$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft File: 3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft (raw, json) Hash identifier: yYS8uvaOAKre1v09fPkHzb9HulyFeAAwaQtqRhTVsTA= Subject key identifier: CE:B0:ED:9D:23:5C:69:AE:04:03:DA:02:C9:62:31:E1:EB:BB:AE:75 Authority key identifier: DD:BE:6E:0A:DA:E8:BB:47:83:93:AA:B1:75:B6:38:64:4C:74:CC:B7 Certificate issuer: /CN=ddbe6e0adae8bb478393aab175b638644c74ccb7 Certificate serial: 01973CBF001E108EE95DF74A794AD4BE3325 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft Manifest number: 1015 Signing time: Wed 04 Jun 2025 21:00:39 +0000 Manifest this update: Wed 04 Jun 2025 21:00:39 +0000 Manifest next update: Thu 05 Jun 2025 21:00:39 +0000 Files and hashes: 1: 3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl (hash: pwLwrqWtaFClmX9XfdEIZHZ/D1gCiSY0WlSZPAcf5MM=) 2: FmBFQOhNzhtYDdGU28d2mOWYxkg.roa (hash: AVAVJ+z2q5E9uU0vpHh6beNWBbBTBuDWNk3vwtJ8KHM=) 3: a8dfbuD_49og8AJXwHhNJcwaxsI.roa (hash: W1ipPbq868Ly393rgOf3eds1bM0F3aTAdVR1mM1YvM4=) 4: ebI6lo6FFyrxH7BnniqczSoCpEU.roa (hash: VWIQku3g+eu08iWePk/+zF+lAvowuzYaw8AhxuX9/iY=) 5: iEjwphsnsCkTvYcagBPKufnt2-g.roa (hash: exQmAtQ6POft9PaSsq76nVkrM+e0e7z6aqVk5GRVWO8=) 6: mYlPJBjSVo-nMdiARP-4qGUEks0.roa (hash: jq8esI3cAJrQeZlA/zKhC8wm74GcNEo/R1+l+csXuU4=) 7: n11ZJorlH1hZHcOrMkN5woOVejs.roa (hash: qO1znHdZkcnjjGqE4Hx9Dgh/NFBxbtAoTeajvo0zDfk=) 8: rhaUzcqQYW4tC3EdQCdaNLWOPbA.roa (hash: PvCUNKVTR3gGQiqq6yWqtNwJ314FXo4VLynnYKTFbJo=) 9: uEehilTaJNTK6wTZHHdxxqFauYo.roa (hash: tRIraXpN8mX3nJ3uL7fIgHQ/edV3rhiXldnw6ddpk0I=) 10: x6Fr-1VeTypvMg38CuYZL6Aoelo.roa (hash: ajAlNUJcOgM2msZH/aiPOA3cqagu5/2Oq4Xgzqwcm3g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Jun 2025 21:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:3c:bf:00:1e:10:8e:e9:5d:f7:4a:79:4a:d4:be:33:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ddbe6e0adae8bb478393aab175b638644c74ccb7 Validity Not Before: Jun 4 21:00:39 2025 GMT Not After : Jun 5 21:00:39 2025 GMT Subject: CN=ceb0ed9d235c69ae0403da02c96231e1ebbbae75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c7:84:31:32:8f:86:d3:ba:89:fc:62:53:f7: 4a:29:f9:70:41:d9:fc:37:eb:e7:79:f7:ec:5b:f4: 49:a4:37:95:d0:7b:31:a7:2b:d5:39:1c:bb:e1:e3: b9:b7:4a:02:46:5f:28:5a:55:73:55:1c:e0:4e:46: 9b:01:bb:14:49:0f:0e:c0:3c:4e:cf:34:04:a1:4d: 2a:c0:61:11:fa:ed:c2:76:a0:44:3d:32:ad:7a:ba: e3:34:86:0e:e4:07:ac:5a:97:8a:24:76:df:e3:63: 68:75:79:4d:96:81:7c:a5:b9:9f:58:c1:3e:1e:6d: 34:d5:41:84:00:1f:4f:cc:35:61:db:f2:4d:81:71: ee:57:37:7a:4f:d1:f0:2b:f5:df:97:19:c5:81:cb: 7a:1b:0c:54:3b:8e:fa:1e:d6:e6:e9:7e:56:1f:68: 56:81:48:d7:25:a5:d8:3b:4e:53:02:78:52:7a:a9: 17:82:9e:ed:e4:10:fd:01:de:00:60:83:8d:8f:60: 7f:e2:a1:d0:65:a0:4b:28:f5:70:79:c9:01:5e:f3: 8a:27:69:f4:93:54:cf:f2:4d:90:1f:55:d2:50:42: ad:e2:50:32:86:29:87:e3:96:3b:37:fd:bf:f8:c3: b5:d1:ef:f3:a1:f8:a0:db:bf:83:59:4c:53:fd:4d: 80:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:B0:ED:9D:23:5C:69:AE:04:03:DA:02:C9:62:31:E1:EB:BB:AE:75 X509v3 Authority Key Identifier: keyid:DD:BE:6E:0A:DA:E8:BB:47:83:93:AA:B1:75:B6:38:64:4C:74:CC:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:59:ff:e9:7d:d4:03:ff:b8:c6:c8:6a:3b:da:28:21:3a:00: e8:6f:ef:3d:7f:df:15:27:76:d7:07:b1:3c:24:a1:42:77:2d: 97:8b:9c:1e:e1:1a:67:77:a1:26:13:3e:32:85:26:e3:dc:44: 1f:32:f6:3a:61:d3:2d:f6:e7:e5:01:32:db:c4:1a:5c:2e:a6: 33:77:95:55:01:a1:b8:09:06:07:94:da:2a:fa:15:3a:bb:45: 12:a3:d4:4f:45:30:5c:12:1d:7d:14:cf:e9:cb:ec:d8:92:30: e3:f4:d6:12:47:45:56:72:79:35:51:f6:28:71:29:62:a6:0e: 0e:de:43:04:45:be:35:a6:44:7b:34:22:39:f6:07:fe:e1:30: 88:1c:16:04:1a:93:54:32:1d:6a:0b:13:26:da:40:2f:ca:9b: 02:47:93:89:ce:ca:40:90:38:51:81:b5:e9:a8:cc:c5:4a:c5: 33:6f:8e:9e:35:f2:f3:b5:0b:45:9f:d2:c1:71:8b:ce:16:3c: 26:bd:38:1e:fd:fe:44:a6:64:55:47:c1:a6:b4:d5:48:4d:a9: 6e:20:76:e1:6e:e0:54:db:00:f1:ee:0b:2d:db:8b:2d:19:e1: d8:2c:f9:3f:c0:2b:4d:ac:9e:22:48:9b:fe:fb:9f:76:25:c4: 1b:c5:47:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZc8vwAeEI7pXfdKeUrUvjMlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkYmU2ZTBhZGFlOGJiNDc4MzkzYWFiMTc1YjYzODY0NGM3 NGNjYjcwHhcNMjUwNjA0MjEwMDM5WhcNMjUwNjA1MjEwMDM5WjAzMTEwLwYDVQQD EyhjZWIwZWQ5ZDIzNWM2OWFlMDQwM2RhMDJjOTYyMzFlMWViYmJhZTc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvceEMTKPhtO6ifxiU/dKKflwQdn8 N+vneffsW/RJpDeV0HsxpyvVORy74eO5t0oCRl8oWlVzVRzgTkabAbsUSQ8OwDxO zzQEoU0qwGER+u3CdqBEPTKterrjNIYO5AesWpeKJHbf42NodXlNloF8pbmfWME+ Hm001UGEAB9PzDVh2/JNgXHuVzd6T9HwK/XflxnFgct6GwxUO476Htbm6X5WH2hW gUjXJaXYO05TAnhSeqkXgp7t5BD9Ad4AYIONj2B/4qHQZaBLKPVweckBXvOKJ2n0 k1TP8k2QH1XSUEKt4lAyhimH45Y7N/2/+MO10e/zofig27+DWUxT/U2AgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM6w7Z0jXGmuBAPaAsliMeHru651MB8GA1UdIwQY MBaAFN2+bgra6LtHg5OqsXW2OGRMdMy3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2I1dUN0cm91MGVEazZxeGRiWTRaRXgwekxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNjdiNzgtNThjOC00MzExLTllNjkt NmJhYTNiNTQ4ZDIzLzEvM2I1dUN0cm91MGVEazZxeGRiWTRaRXgwekxjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hNjdiNzgtNThjOC00MzExLTllNjktNmJhYTNiNTQ4ZDIz LzEvM2I1dUN0cm91MGVEazZxeGRiWTRaRXgwekxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWFn/6X3U A/+4xshqO9ooIToA6G/vPX/fFSd21wexPCShQnctl4ucHuEaZ3ehJhM+MoUm49xE HzL2OmHTLfbn5QEy28QaXC6mM3eVVQGhuAkGB5TaKvoVOrtFEqPUT0UwXBIdfRTP 6cvs2JIw4/TWEkdFVnJ5NVH2KHEpYqYODt5DBEW+NaZEezQiOfYH/uEwiBwWBBqT VDIdagsTJtpAL8qbAkeTic7KQJA4UYG16ajMxUrFM2+OnjXy87ULRZ/SwXGLzhY8 Jr04Hv3+RKZkVUfBprTVSE2pbiB24W7gVNsA8e4LLduLLRnh2Cz5P8ArTayeIkib /vufdiXEG8VH1g== -----END CERTIFICATE-----Generated at Thu Jun 5 06:44:10 2025 by rpki-client