$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.mft File: CR7HzPD6dh7Zm8WnqewNDusL8FU.mft (raw, json) Hash identifier: sMwYrLu8LrhysYGf6RFoeNbThrW4YpFSoKdSlULlnd4= Subject key identifier: 54:9A:70:E3:43:E6:B6:A8:3E:39:A2:29:D4:05:F6:4E:97:6A:2B:A3 Authority key identifier: 09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55 Certificate issuer: /CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055 Certificate serial: 01974A7B1C1DA03F564229FD428EE1439641 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.mft Manifest number: 0F14 Signing time: Sat 07 Jun 2025 13:01:11 +0000 Manifest this update: Sat 07 Jun 2025 13:01:11 +0000 Manifest next update: Sun 08 Jun 2025 13:01:11 +0000 Files and hashes: 1: 6SIE7lIPAfETfqeGKwz9qsqTDpo.roa (hash: baJLkGQNPC/ayO1BdamNx0wTnQsH1JjYTd+EvvvO47U=) 2: B5NGdVBBF38v7I807spD9rlndCk.roa (hash: Ij2UQybHDi9rCMOEdxuL3uK0WnnQkl2pfO/6vc3aPyM=) 3: BvGloeMd1pr-0RarsG3frbQCits.roa (hash: GcGKUXns2ciEuVorqL/ux5XGAMK5utLWLfmy9SJ0sbM=) 4: CR7HzPD6dh7Zm8WnqewNDusL8FU.crl (hash: btHOj4EM3MxQ2LXruS24qI8ZL7Aanjx4wudiU6EEM4A=) 5: JNXkfS8Gevyb4Dt3MskQFKOQyBE.roa (hash: xyI4i/7FZY7J0bkn5v2Hrfk5UEeVMBFfBsSKz6DAPY0=) 6: Jfbp60TqKTaaXrwQL7LgGpAWEpg.roa (hash: 77aXq5T/xLpRDc/RPjSdhF/Q92mfSJbZ1p52uiAiKLY=) 7: L2H6UwduWaJxFicdgN2P7eBtiHA.roa (hash: P4+4JbqGYS4bGYqfrHMMZckY8WsOqty8P+Ix09bzckQ=) 8: MiY_UqV9XxTUP--p5MMXKEdvpoA.roa (hash: cejTZWCl258xJNR53TSPL/OafZfqazlim61BbS6tvNE=) 9: O9iLiDukjzuEHVR92JODiliJ4ts.roa (hash: Hfo7TZQBS0qIDHTaKxdlPp0dObysmORzpRJwx7Y2W20=) 10: T1gh1hk6ej12g4Ihw5JL9jevaLA.roa (hash: S9ngvgv1d+3Twe9rVRGrD4AR8LO9wBk9cDUOi8GIi4o=) 11: THvQYIa2SprhVvWK5-tWknfJY9w.roa (hash: 5zmsJFBP7NnBZaNurwDsUUuS1oMZV7G7pUdzHmeMsEI=) 12: _2x-4OGJJSoKcxtXyC5heNpC1Lk.roa (hash: vkhFS/TDoPtaxHhXWGchXfwiYEYa7shcVneeg8uj/S8=) 13: cBFi45ZytFKgnNo2imsLe1_V7q8.roa (hash: r9FtBlSO2l8QxP7DU1HrwjHWsN6WkSKa/BKGiXhnmRk=) 14: chc7NZYTY8TAAm4omvxtyabyq7Y.roa (hash: D4ml84hX/IF5k6NvrzKJg2mEZ4TzfgqpdYCT4BEMOzQ=) 15: durT3uh2Ky_24MEFwd5Si3_aqOE.roa (hash: i0j2EhlYHuhS0ygdpSwrmJ+zKaf6MX39QT07/Pv8Mlw=) 16: hhzSm6GjX7s3vRc-UjvW8KahBO0.roa (hash: Ee9hXcXaMVLm37/p4g8p7BURdDDaz2FT+WhXrMvmGFM=) 17: rPciKNxouTUmkCLDkFKKyn388Cc.roa (hash: zI+gdKXH7CP5oPaL5HXMew7Kewt2hB10+HNYNloE0UY=) 18: vel8G0_GwQFflB8Mgko4kMTZKps.roa (hash: rEt+VHHycH8jAHwOJN7GUU5Y5p8vUpqH1HAPUwtitdw=) 19: yD-f7eB1dLOlfB3XPEqKpj98uCs.roa (hash: DRQJzu4HOqcnsIOmtzgmjk/hQ2C15/cPalIQczCWniU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.mft rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Jun 2025 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:4a:7b:1c:1d:a0:3f:56:42:29:fd:42:8e:e1:43:96:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055 Validity Not Before: Jun 7 13:01:11 2025 GMT Not After : Jun 8 13:01:11 2025 GMT Subject: CN=549a70e343e6b6a83e39a229d405f64e976a2ba3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:7d:c2:02:15:e0:d4:be:06:cf:2e:d1:40:7f: 77:cd:fe:a0:6f:ee:9b:f5:7a:59:18:f6:24:df:b4: c4:d6:55:7d:a5:f2:8e:f6:20:ba:9b:f1:3e:45:c2: 4c:eb:ea:69:d7:50:4f:74:fe:3c:01:7d:a7:fe:ab: 5d:5d:34:7a:32:1b:98:ec:ed:fd:ce:91:85:ec:9a: 4a:65:a3:52:2b:38:8d:61:06:e4:93:74:a8:60:21: e0:2f:50:0f:7e:53:6b:01:84:5b:b8:e2:2f:08:7e: ef:61:06:be:c8:5c:2d:9b:34:c6:b2:f6:9f:43:af: 7b:48:01:c2:4d:d0:ab:fe:f2:af:23:a6:23:81:61: a9:12:a6:6d:05:d8:4b:5b:52:d6:c2:be:0a:d1:bb: e5:99:d9:e6:c3:c4:ce:04:28:39:a1:fd:b9:f7:74: 92:52:c3:0b:e8:34:a0:76:e0:6c:a8:c2:12:65:7b: 8a:c8:45:91:ac:8e:0b:08:74:14:0c:6e:87:1c:ab: 14:d4:b2:34:7e:25:db:8c:bf:f4:7e:bb:f4:61:2f: d3:a8:c4:91:1f:e4:75:56:bb:a8:c1:aa:9c:d3:4f: 85:25:56:e9:b3:1c:0b:d4:71:a8:83:70:71:6f:dc: 24:9a:37:91:30:90:cd:ab:4e:cc:58:a9:c5:33:cd: aa:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:9A:70:E3:43:E6:B6:A8:3E:39:A2:29:D4:05:F6:4E:97:6A:2B:A3 X509v3 Authority Key Identifier: keyid:09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:67:2e:6b:27:c0:36:cf:4f:7b:b4:17:2b:b1:dc:f7:cf:34: 1e:3b:09:15:86:51:cf:ae:9c:d4:ec:a7:67:53:0f:9a:13:b9: 4f:89:bf:2b:61:b5:af:9a:02:7f:39:29:b5:07:85:55:d1:00: de:cd:04:9d:f5:5d:32:c5:83:1d:2d:31:90:c8:91:88:c6:8d: 7b:04:9b:a4:ba:f8:9c:a8:fd:79:84:fc:a5:f1:57:9d:f6:59: 1f:b8:67:84:da:51:ac:76:ba:a7:a4:8c:10:30:6c:1e:d9:cc: 34:ad:8b:77:cf:d6:ec:3b:25:b7:d6:6c:d4:d8:85:07:72:82: e6:28:7d:4c:a4:e1:95:8f:ac:14:9d:33:32:0f:f1:5a:a7:74: 0b:44:6e:b4:49:8d:c5:a2:8f:b3:9e:7d:9a:32:a8:26:08:5f: b3:d0:22:48:98:53:dd:25:79:a7:f7:36:da:f0:0a:1e:20:f8: 36:ec:5f:14:2d:be:46:35:99:92:be:24:d3:f0:24:88:c4:8b: 8c:ae:c8:7f:a2:ab:9b:9c:c5:9c:fd:eb:06:3a:9f:4e:ce:5c: 08:39:ff:97:11:d8:31:3c:46:27:48:c1:29:c2:96:0d:36:6b: bf:82:95:92:48:2a:18:90:ac:81:a2:5b:52:4f:4e:4f:3e:06: 68:0c:86:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdKexwdoD9WQin9Qo7hQ5ZBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MWVjN2NjZjBmYTc2MWVkOTliYzVhN2E5ZWMwZDBlZWIw YmYwNTUwHhcNMjUwNjA3MTMwMTExWhcNMjUwNjA4MTMwMTExWjAzMTEwLwYDVQQD Eyg1NDlhNzBlMzQzZTZiNmE4M2UzOWEyMjlkNDA1ZjY0ZTk3NmEyYmEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0X3CAhXg1L4Gzy7RQH93zf6gb+6b 9XpZGPYk37TE1lV9pfKO9iC6m/E+RcJM6+pp11BPdP48AX2n/qtdXTR6MhuY7O39 zpGF7JpKZaNSKziNYQbkk3SoYCHgL1APflNrAYRbuOIvCH7vYQa+yFwtmzTGsvaf Q697SAHCTdCr/vKvI6YjgWGpEqZtBdhLW1LWwr4K0bvlmdnmw8TOBCg5of2593SS UsML6DSgduBsqMISZXuKyEWRrI4LCHQUDG6HHKsU1LI0fiXbjL/0frv0YS/TqMSR H+R1Vruowaqc00+FJVbpsxwL1HGog3Bxb9wkmjeRMJDNq07MWKnFM82qowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFSacOND5raoPjmiKdQF9k6XaiujMB8GA1UdIwQY MBaAFAkex8zw+nYe2ZvFp6nsDQ7rC/BVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1I3SHpQRDZkaDdabThXbnFld05EdXNMOEZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9lNjQ3OGEtN2I3My00NzU4LWFkZGQt NDVjZmM4NTdkZGRkLzEvQ1I3SHpQRDZkaDdabThXbnFld05EdXNMOEZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS9lNjQ3OGEtN2I3My00NzU4LWFkZGQtNDVjZmM4NTdkZGRk LzEvQ1I3SHpQRDZkaDdabThXbnFld05EdXNMOEZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACmcuayfA Ns9Pe7QXK7Hc9880HjsJFYZRz66c1OynZ1MPmhO5T4m/K2G1r5oCfzkptQeFVdEA 3s0EnfVdMsWDHS0xkMiRiMaNewSbpLr4nKj9eYT8pfFXnfZZH7hnhNpRrHa6p6SM EDBsHtnMNK2Ld8/W7Dslt9Zs1NiFB3KC5ih9TKThlY+sFJ0zMg/xWqd0C0RutEmN xaKPs559mjKoJghfs9AiSJhT3SV5p/c22vAKHiD4NuxfFC2+RjWZkr4k0/AkiMSL jK7If6Krm5zFnP3rBjqfTs5cCDn/lxHYMTxGJ0jBKcKWDTZrv4KVkkgqGJCsgaJb Uk9OTz4GaAyGVw== -----END CERTIFICATE-----Generated at Sat Jun 7 19:51:50 2025 by rpki-client