$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft File: IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft (raw, json) Hash identifier: eea0WdvWkE6GFSMF8GJJGjmYM8kOQjidxXn7MJP4wG8= Subject key identifier: 6D:75:B1:F8:39:69:BD:92:12:D6:7F:67:C7:8E:C0:FA:E8:DA:50:CB Authority key identifier: 22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79 Certificate issuer: /CN=22a44566764ebb511683cb6228fa91997b559379 Certificate serial: 01973919BEF9C00FF6E03BD7F101D96BFA04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft Manifest number: 1566 Signing time: Wed 04 Jun 2025 04:01:17 +0000 Manifest this update: Wed 04 Jun 2025 04:01:17 +0000 Manifest next update: Thu 05 Jun 2025 04:01:17 +0000 Files and hashes: 1: 92XnD0AmYRTKMauy0c_EF97G3og.roa (hash: MrifYSUDPEYri018G6VdUWx5qltH5sT6dD86AeAMMW8=) 2: 9VN0sy50HSODEHZbX66L-b8deHc.roa (hash: jP7k3YgnbTl3KFJPn2E0Kcls6tmGu0Fkbos1usVNkL4=) 3: IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl (hash: 4yKn0vV6Pnz2U22PhhGy47ZTVT1DlkyoU1OBT35Wwx8=) 4: SfRTDZQMTSREWX48KPyCH3PZb0c.roa (hash: GokIaaFKU+t7QhU0ptxEtmjhzPTrlfaP/5gs1CtzTHo=) 5: VEd7M4-_4Lkn35UWK8vOkduQc1o.roa (hash: stPBfeMUNGmJFA2t78sW0j5zf3v8suGf1jDqTYS7l/Y=) 6: bz-D4SDkYNJX3doa4B8jZgURHwo.roa (hash: VAiwBxvkCmw7A0ZcRk66dwA9/yhNQQmsm9xLmf72FPw=) 7: fVxfwM9B5VBSi1mDilErv7rAMqM.roa (hash: sQt0nBxjibOU9oVspM2yL21b4yN44vBB+LhWqrA9yfI=) 8: m4devMUt7o-lTrS5g1yfsLvLfR4.roa (hash: 6BffaE4ODhF5ST2c2ry8IBAVEB0SilhEVflyDyx/aY4=) 9: w8SgMjTPngdFlsiriqc6rouveAs.roa (hash: W2I4MarE7Y4LUFVg/ELUk+Y5slY545rHs7dpxV6jMBw=) 10: wDv3HPwcvHfcTTRaZ1O4gsTavXk.roa (hash: Y9GaInWk9YVCI1lH2KeBgQ0e9lnon/jVvzQhDZFCMCs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:39:19:be:f9:c0:0f:f6:e0:3b:d7:f1:01:d9:6b:fa:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22a44566764ebb511683cb6228fa91997b559379 Validity Not Before: Jun 4 04:01:17 2025 GMT Not After : Jun 5 04:01:17 2025 GMT Subject: CN=6d75b1f83969bd9212d67f67c78ec0fae8da50cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5d:d5:69:0a:72:51:d3:fd:00:b6:01:b1:10: 70:45:49:98:35:2d:c8:b2:6e:eb:1d:9f:7c:c4:85: 03:63:83:68:2a:5b:54:0e:85:47:58:92:b3:cc:d4: 67:25:49:44:1f:f7:12:43:e0:11:08:db:03:cc:ef: 2b:96:14:b9:96:95:1c:ce:80:f5:75:fc:2d:9c:a1: b4:96:46:8d:53:f7:62:be:47:af:d5:19:50:0d:98: 1b:3c:e9:bb:8e:5a:32:f9:af:8b:f2:96:c2:bf:d8: 72:85:91:de:cc:57:3e:28:ea:9c:d7:c6:45:ec:03: 60:b3:73:a4:66:d6:df:6f:64:96:58:c3:3a:4b:29: 82:c4:4a:f4:fe:de:35:4f:ad:c4:69:0b:82:22:c8: 4c:6c:cd:4f:cc:a0:77:77:fc:8a:ae:c1:2c:0a:a0: c0:bc:fd:d9:27:0d:1d:8d:92:36:20:a1:d8:61:bc: 7b:e8:6f:92:cf:03:ae:33:46:16:f4:55:60:c7:bf: 21:c8:c4:8f:94:32:41:42:e3:18:c6:dc:a9:1a:3e: 8f:ec:af:b4:db:ff:92:76:9f:92:08:8c:0e:22:91: 21:63:82:90:9c:43:d7:60:70:e3:f6:0c:b1:a7:f0: d4:e0:48:70:3a:65:15:04:ed:0a:5a:c5:9e:eb:1f: 29:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:75:B1:F8:39:69:BD:92:12:D6:7F:67:C7:8E:C0:FA:E8:DA:50:CB X509v3 Authority Key Identifier: keyid:22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:25:2c:43:30:14:2a:c4:0a:9f:04:61:7b:33:b0:47:c1:1d: dd:42:ad:dc:1e:f5:f9:6b:ef:2b:0e:00:ed:53:7c:8d:e2:5e: f4:17:60:95:0b:e9:4a:9c:47:e4:1c:e8:e2:af:d3:a7:d0:3b: 26:fc:e6:3d:e0:b5:91:01:89:46:ac:7f:50:b8:7c:71:08:6d: 65:9d:c0:0b:27:56:a9:83:73:f8:ad:0b:e4:cb:9a:66:b6:c8: f7:b7:df:ac:ab:2c:32:36:3b:af:ee:0a:e6:a8:d0:8c:fb:49: de:e5:4a:57:dd:fa:06:62:61:fa:34:5b:e6:b0:28:02:a9:98: 78:70:c6:26:68:36:48:fb:b3:b5:46:29:04:3c:8c:2f:b9:60: e3:8f:95:01:62:4c:67:aa:a8:e6:0b:7a:bf:e6:b4:e0:93:9e: 8f:70:54:1b:7b:31:92:f2:0c:8c:0d:73:e2:36:7d:b6:ab:68: ea:02:44:4b:4b:64:bc:47:d9:ca:de:6a:bf:42:9d:5c:17:89: c9:5c:f4:dc:4e:05:0d:28:65:ae:2b:6e:6e:e4:70:5f:44:5d: 9d:49:65:81:a9:6c:39:05:a2:46:0a:42:77:14:ae:dd:21:db: 36:da:ea:9a:71:49:a1:89:7b:77:f3:d9:70:f9:2f:34:f5:86: b0:2e:0a:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZc5Gb75wA/24DvX8QHZa/oEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYTQ0NTY2NzY0ZWJiNTExNjgzY2I2MjI4ZmE5MTk5N2I1 NTkzNzkwHhcNMjUwNjA0MDQwMTE3WhcNMjUwNjA1MDQwMTE3WjAzMTEwLwYDVQQD Eyg2ZDc1YjFmODM5NjliZDkyMTJkNjdmNjdjNzhlYzBmYWU4ZGE1MGNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu13VaQpyUdP9ALYBsRBwRUmYNS3I sm7rHZ98xIUDY4NoKltUDoVHWJKzzNRnJUlEH/cSQ+ARCNsDzO8rlhS5lpUczoD1 dfwtnKG0lkaNU/divkev1RlQDZgbPOm7jloy+a+L8pbCv9hyhZHezFc+KOqc18ZF 7ANgs3OkZtbfb2SWWMM6SymCxEr0/t41T63EaQuCIshMbM1PzKB3d/yKrsEsCqDA vP3ZJw0djZI2IKHYYbx76G+SzwOuM0YW9FVgx78hyMSPlDJBQuMYxtypGj6P7K+0 2/+Sdp+SCIwOIpEhY4KQnEPXYHDj9gyxp/DU4EhwOmUVBO0KWsWe6x8pDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG11sfg5ab2SEtZ/Z8eOwPro2lDLMB8GA1UdIwQY MBaAFCKkRWZ2TrtRFoPLYij6kZl7VZN5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXFSRlpuWk91MUVXZzh0aUtQcVJtWHRWazNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS82YjNkZGEtNzM2OC00ZDE5LWI2MDMt MTZiODBhYTI4ZGQ2LzEvSXFSRlpuWk91MUVXZzh0aUtQcVJtWHRWazNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS82YjNkZGEtNzM2OC00ZDE5LWI2MDMtMTZiODBhYTI4ZGQ2 LzEvSXFSRlpuWk91MUVXZzh0aUtQcVJtWHRWazNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdCUsQzAU KsQKnwRhezOwR8Ed3UKt3B71+WvvKw4A7VN8jeJe9BdglQvpSpxH5Bzo4q/Tp9A7 JvzmPeC1kQGJRqx/ULh8cQhtZZ3ACydWqYNz+K0L5MuaZrbI97ffrKssMjY7r+4K 5qjQjPtJ3uVKV936BmJh+jRb5rAoAqmYeHDGJmg2SPuztUYpBDyML7lg44+VAWJM Z6qo5gt6v+a04JOej3BUG3sxkvIMjA1z4jZ9tqto6gJES0tkvEfZyt5qv0KdXBeJ yVz03E4FDShlritubuRwX0RdnUllgalsOQWiRgpCdxSu3SHbNtrqmnFJoYl7d/PZ cPkvNPWGsC4K0A== -----END CERTIFICATE-----Generated at Wed Jun 4 11:37:13 2025 by rpki-client