$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft File: Njdp-GRKWnGK5isFjdH7YstaPCA.mft (raw, json) Hash identifier: 3R0rmXSvtI5cFmqP9MdNQG14C43NUX8HeSKsxE7IGfM= Subject key identifier: FC:71:5F:6D:0B:03:B6:BB:B3:E0:48:2E:A8:9B:93:CC:B5:3A:BA:44 Authority key identifier: 36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20 Certificate issuer: /CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20 Certificate serial: 01974AB1600B9581B25D2CDA16AF0DB52723 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft Manifest number: 11CE Signing time: Sat 07 Jun 2025 14:00:27 +0000 Manifest this update: Sat 07 Jun 2025 14:00:27 +0000 Manifest next update: Sun 08 Jun 2025 14:00:27 +0000 Files and hashes: 1: 6KojKGt8m1JZYflLectBk9G6KyQ.roa (hash: f7oRXtNmZrUg7ECYCX58KaB9kZ/BYKNvyNqrr7ZA0pg=) 2: 9_VTzPNMtq6bRoN_2gQPbFirB_4.roa (hash: GFcx39JAffdglXqipIFTeQRGB4wpQ89alaTRPqJNkCk=) 3: 9d7-oiu-mBjw4z1zBB1dh7CSH94.roa (hash: NSPVHDDpPzrpqQjtgOJxVDl+4YeQklgmMnIIlaE/zH4=) 4: BxI-z_iKAoRv-KkoQfmyFBd2rBU.roa (hash: azqV4pSZAum5oUwc2nR9O4azmHBN9hS6/dWIvs6n6Yk=) 5: I9XUisFoxGtL5nlEyDkRm9SxnHU.roa (hash: CRR3lDaaR4JHFLVIWiAceY/tOhJb5JmxYXyKyqN2k7o=) 6: JwtLcTu5YVfj_v6EYmBkVEJOCSk.roa (hash: Z/uV55YxgNv0N3LLBrV+q7AxLOdh39PbZ8CIfU7Xb24=) 7: Njdp-GRKWnGK5isFjdH7YstaPCA.crl (hash: Bn3QfgISeFAkZ/ZbJjCSCq4bHux9qdoZcsQQFA5StVQ=) 8: UB0nHtcN2JqEpsBiE2dgnMbsFmA.roa (hash: /6u2jCfdxJpMMlfUjlpcIXqMInwiMRNkGcmBxEuYZxo=) 9: lVLXkjE5u336DUNe5-yOssKJPTU.roa (hash: LZfaMzNKKI5KTD1Ka0mwOqPdg88OEyiRswrf9PDppVQ=) 10: mMGXQdchjm-1k_0cqBgKyEDxRR4.roa (hash: 3upgVfgQw3wj9y0X5oDRyiDppWmgLqIOtqf6K+MUlIM=) 11: nI4pg8TJwdBGvcOSMEwiKdACRgY.roa (hash: e4fjV36QQP3EEWEcje1wCzIbRILO6c8V4Bt3WpH8Zcc=) 12: o5rwtBSGBeueFoqXJnECfg6cmYA.roa (hash: TLPcNxEKVGJq+q8J97N3QnvxQz4N/IjsjG2sJIGRFeA=) 13: okDig36WatgfOljJ7YAQ7f4qAwI.roa (hash: 9F0Jk3aBVBsMc/BBPP2ZGmKOPXIvDvI2DUUSrfyHD70=) 14: pVY_FGIDhlEf6vs7MShMAVBNlQk.roa (hash: 36C0/NjrkK4EvhEr+5+ZgIKhG5JQMFDTmhg9XNYss9Q=) 15: snSvPYVkGepL_9GgsNIGnoIWw44.roa (hash: T0HMAvigAIpTuY/J9VuaKFj34+4Tc7VdD2Bhy8snzbA=) 16: uiYUyTWWE4PZpkpKN5LB2EKpPu0.roa (hash: z03Urv4xQycLb08btj7gfHzMCKzXb1kRu0QwraJJBFQ=) 17: xZ2Mzu_3c40aDFLd62CdvQWebug.roa (hash: xKY3AuHc8X/lxha18soPYIUuGtqbxocRZavr4da/On8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Jun 2025 11:24:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:4a:b1:60:0b:95:81:b2:5d:2c:da:16:af:0d:b5:27:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20 Validity Not Before: Jun 7 14:00:27 2025 GMT Not After : Jun 8 14:00:27 2025 GMT Subject: CN=fc715f6d0b03b6bbb3e0482ea89b93ccb53aba44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:b4:26:7c:c8:34:c6:02:3b:7c:f1:9b:87:7e: 9f:6b:60:20:c7:ee:8f:fe:01:d7:22:f7:09:83:79: c6:8a:84:36:f7:a8:f7:2e:31:7a:37:70:b6:6d:a1: 62:ef:83:5b:9a:84:31:f4:6e:39:f7:c9:1f:89:1b: 61:87:0a:10:9b:a1:7b:78:e7:c3:74:80:2e:f6:91: 17:0a:80:9e:e2:7b:3f:c1:89:a1:54:0b:e4:34:9b: 31:56:d5:2d:21:3e:16:35:0b:9a:d8:fb:6a:26:3b: 6c:7a:74:76:d8:e2:d0:a9:5b:d0:5d:a8:30:cb:df: f8:1f:e3:c1:60:94:4b:8e:ed:ac:17:13:cb:51:ec: a8:c8:9a:5a:c8:15:f1:ce:8a:27:18:e3:59:87:d1: 38:40:1c:de:03:51:8f:1c:91:59:70:fa:76:fe:e2: 02:ec:db:d4:2d:04:08:13:2c:6b:72:79:df:f9:82: 4b:6e:cf:1e:28:47:53:0d:a3:45:6c:15:81:a4:41: fc:72:4e:01:cc:4c:a9:9c:e3:bc:0b:e6:2c:14:82: 47:b8:7e:2d:fb:a3:28:97:7e:ad:f9:46:3b:a4:16: 56:4a:06:92:a3:4f:22:c4:33:09:33:ef:1f:c8:dc: 76:42:2a:97:b5:a2:0a:82:dc:11:88:a9:bc:9c:5f: 46:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:71:5F:6D:0B:03:B6:BB:B3:E0:48:2E:A8:9B:93:CC:B5:3A:BA:44 X509v3 Authority Key Identifier: keyid:36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:de:55:ce:7f:b4:0a:8a:0c:5f:07:5d:5d:f4:c5:86:86:09: bc:be:b9:58:a8:b3:0b:c4:4c:87:0d:59:6b:d8:32:d2:f7:76: c3:10:cf:28:e9:01:64:2b:0b:2f:15:e9:b5:95:42:32:7d:b7: 0f:b2:1d:82:9a:fd:e7:ce:28:1a:1c:3d:a5:78:f7:44:33:a8: 58:d4:df:2e:f0:4c:66:0a:56:69:bb:ef:a2:b0:9a:95:67:3d: 7f:38:ac:11:bc:de:55:a7:6a:77:f9:e8:7d:39:e1:11:64:9c: 7c:5c:b3:16:dc:43:86:41:f7:ac:0e:73:c2:29:87:ef:43:eb: 95:76:2b:18:1f:35:2c:cb:73:db:e2:55:00:f7:b9:12:73:e8: ae:da:81:ce:c3:f8:8b:db:cd:4e:5b:38:6d:fd:74:ec:aa:95: cf:3e:ab:d8:ab:d5:c3:de:01:ca:87:bd:f3:a7:ab:60:4d:2d: 2c:ee:a2:15:2f:be:22:1b:49:d3:27:97:6f:70:21:dd:fb:83: 38:ea:89:f4:5e:4a:ba:04:35:99:df:e8:fb:fe:47:2d:99:e6: f0:26:83:f6:d4:44:2c:62:a2:22:5f:b3:77:31:ac:62:ec:06: 02:06:88:97:75:28:3b:40:34:0d:8a:9f:02:f7:87:5b:ac:f8: 83:e5:ff:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdKsWALlYGyXSzaFq8NtScjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2Mzc2OWY4NjQ0YTVhNzE4YWU2MmIwNThkZDFmYjYyY2I1 YTNjMjAwHhcNMjUwNjA3MTQwMDI3WhcNMjUwNjA4MTQwMDI3WjAzMTEwLwYDVQQD EyhmYzcxNWY2ZDBiMDNiNmJiYjNlMDQ4MmVhODliOTNjY2I1M2FiYTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3LQmfMg0xgI7fPGbh36fa2Agx+6P /gHXIvcJg3nGioQ296j3LjF6N3C2baFi74NbmoQx9G4598kfiRthhwoQm6F7eOfD dIAu9pEXCoCe4ns/wYmhVAvkNJsxVtUtIT4WNQua2PtqJjtsenR22OLQqVvQXagw y9/4H+PBYJRLju2sFxPLUeyoyJpayBXxzoonGONZh9E4QBzeA1GPHJFZcPp2/uIC 7NvULQQIEyxrcnnf+YJLbs8eKEdTDaNFbBWBpEH8ck4BzEypnOO8C+YsFIJHuH4t +6Mol36t+UY7pBZWSgaSo08ixDMJM+8fyNx2QiqXtaIKgtwRiKm8nF9GsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPxxX20LA7a7s+BILqibk8y1OrpEMB8GA1UdIwQY MBaAFDY3afhkSlpxiuYrBY3R+2LLWjwgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmpkcC1HUktXbkdLNWlzRmpkSDdZc3RhUENBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8wZjhmZWEtZjAwYS00NDE1LWIzOTYt Mzk5ZmM5NjkzYjIyLzEvTmpkcC1HUktXbkdLNWlzRmpkSDdZc3RhUENBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8wZjhmZWEtZjAwYS00NDE1LWIzOTYtMzk5ZmM5NjkzYjIy LzEvTmpkcC1HUktXbkdLNWlzRmpkSDdZc3RhUENBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbt5Vzn+0 CooMXwddXfTFhoYJvL65WKizC8RMhw1Za9gy0vd2wxDPKOkBZCsLLxXptZVCMn23 D7Idgpr9584oGhw9pXj3RDOoWNTfLvBMZgpWabvvorCalWc9fzisEbzeVadqd/no fTnhEWScfFyzFtxDhkH3rA5zwimH70PrlXYrGB81LMtz2+JVAPe5EnPortqBzsP4 i9vNTls4bf107KqVzz6r2KvVw94Byoe986erYE0tLO6iFS++IhtJ0yeXb3Ah3fuD OOqJ9F5KugQ1md/o+/5HLZnm8CaD9tRELGKiIl+zdzGsYuwGAgaIl3UoO0A0DYqf AveHW6z4g+X/BA== -----END CERTIFICATE-----Generated at Sat Jun 7 22:59:16 2025 by rpki-client