$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.mft File: XaQypOw7CsTKTk7OwOn01GtJevA.mft (raw, json) Hash identifier: spg4kY3Gyl2/snbg+i5JoqkNTV5RVMOsUzd6cxCgaQk= Subject key identifier: 85:0E:72:A5:67:B7:EE:40:75:B1:D3:BC:E6:27:51:C3:20:B7:A7:77 Authority key identifier: 5D:A4:32:A4:EC:3B:0A:C4:CA:4E:4E:CE:C0:E9:F4:D4:6B:49:7A:F0 Certificate issuer: /CN=5da432a4ec3b0ac4ca4e4ecec0e9f4d46b497af0 Certificate serial: 01975346F68C0BD5FFFF99BEC6C1C98AD5CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaQypOw7CsTKTk7OwOn01GtJevA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.mft Manifest number: 1598 Signing time: Mon 09 Jun 2025 06:00:48 +0000 Manifest this update: Mon 09 Jun 2025 06:00:48 +0000 Manifest next update: Tue 10 Jun 2025 06:00:48 +0000 Files and hashes: 1: 0Je5Z-nMCx0Zkd418v5HueEhd54.roa (hash: pEX7Z7nPaiJOWyIs9b/nPIQ3gi19xivW2mZ533J3DJo=) 2: 14hghSYuKbF7DLMEPWygMHVGP7A.roa (hash: +lIfYCGzEu7fKfBEKYs45/U/OMBrFfQnzzBOsngrbkg=) 3: 7wCIILVV_KizMvEXiqEvvxC6Jr4.roa (hash: QBaOmpq6h8G9bZnJd7hH6tV1LQuldiouVWbU53bSAF8=) 4: NX-lJMVuq0hFJuXhiTDNigiTMiI.roa (hash: 32i5zz/HrQnOcYVXyjhBgA5WXVmw5qyUgDPkRo/rTuU=) 5: PCD0p_UNZon9aCxoq1egSeAnxBA.roa (hash: i0uT3nEejd+UeJVQ6gjyXxFUUCw66ysdAWzGYAGx+Mk=) 6: PYemKJWEUk-HkJO5Mj9UiDiPJ_4.roa (hash: QhKEDEG5e1WSPoJeyCcT8wLZHkvtF03JkUepmJw6Zxw=) 7: Rr0zbCWANGdldNBvrAd88RpS1U4.roa (hash: 9No9czOGF999cDISmqzMXCL5W1XMeYJzBnZLfRLwac4=) 8: Vl_3r99z42NwQ-24ZhXRiYXhqjY.roa (hash: GXmfSPtN6tufP5/kLCHIzO4q0RbIH3Sr/fl4Xj29EAo=) 9: WZNFgwpO480t4avTSei-zYnVVOY.roa (hash: 373H0BKFYtzTiKGrZaryv56z6bhznrJd/cnBel6rbT0=) 10: XaQypOw7CsTKTk7OwOn01GtJevA.crl (hash: +0Rc94cUe8qG3YKr1yFqCTCW6uNqcgTOUvR0TExh40Y=) 11: _uatClMcwC0uM9W8YXO5Qitmm-A.roa (hash: k5ie8fXmVl+ckXH05aUk9WqiZ3RnKPMqOUpy2XuoG7w=) 12: aHlGWauXADsFIjPBDWSnc29nHv8.roa (hash: y3CvDF1nTLBg2ldBPSyHCPUtAaI+qzww7+4uWAz8ztY=) 13: ea0vEI_fGMyg1jPZV-hKH8IC-2Q.roa (hash: lMsvTL1IJXE7hi4D1D2VQP7nQy14aHmJmR8i7R04mRU=) 14: sZ40szF_81b8iZ343Q6aVpk7QZc.roa (hash: ieSiCVj+T4ruST7AZXMVQI1ECh5LKhbuRyks+nO6HIc=) 15: xf4c83s9BhHDRES5-deoHo90fx8.roa (hash: Nc+I2Laa6OeGUM7r8e6LlLMHSt+btJK/FMAVLnkCxPk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.crl rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.mft rsync://rpki.ripe.net/repository/DEFAULT/XaQypOw7CsTKTk7OwOn01GtJevA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Jun 2025 02:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:53:46:f6:8c:0b:d5:ff:ff:99:be:c6:c1:c9:8a:d5:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5da432a4ec3b0ac4ca4e4ecec0e9f4d46b497af0 Validity Not Before: Jun 9 06:00:48 2025 GMT Not After : Jun 10 06:00:48 2025 GMT Subject: CN=850e72a567b7ee4075b1d3bce62751c320b7a777 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:6c:d4:13:33:ff:1f:f9:40:d8:cb:7b:0f:b7: c8:c3:3b:86:62:aa:e3:3c:7f:6d:6a:d0:45:d2:06: d6:b8:2f:a7:62:a6:0e:a8:fd:f7:ef:6e:91:a8:79: 2e:f0:a8:f3:50:c6:46:78:9f:7f:5c:e6:53:98:d7: ba:87:9f:5c:33:39:b0:d9:e2:88:7f:76:d7:c3:96: a3:d7:24:26:7c:19:c3:eb:11:ab:51:a0:cd:83:aa: 98:cb:05:27:e5:6c:e0:44:b3:63:f6:ef:e1:02:fe: 7d:24:80:d5:82:bd:93:5b:b0:99:80:79:4e:80:d6: ee:7a:16:cd:c6:ec:ac:44:f8:03:02:d7:79:a3:66: 9e:8d:02:f6:47:1f:be:5c:e8:4c:88:9d:11:0a:27: ca:fa:96:8b:a4:af:26:1d:9e:77:4c:89:ed:60:bd: 22:5a:b9:0b:ab:4c:b0:28:25:ac:80:a5:60:18:5f: 24:1b:ba:1f:0f:52:a8:84:49:cc:df:83:b2:0b:3a: ed:8a:7b:12:5b:45:57:71:55:11:b1:68:c2:2e:56: 5b:13:97:21:2a:33:37:b5:79:3f:57:5c:92:9c:03: 68:6c:25:98:bf:0f:20:1c:4a:33:53:7a:e0:e0:da: 5f:43:e5:60:e0:12:05:99:0a:62:7e:69:51:79:26: bb:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:0E:72:A5:67:B7:EE:40:75:B1:D3:BC:E6:27:51:C3:20:B7:A7:77 X509v3 Authority Key Identifier: keyid:5D:A4:32:A4:EC:3B:0A:C4:CA:4E:4E:CE:C0:E9:F4:D4:6B:49:7A:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaQypOw7CsTKTk7OwOn01GtJevA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:3b:48:f0:4f:e1:41:5c:61:d2:5a:4f:88:92:34:ef:8f:71: b7:2e:88:a8:ee:f3:24:ef:9c:33:ba:0d:26:73:79:9f:60:a2: 6e:cb:27:1b:42:60:64:f2:de:61:f7:78:98:82:6f:df:c3:5f: 11:86:73:ff:80:75:8c:fe:fe:e6:2b:25:00:37:8f:a8:63:24: a7:82:ef:09:67:1e:40:ae:93:01:f9:d3:aa:e8:92:55:bf:79: 17:80:d3:ec:f0:f2:77:a1:15:2b:09:ee:09:47:64:ce:3e:b0: ea:98:d0:4b:3a:db:ca:cc:fe:20:d5:26:b7:e5:e9:d3:f1:d3: 32:c4:13:f9:2c:17:b8:c7:9f:ab:c1:d2:8e:f5:ac:74:98:4a: 0f:b8:c3:64:1f:4c:83:e8:e7:b1:15:ce:09:ed:f4:1d:94:b3: f7:74:55:bc:77:3a:8a:9c:b3:b5:8b:8a:90:24:ae:b0:bf:d0: 53:94:b9:2c:32:00:cc:fe:53:c4:7c:5f:f6:b1:22:ac:19:55: 47:07:4e:76:f5:04:59:d0:0f:82:45:d6:3a:39:40:0a:e6:f6: 28:84:47:38:df:20:21:5a:35:e7:9e:47:b9:e9:c0:77:5e:d6: b9:b4:85:ee:55:5f:35:95:af:f8:1f:c5:2e:35:0d:20:e2:3d: a9:02:e2:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdTRvaMC9X//5m+xsHJitXMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkYTQzMmE0ZWMzYjBhYzRjYTRlNGVjZWMwZTlmNGQ0NmI0 OTdhZjAwHhcNMjUwNjA5MDYwMDQ4WhcNMjUwNjEwMDYwMDQ4WjAzMTEwLwYDVQQD Eyg4NTBlNzJhNTY3YjdlZTQwNzViMWQzYmNlNjI3NTFjMzIwYjdhNzc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGzUEzP/H/lA2Mt7D7fIwzuGYqrj PH9tatBF0gbWuC+nYqYOqP33726RqHku8KjzUMZGeJ9/XOZTmNe6h59cMzmw2eKI f3bXw5aj1yQmfBnD6xGrUaDNg6qYywUn5WzgRLNj9u/hAv59JIDVgr2TW7CZgHlO gNbuehbNxuysRPgDAtd5o2aejQL2Rx++XOhMiJ0RCifK+paLpK8mHZ53TIntYL0i WrkLq0ywKCWsgKVgGF8kG7ofD1KohEnM34OyCzrtinsSW0VXcVURsWjCLlZbE5ch KjM3tXk/V1ySnANobCWYvw8gHEozU3rg4NpfQ+Vg4BIFmQpifmlReSa7XQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIUOcqVnt+5AdbHTvOYnUcMgt6d3MB8GA1UdIwQY MBaAFF2kMqTsOwrEyk5OzsDp9NRrSXrwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGFReXBPdzdDc1RLVGs3T3dPbjAxR3RKZXZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85ZTg0N2YtNDE0Ni00NTY2LThjM2Ut MWJhNTQzZWVhZWQ3LzEvWGFReXBPdzdDc1RLVGs3T3dPbjAxR3RKZXZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85ZTg0N2YtNDE0Ni00NTY2LThjM2UtMWJhNTQzZWVhZWQ3 LzEvWGFReXBPdzdDc1RLVGs3T3dPbjAxR3RKZXZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcjtI8E/h QVxh0lpPiJI0749xty6IqO7zJO+cM7oNJnN5n2CibssnG0JgZPLeYfd4mIJv38Nf EYZz/4B1jP7+5islADePqGMkp4LvCWceQK6TAfnTquiSVb95F4DT7PDyd6EVKwnu CUdkzj6w6pjQSzrbysz+INUmt+Xp0/HTMsQT+SwXuMefq8HSjvWsdJhKD7jDZB9M g+jnsRXOCe30HZSz93RVvHc6ipyztYuKkCSusL/QU5S5LDIAzP5TxHxf9rEirBlV RwdOdvUEWdAPgkXWOjlACub2KIRHON8gIVo1555HuenAd17WubSF7lVfNZWv+B/F LjUNIOI9qQLiHQ== -----END CERTIFICATE-----Generated at Mon Jun 9 12:37:15 2025 by rpki-client