$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.mft File: dGOVwSZyrZWJIbYrncmyvNimip8.mft (raw, json) Hash identifier: jHqmokL32GjHR8UtUr3UD1OFE03t5F19bakg1ZzNqHc= Subject key identifier: 1A:CF:2F:75:46:D6:B3:F2:42:DA:3A:28:FB:19:89:04:A1:2F:31:78 Authority key identifier: 74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F Certificate issuer: /CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f Certificate serial: 019743D429430EF27F1F98E7990F65D8A16C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.mft Manifest number: 0DBD Signing time: Fri 06 Jun 2025 06:01:07 +0000 Manifest this update: Fri 06 Jun 2025 06:01:07 +0000 Manifest next update: Sat 07 Jun 2025 06:01:07 +0000 Files and hashes: 1: 49__1Mb6TJOq1lBE39sK0MqptNw.roa (hash: mUbErI4yr16L9KeXw+m7dZ8Q/W3G3H5gFLIPV4hSK+w=) 2: 5dh_b1RBPEedGPoH5jPrifwFpjk.roa (hash: FiUlLPDPpSS4NO4ecP0itIgJ8SGlTnSQQXsonHz0nWs=) 3: 9JRK7EwR6Rg_h37a1uMH5kLd-FE.roa (hash: seSeyyGJGHJLolRBA5CPiq9g6rFjmIDsp1xxdhmozxQ=) 4: D_DMWXe-SCxub8zdYhqregtOfgc.roa (hash: YdgWjYi7meP25wOXjFPlW12dueNlMrHsgbDj5lqUC/U=) 5: Gtrnpnu2EuvTaSZcq-k7Wc8SQpo.roa (hash: Ozf4xst6zqysHFFPHqPk6t9V4R5ZCQl3Sl9vytAN8Vc=) 6: LdIbymxNIXROKdCHKP82tGDACeU.roa (hash: kQyQUPIfVzFwJ1Jq+tF49xJ69eCwQR/ZkbVWbjv5vAI=) 7: SChPZPj9fTG0LMgBHiZShGaGesk.roa (hash: yiFf6ekegDw5R3MvDUcGOwB0KMvQ6EjjT4IN1JKBmzE=) 8: TBnbIzlh-BKbahkJ3E7jSuQuQaY.roa (hash: wANue+0BieEbIbGU0PO+SRCogjBRNdJwQ6IIP6xIdvM=) 9: dGOVwSZyrZWJIbYrncmyvNimip8.crl (hash: onkNl1ISXTy21USU0ODQDO0LGqzywAhFwB0K2PwJrkQ=) 10: h1ukNoxF9DJUl37AyGab6Erc1Gg.roa (hash: ZJoHXOQXc61UY5FcS2k+Dk9a8RGGZKOXsXXbXlt54JQ=) 11: py6UVbnGSCFD9UnKceZ9kgRxFEA.roa (hash: bcsPoMQcphhUQSwMWLfV++Vj4Ps638fSjd2kseADRTg=) 12: r1KzO2xl8ICSO7mqxB698PRuZNw.roa (hash: kEobsRqs12mPpmxJMO043I+VfPOn+9gNzHlkxfMSy8w=) 13: sji6IRKMxoDbfzOHSYIJXQ44kMU.roa (hash: J7ZKFCKuQD4fFS/N1oH5CYaWP7urJ+aNVO6F4VGrJVY=) 14: t5XPQX_yMIvCtklbQrF1q82oTKI.roa (hash: 7XrFoeiXGnOydV2Y9F7H+zsIgDxk1pwJqNALV9hG41A=) 15: zn28wDGOw3qBz9OqZJzgWf1QCv0.roa (hash: IFT8wg4FnvyKYbJvM5hiahqsDRtzob17zeYuwyl/UlM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.crl rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.mft rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Jun 2025 06:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:43:d4:29:43:0e:f2:7f:1f:98:e7:99:0f:65:d8:a1:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f Validity Not Before: Jun 6 06:01:07 2025 GMT Not After : Jun 7 06:01:07 2025 GMT Subject: CN=1acf2f7546d6b3f242da3a28fb198904a12f3178 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:91:d0:16:7e:26:d5:9a:b5:92:d8:e2:71:53: 23:57:12:87:04:e6:3f:15:93:d0:70:0c:8c:c8:11: e5:d6:26:a3:54:d7:93:03:1c:5b:ce:53:25:a0:d7: 7d:a0:3a:40:99:4f:08:54:8d:a2:b7:be:b7:48:7a: 63:24:df:f1:b2:a9:20:f7:f5:f3:30:be:1f:eb:52: e7:1b:7e:9b:0f:05:14:54:f5:e3:b7:dd:ad:a7:cd: fd:0b:e5:3f:f9:7d:9a:f8:f7:cf:3e:fc:ef:82:58: 27:d8:41:b5:85:37:d3:79:19:f9:93:bd:d4:ce:04: e5:8b:f3:f2:ab:18:9d:8e:02:93:1e:e3:90:1f:f9: 38:c2:64:e9:60:8c:cd:7f:fa:85:f7:5e:3c:b8:d1: 2c:36:a6:1a:3e:89:d7:db:29:a1:71:7b:74:18:e2: 28:a7:27:17:ad:b9:35:eb:48:0c:d3:c0:a8:b9:60: 1b:2a:9d:36:b5:6d:d5:77:e5:99:40:d0:b3:ce:ff: df:ea:f2:76:11:4c:ae:d6:d0:90:ae:00:e5:f5:ed: de:33:b3:17:13:c0:a5:bf:fa:11:50:35:5e:ca:0c: 29:45:d0:d4:5b:73:57:95:ff:e3:04:8c:fa:e3:00: 6c:19:7a:f7:43:f3:89:ea:3d:02:3c:99:a6:e3:01: de:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:CF:2F:75:46:D6:B3:F2:42:DA:3A:28:FB:19:89:04:A1:2F:31:78 X509v3 Authority Key Identifier: keyid:74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:62:2c:85:bb:4b:43:87:25:0a:9c:a8:ae:38:1c:7d:9a:69: 5d:72:19:80:d9:16:09:a9:e1:95:15:c6:09:53:7e:56:88:99: 65:7d:5b:fb:a1:86:c9:35:aa:cb:8d:68:72:23:00:e1:90:94: b6:6d:d7:21:ac:d1:ec:94:33:33:56:dd:3b:07:e5:70:2c:41: 87:4a:87:53:a9:e5:3f:61:07:79:1e:24:a2:47:8e:b1:5f:43: dc:19:b9:f5:eb:5c:91:56:dd:04:05:83:1b:5f:60:34:08:ae: 0e:c2:06:08:ea:d6:79:1b:54:a2:fb:15:c1:b4:d2:63:55:c2: be:0b:d6:d1:35:da:f6:59:53:5b:33:c6:81:f4:fe:92:53:0f: 7b:63:e6:17:c2:6b:81:b7:98:27:d5:d6:e3:9b:d0:e8:97:34: 28:aa:f3:b8:e5:1a:33:24:8d:4b:ff:77:7c:7d:49:2b:5a:1a: b7:47:e5:fa:74:3b:2c:19:42:e2:46:13:8d:96:67:6f:4a:59: ae:1f:c3:73:a9:d7:06:2a:9c:0e:89:2d:5d:69:3e:cd:7f:f4: ff:d9:68:59:75:54:7b:03:19:79:6a:33:6c:93:fe:3f:de:08: 2f:27:01:f5:49:d3:fb:d7:db:14:4b:f9:5c:42:0b:3b:a9:2c: 2b:c1:5c:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdD1ClDDvJ/H5jnmQ9l2KFsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0NjM5NWMxMjY3MmFkOTU4OTIxYjYyYjlkYzliMmJjZDhh NjhhOWYwHhcNMjUwNjA2MDYwMTA3WhcNMjUwNjA3MDYwMTA3WjAzMTEwLwYDVQQD EygxYWNmMmY3NTQ2ZDZiM2YyNDJkYTNhMjhmYjE5ODkwNGExMmYzMTc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupHQFn4m1Zq1ktjicVMjVxKHBOY/ FZPQcAyMyBHl1iajVNeTAxxbzlMloNd9oDpAmU8IVI2it763SHpjJN/xsqkg9/Xz ML4f61LnG36bDwUUVPXjt92tp839C+U/+X2a+PfPPvzvglgn2EG1hTfTeRn5k73U zgTli/PyqxidjgKTHuOQH/k4wmTpYIzNf/qF9148uNEsNqYaPonX2ymhcXt0GOIo pycXrbk160gM08CouWAbKp02tW3Vd+WZQNCzzv/f6vJ2EUyu1tCQrgDl9e3eM7MX E8Clv/oRUDVeygwpRdDUW3NXlf/jBIz64wBsGXr3Q/OJ6j0CPJmm4wHeAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBrPL3VG1rPyQto6KPsZiQShLzF4MB8GA1UdIwQY MBaAFHRjlcEmcq2ViSG2K53JsrzYpoqfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEdPVndTWnlyWldKSWJZcm5jbXl2TmltaXA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi85ZTIzNTEtOGRkMC00YjcwLWE1ZmMt ZmI3NzRhYmRmYWMyLzEvZEdPVndTWnlyWldKSWJZcm5jbXl2TmltaXA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi85ZTIzNTEtOGRkMC00YjcwLWE1ZmMtZmI3NzRhYmRmYWMy LzEvZEdPVndTWnlyWldKSWJZcm5jbXl2TmltaXA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApmIshbtL Q4clCpyorjgcfZppXXIZgNkWCanhlRXGCVN+VoiZZX1b+6GGyTWqy41ociMA4ZCU tm3XIazR7JQzM1bdOwflcCxBh0qHU6nlP2EHeR4kokeOsV9D3Bm59etckVbdBAWD G19gNAiuDsIGCOrWeRtUovsVwbTSY1XCvgvW0TXa9llTWzPGgfT+klMPe2PmF8Jr gbeYJ9XW45vQ6Jc0KKrzuOUaMySNS/93fH1JK1oat0fl+nQ7LBlC4kYTjZZnb0pZ rh/Dc6nXBiqcDoktXWk+zX/0/9loWXVUewMZeWozbJP+P94ILycB9UnT+9fbFEv5 XEILO6ksK8Fc+A== -----END CERTIFICATE-----Generated at Fri Jun 6 12:43:45 2025 by rpki-client