$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft File: iabNn0vrewwE0x_-XGdKh6dznSE.mft (raw, json) Hash identifier: DopLXIbmmlCJjO80iAa+ooUnmu8KJ9W5Hw4+diYiyv8= Subject key identifier: 8B:64:77:AF:A9:E4:44:6D:E9:BF:E0:D5:64:4C:2D:B3:30:E9:9D:CF Authority key identifier: 89:A6:CD:9F:4B:EB:7B:0C:04:D3:1F:FE:5C:67:4A:87:A7:73:9D:21 Certificate issuer: /CN=89a6cd9f4beb7b0c04d31ffe5c674a87a7739d21 Certificate serial: 019757C84D8574C721B58CCB8AE36D306DC3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft Manifest number: 1588 Signing time: Tue 10 Jun 2025 03:00:34 +0000 Manifest this update: Tue 10 Jun 2025 03:00:34 +0000 Manifest next update: Wed 11 Jun 2025 03:00:34 +0000 Files and hashes: 1: 1AVD6_mgeoD7QDUZJl7EDizwiPA.roa (hash: cX/v9qqSG1teaYFoFOKsa3bn2RyT9qsyhWH8nkdQ7JA=) 2: 8nPu7g_10GykuOn6hB7ddpZ32pc.roa (hash: PE7yr9seUogU++GGlz15g0vomylBpNKOs5X1aqyCFXY=) 3: FuyO4nKRxR39tBuC6eKFQfxQwrc.roa (hash: GUrm17XZGeWFCxLew8/dow89FusnPuSqgk9j0BnqmKQ=) 4: IRm19nOK5U99-KFgT6Iyqb6FLRs.roa (hash: il+0ahEt0jHE3mPTA9QCPGv0irQio4DzrHv3lezN4EI=) 5: OCZT2CotgRCIuoB7CyLdArI0Xq4.roa (hash: 2KavfbQ9/xCmCPRw2wyEJR9Q6ABQMSBcOd2DtqJChbQ=) 6: QCfiaxU0-L0V2BF9e1C_GwYnzP4.roa (hash: VRlfNE6x9/KNibY36WnSc/VobsG0jDrCOQJvdKNN4i4=) 7: TrekbKofwJJgypIh3djYyzsCUwU.roa (hash: TCCyZiFHD9x34gvfVDyLYWKAPcQuU4dBBXrQhqnIl2k=) 8: hR_O6orQ7VIoQZRz0Ft_rQtrjmE.roa (hash: ufdueV5sW54kE98qc2NMXNaVclJV1tmEIBRjswSFBHQ=) 9: iabNn0vrewwE0x_-XGdKh6dznSE.crl (hash: WJl6QCqJF3++0FYSQDW0PNhVZyfLQTPVO6Zwi+h4LR4=) 10: mmf39HAPu66pAhfk5t6hl32At34.roa (hash: v8H+MR6QM0GWin6TVlCN7PLO5Ye9iX/HYlHyOCGTDCY=) 11: poQ9sY-40mE5OkfYNESkcevxBo8.roa (hash: t3e6WnaTkGCDqI4QgZzs43WxvQ36SKjt1xL670t+gp8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.crl rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Jun 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:57:c8:4d:85:74:c7:21:b5:8c:cb:8a:e3:6d:30:6d:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89a6cd9f4beb7b0c04d31ffe5c674a87a7739d21 Validity Not Before: Jun 10 03:00:34 2025 GMT Not After : Jun 11 03:00:34 2025 GMT Subject: CN=8b6477afa9e4446de9bfe0d5644c2db330e99dcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:7d:ef:93:f7:c3:20:22:93:18:c5:33:2f:0e: ff:34:97:2a:c7:3e:42:e0:46:02:62:f9:f9:5e:e0: 40:13:a2:7f:96:c5:9d:dd:a6:5e:df:3f:19:d5:49: d3:cd:50:62:ba:dd:00:98:4b:bb:f6:f9:20:61:61: cf:75:44:96:1d:96:5b:bf:cf:c3:67:3a:2b:eb:4e: 4e:fb:98:94:e2:f8:48:11:4a:b2:94:97:e6:2a:a2: 65:66:5c:c7:99:be:ab:b5:a7:6d:28:aa:6c:c0:d1: 3e:15:d3:39:ef:e0:82:e2:cd:5e:16:d6:50:c7:3b: aa:36:00:b5:4b:70:44:86:74:ad:d5:09:3d:67:4f: 2f:04:fe:64:d4:7c:0a:ca:ff:4d:e4:2f:aa:9d:90: 4e:9f:ab:74:80:00:ab:8f:e1:03:18:38:e1:b6:a5: 1a:a1:b1:9d:1d:99:ae:57:bc:22:c8:e9:a4:42:b9: fc:f5:7d:2d:0d:fa:e3:ff:62:c7:2e:ec:0b:6a:4a: f7:a8:be:5a:47:fd:a4:63:6e:89:9e:cd:32:74:af: 8b:9a:5f:20:7f:af:db:24:26:6b:6e:73:48:24:7c: da:f6:98:16:7c:bf:f4:37:59:00:6e:62:c7:c8:21: c4:0c:4b:77:df:6c:58:8b:9a:8a:11:b9:94:35:ad: 5a:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:64:77:AF:A9:E4:44:6D:E9:BF:E0:D5:64:4C:2D:B3:30:E9:9D:CF X509v3 Authority Key Identifier: keyid:89:A6:CD:9F:4B:EB:7B:0C:04:D3:1F:FE:5C:67:4A:87:A7:73:9D:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:6e:be:e1:5f:fe:39:46:d7:49:40:5f:46:c6:12:1c:6a:15: 97:30:69:49:7d:ac:37:eb:99:99:02:ed:d8:b2:d7:bd:68:b0: b3:e0:ec:4e:c2:f4:02:45:e5:ce:f4:7e:5c:ad:af:7f:c2:a0: 13:6b:56:a4:d0:45:ac:50:76:fc:6b:9a:34:ef:c3:55:3c:3e: 2f:4d:17:01:ed:05:46:1e:71:27:e9:7f:63:e8:a8:57:cc:20: d5:fe:0f:60:8f:ed:83:66:a4:ad:a9:1e:5d:58:04:53:df:b2: 95:ab:ba:d5:d9:46:c3:3a:d3:bf:b3:d2:47:9f:2d:1b:54:1f: 87:96:53:9a:d8:b1:69:53:dd:6c:eb:0e:6f:57:f2:77:33:57: 7a:74:04:95:ba:7d:bc:b9:63:9c:b5:19:c7:05:23:b5:31:ac: 12:14:10:0e:2b:4b:e4:11:15:f6:1b:d1:4c:80:18:a2:52:50: 4a:f4:22:54:22:42:79:9f:2a:52:a3:ea:df:39:5d:28:5c:16: b2:1d:de:ce:1c:86:da:b1:77:f6:64:5b:0f:ff:75:ab:ea:1c: 3e:58:98:71:aa:e2:09:e9:ac:2d:dc:68:41:f1:a6:be:43:b2: a4:74:85:19:04:85:41:c5:a0:1f:bf:f7:e9:b5:9a:7d:e1:f9: e6:93:00:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdXyE2FdMchtYzLiuNtMG3DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5YTZjZDlmNGJlYjdiMGMwNGQzMWZmZTVjNjc0YTg3YTc3 MzlkMjEwHhcNMjUwNjEwMDMwMDM0WhcNMjUwNjExMDMwMDM0WjAzMTEwLwYDVQQD Eyg4YjY0NzdhZmE5ZTQ0NDZkZTliZmUwZDU2NDRjMmRiMzMwZTk5ZGNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApn3vk/fDICKTGMUzLw7/NJcqxz5C 4EYCYvn5XuBAE6J/lsWd3aZe3z8Z1UnTzVBiut0AmEu79vkgYWHPdUSWHZZbv8/D Zzor605O+5iU4vhIEUqylJfmKqJlZlzHmb6rtadtKKpswNE+FdM57+CC4s1eFtZQ xzuqNgC1S3BEhnSt1Qk9Z08vBP5k1HwKyv9N5C+qnZBOn6t0gACrj+EDGDjhtqUa obGdHZmuV7wiyOmkQrn89X0tDfrj/2LHLuwLakr3qL5aR/2kY26Jns0ydK+Lml8g f6/bJCZrbnNIJHza9pgWfL/0N1kAbmLHyCHEDEt332xYi5qKEbmUNa1aFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFItkd6+p5ERt6b/g1WRMLbMw6Z3PMB8GA1UdIwQY MBaAFImmzZ9L63sMBNMf/lxnSoenc50hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWFiTm4wdnJld3dFMHhfLVhHZEtoNmR6blNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni85OWE0Y2MtNDcyMC00YTY0LWFhMDYt MWY5MjQ0OTVmY2RkLzEvaWFiTm4wdnJld3dFMHhfLVhHZEtoNmR6blNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni85OWE0Y2MtNDcyMC00YTY0LWFhMDYtMWY5MjQ0OTVmY2Rk LzEvaWFiTm4wdnJld3dFMHhfLVhHZEtoNmR6blNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbW6+4V/+ OUbXSUBfRsYSHGoVlzBpSX2sN+uZmQLt2LLXvWiws+DsTsL0AkXlzvR+XK2vf8Kg E2tWpNBFrFB2/GuaNO/DVTw+L00XAe0FRh5xJ+l/Y+ioV8wg1f4PYI/tg2akrake XVgEU9+ylau61dlGwzrTv7PSR58tG1Qfh5ZTmtixaVPdbOsOb1fydzNXenQElbp9 vLljnLUZxwUjtTGsEhQQDitL5BEV9hvRTIAYolJQSvQiVCJCeZ8qUqPq3zldKFwW sh3ezhyG2rF39mRbD/91q+ocPliYcariCemsLdxoQfGmvkOypHSFGQSFQcWgH7/3 6bWafeH55pMAcQ== -----END CERTIFICATE-----Generated at Tue Jun 10 07:22:57 2025 by rpki-client