$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.mft File: CjfYB9T3zdPgr-SryO5aiAxgkPE.mft (raw, json) Hash identifier: 9pUFtswneMyOZuE8WisypiX4OPDOgLlzO2KdWrVaYYg= Subject key identifier: F4:95:BB:06:8F:0E:C4:5F:66:6E:BB:02:BE:A0:97:03:0F:D5:5B:BB Authority key identifier: 0A:37:D8:07:D4:F7:CD:D3:E0:AF:E4:AB:C8:EE:5A:88:0C:60:90:F1 Certificate issuer: /CN=0a37d807d4f7cdd3e0afe4abc8ee5a880c6090f1 Certificate serial: 01974F6A5CA961F74CD6339EA45820DF86D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.mft Manifest number: 1589 Signing time: Sun 08 Jun 2025 12:00:59 +0000 Manifest this update: Sun 08 Jun 2025 12:00:59 +0000 Manifest next update: Mon 09 Jun 2025 12:00:59 +0000 Files and hashes: 1: CjfYB9T3zdPgr-SryO5aiAxgkPE.crl (hash: gG7MrWpODT8//0BY+LdHI8LUPBxwqi/6edPgbNp9tuk=) 2: FNMboaNFS4dq_J98ARIGXoPZgMk.roa (hash: g+DjQQe5PR9O6yvqsBwCFmOG/XGs/TtjlyZg5KiU2nw=) 3: Kd7tkS6D6OIC_ttNItP7c_fNa-k.roa (hash: N1BVy/KuUFpEDCoGKJGNcVR+kViJHNXU5UmQd9NSKDM=) 4: ZSplNm_9GeMJ-OaOGXwYKQxixBM.roa (hash: iyy46lwnRVbko1Ii+0Qc3g2qVyE+yV7nOcFx1D7pckk=) 5: bljFw_6M0rhdvdyihFkoTkuQtkQ.roa (hash: c38udhGlPf0mBbFYPwiBR6YW6q0bRhJQiglvxGlNEOE=) 6: cCAi-yLWOl7KTLvjcgv4I9u3nD8.roa (hash: pzgBJKQlY+wSbZatuzP8YX/UnGaDdO5COchDt+eC4hU=) 7: grw1j9-8samWWiChPkyufP-sl-E.roa (hash: NBZBfXg3sE94wmS64tQlSrQjbH2DFUT/GlOy2NVgQiI=) 8: gtPZlYI7w3coAzc-MlHuuU1oFOM.roa (hash: kHvdU6CJOqssI35/ez8kLYqLbyhabXcTkrkqWWbKmw8=) 9: mId092quyOB83VO8NTOLuLTrwCU.roa (hash: 4ZYjaMOtkO7JVCo9djGezfRPkTYQYlB89pHbn+Vlkh4=) 10: u0jBRb9Z9H3ccoDY49s5ChaWPsY.roa (hash: LuRfHIMnClX5LQuIAIIT+Sg8y8Bhb70AVLwndT4yCAQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.crl rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.mft rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 09 Jun 2025 11:44:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:4f:6a:5c:a9:61:f7:4c:d6:33:9e:a4:58:20:df:86:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a37d807d4f7cdd3e0afe4abc8ee5a880c6090f1 Validity Not Before: Jun 8 12:00:59 2025 GMT Not After : Jun 9 12:00:59 2025 GMT Subject: CN=f495bb068f0ec45f666ebb02bea097030fd55bbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:e2:3e:27:5b:a9:e0:6c:41:d1:10:47:c5:da: 35:f0:80:f5:fc:dc:05:6c:ff:21:9a:5f:d2:f8:37: 6b:c7:a3:f4:fa:3a:5d:71:63:53:a6:67:d8:88:2b: fe:23:c4:25:31:28:b5:54:eb:0f:b3:d1:f5:0e:fc: 57:fd:06:35:7e:c1:11:aa:d0:c0:22:ad:8e:85:70: 7e:26:bc:ca:84:26:20:27:f8:42:ae:26:93:bb:8e: 67:ec:af:aa:eb:ac:9b:17:50:33:15:70:db:98:f8: 1c:9e:c1:c2:e9:5d:e5:13:06:06:d8:7c:64:99:c8: 74:aa:c9:dc:93:35:5f:de:25:00:45:cb:a5:16:55: 2b:77:e7:53:3e:9a:99:e8:77:ac:99:2a:a0:6e:55: c6:e0:b6:1c:f5:08:7f:5c:2a:34:51:99:aa:4d:66: 54:8e:33:03:0f:9c:0d:bb:8f:b1:63:c6:51:32:50: f6:e4:38:15:3a:26:be:c3:62:2a:f8:3e:b2:ef:8f: 1d:50:c3:d6:3b:14:5d:62:26:06:59:55:9c:ce:9f: ba:0a:d8:a9:d3:13:18:dd:4a:23:4d:e6:5e:9f:fc: 37:06:10:00:ae:03:82:56:13:3f:d2:c9:1a:fe:17: 80:7a:33:59:26:2a:5f:88:4c:72:17:7a:27:b5:09: b6:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:95:BB:06:8F:0E:C4:5F:66:6E:BB:02:BE:A0:97:03:0F:D5:5B:BB X509v3 Authority Key Identifier: keyid:0A:37:D8:07:D4:F7:CD:D3:E0:AF:E4:AB:C8:EE:5A:88:0C:60:90:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:36:c2:0c:ab:a0:64:0c:e6:3e:5c:43:b9:e3:46:9f:ba:19: 08:bc:9a:4d:f9:25:be:74:8c:1e:04:c7:98:4d:68:9f:a6:5d: c4:d6:ae:1f:35:b4:05:79:d3:5f:1b:ea:0b:56:3f:92:51:5e: a7:cb:35:7f:d0:a5:0a:1c:ea:ce:4a:7e:09:ec:a0:21:97:1c: e0:87:3c:b6:b3:92:0e:7c:b8:d6:72:d5:bb:f8:08:a7:21:30: ed:e2:24:54:ba:92:46:d8:05:fe:cc:95:06:41:ee:09:ff:36: b5:f7:1a:00:7f:0f:cb:6f:2a:28:0d:5d:38:a5:c2:dd:95:c2: 81:dc:03:07:8c:77:3b:06:c7:45:87:b3:01:ac:87:6c:7e:ae: 1c:4a:4d:d9:0b:7a:83:d3:09:a8:52:72:e1:87:48:ad:b2:4d: 7f:c8:32:b5:db:b5:2d:af:87:88:60:31:62:b1:86:9a:ca:7f: eb:7e:29:7a:4e:af:28:c0:83:c3:46:e7:ce:ee:1f:3f:e2:0c: 10:00:39:ab:1d:4e:4d:3e:c2:9c:1e:9d:b5:b9:e7:aa:f7:43: 02:7a:2c:f2:24:e6:97:5b:88:30:80:c4:3e:94:87:e6:67:ac: 98:23:5a:0f:d8:e9:45:dd:8b:fb:9c:88:da:d1:0a:7b:61:7c: 8b:d0:76:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdPalypYfdM1jOepFgg34bZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhMzdkODA3ZDRmN2NkZDNlMGFmZTRhYmM4ZWU1YTg4MGM2 MDkwZjEwHhcNMjUwNjA4MTIwMDU5WhcNMjUwNjA5MTIwMDU5WjAzMTEwLwYDVQQD EyhmNDk1YmIwNjhmMGVjNDVmNjY2ZWJiMDJiZWEwOTcwMzBmZDU1YmJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiOI+J1up4GxB0RBHxdo18ID1/NwF bP8hml/S+Ddrx6P0+jpdcWNTpmfYiCv+I8QlMSi1VOsPs9H1DvxX/QY1fsERqtDA Iq2OhXB+JrzKhCYgJ/hCriaTu45n7K+q66ybF1AzFXDbmPgcnsHC6V3lEwYG2Hxk mch0qsnckzVf3iUARculFlUrd+dTPpqZ6HesmSqgblXG4LYc9Qh/XCo0UZmqTWZU jjMDD5wNu4+xY8ZRMlD25DgVOia+w2Iq+D6y748dUMPWOxRdYiYGWVWczp+6Ctip 0xMY3UojTeZen/w3BhAArgOCVhM/0ska/heAejNZJipfiExyF3ontQm2RwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPSVuwaPDsRfZm67Ar6glwMP1Vu7MB8GA1UdIwQY MBaAFAo32AfU983T4K/kq8juWogMYJDxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2pmWUI5VDN6ZFBnci1TcnlPNWFpQXhna1BFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9iYzI2OGQtNjFmMC00NzFmLWFhYjkt ODAwZWRhMmNmYjM2LzEvQ2pmWUI5VDN6ZFBnci1TcnlPNWFpQXhna1BFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC9iYzI2OGQtNjFmMC00NzFmLWFhYjktODAwZWRhMmNmYjM2 LzEvQ2pmWUI5VDN6ZFBnci1TcnlPNWFpQXhna1BFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAojbCDKug ZAzmPlxDueNGn7oZCLyaTfklvnSMHgTHmE1on6ZdxNauHzW0BXnTXxvqC1Y/klFe p8s1f9ClChzqzkp+CeygIZcc4Ic8trOSDny41nLVu/gIpyEw7eIkVLqSRtgF/syV BkHuCf82tfcaAH8Py28qKA1dOKXC3ZXCgdwDB4x3OwbHRYezAayHbH6uHEpN2Qt6 g9MJqFJy4YdIrbJNf8gytdu1La+HiGAxYrGGmsp/634pek6vKMCDw0bnzu4fP+IM EAA5qx1OTT7CnB6dtbnnqvdDAnos8iTml1uIMIDEPpSH5mesmCNaD9jpRd2L+5yI 2tEKe2F8i9B2yA== -----END CERTIFICATE-----Generated at Sun Jun 8 15:33:31 2025 by rpki-client