$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft File: lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft (raw, json) Hash identifier: rcyp3NUAyxXXdR8iUG/pnAiZMfmg9atxG/4NycoZC4I= Subject key identifier: B2:CF:23:7A:2B:1F:31:16:33:4A:23:04:2A:1D:08:76:64:96:B7:D5 Authority key identifier: 95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4 Certificate issuer: /CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4 Certificate serial: 019771F6504AAE6CFF75EB1BC20C1D442EA4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft Manifest number: 06FB Signing time: Sun 15 Jun 2025 05:00:57 +0000 Manifest this update: Sun 15 Jun 2025 05:00:57 +0000 Manifest next update: Mon 16 Jun 2025 05:00:57 +0000 Files and hashes: 1: 1MaQ3UERADg_6Qg7JL_rTSZtSHY.roa (hash: +cHQwaDCYvHww4iP38T2uoBP4/k9EvIeJ4TrlPbtqZk=) 2: A4sFQqRFCKCwm3rOcDm1brgLh20.roa (hash: zpTrJTrbgAHaC1jzfyC84uX2bsnYBgkUeCbD1/ANlNA=) 3: L1kVVDEFzLMskbG6GJyreD_W07s.roa (hash: 5dzD1L/ZuTcph/ZKFVQ3aoYa39ekNirKhm0sj0J3s7Y=) 4: Mw4DzLJ9A153q_gtADK6A3kEnBY.roa (hash: 9HhbT3XmjLkyekKYjCbpBZ8eHIVc8Kvm9P+X8Pv5KiY=) 5: X51AXgb2KS_bSKaoVTEwZQCDbaI.roa (hash: dIVfAdtliR/rqqT9oOdAdBHVSJ2XfcVzKxtq7Q6eHNg=) 6: dHqe2g1gPOsNegmLcIQI5U9SNfQ.roa (hash: 9F/5Kpf5xOdn6kNdotAo01R2YGp/WqJkDJDDXyXxvig=) 7: gWkZHgIkZd9yenAGLfTyA3gKWR4.roa (hash: l54n2yyzmR2WNOmjMKZ/OpFoKCDgQWPMUC6iItLiMEs=) 8: lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl (hash: 8OOmlG5Q+fdASCNund83Chr0+RgXQgKeAQbmPgAAkKk=) 9: pogCClIVQuTAGHMrqdp_DRQP_iw.roa (hash: Tk0SJU87JQDfMtu6wpZcC4NHpxmpDCQmsFrb0+IhQkQ=) 10: whkGOZP4Q7wa7J5dbmXu5vPM1v0.roa (hash: 4Aaj5rdkc2lbz/0Cfp212ny3pIPA+JJbd5a/bPZM33w=) 11: x_3yNA2PKdnI1wLd8Ez_YK-zxP4.roa (hash: DlPSxcRx7THUf3XmSC4nmfhGWUpRLK3tS4Z99FqsNaQ=) 12: yUoBCuAM3eeeS5PJtpm_h3BonbI.roa (hash: Yanbkga/qe67IvnuSRaM/Q9sdhNyEQ9ebYUC/TCNJFQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Jun 2025 05:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:71:f6:50:4a:ae:6c:ff:75:eb:1b:c2:0c:1d:44:2e:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4 Validity Not Before: Jun 15 05:00:57 2025 GMT Not After : Jun 16 05:00:57 2025 GMT Subject: CN=b2cf237a2b1f3116334a23042a1d08766496b7d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b1:1c:14:bb:8c:12:cf:60:4f:10:7a:2e:d0: 1d:f3:86:37:fb:77:b1:89:ef:61:41:98:63:da:99: ad:9c:39:c9:c9:7c:00:c8:44:02:fd:50:18:23:a1: 3f:b3:65:76:e9:2c:fa:51:3d:c0:81:df:8e:9d:a6: ca:80:27:6b:fe:6d:ab:e3:b7:8e:a0:8b:b2:3e:15: cf:eb:3d:38:51:84:6c:fa:2d:49:cf:f0:bf:12:5e: a2:f0:e9:fb:e5:c1:c8:4b:d1:4e:ca:84:85:30:c6: 8b:26:f2:41:46:ae:47:3f:14:12:ec:76:cb:1c:e2: 6b:4a:fa:f0:3f:c7:8e:1a:cb:8e:4e:d9:4e:f3:8e: 61:95:75:ed:17:21:19:02:40:28:1c:13:f0:fd:a4: 3e:c0:cb:e6:35:e7:2d:4d:e1:33:6a:cc:87:f9:cb: 9a:45:26:91:22:66:81:ce:73:e2:00:d0:70:ce:21: 93:c9:fa:7f:69:08:55:0c:49:a4:26:e0:9d:b5:34: c6:ed:33:bb:40:3c:6d:99:dd:96:90:9c:c5:7e:39: 24:ad:d7:64:02:bb:4b:49:97:d9:90:5d:a0:8c:94: b3:38:e6:eb:32:e1:94:95:bb:d9:08:8c:c1:1c:ee: 6a:f2:b3:04:95:21:01:82:da:37:8a:96:a3:59:56: 7e:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:CF:23:7A:2B:1F:31:16:33:4A:23:04:2A:1D:08:76:64:96:B7:D5 X509v3 Authority Key Identifier: keyid:95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:1b:f8:78:bd:0c:b6:a5:e0:24:fb:a5:2c:5e:af:96:fc:bf: 10:12:b6:1c:ca:86:e4:2c:de:7d:75:f2:5e:da:7c:3b:27:97: 2d:63:d0:b7:c2:dd:3f:e8:f9:03:b7:af:56:3e:89:87:78:c7: 51:22:a9:4c:7a:fa:ca:e9:ff:1b:c9:43:67:9a:78:22:54:4c: ed:df:69:b2:49:70:45:0e:56:ee:75:fc:96:78:f2:8c:cd:a5: b3:8d:3e:8f:4d:7d:63:e6:f0:5e:33:3e:de:85:6e:c8:d6:3c: ec:9d:50:1a:c8:89:41:f1:8c:15:1c:d5:d5:64:c1:1b:05:18: 60:30:69:98:8f:9c:e8:1a:a9:86:ee:99:31:10:a5:cb:74:aa: dd:2d:5c:81:57:43:4e:ff:99:84:39:c9:03:7b:e2:85:0c:21: 46:9c:31:c8:8f:f3:13:e6:bc:52:80:5b:0a:77:af:a5:3c:85: f5:01:f1:c1:01:9c:02:79:e2:38:e6:ee:4e:77:3d:c8:3c:28: 33:70:5b:3f:c1:ad:30:e0:c8:f7:ac:7b:e4:4f:b4:5f:7b:85: b5:8a:a4:4a:b7:35:f3:c5:23:77:cc:31:54:93:c6:85:92:b7: ca:8e:93:b6:19:71:8f:78:c5:14:5f:78:ae:13:01:88:b2:aa: 06:41:c8:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdx9lBKrmz/desbwgwdRC6kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1MjJhYjY3OTIyY2UwMjc1ZThjNjFhYmZhODJkMmE3NTRh ZjZkYzQwHhcNMjUwNjE1MDUwMDU3WhcNMjUwNjE2MDUwMDU3WjAzMTEwLwYDVQQD EyhiMmNmMjM3YTJiMWYzMTE2MzM0YTIzMDQyYTFkMDg3NjY0OTZiN2Q1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbEcFLuMEs9gTxB6LtAd84Y3+3ex ie9hQZhj2pmtnDnJyXwAyEQC/VAYI6E/s2V26Sz6UT3Agd+OnabKgCdr/m2r47eO oIuyPhXP6z04UYRs+i1Jz/C/El6i8On75cHIS9FOyoSFMMaLJvJBRq5HPxQS7HbL HOJrSvrwP8eOGsuOTtlO845hlXXtFyEZAkAoHBPw/aQ+wMvmNectTeEzasyH+cua RSaRImaBznPiANBwziGTyfp/aQhVDEmkJuCdtTTG7TO7QDxtmd2WkJzFfjkkrddk ArtLSZfZkF2gjJSzOObrMuGUlbvZCIzBHO5q8rMElSEBgto3ipajWVZ+jwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLLPI3orHzEWM0ojBCodCHZklrfVMB8GA1UdIwQY MBaAFJUiq2eSLOAnXoxhq/qC0qdUr23EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy82ODkxOGUtZTlkYS00MDZiLTk5MzEt ZTUyNmE5NDA5ZmI4LzEvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy82ODkxOGUtZTlkYS00MDZiLTk5MzEtZTUyNmE5NDA5ZmI4 LzEvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsBv4eL0M tqXgJPulLF6vlvy/EBK2HMqG5CzefXXyXtp8OyeXLWPQt8LdP+j5A7evVj6Jh3jH USKpTHr6yun/G8lDZ5p4IlRM7d9psklwRQ5W7nX8lnjyjM2ls40+j019Y+bwXjM+ 3oVuyNY87J1QGsiJQfGMFRzV1WTBGwUYYDBpmI+c6Bqphu6ZMRCly3Sq3S1cgVdD Tv+ZhDnJA3vihQwhRpwxyI/zE+a8UoBbCnevpTyF9QHxwQGcAnniOObuTnc9yDwo M3BbP8GtMODI96x75E+0X3uFtYqkSrc188Ujd8wxVJPGhZK3yo6Tthlxj3jFFF94 rhMBiLKqBkHIqA== -----END CERTIFICATE-----Generated at Sun Jun 15 15:40:20 2025 by rpki-client