$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft File: YGYXWM4zBiJHCjmujW70ogRPg8Q.mft (raw, json) Hash identifier: TKa8+jkj4482qYPGf84ohR4gLF9QqGdzLKa5GFVsOYk= Subject key identifier: 02:F2:AB:DA:16:A1:F1:B9:6B:7D:39:DF:6B:C2:5A:A5:D7:92:0C:DE Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4 Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4 Certificate serial: 019769CE5FE85D6279410AB601E67CBF754F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft Manifest number: 15C3 Signing time: Fri 13 Jun 2025 15:00:21 +0000 Manifest this update: Fri 13 Jun 2025 15:00:21 +0000 Manifest next update: Sat 14 Jun 2025 15:00:21 +0000 Files and hashes: 1: 1jJgRYb9W4sURCICTmoLplbZHfs.roa (hash: qvyeOItWUbyQ2K5Z+KPy3O+0hoC+eVZj/p5eOsFLL2A=) 2: 3I5SMzfV3X2bp-ZE5fRorVPE9yg.roa (hash: reA3H+soi2ZzCIioU9uZToGIBsR6YdfTtmzdGpud97o=) 3: 7Ms2re6yrcU_4KWkqgeF0A-37o0.roa (hash: 2PS3jmQMAVO4d5GHcps6+eKUgMjnqVMn7yyAAVL6E+c=) 4: AGurEqahuQXSYhB8cXum_Yv4Rd4.roa (hash: 9mstL9tbyGVVJbVNg56M6jiduKmLjfDZJdQ9Gx6+gkY=) 5: FzUBpaz-C-RxalVbWOkDzpE2yCM.roa (hash: T/pZcNXmahfhGqhyvuYT5Ve4BWsAYlUMonVIOR9Jwwc=) 6: GnpXllFnavAmEq5NxCew5FbUJHI.roa (hash: UrAOMyeUWJbJMwCGhOZ8xTwTpTiZsyt257TfGcy1E8E=) 7: JsNpDFVTIVYgUCJ1BB9Q_OSa1eI.roa (hash: WP14cmIm0lMtM89Vbr+2k9QFB+POLX7HRTX2iqF9kl8=) 8: Ru0qR7TRZaYr9H0bORVN2DKCxoI.roa (hash: 8HruGL7yjBEpznKxnMUFMkvUrJXEnuhg3el+Q45d0VY=) 9: YGYXWM4zBiJHCjmujW70ogRPg8Q.crl (hash: MLfh9tCJ7xJI2QV773qrP6ZaEiXgPcgGwVblIY3uMtI=) 10: ZGmf9YqAk4QzlnuTzaLSUF06ZmU.roa (hash: 4TTQ/eXadulSIhoVzB1gQqr9voOBbcYnz7UwH2X8rJI=) 11: aUwME-OEW2tfuy8IUz8xO9RJ9VA.roa (hash: TJpr115B55iHu7xXQQMd6VR9p+/zOYhE8FX2JwI2PiU=) 12: c3DCrLRFAJY72J3n3qrjNug2KJI.roa (hash: dR7zsNeMamp+bQYtYrwKTVfIZFLqO0MP1cdCrGnLSmE=) 13: dWEbMjaLU3aUXNyJ1vBeLmObyYY.roa (hash: XYLS96k5QjcmvPO6+gN1adTzVReS6mK/09xNzzxTkQ0=) 14: jC0_OBlWrEljET3kitu_u4UMuGI.roa (hash: 1xtlBlnH8pKeA/LPN7gJ0+ahhITWUKhm73SYRTl4heQ=) 15: kAyD-iamG8PuwFNIujY2KowQdcE.roa (hash: RV+R2SNYZWh3uXsxFcbw49NH++kmcr/RW695RLifrdU=) 16: vn3_sUEKIuyfwPbmP6Ghdkym3x8.roa (hash: 2yCzjx3NZvv5+ZPTaYqAIW7pi/CmVDJQBAJTexRz+V8=) 17: vy2Tim2DO-ewqTW5JiC-wljnBqc.roa (hash: kUL4TPorWNhT03Pu7RvQiDQUgMW7VI5SJDKSj38x+BY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 14 Jun 2025 13:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:69:ce:5f:e8:5d:62:79:41:0a:b6:01:e6:7c:bf:75:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4 Validity Not Before: Jun 13 15:00:21 2025 GMT Not After : Jun 14 15:00:21 2025 GMT Subject: CN=02f2abda16a1f1b96b7d39df6bc25aa5d7920cde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:fb:f8:29:17:7d:d1:66:90:95:bb:38:a3:c0: 09:10:e5:85:f4:4b:9c:bf:2e:80:2c:a5:84:d2:b8: 38:2d:78:36:5e:33:8f:d8:72:9b:75:ce:c3:19:07: 6d:02:3a:a5:9d:b5:be:c9:35:26:b0:da:75:b5:49: e3:19:87:69:75:59:cc:2c:55:c8:3a:fb:0e:7f:ea: 25:c1:69:d6:9f:af:31:94:db:ba:21:22:26:7a:0b: 7e:59:91:c9:29:49:08:bf:89:e0:95:fa:7d:d6:1e: a5:ce:4b:28:de:5e:e5:a8:4a:e8:c7:a2:0e:ce:64: d5:51:10:ab:f9:49:db:4d:88:9d:10:71:ff:d6:c2: 80:af:68:99:78:f5:3c:7f:02:2d:2b:1d:05:31:57: 12:31:a5:e2:d3:86:a8:c6:40:ec:db:33:27:25:71: 47:e0:b5:07:50:7d:71:e4:79:97:e4:c9:3a:67:5e: fd:e2:28:fa:9f:7f:d8:11:e0:09:c0:86:a5:f6:41: 8c:d0:c4:ab:aa:e7:fb:dc:bc:04:5e:f8:25:69:72: a9:b3:ff:d7:23:46:8c:c8:ad:ed:f5:b1:ee:e5:ac: 67:68:f1:a0:de:63:30:e4:15:29:8f:6a:6c:d8:79: d7:77:2f:e3:df:d4:ea:9c:77:d4:7b:d8:67:39:c1: c4:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:F2:AB:DA:16:A1:F1:B9:6B:7D:39:DF:6B:C2:5A:A5:D7:92:0C:DE X509v3 Authority Key Identifier: keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:66:90:66:e7:46:68:13:31:52:84:4b:fe:e8:08:92:de:59: e7:98:03:44:2e:e7:77:a0:0f:84:d0:1b:25:eb:72:1b:3a:1d: 5c:56:0b:44:89:c1:90:4b:6c:96:2c:28:38:1b:1a:e0:c3:df: fd:1c:3f:a4:92:55:0c:3d:80:14:d1:86:6f:60:f2:6b:37:75: 00:e4:6c:21:3c:e9:7c:ea:86:27:da:98:8c:7c:b1:b3:b3:a4: 13:2d:4e:58:f6:59:26:54:5b:85:40:ea:22:ee:b7:72:ee:40: 57:62:a9:1a:1e:2f:40:01:b8:5f:8f:e9:14:b2:0f:74:77:f6: 16:02:18:9d:04:85:d3:f1:ab:07:89:93:3a:1c:da:ea:16:34: d2:62:21:24:6c:4e:34:4a:65:26:54:1f:28:57:0b:38:12:fb: 87:67:26:0e:f9:59:45:e7:80:e0:25:d0:81:c4:69:7a:2b:88: 7d:7d:32:1f:f7:fb:1c:a2:a9:d2:e7:c6:ca:fa:ba:14:e8:16: 29:f9:62:ce:c5:76:66:bf:f3:54:f5:2a:54:bc:09:8e:59:08: f7:b8:48:30:a5:86:39:c4:f0:26:21:d8:d9:b8:1c:b8:3b:f4: a5:81:aa:d8:92:35:e5:dd:eb:db:d9:d6:7a:45:2b:ef:6f:1c: a6:db:b9:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdpzl/oXWJ5QQq2AeZ8v3VPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjYxNzU4Y2UzMzA2MjI0NzBhMzlhZThkNmVmNGEyMDQ0 ZjgzYzQwHhcNMjUwNjEzMTUwMDIxWhcNMjUwNjE0MTUwMDIxWjAzMTEwLwYDVQQD EygwMmYyYWJkYTE2YTFmMWI5NmI3ZDM5ZGY2YmMyNWFhNWQ3OTIwY2RlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPv4KRd90WaQlbs4o8AJEOWF9Euc vy6ALKWE0rg4LXg2XjOP2HKbdc7DGQdtAjqlnbW+yTUmsNp1tUnjGYdpdVnMLFXI OvsOf+olwWnWn68xlNu6ISImegt+WZHJKUkIv4nglfp91h6lzkso3l7lqErox6IO zmTVURCr+UnbTYidEHH/1sKAr2iZePU8fwItKx0FMVcSMaXi04aoxkDs2zMnJXFH 4LUHUH1x5HmX5Mk6Z1794ij6n3/YEeAJwIal9kGM0MSrquf73LwEXvglaXKps//X I0aMyK3t9bHu5axnaPGg3mMw5BUpj2ps2HnXdy/j39TqnHfUe9hnOcHEcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFALyq9oWofG5a30532vCWqXXkgzeMB8GA1UdIwQY MBaAFGBmF1jOMwYiRwo5ro1u9KIET4PEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2Ut MWY4NzQ2OTQ1NDgzLzEvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2UtMWY4NzQ2OTQ1NDgz LzEvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZmaQZudG aBMxUoRL/ugIkt5Z55gDRC7nd6APhNAbJetyGzodXFYLRInBkEtsliwoOBsa4MPf /Rw/pJJVDD2AFNGGb2Dyazd1AORsITzpfOqGJ9qYjHyxs7OkEy1OWPZZJlRbhUDq Iu63cu5AV2KpGh4vQAG4X4/pFLIPdHf2FgIYnQSF0/GrB4mTOhza6hY00mIhJGxO NEplJlQfKFcLOBL7h2cmDvlZReeA4CXQgcRpeiuIfX0yH/f7HKKp0ufGyvq6FOgW KflizsV2Zr/zVPUqVLwJjlkI97hIMKWGOcTwJiHY2bgcuDv0pYGq2JI15d3r29nW ekUr728cptu5aw== -----END CERTIFICATE-----Generated at Fri Jun 13 19:17:14 2025 by rpki-client