$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft File: dmcCNs0OA4aEozGUvefUuVrcZvc.mft (raw, json) Hash identifier: W/Phvk1U7Mev1r1Ih1xaPdTV6h945F/oWnPthwaMDT0= Subject key identifier: A7:C9:F9:96:73:D2:76:8E:A5:3A:BF:0D:A0:69:AF:2C:D0:EC:33:0D Authority key identifier: 76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7 Certificate issuer: /CN=76670236cd0e038684a33194bde7d4b95adc66f7 Certificate serial: 01974B8D7CFCCE479FA610FF151BC1B8F7F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft Manifest number: 0D67 Signing time: Sat 07 Jun 2025 18:00:53 +0000 Manifest this update: Sat 07 Jun 2025 18:00:53 +0000 Manifest next update: Sun 08 Jun 2025 18:00:53 +0000 Files and hashes: 1: 3aGZcGWIs_eMlaFgLeBFbbKoNDQ.roa (hash: TFkuucN4UO3fh05NKBE3AbRffgRyYyePtYVgR0x7i+c=) 2: VxpPmjuX-xDJQCZmjad0BLzyqaQ.roa (hash: scQCA4WB1SH7VqMcUYx00R9CCsEQG1/Vi2LqLMj0V5E=) 3: YX6TdSLrfQISm2CR9jSMfrWeHto.roa (hash: thQkWvF4nLGlemNm7VcbLLVFDEUCum3r3Jy72QYLpXE=) 4: _EShF3PxGOJE5SZRfQySmvZg1kg.roa (hash: Fv1ecycEXgD6srZq4/0n/myzWwH/n6NbHepwG+mEp58=) 5: a6q6SMppTrXBxB1ybsHve0I84N0.roa (hash: zWAoSAHCDkJxMs7sBHL6WOI4Hvocxl0YCPnrC6K64Fc=) 6: bH5bF_8mxPt1PuFzjL55ZoPT9u4.roa (hash: 61i/OUkjcDYfRXVmFio9adx3zcL9HFjQz1PgrGFxL9g=) 7: dmcCNs0OA4aEozGUvefUuVrcZvc.crl (hash: aD59TtlvS8+Ccag6ehZRZORow9mjA1qlRNoasOYHG40=) 8: fMMGd3zJDjytcmyhyCVTpEhw1kU.roa (hash: 8DAdzVawL9mvA1o+Hlejvqrd7KSs7UEw/UCVjERrvbY=) 9: w0j3028GTs0XxpRerIzPD_MNXeU.roa (hash: lraXgIU7h+zQb9zRqFGVcDbnN4LuLIfjAyKAE8V60jM=) 10: xHUWp-IhZmk_U8CwKK_n9BGOcbI.roa (hash: 2RFD3xexMzAEEdEVrKN657pvNZq2T3uOKQ0MCXLlbXI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Jun 2025 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:4b:8d:7c:fc:ce:47:9f:a6:10:ff:15:1b:c1:b8:f7:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76670236cd0e038684a33194bde7d4b95adc66f7 Validity Not Before: Jun 7 18:00:53 2025 GMT Not After : Jun 8 18:00:53 2025 GMT Subject: CN=a7c9f99673d2768ea53abf0da069af2cd0ec330d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c6:a9:14:91:1e:b7:1d:54:33:7d:c6:00:ae: 29:94:de:43:44:57:65:cb:5e:c4:2d:0d:03:fd:91: d3:6a:fb:46:31:55:39:26:29:41:6d:89:41:c7:92: f8:c3:4b:8c:ac:f7:5f:12:6c:5b:1e:8b:d9:fa:e2: 57:53:26:ec:58:a9:fc:22:5e:ee:fc:4a:6b:ed:0d: a8:be:83:36:59:ef:2d:ca:99:1c:39:64:02:e6:85: 04:92:30:ba:9e:5c:3d:17:0d:51:be:73:a7:d1:d7: 64:40:b0:17:96:1e:98:86:e0:52:30:3e:da:e3:8e: 6f:42:6f:5e:c5:a8:45:6d:1b:d4:66:cd:c3:79:ee: 6d:48:cb:3e:c9:24:64:a8:f4:cd:68:3d:8e:9b:6c: a2:71:13:78:48:44:4c:ce:a3:b2:b0:2e:b4:05:34: 21:1b:d7:22:0d:90:83:dd:5e:82:65:3a:3b:42:7e: 12:74:ae:ed:93:6b:31:1c:41:d5:e0:9c:8c:0e:18: be:3a:fc:34:23:af:ad:17:22:c9:08:4c:ec:e3:09: fc:e1:d5:5f:b7:ff:fc:c6:44:dc:4e:a4:06:9c:ff: c6:71:8d:d5:6a:a6:aa:a5:d3:75:99:5e:03:be:f4: 77:be:2a:7e:db:56:16:c1:25:9c:c8:85:40:cb:e2: c5:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:C9:F9:96:73:D2:76:8E:A5:3A:BF:0D:A0:69:AF:2C:D0:EC:33:0D X509v3 Authority Key Identifier: keyid:76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:c6:a8:7f:76:15:ee:d3:c5:93:37:a5:a7:48:1b:41:f6:a7: 4a:c6:bf:72:68:da:55:46:67:99:95:ba:10:75:20:25:ed:e4: 12:c0:f6:12:11:f2:31:8b:f1:bd:10:09:1c:9b:87:01:35:88: 17:89:c0:28:57:ca:30:4f:ca:a2:1a:e1:32:0b:dc:75:8b:ad: 5f:6d:2d:ad:45:56:fc:1b:66:b3:30:2e:e3:8c:a9:9c:77:41: 97:c9:4c:34:e7:35:82:e7:1e:11:ef:6f:d4:8a:f5:fb:b8:23: a7:ff:c5:86:b0:95:5a:57:bd:d4:36:d3:fe:f7:e9:1b:8e:2e: 7d:58:bf:61:e2:88:78:6e:9b:95:fb:bc:1e:9f:5d:fd:03:1a: cb:19:4e:8d:9b:a2:b2:94:b2:4d:32:3f:f8:62:37:ba:ce:90: 2b:ed:fd:bc:31:a6:3a:fe:e5:9c:fb:23:f3:c8:f2:0b:fc:90: af:ae:0e:aa:79:30:f1:52:cf:85:a8:de:84:3e:59:f2:5b:35: 01:45:4d:a8:6e:96:c1:8e:5e:d7:cd:6e:8f:04:17:e7:e7:2d: a5:af:29:ad:82:2c:b7:4e:f9:79:90:14:80:33:83:f5:31:46: 22:06:3e:41:6f:ba:38:c6:e7:3b:06:af:1f:f0:66:9c:ff:f6: 56:ec:73:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdLjXz8zkefphD/FRvBuPfzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2NjcwMjM2Y2QwZTAzODY4NGEzMzE5NGJkZTdkNGI5NWFk YzY2ZjcwHhcNMjUwNjA3MTgwMDUzWhcNMjUwNjA4MTgwMDUzWjAzMTEwLwYDVQQD EyhhN2M5Zjk5NjczZDI3NjhlYTUzYWJmMGRhMDY5YWYyY2QwZWMzMzBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzcapFJEetx1UM33GAK4plN5DRFdl y17ELQ0D/ZHTavtGMVU5JilBbYlBx5L4w0uMrPdfEmxbHovZ+uJXUybsWKn8Il7u /Epr7Q2ovoM2We8typkcOWQC5oUEkjC6nlw9Fw1RvnOn0ddkQLAXlh6YhuBSMD7a 445vQm9exahFbRvUZs3Dee5tSMs+ySRkqPTNaD2Om2yicRN4SERMzqOysC60BTQh G9ciDZCD3V6CZTo7Qn4SdK7tk2sxHEHV4JyMDhi+Ovw0I6+tFyLJCEzs4wn84dVf t//8xkTcTqQGnP/GcY3VaqaqpdN1mV4DvvR3vip+21YWwSWcyIVAy+LFewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKfJ+ZZz0naOpTq/DaBpryzQ7DMNMB8GA1UdIwQY MBaAFHZnAjbNDgOGhKMxlL3n1Lla3Gb3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8xODA5ZGEtMWM2Zi00NGRiLWFhMjgt YmE0ZmMyMzQ2ODNlLzEvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8xODA5ZGEtMWM2Zi00NGRiLWFhMjgtYmE0ZmMyMzQ2ODNl LzEvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPcaof3YV 7tPFkzelp0gbQfanSsa/cmjaVUZnmZW6EHUgJe3kEsD2EhHyMYvxvRAJHJuHATWI F4nAKFfKME/KohrhMgvcdYutX20trUVW/BtmszAu44ypnHdBl8lMNOc1guceEe9v 1Ir1+7gjp//FhrCVWle91DbT/vfpG44ufVi/YeKIeG6blfu8Hp9d/QMayxlOjZui spSyTTI/+GI3us6QK+39vDGmOv7lnPsj88jyC/yQr64Oqnkw8VLPhajehD5Z8ls1 AUVNqG6WwY5e181ujwQX5+ctpa8prYIst075eZAUgDOD9TFGIgY+QW+6OMbnOwav H/BmnP/2Vuxz3A== -----END CERTIFICATE-----Generated at Sun Jun 8 04:24:06 2025 by rpki-client