$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft File: YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft (raw, json) Hash identifier: 7t5NERP6gXcs4o6lhERvuh3rscpOaNFDHEIw7Hqimp0= Subject key identifier: E7:9C:9D:12:94:23:B4:34:08:45:26:FC:0D:75:EF:6B:9D:26:72:0E Authority key identifier: 60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39 Certificate issuer: /CN=60fcd55b9130858d8ea583c0987dad00f614db39 Certificate serial: 01972C0376C39ACE1D84CD0E6C12FF9207DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft Manifest number: 0CEF Signing time: Sun 01 Jun 2025 15:01:53 +0000 Manifest this update: Sun 01 Jun 2025 15:01:53 +0000 Manifest next update: Mon 02 Jun 2025 15:01:53 +0000 Files and hashes: 1: 067eNclGefF3m0OGTTUCn5XCP1g.roa (hash: z/3AKsQAeqaVo2VPZhi3t2S+PnoUgF4Iq5PxcFGv6Xo=) 2: 8IhOWpd8I4qCuNB3n2bpSQcTecg.roa (hash: BJCQpncNk1VfXWg6OSAZx6yCtw7TpjPtf43EPZiu5hE=) 3: JDhzUY8WggyEjl77dFyKfNTuttI.roa (hash: 2S4K0CW+p18ThxzBHKCsi6J4U1ECSCVbd5SXljt7NEI=) 4: X_Ut-l0xhlEJvQgpdE-Wt_wnoh0.roa (hash: RiDSm9rAEdX7bPFLKHKCwnSrmCrkLs82wHgdAdw6izg=) 5: YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl (hash: hufz2h9B1O1jE5NRsYaCL0AIPPHFmRsxicTOkfHrwh4=) 6: cUYhPVjNmTBmzUb7xN5IV7T0kbw.roa (hash: 7JSpQM7fg/Wm3cK+nXnCFmbDZn7wkYovB4/4v14s1zE=) 7: e1wZ773J_IwnQvW8HmcdAEsfbmk.roa (hash: /Hb9wRohhE6DgKG34thBOanjq8+9uKXnY/XXzkRgSyQ=) 8: icELWhfd9GPLu8IWkwxM1B9b1F8.roa (hash: YOkXqZJxfhwZLYrQswqqRP/8HyClhXqiaW/6Oo79K30=) 9: ip9eSePm8Y75YEH12AjUg5YYt1Q.roa (hash: Zh/noVMEWF/EQrP9CnaEuMBJgWDLkVvWB4iaEU0MbS8=) 10: lKvxXzte52N3Ng01d6-NvDpgCuA.roa (hash: URH25gScaq1xuzdQE3vtOXMbAip/Q6NtEBsaLOid0tI=) 11: r-SEcegHXv0xgVPmVK5FNkrtRLY.roa (hash: v2dXKgRdYBORQji5ctYjWOfXCnsGc158HDC6A+NIWtM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Jun 2025 14:55:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:2c:03:76:c3:9a:ce:1d:84:cd:0e:6c:12:ff:92:07:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60fcd55b9130858d8ea583c0987dad00f614db39 Validity Not Before: Jun 1 15:01:53 2025 GMT Not After : Jun 2 15:01:53 2025 GMT Subject: CN=e79c9d129423b434084526fc0d75ef6b9d26720e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f7:54:37:42:16:27:34:ad:e7:e9:35:53:66: 64:2a:81:0e:e8:ee:41:4c:4c:cc:d1:37:02:97:3a: e8:15:96:04:c3:05:73:9b:b4:fb:ef:ee:e4:ac:e8: d7:a7:fc:21:2c:bb:20:ee:33:c8:84:ec:c4:cf:5a: 56:76:6d:5b:83:f6:7c:3d:1e:ee:45:40:f2:3e:fa: af:07:fa:a7:2f:b6:4e:4d:c2:4d:e9:5f:97:91:c9: 82:71:24:e5:95:49:48:41:98:28:b0:a6:29:80:d6: dd:4a:d4:85:60:9a:57:c2:40:69:1a:d7:dd:e0:92: 09:09:c0:09:a9:30:b6:53:fa:ef:53:10:08:81:ae: 9e:b4:74:58:50:70:0f:2b:aa:f9:14:42:7a:f7:a4: 5e:6c:cf:45:3b:4a:9c:65:28:58:51:a0:e1:02:9f: af:5d:03:d4:27:b0:5f:0c:df:98:4d:03:d7:38:42: 0b:0b:00:be:fb:4e:8c:43:7f:6e:04:bc:45:ab:fe: 09:6b:8d:c5:3f:d5:a4:d7:15:c1:56:be:93:23:da: 59:70:0c:6b:9a:35:7f:ee:50:8a:de:bd:f4:e2:ba: 4d:ba:d4:c0:00:6c:4c:7c:a6:be:18:26:b6:5c:a1: ff:3a:fc:39:82:4e:97:b1:b4:5a:19:07:e9:06:00: 05:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:9C:9D:12:94:23:B4:34:08:45:26:FC:0D:75:EF:6B:9D:26:72:0E X509v3 Authority Key Identifier: keyid:60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:d2:c0:5f:26:53:b3:af:0f:10:10:78:8f:a1:74:ea:cb:1a: cf:94:fd:ef:4b:b9:f6:18:96:11:a0:88:95:fe:37:64:05:1e: 3c:63:c6:a2:69:57:37:94:76:06:08:6b:3a:02:03:a5:2f:85: 05:2e:97:4d:df:67:09:80:d1:a8:d1:42:30:e8:47:fb:a6:1b: 8b:da:a7:0f:2d:59:68:28:51:82:92:99:e8:5d:59:be:ec:e2: 19:3c:3b:f9:ba:12:4b:10:37:c8:8c:d0:ec:a5:47:81:03:a6: 3b:b0:74:18:71:9b:6e:09:ce:e2:1e:52:cc:bf:ea:b1:be:c5: 02:80:8b:d8:4a:42:b9:36:ca:31:ab:8a:fc:0d:39:9e:4e:da: 98:04:63:19:44:e6:47:f2:97:cd:9d:71:34:32:bf:f4:d3:3a: 9d:27:d1:68:45:3b:55:c0:b6:53:1b:fc:64:b7:8d:dc:bf:45: 5f:cc:1d:07:ac:a6:c0:24:13:de:59:75:a4:35:c0:b6:70:a6: a1:a1:7f:88:39:7a:f2:cb:ea:9d:3a:34:56:91:13:3f:8f:71: 62:d5:84:c8:36:96:08:0e:99:11:61:ac:64:17:ea:d2:a6:70: 77:6c:eb:ec:72:27:72:65:e3:fb:9c:af:23:4c:9e:a0:e3:d5: a7:f8:9c:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZcsA3bDms4dhM0ObBL/kgfbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwZmNkNTViOTEzMDg1OGQ4ZWE1ODNjMDk4N2RhZDAwZjYx NGRiMzkwHhcNMjUwNjAxMTUwMTUzWhcNMjUwNjAyMTUwMTUzWjAzMTEwLwYDVQQD EyhlNzljOWQxMjk0MjNiNDM0MDg0NTI2ZmMwZDc1ZWY2YjlkMjY3MjBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPdUN0IWJzSt5+k1U2ZkKoEO6O5B TEzM0TcClzroFZYEwwVzm7T77+7krOjXp/whLLsg7jPIhOzEz1pWdm1bg/Z8PR7u RUDyPvqvB/qnL7ZOTcJN6V+XkcmCcSTllUlIQZgosKYpgNbdStSFYJpXwkBpGtfd 4JIJCcAJqTC2U/rvUxAIga6etHRYUHAPK6r5FEJ696RebM9FO0qcZShYUaDhAp+v XQPUJ7BfDN+YTQPXOEILCwC++06MQ39uBLxFq/4Ja43FP9Wk1xXBVr6TI9pZcAxr mjV/7lCK3r304rpNutTAAGxMfKa+GCa2XKH/Ovw5gk6XsbRaGQfpBgAFowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOecnRKUI7Q0CEUm/A1172udJnIOMB8GA1UdIwQY MBaAFGD81VuRMIWNjqWDwJh9rQD2FNs5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVB6Vlc1RXdoWTJPcFlQQW1IMnRBUFlVMnprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC84MjIzM2QtZWMwNy00MmZiLTg3OTkt ZWQzMGI5YmIxMmQ1LzEvWVB6Vlc1RXdoWTJPcFlQQW1IMnRBUFlVMnprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC84MjIzM2QtZWMwNy00MmZiLTg3OTktZWQzMGI5YmIxMmQ1 LzEvWVB6Vlc1RXdoWTJPcFlQQW1IMnRBUFlVMnprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgdLAXyZT s68PEBB4j6F06ssaz5T970u59hiWEaCIlf43ZAUePGPGomlXN5R2BghrOgIDpS+F BS6XTd9nCYDRqNFCMOhH+6Ybi9qnDy1ZaChRgpKZ6F1ZvuziGTw7+boSSxA3yIzQ 7KVHgQOmO7B0GHGbbgnO4h5SzL/qsb7FAoCL2EpCuTbKMauK/A05nk7amARjGUTm R/KXzZ1xNDK/9NM6nSfRaEU7VcC2Uxv8ZLeN3L9FX8wdB6ymwCQT3ll1pDXAtnCm oaF/iDl68svqnTo0VpETP49xYtWEyDaWCA6ZEWGsZBfq0qZwd2zr7HIncmXj+5yv I0yeoOPVp/icNA== -----END CERTIFICATE-----Generated at Sun Jun 1 18:11:33 2025 by rpki-client