$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft File: Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft (raw, json) Hash identifier: 850Ki83c6Lx4fY01Z4CCxmhq22X75mSNkti1YG6voac= Subject key identifier: 27:E8:A3:64:1D:87:85:03:99:A4:6A:DD:DB:AA:26:63:7D:C5:35:DC Authority key identifier: 1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF Certificate issuer: /CN=1a7f036e2592391fb45a3dd33caf0b07956973cf Certificate serial: 019769CF056C28EA1D5321C4ADD2B7906190 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft Manifest number: 0DCF Signing time: Fri 13 Jun 2025 15:01:04 +0000 Manifest this update: Fri 13 Jun 2025 15:01:04 +0000 Manifest next update: Sat 14 Jun 2025 15:01:04 +0000 Files and hashes: 1: 1333qp73ruq7A2nSo9kOVQ7ZzE0.roa (hash: JX94IngnG5jgwt/Et193zGmN4IyvZ77gInsz4D23C18=) 2: 72ompPbzpmnzneIjTtp_bgxv8to.roa (hash: aazsmeYdXGvcDu68YTmlm+z5hJVBvjGJrpJeAcUoELg=) 3: 89lMNrhD2F5x0Ke_v2bBXPEQYgU.roa (hash: K5oebEL4UYGbpI6omznf50HWdMyeoL9B3ezd2prsxV4=) 4: E_3-qae-50qWA7R56c8VnNml0ZU.roa (hash: nkgMixGbN46lHgT97kcU8QjXRmEi7iabVPw78zf1uq4=) 5: EoqOLJZzdQ3i-M95BH6ZqX7Pq-o.roa (hash: a3yd5mlm4a54YbLPpH0dQXH+MNyJ+T7A5cQjTmvitXU=) 6: Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl (hash: /4hIdbH5rg5W1bi6EvUwzfjwFUTElXM9qkuYd4Sw634=) 7: J8otkOOOFhMQcKskyfSet45vpaA.roa (hash: OKOZ6+uREzTIvRtmYWOfCPq5FGMam+EbPwErDVD6eGc=) 8: dPBOUNuMluSVUVsbkWd3r_lebgU.roa (hash: pOELbtPhwT+Xz573ShVJg/36cMfG9CcY6YmD29hT1jk=) 9: h4WPx1Sgez5mjA1QOYWXTeKaf6I.roa (hash: j0LdK7x2Tf65HMuHIG0cj+mnli0iJ+gVK8H+vxjuT5g=) 10: m6IyPWEEbbAvvvSNw5JH6euTQ7A.roa (hash: 06SutFrXFPpCbXeexyGeEPlk43CPE0aY99qdVjAphr0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 14 Jun 2025 13:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:69:cf:05:6c:28:ea:1d:53:21:c4:ad:d2:b7:90:61:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a7f036e2592391fb45a3dd33caf0b07956973cf Validity Not Before: Jun 13 15:01:04 2025 GMT Not After : Jun 14 15:01:04 2025 GMT Subject: CN=27e8a3641d87850399a46adddbaa26637dc535dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:1c:b7:a3:45:25:5c:58:92:09:2f:92:51:31: b0:1d:29:d4:f7:11:28:d3:50:0c:96:c2:9a:87:f6: 84:58:b9:32:fe:ec:12:27:58:47:a8:3b:ed:d4:ad: fa:fb:db:b5:25:91:3b:c2:fa:4d:11:b9:88:49:07: d8:d5:38:fd:18:48:89:0d:d1:42:d8:37:84:8e:16: fe:10:8e:69:37:34:a7:0e:05:a3:e5:b4:28:d7:00: da:3c:fe:91:b2:2d:2b:33:9d:3a:da:a2:8b:76:32: fe:f8:c8:e1:57:17:82:eb:26:bf:c5:11:ac:50:e0: aa:ee:f1:80:06:77:b8:bd:02:16:7d:21:37:7c:be: 8f:fa:f3:52:a9:a8:0f:94:b4:e6:f1:71:74:08:54: df:11:44:41:18:92:c0:0c:5d:26:cc:b6:c9:48:79: b5:ed:10:04:74:b1:24:4a:00:07:bc:99:bd:16:f0: d8:8b:1c:02:b1:0d:8c:4f:35:ec:81:20:c9:8e:36: 1f:1d:60:d3:f1:ef:da:63:44:99:75:c9:c0:c4:69: 4d:f6:54:2c:23:2b:71:b6:e3:d1:cc:be:8b:50:4d: 89:49:5c:de:e7:d1:77:87:cd:3e:59:49:aa:a9:b8: ad:4f:22:c5:6b:d2:ac:85:fc:2a:1d:8e:64:58:9c: 14:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:E8:A3:64:1D:87:85:03:99:A4:6A:DD:DB:AA:26:63:7D:C5:35:DC X509v3 Authority Key Identifier: keyid:1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:96:9a:3d:82:40:fe:d4:f0:d9:7a:7e:0d:db:89:93:50:f4: 30:e5:68:72:37:83:23:32:ea:27:51:45:50:07:fe:e2:67:5e: 64:5e:c7:4c:2c:c4:60:36:08:0a:fe:47:97:2c:5e:bf:30:8c: ff:36:96:a6:d4:e7:01:c1:61:ee:a0:65:fb:9b:67:65:aa:4f: 20:33:23:01:12:12:20:72:eb:71:8e:3c:15:0d:1f:67:ac:c5: 76:12:9a:8b:55:1a:9d:c6:a0:31:82:0f:a4:b6:64:01:e7:aa: 2f:e4:b8:db:a6:68:af:20:1b:46:a7:38:07:0a:d0:80:07:14: 3d:45:71:82:ae:2c:87:7d:34:fc:48:f9:73:ea:0e:bc:64:2d: 82:d5:c2:80:fc:6d:3c:07:e8:61:06:b5:21:b6:bf:1d:53:1c: 8e:09:90:5a:52:14:65:9b:17:e2:6b:92:31:b5:62:38:a0:23: 2c:f0:b6:4b:ce:7d:52:4f:75:5c:a6:13:1c:14:15:b6:23:ce: 89:f6:8b:94:7c:b0:ed:43:3e:62:d7:51:3b:5c:96:04:50:99: 78:9c:ee:51:27:fb:09:92:a3:d8:2a:1c:32:43:22:6e:c5:ac: b7:fd:3c:ae:f8:9a:c2:d5:60:09:10:2d:db:60:7b:f3:e2:94: 36:4f:cc:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdpzwVsKOodUyHErdK3kGGQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhN2YwMzZlMjU5MjM5MWZiNDVhM2RkMzNjYWYwYjA3OTU2 OTczY2YwHhcNMjUwNjEzMTUwMTA0WhcNMjUwNjE0MTUwMTA0WjAzMTEwLwYDVQQD EygyN2U4YTM2NDFkODc4NTAzOTlhNDZhZGRkYmFhMjY2MzdkYzUzNWRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxy3o0UlXFiSCS+SUTGwHSnU9xEo 01AMlsKah/aEWLky/uwSJ1hHqDvt1K36+9u1JZE7wvpNEbmISQfY1Tj9GEiJDdFC 2DeEjhb+EI5pNzSnDgWj5bQo1wDaPP6Rsi0rM5062qKLdjL++MjhVxeC6ya/xRGs UOCq7vGABne4vQIWfSE3fL6P+vNSqagPlLTm8XF0CFTfEURBGJLADF0mzLbJSHm1 7RAEdLEkSgAHvJm9FvDYixwCsQ2MTzXsgSDJjjYfHWDT8e/aY0SZdcnAxGlN9lQs IytxtuPRzL6LUE2JSVze59F3h80+WUmqqbitTyLFa9KshfwqHY5kWJwUfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCfoo2Qdh4UDmaRq3duqJmN9xTXcMB8GA1UdIwQY MBaAFBp/A24lkjkftFo90zyvCweVaXPPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8yNGJlMWEtMTZkYS00ODFjLThiY2It MzQwZDYyNWM2ZGJhLzEvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC8yNGJlMWEtMTZkYS00ODFjLThiY2ItMzQwZDYyNWM2ZGJh LzEvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjpaaPYJA /tTw2Xp+DduJk1D0MOVocjeDIzLqJ1FFUAf+4mdeZF7HTCzEYDYICv5HlyxevzCM /zaWptTnAcFh7qBl+5tnZapPIDMjARISIHLrcY48FQ0fZ6zFdhKai1UancagMYIP pLZkAeeqL+S426ZoryAbRqc4BwrQgAcUPUVxgq4sh300/Ej5c+oOvGQtgtXCgPxt PAfoYQa1Iba/HVMcjgmQWlIUZZsX4muSMbViOKAjLPC2S859Uk91XKYTHBQVtiPO ifaLlHyw7UM+YtdRO1yWBFCZeJzuUSf7CZKj2CocMkMibsWst/08rviawtVgCRAt 22B78+KUNk/Mmg== -----END CERTIFICATE-----Generated at Fri Jun 13 19:12:20 2025 by rpki-client