09:11: f5:fb:48:a7:15:8c:2b:34:6c:97:92:85:1b:66:ab: ce:ea:c6:ed:fd:0e:cc:ae:9e:24:ed:d0:9e:37:c0: 8e:bf:c1:40:d7:71:b4:39:81:6d:23:77:0a:37:a6: fc:7d:2d:21:3e:a3:86:b3:55:c3:f5:9c:7e:07:58: 29:63:31:48:18:93:e9:ec:5d:67:28:77:70:86:83: 37:ad:c4:1f:19:7e:b3:60:30:b7:1c:59:c0:36:3b: 52:e2:54:36:93:05:73:fd:d2:e3:eb:df:39:54:51: 34:f7:de:87:cb:bb:88:d6:ae:58:20:62:52:71:77: 10:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:F7:EB:B2:46:EB:0D:4F:DD:B6:A1:9D:42:FB:80:94:AE:BB:34:B3 X509v3 Authority Key Identifier: keyid:0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:ff:ee:e0:27:9c:b9:91:57:78:b2:a6:be:6c:f1:3f:91:c0: e7:4f:2e:e9:9c:d8:09:d1:97:ee:89:ce:c2:a4:f9:b7:2a:70: 53:01:b3:c2:39:3c:1b:8b:45:ab:b0:b1:92:2a:4b:80:7a:5d: fc:12:c5:e2:30:c9:78:c3:ed:18:e6:53:85:41:0a:79:8f:52: c1:e6:84:3b:a0:45:7a:62:16:19:0c:bd:a2:d5:60:39:da:39: f2:7e:f1:0a:ac:11:60:42:86:f4:7b:3b:3f:29:09:0a:fa:75: d6:5a:cc:3a:de:e3:da:55:9a:11:47:66:39:9c:00:37:22:c8: 0b:aa:81:5d:52:9f:9e:dc:a3:44:54:8c:87:f5:1b:67:4f:eb: cd:00:13:fd:ea:73:a7:5b:b2:86:6d:22:f8:ec:7b:c2:d5:fc: ff:b2:20:49:3a:42:a4:5c:37:0b:91:46:ed:6c:b3:9b:3e:b0: 3e:a7:39:6a:64:7d:4e:7c:e9:63:5a:6d:21:bb:09:e2:6d:a6: e5:8e:68:87:7b:7d:59:ae:bb:e5:9a:11:f3:48:59:f3:23:39: 42:7e:c8:34:21:10:00:8a:d8:0a:b1:ef:27:ab:d6:d7:0d:63: 32:f6:88:a6:03:f0:c2:e9:24:3a:53:d5:6f:4e:e5:34:23:5f: dd:7c:aa:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdzraHgqohUtq4jx86ZdgKMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlNzVmYjRmNTJhODI5ZDEzNmUyOWE5YTAyNWM2MzZkMTlh ZTMyOGUwHhcNMjUwNjE1MTMwMDQ4WhcNMjUwNjE2MTMwMDQ4WjAzMTEwLwYDVQQD EyhhNmY3ZWJiMjQ2ZWIwZDRmZGRiNmExOWQ0MmZiODA5NGFlYmIzNGIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2B45t+6H2UVInyxtTRhxQKOJVG/u olZVN1i9kmvmy44BEAAvpw6ARxmH4jOqtCjswzDOtda6coLjkDt8dExQU4oqVpV0 7ZrKIO1o5VO/hXWMbiM+HRbgaByXMM/O0EggIBsyUmHFIyhzZUE9ONMc6Mn/CHyb mekCXcTY0qmU7LEJbZrpCRH1+0inFYwrNGyXkoUbZqvO6sbt/Q7Mrp4k7dCeN8CO v8FA13G0OYFtI3cKN6b8fS0hPqOGs1XD9Zx+B1gpYzFIGJPp7F1nKHdwhoM3rcQf GX6zYDC3HFnANjtS4lQ2kwVz/dLj6985VFE0996Hy7uI1q5YIGJScXcQGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKb367JG6w1P3bahnUL7gJSuuzSzMB8GA1UdIwQY MBaAFA51+09SqCnRNuKamgJcY20ZrjKOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRG5YN1QxS29LZEUyNHBxYUFseGpiUm11TW80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC81NzU5ZjYtOTNlMi00MDI5LWE0OWYt MzViYTI2N2RlZDNiLzEvRG5YN1QxS29LZEUyNHBxYUFseGpiUm11TW80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC81NzU5ZjYtOTNlMi00MDI5LWE0OWYtMzViYTI2N2RlZDNi LzEvRG5YN1QxS29LZEUyNHBxYUFseGpiUm11TW80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQf/u4Cec uZFXeLKmvmzxP5HA508u6ZzYCdGX7onOwqT5typwUwGzwjk8G4tFq7CxkipLgHpd /BLF4jDJeMPtGOZThUEKeY9SweaEO6BFemIWGQy9otVgOdo58n7xCqwRYEKG9Hs7 PykJCvp11lrMOt7j2lWaEUdmOZwANyLIC6qBXVKfntyjRFSMh/UbZ0/rzQAT/epz p1uyhm0i+Ox7wtX8/7IgSTpCpFw3C5FG7Wyzmz6wPqc5amR9TnzpY1ptIbsJ4m2m 5Y5oh3t9Wa675ZoR80hZ8yM5Qn7INCEQAIrYCrHvJ6vW1w1jMvaIpgPwwukkOlPV b07lNCNf3XyqtQ== -----END CERTIFICATE-----Generated at Sun Jun 15 20:02:39 2025 by rpki-client