$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft File: Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft (raw, json) Hash identifier: D/KM39BqObvd0Wnnobt7Dgd7cfCKqi/vyhLhwAajC+Y= Subject key identifier: A7:D9:AA:7A:53:C5:22:31:E8:F9:A0:9C:60:2F:C5:06:47:85:70:85 Authority key identifier: 1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69 Certificate issuer: /CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69 Certificate serial: 0197469EABEE483FD1DD36815FE508E66980 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft Manifest number: 0FC3 Signing time: Fri 06 Jun 2025 19:01:33 +0000 Manifest this update: Fri 06 Jun 2025 19:01:33 +0000 Manifest next update: Sat 07 Jun 2025 19:01:33 +0000 Files and hashes: 1: B1Q4xWffdUN7zPjy1sq3Dtrabr0.roa (hash: XSRbcDFmD2SBWhC9QVnlq9zNA7EtDeg2/jCNqGJ6Vow=) 2: EFpp1ecMW8TWRG-p4oYa7fPPvPI.roa (hash: a7nT0f4Aii6pfEA07RoNM/fESmlRPCmSXyaPHHhHtfc=) 3: G5aSz4shLC5EKgp2SbNK-UcpZls.roa (hash: ao0JJHFk2t7w93DBJFTmDX4+D2u79wITuPAaWZsRu74=) 4: Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl (hash: FN6ZKQVvFHSUBE9RjDu9GWnWkUejVwQu4mVXm7bg8XU=) 5: J-jYbkHcU08sfslJpHJcwTM3ehc.roa (hash: jbuWwS0NdmUW31cs0jkODoZKeIDKRJImFm8tQFXzCko=) 6: MyvFwW74ILGZMvl1SRaFZj85s-w.roa (hash: tRsFoOFuyf7lXTV2fjiuire+SiXoxRJxt/4CiSI2cKU=) 7: TMTNqH9YEtXYXIfhInIhI6hLsNI.roa (hash: 80xDs/QZygHMiOYAgo0ZAMCzMR0y3N9KVQ76eTovdII=) 8: VHuw9bCvd_xbchW3ciS0PDWXw_w.roa (hash: gsE8OKW+/bE0pDGpsJc+2dHPUTMKwzSWKQdDcL2OGGQ=) 9: Vi5NHh9PeiZKSedITFgsgmiPCmI.roa (hash: p7I/BG2g25UPrgXDvJH/MAw3MvHjYcpWdRge+ekzCdI=) 10: YPCVZfdLkRnpwRWt5j9ECFmQgkw.roa (hash: hjB0AgE/bEo2D0PnqWgeOepZ8iy64G1fbs2WbSURiyc=) 11: ZDwPo4eEroHvW0Q-cNvO-pGgd80.roa (hash: MhXd3/42bxWERGmNkex/8mTYhYeR1LhuzyC3QmH77TY=) 12: h9060_GP774mLO77LC6My7l_Iqk.roa (hash: xCF+i+qRMr0iOa+aUqi0JjRA0FfOBaa6KB7RH+xl9to=) 13: hE9lnpU_NAJVdzwhJ71Oj3wXBps.roa (hash: xn4aHZr1nY8bZWZ9qmqhRWQdgnmDFEXg9Q54oyClBFM=) 14: w5dYOa54vKNEPegbP1ILAe4B70k.roa (hash: UG3Pt6aB2V/te9hBV8WZU509/953v6ZJ4S6EVvmx5A0=) 15: wMNls6aGPElAO-q1J1yhX2YjyMw.roa (hash: T5LNkfUUjSqO9ZymGqQoAIJA3aG+G/WQ2mWR/OBaa5g=) 16: wkc9yBg4lPDGjCfaJZRjyFM7mB0.roa (hash: qUIFrqdAEDEN9kEv6WmzzdSEX+yB2KZ5WLQVyM2U4m0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Jun 2025 19:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:46:9e:ab:ee:48:3f:d1:dd:36:81:5f:e5:08:e6:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69 Validity Not Before: Jun 6 19:01:33 2025 GMT Not After : Jun 7 19:01:33 2025 GMT Subject: CN=a7d9aa7a53c52231e8f9a09c602fc50647857085 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:9c:0b:db:df:54:08:4d:2b:d1:94:0b:60:51: f2:55:af:8f:e2:c7:99:ec:36:17:95:ad:dd:32:2a: f2:8c:4a:52:7f:c5:da:9e:e3:0e:70:e8:78:01:e4: 70:02:cd:29:da:20:fc:9e:95:05:8e:28:54:68:94: 97:ad:f8:6a:56:34:66:13:d5:3c:02:1d:c5:3b:0e: 7f:3e:cf:58:15:9f:e7:4f:80:d3:18:d6:18:3f:64: 2c:08:fd:80:3e:19:c1:d6:cf:d2:e2:7d:d3:61:5c: 19:9f:b2:58:43:bb:f2:b1:26:0d:90:1a:95:1b:40: c3:7d:b6:e8:08:2e:8d:69:bd:ee:d5:28:c1:43:88: e0:7c:96:40:d9:f0:51:42:45:d2:33:98:60:da:40: e6:29:95:67:c3:6a:e1:3a:f3:65:d0:e3:0d:4e:e6: eb:1d:4d:da:e5:4d:2f:ba:87:67:08:4b:06:51:82: ca:be:4d:b1:b7:6b:3c:b0:2a:d4:4b:dd:a0:fd:54: ab:3c:0d:64:0f:ba:f6:cc:08:81:91:a3:01:d7:b9: 45:76:82:24:92:28:8d:80:69:64:6b:08:40:80:6b: e4:23:22:a1:6e:5e:2a:34:69:4e:48:4c:44:19:e7: 57:5e:82:90:5f:f3:fd:7c:40:c3:ed:bb:f3:90:45: 07:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:D9:AA:7A:53:C5:22:31:E8:F9:A0:9C:60:2F:C5:06:47:85:70:85 X509v3 Authority Key Identifier: keyid:1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:89:bc:cf:cc:e6:9e:30:78:f8:b3:4f:1a:f4:29:29:ac:cb: dc:65:df:30:64:35:a3:fa:3d:f0:62:27:bc:3b:cf:f2:59:33: f9:43:8e:ec:51:93:09:a8:dd:d2:27:58:97:22:ca:5f:91:29: fd:7c:e1:6f:a7:81:f8:2b:5a:ee:1e:2c:ea:3b:3e:62:ff:3c: 9d:27:49:da:45:57:a0:b4:df:41:89:07:c7:2e:cf:00:ce:a7: 36:aa:c3:bd:62:e0:09:4a:17:e8:38:cc:01:d2:3e:0d:b5:d4: 64:6e:01:17:61:32:1c:3d:5f:03:a5:12:7f:19:65:75:5f:88: 13:02:34:73:bb:1e:57:23:35:28:83:24:d9:a6:56:b2:65:e4: d3:4d:82:cc:4d:31:9c:97:05:a6:78:4f:11:00:94:ae:c3:d0: e3:75:8e:7d:d9:23:22:45:fc:2a:e0:c7:7f:4e:87:5c:3c:f2: f8:ae:da:89:32:1f:b6:e2:01:ab:9f:dc:70:02:c5:1f:0b:a5: 52:e1:88:02:eb:ec:2c:ea:80:9b:42:a4:ad:18:d9:56:5e:e5: fd:d5:d4:02:c5:10:73:bb:d1:28:50:4d:ab:a7:4c:5b:5c:76: 5e:8c:01:bf:73:b2:14:a2:4c:d8:02:6d:b1:d1:70:5f:a3:3e: 56:ba:6b:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdGnqvuSD/R3TaBX+UI5mmAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlOWZkYzdmYjM5ZWJiYmVkNGVlNTRmNzAzZDNhYzYxNTNk ZGVlNjkwHhcNMjUwNjA2MTkwMTMzWhcNMjUwNjA3MTkwMTMzWjAzMTEwLwYDVQQD EyhhN2Q5YWE3YTUzYzUyMjMxZThmOWEwOWM2MDJmYzUwNjQ3ODU3MDg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA75wL299UCE0r0ZQLYFHyVa+P4seZ 7DYXla3dMiryjEpSf8XanuMOcOh4AeRwAs0p2iD8npUFjihUaJSXrfhqVjRmE9U8 Ah3FOw5/Ps9YFZ/nT4DTGNYYP2QsCP2APhnB1s/S4n3TYVwZn7JYQ7vysSYNkBqV G0DDfbboCC6Nab3u1SjBQ4jgfJZA2fBRQkXSM5hg2kDmKZVnw2rhOvNl0OMNTubr HU3a5U0vuodnCEsGUYLKvk2xt2s8sCrUS92g/VSrPA1kD7r2zAiBkaMB17lFdoIk kiiNgGlkawhAgGvkIyKhbl4qNGlOSExEGedXXoKQX/P9fEDD7bvzkEUHpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKfZqnpTxSIx6PmgnGAvxQZHhXCFMB8GA1UdIwQY MBaAFB6f3H+znru+1O5U9wPTrGFT3e5pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHBfY2Y3T2V1NzdVN2xUM0E5T3NZVlBkN21rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS80MGZkZDEtMTA5Mi00ZjY5LWI2NDgt NjkxZmY1YjQ0YjAxLzEvSHBfY2Y3T2V1NzdVN2xUM0E5T3NZVlBkN21rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS80MGZkZDEtMTA5Mi00ZjY5LWI2NDgtNjkxZmY1YjQ0YjAx LzEvSHBfY2Y3T2V1NzdVN2xUM0E5T3NZVlBkN21rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlIm8z8zm njB4+LNPGvQpKazL3GXfMGQ1o/o98GInvDvP8lkz+UOO7FGTCajd0idYlyLKX5Ep /Xzhb6eB+Cta7h4s6js+Yv88nSdJ2kVXoLTfQYkHxy7PAM6nNqrDvWLgCUoX6DjM AdI+DbXUZG4BF2EyHD1fA6USfxlldV+IEwI0c7seVyM1KIMk2aZWsmXk002CzE0x nJcFpnhPEQCUrsPQ43WOfdkjIkX8KuDHf06HXDzy+K7aiTIftuIBq5/ccALFHwul UuGIAuvsLOqAm0KkrRjZVl7l/dXUAsUQc7vRKFBNq6dMW1x2XowBv3OyFKJM2AJt sdFwX6M+Vrprlw== -----END CERTIFICATE-----Generated at Sat Jun 7 02:50:24 2025 by rpki-client