$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft File: 4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft (raw, json) Hash identifier: rBMrKUkREJk9pd9Mc/K6tNGM8qIWcbJnSoTakAv9POI= Subject key identifier: 16:32:B3:D5:AB:0E:FA:47:F4:87:81:DA:04:4E:E4:DD:76:A7:00:DB Authority key identifier: E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86 Certificate issuer: /CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86 Certificate serial: 0197500F389C771170D0B72C05A8AFA5AEB0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft Manifest number: 0948 Signing time: Sun 08 Jun 2025 15:01:04 +0000 Manifest this update: Sun 08 Jun 2025 15:01:04 +0000 Manifest next update: Mon 09 Jun 2025 15:01:04 +0000 Files and hashes: 1: 4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl (hash: tpbZMrvvaJSjPCbSSTZ0EyQ4y/KeDTgGw4/CqGT0nxM=) 2: 5DnR59g0uDhlCeBnwu0_1-KUFeg.roa (hash: jAnqTMpaItG0GhBN/hjRVmkf1KAEsae1ohPc+vQL06Q=) 3: 8PxMQW8r6gNYx6cR3PMs2yrl5ew.roa (hash: GqHXtanVRqdO2QW4vR+6/WyxTi1dfx0DVX7E+ZRdtvU=) 4: DamwXsWqw-pNiIY7Y9gzUoz46SI.roa (hash: 1+3IDizWDcTViB++VKv1xbkAGlHPeiHczREvYVy1BEk=) 5: Dt-A1UKjqPAgnYkiz5oOF3KPif4.roa (hash: jW2Q0BDw92rsfiM8k0/wQ6GD7kmaBburgq62TnGU9aA=) 6: Kn_2eJGh3EcHDuB-OJ8l3E2w8hE.roa (hash: kQ83aGfbv2Iq481MBuTu7pjTHv3tFZPurvWLoY3PlVA=) 7: LAI14FhpOzU-rcfdJ6U9PG061Ec.roa (hash: avAt1L3mlV+2vo4CiZ8YrFs2RggnJV+Qj20+5tYBmII=) 8: LbrW0uU2svuMgCfEegCflkeiJNI.roa (hash: xicAKV+b+Rrkk93cgla0jRgvKkmUQRZcuO0wo+Vll1I=) 9: NH99_Parr6i87GqyKHm971OOvUA.roa (hash: ejRR3IxtFm+BdQE6JvQ7L16gCRkI9epYBVSx8aKoP8A=) 10: OOSnnzJCzwuc2Oreq9KoON2OJy4.roa (hash: 8ZWXugZrnN7Xp4F6Xn87sRk2TjB10Ze3ouSEvaxFbzM=) 11: Q820-mh3gTLx3r5yd43BKUrxxh8.roa (hash: koyxE8n/nkkyiE6UfVNmxydTa2BJ9VFKJe/4B3gcMPg=) 12: QRvqjOpbm1bsYYXVNYJCdsL2K9c.roa (hash: gbsaPykuhKfA/rXSneeYnuzsVzL0kGuorXD/sYaSjK8=) 13: STuoLQHHZBzK_Ldaz7xkxpSaBqY.roa (hash: ZzI62CUIffeXt6hPl33Fk7eNbx5SV7+e0g7j7C8NgSI=) 14: dPORcLPPy7vGPpK7YO0ZCdg3SLc.roa (hash: M8CeF8WcmPBFysMRz6rWQ9roOEfHfMbz/n6BV0QqyTM=) 15: ea2ONoTt3SySSjctEUa2mvxPlk0.roa (hash: aHDpbhU3poNDj7sgG29oLTuaOz779tw43LjPP8jq2GU=) 16: gPbim5HyI5_coGPfod5GORXHFJM.roa (hash: WqgzuFgOy6ZgR1XpLM/1W9uFliVDMHByx6+nWg3yG7Q=) 17: hV1kQUu8Pdq1hwLjpsPqwMqfj_U.roa (hash: N1eliwWO7Qtxwve5drBayNA7B9DMRJgSbxRNUu9dsfY=) 18: o1MTa_u6ng7YChqgqqMpF_EDHDo.roa (hash: medB94fc43SFhZiIXkS8L2CLIYdmUFnxbXmgm5u0RKM=) 19: pA-Fq_J6A5SNZJF98Uix7eSPlIg.roa (hash: 7lwAf6YG9+AyLk5HAGkoZYURCw6qLQhN2f3/kdNJO0w=) 20: v5F31cV6XBvE5243s4oHQBqQQDM.roa (hash: +2WzyiNTSNMZQ/+SFfQYAFWtFS/6Ce5PKrWiHjJlqng=) 21: xbbY79UbNbRYIgyXeBU4cy_zCmI.roa (hash: c0Ac2LrLggmLnLPt492ZZRPubOLwoYV4rcik5rRDaO0=) 22: zw1raLzJkOzuLdWVP5BWRU84p2o.roa (hash: XIzDwzNdh9cyZCy+DakAR8zEkFIdZM7IKTxs2TBKsWM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 09 Jun 2025 11:44:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:50:0f:38:9c:77:11:70:d0:b7:2c:05:a8:af:a5:ae:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86 Validity Not Before: Jun 8 15:01:04 2025 GMT Not After : Jun 9 15:01:04 2025 GMT Subject: CN=1632b3d5ab0efa47f48781da044ee4dd76a700db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e3:3a:28:21:c6:d1:01:90:d8:3b:fd:03:0e: 02:1f:20:31:f9:cb:0c:0b:0c:14:73:02:f5:18:19: 3b:6b:3d:e0:93:2b:eb:cb:35:3a:22:e6:cc:08:b9: 0d:15:0e:23:3d:c2:81:ad:02:e9:09:c8:77:a5:eb: 24:97:41:11:35:82:01:53:d8:5b:33:67:38:77:2a: 8b:0e:28:d1:70:cd:28:3d:87:c6:d7:2f:d5:aa:af: 92:ab:78:57:91:1f:ab:a1:f8:03:95:2a:3a:2f:4a: f5:49:94:28:57:ed:79:f5:0b:56:c6:a4:63:4b:25: 0b:9e:f3:33:6f:f5:06:4c:36:ce:15:96:3c:38:bc: 1f:d1:17:02:db:76:0c:dd:36:16:92:03:58:a6:6b: 52:6e:e3:c7:de:36:d3:53:cb:a9:23:0e:15:59:95: f3:45:f6:cc:f3:be:c6:7e:56:d9:c8:ab:85:84:fe: d1:15:3e:92:b9:60:c6:f3:5a:bf:dd:73:ae:09:18: 47:f2:cd:09:b0:a4:2c:44:0f:ee:3a:59:3c:ef:f1: f3:75:40:b7:db:64:29:3c:03:5a:14:12:2b:23:78: d0:34:89:00:f7:7f:b6:cc:1e:ad:74:0e:92:99:2a: c3:91:a8:35:b4:bd:a5:44:79:6e:1e:8e:b7:ea:8c: f6:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:32:B3:D5:AB:0E:FA:47:F4:87:81:DA:04:4E:E4:DD:76:A7:00:DB X509v3 Authority Key Identifier: keyid:E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:de:1b:56:62:dc:bb:a1:90:2c:e5:66:0f:63:a2:95:38:88: a2:56:42:0e:e3:d9:12:92:bb:6e:60:20:e2:29:49:ed:89:da: 60:8d:26:98:e2:ad:36:f2:b6:c4:43:75:87:c0:48:8a:7c:1e: c1:ab:4f:66:dc:49:08:5a:af:e0:df:a7:14:74:71:69:88:12: b8:f7:93:fb:5f:9a:2c:16:e3:cb:8a:74:3d:30:6f:90:23:1e: 63:f2:61:9e:54:eb:b3:a1:0b:93:64:1a:3a:51:7c:8d:b1:67: 96:dd:ac:e2:cb:99:1c:ff:76:74:91:48:f5:84:97:c3:22:05: 03:5e:b6:54:3a:17:7d:87:89:d6:09:38:bd:81:be:4b:f8:6b: 7f:e0:f4:aa:8f:46:18:b0:44:0a:69:5a:80:1d:f2:82:f6:06: df:24:a0:1f:32:06:ef:85:f2:63:a9:95:a0:c6:83:35:ba:b6: fc:89:95:f9:2c:a3:a6:f0:c0:ef:54:32:6f:f5:55:34:bd:68: 59:77:15:9b:be:8f:1f:68:f7:6a:66:79:d1:66:dc:f6:05:03: ef:c2:ef:e3:8e:9e:d0:89:8f:9f:04:f5:af:d8:85:e0:41:f2: da:e5:30:94:27:29:9b:ad:25:0c:77:81:46:c6:1a:96:6d:b8: 29:2e:8a:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdQDzicdxFw0LcsBaivpa6wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZDViYjQwMTE4MGU1NWY1YzE2NWQ0NzkwOGRmZjRmZTI5 YTBkODYwHhcNMjUwNjA4MTUwMTA0WhcNMjUwNjA5MTUwMTA0WjAzMTEwLwYDVQQD EygxNjMyYjNkNWFiMGVmYTQ3ZjQ4NzgxZGEwNDRlZTRkZDc2YTcwMGRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOM6KCHG0QGQ2Dv9Aw4CHyAx+csM CwwUcwL1GBk7az3gkyvryzU6IubMCLkNFQ4jPcKBrQLpCch3peskl0ERNYIBU9hb M2c4dyqLDijRcM0oPYfG1y/Vqq+Sq3hXkR+rofgDlSo6L0r1SZQoV+159QtWxqRj SyULnvMzb/UGTDbOFZY8OLwf0RcC23YM3TYWkgNYpmtSbuPH3jbTU8upIw4VWZXz RfbM877GflbZyKuFhP7RFT6SuWDG81q/3XOuCRhH8s0JsKQsRA/uOlk87/HzdUC3 22QpPANaFBIrI3jQNIkA93+2zB6tdA6SmSrDkag1tL2lRHluHo636oz29QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBYys9WrDvpH9IeB2gRO5N12pwDbMB8GA1UdIwQY MBaAFOLVu0ARgOVfXBZdR5CN/0/img2GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHRXN1FCR0E1VjljRmwxSGtJM19ULUthRFlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS84NjI5N2EtZDIxOS00NTY3LTkxNzEt NDIxZTZiYzdlMmU4LzEvNHRXN1FCR0E1VjljRmwxSGtJM19ULUthRFlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS84NjI5N2EtZDIxOS00NTY3LTkxNzEtNDIxZTZiYzdlMmU4 LzEvNHRXN1FCR0E1VjljRmwxSGtJM19ULUthRFlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUN4bVmLc u6GQLOVmD2OilTiIolZCDuPZEpK7bmAg4ilJ7YnaYI0mmOKtNvK2xEN1h8BIinwe watPZtxJCFqv4N+nFHRxaYgSuPeT+1+aLBbjy4p0PTBvkCMeY/JhnlTrs6ELk2Qa OlF8jbFnlt2s4suZHP92dJFI9YSXwyIFA162VDoXfYeJ1gk4vYG+S/hrf+D0qo9G GLBECmlagB3ygvYG3ySgHzIG74XyY6mVoMaDNbq2/ImV+SyjpvDA71Qyb/VVNL1o WXcVm76PH2j3amZ50Wbc9gUD78Lv446e0ImPnwT1r9iF4EHy2uUwlCcpm60lDHeB RsYalm24KS6KKg== -----END CERTIFICATE-----Generated at Sun Jun 8 19:37:15 2025 by rpki-client