$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft File: DdRBw_-ugphCJJ6USwOFEIH02eA.mft (raw, json) Hash identifier: QUmZBaU3rvM7RGiDOIEYhuAz7G51niOM1XCEaCXUYYs= Subject key identifier: 29:8E:E6:CC:4F:A5:F8:9E:E5:28:06:37:FB:2B:F1:37:FF:04:E8:22 Authority key identifier: 0D:D4:41:C3:FF:AE:82:98:42:24:9E:94:4B:03:85:10:81:F4:D9:E0 Certificate issuer: /CN=0dd441c3ffae829842249e944b03851081f4d9e0 Certificate serial: 01972FDFE34E4A296C7A572977F41566D4A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft Manifest number: 0DDC Signing time: Mon 02 Jun 2025 09:01:31 +0000 Manifest this update: Mon 02 Jun 2025 09:01:31 +0000 Manifest next update: Tue 03 Jun 2025 09:01:31 +0000 Files and hashes: 1: 1-16UNdr39GQR6WgTD6_itgdgXrc.roa (hash: zJk3e0ik342Ah/cCpBqTYO3BgJOewuzuYG0mEAa3aYU=) 2: 60kez5E8tU1qx0TTvLpwwOmqJPM.roa (hash: ooRDWi6UfD8+CXLZ4F0Bs69z57BBzf7Yu441rhOqEKs=) 3: 9bAJqgVHnvRdYInB5oZXujQ5XoQ.roa (hash: qWJO+gO+X6NUIcqwJsrxmMcrEAIF+s1Wskr1UuY7rv8=) 4: CECuYLKJKay-_DTUpRvjJ6e9Xok.roa (hash: Bww9jwaRvi6o6HabYuvr08y2yEYkanNlup4j1yRDv98=) 5: DdRBw_-ugphCJJ6USwOFEIH02eA.crl (hash: gnBYwyI5o7NHCB9xvQHgqr3vYu2qV0zq0sXtuolRj4A=) 6: I1TR6PkHLqcK9JhqQozTxA2F8dM.roa (hash: pz5C+r8mg2AZGBZBVvOWJslEqCo+j9NeWY7YNXwFyuM=) 7: isGhiPrIPc7CYukDYcPX4YgodMI.roa (hash: yF67JZGe1yAdufc/s5j5+72AF3mRhIY4Nwz+CqDvDoY=) 8: kwXEh1Xh-2K2CVYqtcC-AT6Gb_U.roa (hash: dIfLEvdyhBW74zPx42unz5ShPnUU/ehc/8slF8xgQRY=) 9: rd8NnydFpZY9VMF7rki6mDfX1OE.roa (hash: Fdl4wWRM/i0XUBMw6ya79MvwrhVDeixQdqpTA/MdgWc=) 10: ub-f3sQpeZFIR7bmv9inv38i9hc.roa (hash: d/wCuYvq40CEhT6+Gf00rW0og+1XZHNfdNwE4g4ibIk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.crl rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Jun 2025 09:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:2f:df:e3:4e:4a:29:6c:7a:57:29:77:f4:15:66:d4:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dd441c3ffae829842249e944b03851081f4d9e0 Validity Not Before: Jun 2 09:01:31 2025 GMT Not After : Jun 3 09:01:31 2025 GMT Subject: CN=298ee6cc4fa5f89ee5280637fb2bf137ff04e822 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:0e:aa:c9:79:fc:89:71:1c:a6:33:a3:e0:3c: 45:48:85:1b:16:f9:89:52:4f:f2:8b:7e:a9:60:2c: ef:74:02:39:a9:d1:2a:d5:cf:24:47:4e:c5:16:fb: 8e:30:18:a1:d3:92:f8:eb:cb:d7:fd:36:05:29:2d: 91:12:e1:e5:f2:a8:09:0d:d2:2c:5f:34:41:7b:4a: b0:48:b6:99:a6:93:cb:4c:68:62:5b:e8:59:8b:aa: 6b:78:10:10:d3:4a:9f:c0:ed:25:c1:22:07:51:92: 57:3c:bf:12:c8:97:e9:53:d8:38:01:79:00:c8:5a: 3f:aa:1e:83:4f:52:57:55:ec:78:1e:0d:73:be:54: 6e:d2:bd:93:41:ef:30:71:02:75:c9:31:2d:86:b9: 47:cb:1e:5e:30:3b:b5:33:b2:b3:8b:26:9c:08:96: ac:6b:f2:d2:e5:0d:c4:ee:c5:12:91:66:fa:56:6f: aa:1e:63:66:71:38:d2:c4:c5:d1:58:91:6c:17:94: c8:3e:6f:ae:d3:fb:a8:59:04:bd:95:47:55:b7:61: 42:46:03:64:0e:b0:d7:85:4d:f2:f9:1e:9f:49:5c: 2b:6b:cc:d2:7b:81:56:f8:f8:18:f0:ab:24:53:dd: 8f:35:06:15:73:f8:3b:04:a0:4a:68:bd:aa:b9:89: c1:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:8E:E6:CC:4F:A5:F8:9E:E5:28:06:37:FB:2B:F1:37:FF:04:E8:22 X509v3 Authority Key Identifier: keyid:0D:D4:41:C3:FF:AE:82:98:42:24:9E:94:4B:03:85:10:81:F4:D9:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:74:4c:24:3a:c7:07:00:eb:7b:50:a0:d5:bb:a4:e4:38:11: 9a:79:33:8d:1c:9d:69:91:97:a9:f7:3f:75:44:87:2c:bb:20: 27:ea:1d:0c:09:88:8a:75:ed:e8:ea:f8:a4:c7:15:9d:57:16: 3d:cc:bf:f8:c6:68:39:58:d5:56:9c:76:fa:3c:04:dc:9f:34: 1f:7c:8a:82:6b:97:35:7f:83:26:67:c5:9b:83:82:cd:e7:5a: 94:c1:e5:00:30:90:db:32:e5:5c:2d:e5:07:3d:fe:4f:e4:ef: 86:a7:1f:3f:09:87:71:a9:12:6b:cb:b5:a2:98:84:14:f8:39: e6:17:6e:27:64:69:93:be:78:ad:7e:a2:3c:51:62:38:13:9c: 7e:5e:67:7f:3f:21:47:4d:a6:12:4c:3d:90:7a:54:91:2e:ba: 4c:a1:80:05:a7:8c:d0:07:22:89:d4:a0:d8:e9:10:54:2d:46: ca:44:42:92:38:70:8f:7a:c8:b3:c7:a2:a0:44:eb:f2:f4:64: 6b:fa:5b:cf:a9:97:30:a1:06:97:b9:99:55:62:2f:13:f5:0e: 5a:d4:39:83:83:c3:d5:2e:0c:5e:11:cb:1b:76:c4:19:73:93: bc:68:fc:50:52:56:89:41:d1:f2:db:36:3a:01:fc:68:85:18: 72:37:71:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZcv3+NOSilselcpd/QVZtSkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkZDQ0MWMzZmZhZTgyOTg0MjI0OWU5NDRiMDM4NTEwODFm NGQ5ZTAwHhcNMjUwNjAyMDkwMTMxWhcNMjUwNjAzMDkwMTMxWjAzMTEwLwYDVQQD EygyOThlZTZjYzRmYTVmODllZTUyODA2MzdmYjJiZjEzN2ZmMDRlODIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqw6qyXn8iXEcpjOj4DxFSIUbFvmJ Uk/yi36pYCzvdAI5qdEq1c8kR07FFvuOMBih05L468vX/TYFKS2REuHl8qgJDdIs XzRBe0qwSLaZppPLTGhiW+hZi6preBAQ00qfwO0lwSIHUZJXPL8SyJfpU9g4AXkA yFo/qh6DT1JXVex4Hg1zvlRu0r2TQe8wcQJ1yTEthrlHyx5eMDu1M7KziyacCJas a/LS5Q3E7sUSkWb6Vm+qHmNmcTjSxMXRWJFsF5TIPm+u0/uoWQS9lUdVt2FCRgNk DrDXhU3y+R6fSVwra8zSe4FW+PgY8KskU92PNQYVc/g7BKBKaL2quYnB7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCmO5sxPpfie5SgGN/sr8Tf/BOgiMB8GA1UdIwQY MBaAFA3UQcP/roKYQiSelEsDhRCB9NngMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGRSQndfLXVncGhDSko2VVN3T0ZFSUgwMmVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9hN2VmNGQtZGM0NC00ZmFmLTk1MTMt ZTljOTEzMjgzNmZmLzEvRGRSQndfLXVncGhDSko2VVN3T0ZFSUgwMmVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9hN2VmNGQtZGM0NC00ZmFmLTk1MTMtZTljOTEzMjgzNmZm LzEvRGRSQndfLXVncGhDSko2VVN3T0ZFSUgwMmVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZHRMJDrH BwDre1Cg1buk5DgRmnkzjRydaZGXqfc/dUSHLLsgJ+odDAmIinXt6Or4pMcVnVcW Pcy/+MZoOVjVVpx2+jwE3J80H3yKgmuXNX+DJmfFm4OCzedalMHlADCQ2zLlXC3l Bz3+T+TvhqcfPwmHcakSa8u1opiEFPg55hduJ2Rpk754rX6iPFFiOBOcfl5nfz8h R02mEkw9kHpUkS66TKGABaeM0AciidSg2OkQVC1GykRCkjhwj3rIs8eioETr8vRk a/pbz6mXMKEGl7mZVWIvE/UOWtQ5g4PD1S4MXhHLG3bEGXOTvGj8UFJWiUHR8ts2 OgH8aIUYcjdxNQ== -----END CERTIFICATE-----Generated at Mon Jun 2 16:59:22 2025 by rpki-client