$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft File: Otc0z5DHc0KIBrloIJUVuRSDGp0.mft (raw, json) Hash identifier: dNBNVX8BlXfgAfSb6wOWXWz9rWriKhcicPvEq8K4D0w= Subject key identifier: F0:7D:8C:D8:5F:15:93:2C:79:71:CE:9C:3F:49:93:07:36:B3:E3:C2 Authority key identifier: 3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D Certificate issuer: /CN=3ad734cf90c773428806b968209515b914831a9d Certificate serial: 01983427F9A510D06B48086C41E47A784DA9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft Manifest number: 1610 Signing time: Tue 22 Jul 2025 22:01:31 +0000 Manifest this update: Tue 22 Jul 2025 22:01:31 +0000 Manifest next update: Wed 23 Jul 2025 22:01:31 +0000 Files and hashes: 1: 2NYdjjFKUwwAHXr7ubSJv8Kzg8g.roa (hash: kjplcNAq1JXoQgnY61zJpj1+5jIDXxWAT5fT5oin7qk=) 2: AF-KFPYoLrR_wnL0SE_zW6WshRE.roa (hash: z49PjeXPIBQhRQUNgU9fm0U8o2Eum7mravj6VvfHLII=) 3: K9OoJ9oRdDGRAG9_JEraDylQYiQ.roa (hash: EDky965lH+7d9zEKg3uh2UPLM5EYLdR0gznw5lmNnpo=) 4: Otc0z5DHc0KIBrloIJUVuRSDGp0.crl (hash: Il8+/64Cvoev+Je7/cYfyogZ0/LIYQfbyUFcnFrUAeg=) 5: QhrrCdJtzdJX_c12vE-ZQ8Da7YY.roa (hash: rkVqPs1fexqZNRh0F63HT4hXiYiSmw86Y4ULqhqeko0=) 6: WCC9rTSbJ_Cq0gmrQEQG46tRbpQ.roa (hash: VkHV+4ebPs26e57T+NHLP6p9bqcsmEKUplaKOzXFS/4=) 7: apLqK898oR7RE-dAFEvdyErBOzE.roa (hash: 7wPWjmBIQU48S3GSQT90DN//sDuxGXlKRA7f0n/Hjc8=) 8: beYTq1ZSU6CkOYAx7ryqD6bd3cM.roa (hash: x3+IsuLxOdLQwSExJVIL+EzcT73OO7RISZtN+IgQDrQ=) 9: cNvBb2RRxSjoCAkb0wZvTJ3BY5k.roa (hash: oDSoGJIctW5p0rg5AbBoYa3L96DcMDhEp9yGbjF4AfU=) 10: eFAtBNJzls8AgaaXT8fjcCX17mA.roa (hash: GPQ9iMR4UR3PGXp7FlfdeNJSrFumQ8WzN02VnHoIJ84=) 11: fmuUqwHIE4LJQQIBDK_3JI3axjw.roa (hash: jgYvNn+KWNnN7BXATe+H2BiIlAYgwP4SHTyKXfV03HU=) 12: mgVlb5y6oflmqG3d7ppnuUd0Clo.roa (hash: dzpQ0zn6slEv00KpzZGJezOhzkkJQj1vaHxpsdbRvnE=) 13: vpHvJjjgw4O3Rz8r2ZFr25OMuek.roa (hash: DjXvcuXor+t9vZEtEo50/bWiWyQCM6LNcDnznEPg0tw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Jul 2025 22:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:34:27:f9:a5:10:d0:6b:48:08:6c:41:e4:7a:78:4d:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ad734cf90c773428806b968209515b914831a9d Validity Not Before: Jul 22 22:01:31 2025 GMT Not After : Jul 23 22:01:31 2025 GMT Subject: CN=f07d8cd85f15932c7971ce9c3f49930736b3e3c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:35:e4:74:fb:06:31:b3:c3:1b:f3:b0:67:31: 70:bc:4d:71:af:3a:9f:5c:65:fb:9b:98:0f:c9:8a: 1c:a2:14:00:20:7e:ae:ce:e2:cc:36:9a:2a:25:19: 21:14:ab:26:26:71:1d:87:91:9d:d9:23:33:d2:e6: 68:57:44:91:2a:0f:1a:71:07:d8:27:6c:eb:38:52: e1:9b:21:02:dc:18:1e:96:b3:a1:d4:83:09:83:ae: f0:4a:81:63:ed:77:11:dd:9a:3c:fd:e3:d7:c4:64: 89:1e:05:64:ed:b0:f1:d9:e6:bc:1e:53:7c:1e:43: 8b:60:4d:bb:ff:38:e2:ea:8e:51:9c:7c:55:d1:b2: 29:21:bc:ba:84:77:1d:c0:69:d2:5a:f9:38:98:bf: 1b:e6:8e:e3:61:a1:1d:2d:b0:d0:16:1b:fb:88:8c: a7:17:c4:80:07:1d:4f:fe:b2:b9:85:bb:2c:85:0e: aa:d2:1d:66:9c:bd:31:6b:27:66:a2:c2:df:e1:56: 6d:57:b1:ac:f0:59:3f:4e:cf:a0:4f:15:8e:f4:e2: fd:0b:df:93:65:83:53:ae:fc:99:5d:07:3b:f9:b3: af:a4:07:77:af:f6:15:cc:53:82:5c:42:30:5e:9d: c1:67:e8:c8:ed:27:74:c8:c9:a0:07:39:ad:54:92: 09:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:7D:8C:D8:5F:15:93:2C:79:71:CE:9C:3F:49:93:07:36:B3:E3:C2 X509v3 Authority Key Identifier: keyid:3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:5f:87:7f:ce:5c:c7:93:e4:ce:a1:0d:3e:23:7e:bb:86:6e: 0f:e0:9b:ee:cb:76:be:20:aa:b8:4d:0f:20:ee:67:d8:b9:0c: 7d:3f:91:1e:77:25:3f:f9:e3:95:2a:2b:3a:ae:25:4f:b5:09: f4:d9:bb:ab:db:b2:4a:ae:c2:98:e4:a2:e1:fe:98:0e:50:bb: de:9e:39:39:b5:a4:2e:3f:d1:ff:19:bf:7a:b0:f2:56:d4:f9: 74:1c:48:3f:4a:7d:8d:b9:94:e4:85:67:c9:ed:33:30:54:9f: 1e:4a:b8:49:0b:a2:95:3d:96:d6:ed:14:c8:57:de:7d:ed:b0: 2d:06:7e:55:22:9e:40:31:64:c3:df:38:0f:a8:3d:1c:f2:f1: 82:84:0e:fc:c3:76:dd:0c:4f:58:4a:50:34:2c:a8:43:b3:93: 01:69:fb:aa:cc:ef:b7:c5:ba:5e:cd:2e:bc:1a:d6:1a:9a:29: f2:89:56:75:ec:9d:14:eb:35:d7:85:41:72:15:6f:66:33:53: ec:ff:24:11:fc:27:55:44:9b:3f:d5:b0:a1:2a:da:30:64:e5: bf:fd:8b:86:de:cc:10:bf:45:81:7f:cc:8f:f7:e3:37:86:17: fa:15:b2:15:38:a8:dd:34:90:70:b4:bf:04:e4:fe:68:63:e9: b8:dc:5a:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZg0J/mlENBrSAhsQeR6eE2pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZDczNGNmOTBjNzczNDI4ODA2Yjk2ODIwOTUxNWI5MTQ4 MzFhOWQwHhcNMjUwNzIyMjIwMTMxWhcNMjUwNzIzMjIwMTMxWjAzMTEwLwYDVQQD EyhmMDdkOGNkODVmMTU5MzJjNzk3MWNlOWMzZjQ5OTMwNzM2YjNlM2MyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojXkdPsGMbPDG/OwZzFwvE1xrzqf XGX7m5gPyYocohQAIH6uzuLMNpoqJRkhFKsmJnEdh5Gd2SMz0uZoV0SRKg8acQfY J2zrOFLhmyEC3BgelrOh1IMJg67wSoFj7XcR3Zo8/ePXxGSJHgVk7bDx2ea8HlN8 HkOLYE27/zji6o5RnHxV0bIpIby6hHcdwGnSWvk4mL8b5o7jYaEdLbDQFhv7iIyn F8SABx1P/rK5hbsshQ6q0h1mnL0xaydmosLf4VZtV7Gs8Fk/Ts+gTxWO9OL9C9+T ZYNTrvyZXQc7+bOvpAd3r/YVzFOCXEIwXp3BZ+jI7Sd0yMmgBzmtVJIJ2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPB9jNhfFZMseXHOnD9Jkwc2s+PCMB8GA1UdIwQY MBaAFDrXNM+Qx3NCiAa5aCCVFbkUgxqdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3RjMHo1REhjMEtJQnJsb0lKVVZ1UlNER3AwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9lYmYzODEtMDBjOC00ODBkLWE2NmMt NzZhMWQ0ZDgzMTk3LzEvT3RjMHo1REhjMEtJQnJsb0lKVVZ1UlNER3AwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS9lYmYzODEtMDBjOC00ODBkLWE2NmMtNzZhMWQ0ZDgzMTk3 LzEvT3RjMHo1REhjMEtJQnJsb0lKVVZ1UlNER3AwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbl+Hf85c x5PkzqENPiN+u4ZuD+Cb7st2viCquE0PIO5n2LkMfT+RHnclP/njlSorOq4lT7UJ 9Nm7q9uySq7CmOSi4f6YDlC73p45ObWkLj/R/xm/erDyVtT5dBxIP0p9jbmU5IVn ye0zMFSfHkq4SQuilT2W1u0UyFfefe2wLQZ+VSKeQDFkw984D6g9HPLxgoQO/MN2 3QxPWEpQNCyoQ7OTAWn7qszvt8W6Xs0uvBrWGpop8olWdeydFOs114VBchVvZjNT 7P8kEfwnVUSbP9WwoSraMGTlv/2Lht7MEL9FgX/Mj/fjN4YX+hWyFTio3TSQcLS/ BOT+aGPpuNxadQ== -----END CERTIFICATE-----Generated at Wed Jul 23 02:08:38 2025 by rpki-client