$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft File: Njdp-GRKWnGK5isFjdH7YstaPCA.mft (raw, json) Hash identifier: mv3o2cuq31X1pSlcwCsasddoi6nnib22wg8nwR+iz08= Subject key identifier: 12:B5:BA:CC:46:CC:4A:93:21:76:BB:7D:2E:C9:D3:BF:96:EB:C9:FC Authority key identifier: 36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20 Certificate issuer: /CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20 Certificate serial: 01992F6C826B18D045542E8C52BAD55CAD91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft Manifest number: 12C9 Signing time: Tue 09 Sep 2025 17:01:04 +0000 Manifest this update: Tue 09 Sep 2025 17:01:04 +0000 Manifest next update: Wed 10 Sep 2025 17:01:04 +0000 Files and hashes: 1: 6KojKGt8m1JZYflLectBk9G6KyQ.roa (hash: f7oRXtNmZrUg7ECYCX58KaB9kZ/BYKNvyNqrr7ZA0pg=) 2: 9_VTzPNMtq6bRoN_2gQPbFirB_4.roa (hash: GFcx39JAffdglXqipIFTeQRGB4wpQ89alaTRPqJNkCk=) 3: 9d7-oiu-mBjw4z1zBB1dh7CSH94.roa (hash: NSPVHDDpPzrpqQjtgOJxVDl+4YeQklgmMnIIlaE/zH4=) 4: BxI-z_iKAoRv-KkoQfmyFBd2rBU.roa (hash: azqV4pSZAum5oUwc2nR9O4azmHBN9hS6/dWIvs6n6Yk=) 5: I9XUisFoxGtL5nlEyDkRm9SxnHU.roa (hash: CRR3lDaaR4JHFLVIWiAceY/tOhJb5JmxYXyKyqN2k7o=) 6: JwtLcTu5YVfj_v6EYmBkVEJOCSk.roa (hash: Z/uV55YxgNv0N3LLBrV+q7AxLOdh39PbZ8CIfU7Xb24=) 7: Njdp-GRKWnGK5isFjdH7YstaPCA.crl (hash: lyc3KEFQxpJkzRugdCUZocUZItRW24k1s4Bv2afen3M=) 8: UB0nHtcN2JqEpsBiE2dgnMbsFmA.roa (hash: /6u2jCfdxJpMMlfUjlpcIXqMInwiMRNkGcmBxEuYZxo=) 9: lVLXkjE5u336DUNe5-yOssKJPTU.roa (hash: LZfaMzNKKI5KTD1Ka0mwOqPdg88OEyiRswrf9PDppVQ=) 10: mMGXQdchjm-1k_0cqBgKyEDxRR4.roa (hash: 3upgVfgQw3wj9y0X5oDRyiDppWmgLqIOtqf6K+MUlIM=) 11: nI4pg8TJwdBGvcOSMEwiKdACRgY.roa (hash: e4fjV36QQP3EEWEcje1wCzIbRILO6c8V4Bt3WpH8Zcc=) 12: o5rwtBSGBeueFoqXJnECfg6cmYA.roa (hash: TLPcNxEKVGJq+q8J97N3QnvxQz4N/IjsjG2sJIGRFeA=) 13: okDig36WatgfOljJ7YAQ7f4qAwI.roa (hash: 9F0Jk3aBVBsMc/BBPP2ZGmKOPXIvDvI2DUUSrfyHD70=) 14: pVY_FGIDhlEf6vs7MShMAVBNlQk.roa (hash: 36C0/NjrkK4EvhEr+5+ZgIKhG5JQMFDTmhg9XNYss9Q=) 15: snSvPYVkGepL_9GgsNIGnoIWw44.roa (hash: T0HMAvigAIpTuY/J9VuaKFj34+4Tc7VdD2Bhy8snzbA=) 16: uiYUyTWWE4PZpkpKN5LB2EKpPu0.roa (hash: z03Urv4xQycLb08btj7gfHzMCKzXb1kRu0QwraJJBFQ=) 17: xZ2Mzu_3c40aDFLd62CdvQWebug.roa (hash: xKY3AuHc8X/lxha18soPYIUuGtqbxocRZavr4da/On8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Sep 2025 17:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:2f:6c:82:6b:18:d0:45:54:2e:8c:52:ba:d5:5c:ad:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20 Validity Not Before: Sep 9 17:01:04 2025 GMT Not After : Sep 10 17:01:04 2025 GMT Subject: CN=12b5bacc46cc4a932176bb7d2ec9d3bf96ebc9fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:d2:60:3e:bc:33:e4:cc:ca:8f:4c:a3:7b:17: 91:20:e1:0b:99:39:5a:91:2d:3d:70:e5:67:22:e1: 61:17:71:d8:a9:17:a2:08:34:55:34:c4:39:5c:00: 4e:c0:df:9a:03:61:a8:f5:38:3d:8c:41:b8:9c:68: 46:f3:7e:1f:c6:2d:2e:23:a1:d3:2e:3f:7c:7f:59: ce:47:4f:79:5c:aa:f5:14:e1:58:8e:b0:29:7f:3c: 1d:6f:d3:46:78:69:e5:04:5a:c1:d8:7c:22:a8:f1: 85:1c:d1:60:89:a2:27:0a:39:c0:5b:ad:59:59:9b: 54:6a:5d:b3:13:ca:97:42:ca:f3:ea:e8:6f:50:a4: 59:fb:a6:14:cd:89:da:ad:c5:c2:27:ca:6e:97:21: 1c:ba:3a:de:d6:6a:9b:e0:8a:d7:ca:9a:09:2b:b4: 2a:38:e1:14:2e:5e:2a:3b:c7:1f:a5:0e:fe:0c:e4: 9b:97:d9:bc:b6:48:b0:68:cc:7b:55:54:cf:06:0b: a4:70:18:25:a1:b3:66:03:b9:a5:5d:4c:1a:bb:dc: 03:ca:12:42:16:4d:49:4d:a4:7f:50:d1:d5:6f:2b: 16:72:77:b3:a8:a2:28:8e:41:6d:4d:74:4c:1e:38: 80:52:e1:fa:72:a2:dd:fc:e9:54:1a:4d:bd:fc:28: 49:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:B5:BA:CC:46:CC:4A:93:21:76:BB:7D:2E:C9:D3:BF:96:EB:C9:FC X509v3 Authority Key Identifier: keyid:36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:80:03:10:0d:51:71:af:7c:c9:c3:83:5a:2e:83:3c:1a:40: cb:f8:df:a1:3a:0d:03:b0:af:c8:b2:8f:c3:c2:3b:8b:74:ed: 6d:d7:f1:cd:d4:b5:26:48:dc:0f:9a:cc:0d:cb:35:1c:3e:e9: da:5f:b2:d9:61:2a:b6:4a:7c:d0:db:56:5a:77:51:37:22:fc: 29:e7:8f:0e:83:4f:93:57:d7:78:62:91:51:23:95:2a:5a:3f: 08:ea:61:44:29:0f:ae:67:28:60:ab:51:73:c3:41:46:47:93: b1:db:0f:35:d7:e2:60:04:44:91:a2:3b:e4:6b:84:ad:a6:97: ca:9d:a1:16:4e:88:91:b8:54:24:c6:d9:dd:ea:8f:d1:9e:a8: 4b:b1:1c:17:d1:b6:96:94:e8:e5:74:2f:c6:43:c5:19:04:ae: 1e:42:f9:2a:9f:d7:77:06:50:dd:c0:23:63:2d:4f:30:b1:b6: 1b:cd:4c:05:aa:09:a8:b1:6e:12:99:07:c3:b6:df:e0:2c:10: df:c1:40:32:1a:a0:30:e0:b9:d2:bd:bc:e2:09:f0:a1:2f:87: 9b:bc:f4:b9:23:3a:03:ba:2f:b0:aa:8b:1b:a8:a1:0e:ef:c1: 18:ae:d1:56:76:ba:ed:51:8b:44:25:95:6e:71:d5:23:8d:1b: 8c:7a:3a:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkvbIJrGNBFVC6MUrrVXK2RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2Mzc2OWY4NjQ0YTVhNzE4YWU2MmIwNThkZDFmYjYyY2I1 YTNjMjAwHhcNMjUwOTA5MTcwMTA0WhcNMjUwOTEwMTcwMTA0WjAzMTEwLwYDVQQD EygxMmI1YmFjYzQ2Y2M0YTkzMjE3NmJiN2QyZWM5ZDNiZjk2ZWJjOWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9JgPrwz5MzKj0yjexeRIOELmTla kS09cOVnIuFhF3HYqReiCDRVNMQ5XABOwN+aA2Go9Tg9jEG4nGhG834fxi0uI6HT Lj98f1nOR095XKr1FOFYjrApfzwdb9NGeGnlBFrB2HwiqPGFHNFgiaInCjnAW61Z WZtUal2zE8qXQsrz6uhvUKRZ+6YUzYnarcXCJ8pulyEcujre1mqb4IrXypoJK7Qq OOEULl4qO8cfpQ7+DOSbl9m8tkiwaMx7VVTPBgukcBglobNmA7mlXUwau9wDyhJC Fk1JTaR/UNHVbysWcnezqKIojkFtTXRMHjiAUuH6cqLd/OlUGk29/ChJgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBK1usxGzEqTIXa7fS7J07+W68n8MB8GA1UdIwQY MBaAFDY3afhkSlpxiuYrBY3R+2LLWjwgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmpkcC1HUktXbkdLNWlzRmpkSDdZc3RhUENBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8wZjhmZWEtZjAwYS00NDE1LWIzOTYt Mzk5ZmM5NjkzYjIyLzEvTmpkcC1HUktXbkdLNWlzRmpkSDdZc3RhUENBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8wZjhmZWEtZjAwYS00NDE1LWIzOTYtMzk5ZmM5NjkzYjIy LzEvTmpkcC1HUktXbkdLNWlzRmpkSDdZc3RhUENBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC4ADEA1R ca98ycODWi6DPBpAy/jfoToNA7CvyLKPw8I7i3TtbdfxzdS1JkjcD5rMDcs1HD7p 2l+y2WEqtkp80NtWWndRNyL8KeePDoNPk1fXeGKRUSOVKlo/COphRCkPrmcoYKtR c8NBRkeTsdsPNdfiYAREkaI75GuEraaXyp2hFk6IkbhUJMbZ3eqP0Z6oS7EcF9G2 lpTo5XQvxkPFGQSuHkL5Kp/XdwZQ3cAjYy1PMLG2G81MBaoJqLFuEpkHw7bf4CwQ 38FAMhqgMOC50r284gnwoS+Hm7z0uSM6A7ovsKqLG6ihDu/BGK7RVna67VGLRCWV bnHVI40bjHo6ng== -----END CERTIFICATE-----Generated at Tue Sep 9 23:36:28 2025 by rpki-client