$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft File: Vw-w8di4wZiw3IYVivvLxSnPFr4.mft (raw, json) Hash identifier: vF/wDmpOFML0IGuf02gtpNWwY5pMjtRGgHYDzn7z++s= Subject key identifier: 79:0C:C8:D8:2C:5B:5F:D8:FA:F0:0F:C8:92:FE:5B:6A:1B:AE:0E:62 Authority key identifier: 57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE Certificate issuer: /CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be Certificate serial: 01973D9B11C0A3D18AB65844E1F76A97918F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft Manifest number: 104E Signing time: Thu 05 Jun 2025 01:01:02 +0000 Manifest this update: Thu 05 Jun 2025 01:01:02 +0000 Manifest next update: Fri 06 Jun 2025 01:01:02 +0000 Files and hashes: 1: 394tf-42F2nqTQBsIqtkSRmucjA.roa (hash: FEgkNeogh00D0/bMKIclm4PWisfm2kigk4t326/BxbM=) 2: 8r_Cdukqv5EKtHGgGM8PC-3JcW0.roa (hash: YQDznsFHlF+2/HPFbS/bHU432YG3aHbKtyIjPPD/5uU=) 3: K4TXiO4vx97fOtBrxUmscpYLw7k.roa (hash: hogSVOE6lqRzYCTW78AUF5G9qYwC37tvODD3V8YR6bs=) 4: LhiSCtln5FtX__OORvWyogq6e1Q.roa (hash: hy6v9rxifRC/tHX6TRNuZxsYh5g9SsOUALYCNaysw+8=) 5: OcYqxTzrKk51o7UzflMDq0IEkmU.roa (hash: r3dK9LV9mG8s5RFEYjKSnWAnYTPlW4DqfejV7eJjGtw=) 6: U0iiCyVKkBtsYKQQ59uFgwV0vUY.roa (hash: Kg0XkwtjvHqkxTV75IaHlum33qw8f4RzUFb1Bkwzos0=) 7: Vw-w8di4wZiw3IYVivvLxSnPFr4.crl (hash: e2DuwGCUsyZSn9QuPAe4/T0kJrb7z9Inu/J9Nd2vQ2k=) 8: _OYA4765g9NJpcF7TDI32R4HwJ8.roa (hash: Yn+kaEeIeAIZFGdnv8IGAlURa//73XSkwoeGL0+JgXY=) 9: reOQvkCKTthRHYQBGidmg42zKD8.roa (hash: EVknv6hrF+g4BHS3Ghs5tKKPCCQu7Bf9Lg/hf58Bxoo=) 10: ss9acv__B4xuRCikM6Q1io4S-n8.roa (hash: pFGlfxJ1WiZHMyxc9wr2pYkizcAW4NxGW31B+3adYmw=) 11: yFRw8q4k0v0OL9Ce0AshdGghXG8.roa (hash: t47jhkvwslm22JJIGO341Kc6OVcgswUpwpZDqVXEDVs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Jun 2025 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:3d:9b:11:c0:a3:d1:8a:b6:58:44:e1:f7:6a:97:91:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be Validity Not Before: Jun 5 01:01:02 2025 GMT Not After : Jun 6 01:01:02 2025 GMT Subject: CN=790cc8d82c5b5fd8faf00fc892fe5b6a1bae0e62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:84:68:4c:b4:b9:a6:6b:9e:0b:7a:7c:47:dd: 3c:8d:70:0d:3b:a7:7f:e0:2a:41:55:5c:16:f5:d9: 91:05:48:69:ee:f5:08:64:26:e1:21:16:70:5d:b5: fc:b5:22:a5:28:94:20:a4:f2:b1:77:c0:c1:a8:d2: 4c:66:50:34:0e:7d:c0:8e:2e:e4:af:2a:43:34:64: e5:cb:74:65:d1:46:82:45:5c:d1:09:5f:c7:7d:d7: dd:91:db:5e:45:6c:6e:de:4a:ed:0f:1f:ec:40:e4: 01:d9:cb:4f:a7:54:9a:70:75:40:0c:2d:3a:48:db: 69:db:aa:fd:fd:3c:d5:cf:c3:67:dd:8f:d8:d9:9a: 21:fd:75:d2:d2:f4:e1:8c:9b:74:c0:b6:53:41:f6: 4d:89:96:72:10:16:35:13:ab:36:3b:9b:31:68:a9: be:ee:33:eb:59:db:42:c0:8b:19:fb:c8:4a:cc:9d: 63:c5:1e:e0:0a:10:a8:ec:45:ce:37:b7:29:fd:8e: cd:48:5b:66:5c:c4:49:66:5a:1a:de:79:13:a4:40: 5f:25:53:1d:b3:22:af:0a:bf:7e:82:6b:14:d2:bc: 61:b2:b1:de:f4:6f:1d:65:33:14:ad:85:0e:c6:2b: ae:43:ef:49:34:7b:bc:b9:27:af:4b:fc:6b:89:86: 44:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:0C:C8:D8:2C:5B:5F:D8:FA:F0:0F:C8:92:FE:5B:6A:1B:AE:0E:62 X509v3 Authority Key Identifier: keyid:57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:f5:bc:04:08:59:1b:f6:5c:9e:e3:e0:1c:bc:b2:bf:aa:89: 49:bf:88:0b:32:4d:04:b8:ef:7d:ba:7f:5f:6d:70:5b:dc:d4: 11:f1:b9:9f:9c:45:71:7e:db:db:ed:d2:06:e7:78:e8:ac:35: 94:ca:87:ef:80:9c:a7:d2:8f:6a:e9:6b:f0:89:26:b7:3a:e2: 01:4f:79:0a:80:5e:a4:0b:40:f4:59:80:0d:9f:67:f1:95:aa: 56:4c:3d:09:66:f2:3e:d9:09:7b:3f:1c:28:7f:f4:dd:06:57: 8a:7c:0a:db:28:da:30:07:94:eb:6d:3b:f8:ff:c3:07:97:b8: a2:ba:4c:3f:17:9c:71:01:5b:a5:0f:fa:d2:29:8f:1a:51:dd: 1b:7c:0d:ba:59:a4:28:d6:85:69:d5:f0:65:a3:29:72:64:7c: 68:09:3a:39:92:6d:b4:d2:dc:4f:4b:95:e1:fd:ae:85:be:cd: 15:d7:05:37:f0:b6:d7:dc:7c:84:a1:6a:f0:5b:0a:ed:b1:be: b9:f3:1f:92:07:6d:f5:fd:97:f8:b9:ca:b8:28:82:cd:53:31: ea:e7:59:3c:c6:39:4d:0c:34:3c:af:1f:e4:d6:3c:38:7d:a2: 83:8c:1d:9c:48:45:c3:a7:26:4f:0d:aa:34:73:66:5a:41:b9: 96:0b:de:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZc9mxHAo9GKtlhE4fdql5GPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3MGZiMGYxZDhiOGMxOThiMGRjODYxNThhZmJjYmM1Mjlj ZjE2YmUwHhcNMjUwNjA1MDEwMTAyWhcNMjUwNjA2MDEwMTAyWjAzMTEwLwYDVQQD Eyg3OTBjYzhkODJjNWI1ZmQ4ZmFmMDBmYzg5MmZlNWI2YTFiYWUwZTYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYRoTLS5pmueC3p8R908jXANO6d/ 4CpBVVwW9dmRBUhp7vUIZCbhIRZwXbX8tSKlKJQgpPKxd8DBqNJMZlA0Dn3Aji7k rypDNGTly3Rl0UaCRVzRCV/HfdfdkdteRWxu3krtDx/sQOQB2ctPp1SacHVADC06 SNtp26r9/TzVz8Nn3Y/Y2Zoh/XXS0vThjJt0wLZTQfZNiZZyEBY1E6s2O5sxaKm+ 7jPrWdtCwIsZ+8hKzJ1jxR7gChCo7EXON7cp/Y7NSFtmXMRJZloa3nkTpEBfJVMd syKvCr9+gmsU0rxhsrHe9G8dZTMUrYUOxiuuQ+9JNHu8uSevS/xriYZEYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHkMyNgsW1/Y+vAPyJL+W2obrg5iMB8GA1UdIwQY MBaAFFcPsPHYuMGYsNyGFYr7y8Upzxa+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnctdzhkaTR3Wml3M0lZVml2dkx4U25QRnI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8wOTQ5ZmMtYWNjZC00NzFmLWE5Y2Qt OTcyNDNlMzE2MjcyLzEvVnctdzhkaTR3Wml3M0lZVml2dkx4U25QRnI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS8wOTQ5ZmMtYWNjZC00NzFmLWE5Y2QtOTcyNDNlMzE2Mjcy LzEvVnctdzhkaTR3Wml3M0lZVml2dkx4U25QRnI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhPW8BAhZ G/ZcnuPgHLyyv6qJSb+ICzJNBLjvfbp/X21wW9zUEfG5n5xFcX7b2+3SBud46Kw1 lMqH74Ccp9KPaulr8IkmtzriAU95CoBepAtA9FmADZ9n8ZWqVkw9CWbyPtkJez8c KH/03QZXinwK2yjaMAeU6207+P/DB5e4orpMPxeccQFbpQ/60imPGlHdG3wNulmk KNaFadXwZaMpcmR8aAk6OZJttNLcT0uV4f2uhb7NFdcFN/C219x8hKFq8FsK7bG+ ufMfkgdt9f2X+LnKuCiCzVMx6udZPMY5TQw0PK8f5NY8OH2ig4wdnEhFw6cmTw2q NHNmWkG5lgve1A== -----END CERTIFICATE-----Generated at Thu Jun 5 05:11:42 2025 by rpki-client