$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.mft File: 1DdYFDRN8L9tAXczrNxIjwAmMbI.mft (raw, json) Hash identifier: j+Z0W1jo7ZFLEwfD8QsmtlKFZ8Gbo0IukIha//4RuOU= Subject key identifier: 54:BD:25:6E:71:62:25:91:1A:41:88:42:84:14:BD:5D:CF:34:2D:ED Authority key identifier: D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2 Certificate issuer: /CN=d4375814344df0bf6d017733acdc488f002631b2 Certificate serial: 0197481E337AF9B1089DC2DCC5ECDAA91305 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.mft Manifest number: 1597 Signing time: Sat 07 Jun 2025 02:00:28 +0000 Manifest this update: Sat 07 Jun 2025 02:00:28 +0000 Manifest next update: Sun 08 Jun 2025 02:00:28 +0000 Files and hashes: 1: 1DdYFDRN8L9tAXczrNxIjwAmMbI.crl (hash: PtErqwQ6fByc7/X2uHYrylE8ToqFrkEc/QuLOwQ47VI=) 2: Dx5FhBrZZELGzOEoOYjOQgEtqO0.roa (hash: KCgCEgctUS7Rpr5Y2lyKXbnXeeBrDbnuOsvXdWPfJZo=) 3: KQPVZjd8uXoJ_0dV4AjDeWiqQQI.roa (hash: 9hWXYGll9zn/YFmZU7mBxZ+s82nTPV++un3qIDJzhn0=) 4: LO-lQuCqbX-vzrEDWaS2yzD8HPo.roa (hash: 2Ab5VCBVIHwbJUy5TszPUSkoTaAoMm4DE4cVzWjji7Y=) 5: RNIC7mCPENX0iBKXNTIzci3mkX4.roa (hash: A50pnUKiWPzKeEOP7HAPInfDXRQ8D20n1h9JK0jOgX4=) 6: atn5vU-LUDLVuG9_jCJwAEGbEYc.roa (hash: Se1mBbI1MkbJDFobm6H8aQSyPPadkVuTf7O6JGFke8o=) 7: brY4nnZyBTnIJY3z6C6ymKubOY0.roa (hash: pc5OYc6oXnHxBvDdnE06MSd2CPJ6fIkq22aelBFfNl8=) 8: e6SEtk0abHJpIIPSZrkKDZg95R0.roa (hash: kM/7bJruXzijo8AO7ozJ/bVJBpuUfOvwamojNF2t4fk=) 9: seE_QBv0ygPjzgaL3rSesYLY_0A.roa (hash: a0LlQt6AmApHnlV4lK2J/7kzRpmbLO4Rryqmz0kEEGc=) 10: smSXSjOqkSm8yhu8ksysc8GRhzQ.roa (hash: Jq/+rwvgSdEvWUi01IBzdtKDZwEjK2lpfqbnsHzjr3s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.crl rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.mft rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Jun 2025 02:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:48:1e:33:7a:f9:b1:08:9d:c2:dc:c5:ec:da:a9:13:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4375814344df0bf6d017733acdc488f002631b2 Validity Not Before: Jun 7 02:00:28 2025 GMT Not After : Jun 8 02:00:28 2025 GMT Subject: CN=54bd256e716225911a4188428414bd5dcf342ded Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:90:3b:4e:88:2f:10:4b:d8:26:62:67:ef:81: 14:7b:e4:4d:07:7c:ad:82:8c:f0:68:e3:18:b7:00: d0:e5:50:40:4b:9e:92:67:17:4b:6a:73:3e:2e:f5: 68:79:ab:40:6a:02:38:30:79:7c:5a:c5:d1:6b:9c: ad:97:28:3f:36:ef:3a:6d:d7:41:72:21:f3:6f:e1: 68:74:95:18:9a:44:e0:a8:d7:5a:b5:40:0c:e0:44: 90:70:4f:cd:af:6e:23:18:cc:cc:9d:07:8a:33:7f: 93:cf:9a:e5:ff:e2:21:7f:a1:b7:f3:6f:49:93:6a: fc:32:cd:c3:67:2e:5a:9e:ae:a5:ed:57:e6:77:f7: ec:28:98:3a:cc:b1:0a:6e:84:97:8f:24:1b:c7:4b: 4f:37:d9:2a:fe:ca:2f:e2:b5:27:fd:7b:aa:c6:79: fa:88:f3:26:45:fb:c3:6b:8d:29:0a:e2:28:f6:39: 3e:ea:ae:0a:b4:44:49:57:40:08:38:1b:aa:f8:5f: f7:d2:0e:87:39:1d:7a:3b:ff:cf:e6:48:1e:f4:cb: 05:ea:5e:42:85:82:45:d2:ed:ec:f4:5f:60:ed:e9: 22:c6:73:86:18:84:26:d5:ac:d4:0e:0b:7e:92:71: 04:85:68:21:a1:72:f8:1d:44:32:36:d0:0c:56:e4: 7b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:BD:25:6E:71:62:25:91:1A:41:88:42:84:14:BD:5D:CF:34:2D:ED X509v3 Authority Key Identifier: keyid:D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:03:c8:46:f4:b6:50:53:a3:01:d1:b2:cb:18:94:fc:48:ec: 17:5e:7f:90:f5:95:9f:3e:91:fe:d8:c2:96:ff:5c:ce:55:65: 2a:40:5c:2c:92:73:9b:28:d7:ac:2f:21:b4:45:3d:bd:c1:43: d4:11:3e:24:96:df:1e:ea:aa:d2:b6:eb:21:6b:e3:72:68:1d: 84:80:6b:54:08:f8:80:8c:66:f7:9f:6e:d8:77:c1:9d:3c:0c: 59:b1:83:35:62:48:fd:10:8c:40:57:3c:bd:23:04:35:0d:04: 50:fd:bd:4e:ed:d9:d4:15:ed:30:4a:26:92:50:25:9c:f4:ad: 9f:6c:99:5f:6b:0c:16:fb:28:fb:5d:97:7e:19:3c:0a:ac:f7: 3e:bb:32:31:09:81:72:d6:aa:be:bf:66:23:79:e6:3b:5e:fd: 89:0b:0b:37:9a:71:a2:2f:79:8b:5c:4b:5b:67:f5:9d:5a:5f: 73:41:68:96:bd:cb:b7:5d:19:4b:cf:34:8c:f1:0f:cd:cf:b5: f7:4e:87:29:d2:89:c6:07:fd:a2:9c:8f:39:02:8b:6d:65:79: d4:c5:b7:58:aa:50:0b:eb:12:16:33:53:91:e7:4b:6e:c5:c7: 63:0e:bb:ae:d6:e9:1a:52:71:2d:b4:15:06:4f:4e:91:51:9f: 7d:5f:a1:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdIHjN6+bEIncLcxezaqRMFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0Mzc1ODE0MzQ0ZGYwYmY2ZDAxNzczM2FjZGM0ODhmMDAy NjMxYjIwHhcNMjUwNjA3MDIwMDI4WhcNMjUwNjA4MDIwMDI4WjAzMTEwLwYDVQQD Eyg1NGJkMjU2ZTcxNjIyNTkxMWE0MTg4NDI4NDE0YmQ1ZGNmMzQyZGVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopA7TogvEEvYJmJn74EUe+RNB3yt gozwaOMYtwDQ5VBAS56SZxdLanM+LvVoeatAagI4MHl8WsXRa5ytlyg/Nu86bddB ciHzb+FodJUYmkTgqNdatUAM4ESQcE/Nr24jGMzMnQeKM3+Tz5rl/+Ihf6G3829J k2r8Ms3DZy5anq6l7Vfmd/fsKJg6zLEKboSXjyQbx0tPN9kq/sov4rUn/Xuqxnn6 iPMmRfvDa40pCuIo9jk+6q4KtERJV0AIOBuq+F/30g6HOR16O//P5kge9MsF6l5C hYJF0u3s9F9g7ekixnOGGIQm1azUDgt+knEEhWghoXL4HUQyNtAMVuR7xQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFS9JW5xYiWRGkGIQoQUvV3PNC3tMB8GA1UdIwQY MBaAFNQ3WBQ0TfC/bQF3M6zcSI8AJjGyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMURkWUZEUk44TDl0QVhjenJOeElqd0FtTWJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9iMjRiMmQtMzUyMy00MjJlLTliY2Yt MzY3MWQ2N2ViOWY4LzEvMURkWUZEUk44TDl0QVhjenJOeElqd0FtTWJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9iMjRiMmQtMzUyMy00MjJlLTliY2YtMzY3MWQ2N2ViOWY4 LzEvMURkWUZEUk44TDl0QVhjenJOeElqd0FtTWJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaAPIRvS2 UFOjAdGyyxiU/EjsF15/kPWVnz6R/tjClv9czlVlKkBcLJJzmyjXrC8htEU9vcFD 1BE+JJbfHuqq0rbrIWvjcmgdhIBrVAj4gIxm959u2HfBnTwMWbGDNWJI/RCMQFc8 vSMENQ0EUP29Tu3Z1BXtMEomklAlnPStn2yZX2sMFvso+12Xfhk8Cqz3PrsyMQmB ctaqvr9mI3nmO179iQsLN5pxoi95i1xLW2f1nVpfc0Folr3Lt10ZS880jPEPzc+1 906HKdKJxgf9opyPOQKLbWV51MW3WKpQC+sSFjNTkedLbsXHYw67rtbpGlJxLbQV Bk9OkVGffV+hQw== -----END CERTIFICATE-----Generated at Sat Jun 7 12:32:50 2025 by rpki-client