$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.mft File: gci3Ore963b_SLLKCZYW7b5xxCY.mft (raw, json) Hash identifier: /09nPSacOiFjRVHY45XIvLguJglB4XQ61GcG41cmoJE= Subject key identifier: 6B:9D:9B:30:8E:AC:2F:90:10:D1:FE:21:78:57:45:E4:4D:48:52:32 Authority key identifier: 81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26 Certificate issuer: /CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426 Certificate serial: 019747B102042420B5C0B64492DECE3E7001 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.mft Manifest number: 14DE Signing time: Sat 07 Jun 2025 00:01:11 +0000 Manifest this update: Sat 07 Jun 2025 00:01:11 +0000 Manifest next update: Sun 08 Jun 2025 00:01:11 +0000 Files and hashes: 1: 1-VPDuonC2Hi8dBlT4tvnOiHdYOg.roa (hash: WJKUvuV0JjUpEwzD0WN1y14bM/NihUUNvR+FCbd/Y2g=) 2: 5_qbUTNJTKmDx-VPoCyg5GiF_44.roa (hash: upLH1FeLhYFLc3B1AG7zDO/VAd2waobao5HIF19Yrvo=) 3: InIRujvheMSnuntsvHJjTs5su2U.roa (hash: IqMDfUGWehH9FGcRRehcGH1gUKY9FO7UHo3vHht1RFY=) 4: YYbT8lbyVWv6yQ3daL3nywYGpE0.roa (hash: H/Qcg0aplqNTHmTWbVVGR+IQ4V4ag89xamHIQ20iGuk=) 5: dQWEtMXACcbFK-O5sfKYo_f8Y4o.roa (hash: vHyoYTb8eVOfU/syk4YrhtN9pnkC2H/rIICxrgnsNBI=) 6: gci3Ore963b_SLLKCZYW7b5xxCY.crl (hash: JT1wE9kVc1B4y+TM7UwoPl7+r1U9zSFG6eJoOKzSBsg=) 7: gio6F55GO42GZsRq8FQUo7P8nrk.roa (hash: 80TfPfy6fsm8Hf2Ac1l9Gq3x9An3ECfANZIa/nM0IVY=) 8: hPi3Yz-IQfnghVcK_tG22EcMbZk.roa (hash: eBUVvaZgDfjhvtgjU9lOaAKzUUmY7IXYS3AoPIKzIbQ=) 9: ipyYMMpWH0Tjg9MMcWcxDVXBhDI.roa (hash: jwUnq34H3x2DDYiun7O3jFMVM618SNic53iAmXCX+Z4=) 10: lWJoF_swBr2Lu5mO-Q5os-z2oAU.roa (hash: GwiPt4R6jhk5qWspCacWYlKa/6jGmdnZmiVjiKnYhHQ=) 11: pocLo2IUa96EYAO9rbTb3m68VAo.roa (hash: Z7HB26uR5mWKPIqwiHiyjqm7+3tugkPZzITbgrY+cl4=) 12: sL_8jT6F9be0gHpzuWYJ5NRFk7Y.roa (hash: tTSTzWjgCJKHY0qcH5mPggHS+UBYeFmuuzH6UrgFPas=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.crl rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.mft rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Jun 2025 22:50:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:47:b1:02:04:24:20:b5:c0:b6:44:92:de:ce:3e:70:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426 Validity Not Before: Jun 7 00:01:11 2025 GMT Not After : Jun 8 00:01:11 2025 GMT Subject: CN=6b9d9b308eac2f9010d1fe21785745e44d485232 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:5b:d9:d7:bb:ff:05:09:aa:4d:5c:c0:1b:a0: fb:9e:fe:e2:1f:02:ed:37:17:b8:e0:e2:f8:c0:98: 0b:6a:4a:ba:f2:b2:eb:79:ed:d7:58:57:f1:a1:c7: 75:51:2c:97:39:d9:fc:66:59:9b:9d:70:2c:46:92: 46:48:6a:0a:13:9e:e9:43:48:15:04:10:b9:28:2e: 30:c5:24:97:32:bd:f9:67:a6:a5:e3:c6:51:c9:2d: 50:1a:e8:28:13:2f:f5:44:2c:7b:e0:9b:45:01:5d: d9:e1:17:17:cf:f8:fd:f7:58:db:a9:62:c6:d8:c6: d8:a1:22:ce:c3:73:8a:05:79:49:32:e8:c7:b8:99: 64:6d:44:75:3e:93:67:3c:bc:3d:d7:d1:85:ca:1b: b5:3a:e0:72:3f:df:98:00:4c:00:81:4f:58:23:38: 49:6e:30:07:cc:d9:9e:87:6a:45:21:a2:9a:a1:96: 87:f5:c3:51:3d:5f:ed:83:c7:6f:9a:81:08:23:8e: 48:b1:ea:11:65:84:2c:ac:7d:06:e2:88:98:7e:4e: 6e:12:44:20:c5:26:73:11:6a:b1:2e:b7:74:b6:00: 88:b1:69:0e:bb:fe:5f:3b:22:3c:db:62:11:1e:46: c6:76:af:7c:63:0f:47:c3:d5:8f:92:07:ac:65:ae: a3:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:9D:9B:30:8E:AC:2F:90:10:D1:FE:21:78:57:45:E4:4D:48:52:32 X509v3 Authority Key Identifier: keyid:81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:78:2e:fc:31:41:b5:bc:75:91:93:61:c8:fa:e4:89:5d:21: 04:72:88:9e:22:45:ff:f8:20:db:60:1c:fa:87:de:d8:71:c1: 36:07:76:f6:84:21:c4:ab:bd:c5:fc:4c:e2:56:56:15:97:dd: e1:81:bf:61:46:c6:6d:62:fc:da:b5:13:db:e3:6b:e9:00:97: 4f:34:df:3d:85:aa:78:62:0d:8c:fb:00:c4:14:3e:b5:c9:6c: df:35:49:ec:6c:d5:34:d6:e4:e5:49:89:11:3c:ca:54:d6:53: 48:5f:0f:8d:d6:b2:62:e3:d3:41:2c:ef:dd:ea:c6:13:2a:be: 0a:ab:cf:3d:cb:88:9a:55:5b:72:50:46:d5:e9:4c:53:9e:79: 8b:ef:d9:6d:df:78:19:c2:d7:ef:97:20:80:36:b1:0a:67:7e: a8:9e:f5:08:da:3a:4f:46:c0:30:b2:d0:6e:81:f9:65:f6:52: fe:66:69:b7:0a:73:14:08:00:f1:e9:ce:63:c5:51:71:74:38: 5c:8e:e3:41:e7:82:fd:ec:8e:c7:6b:48:5e:1f:49:d9:77:22: d3:6c:42:7a:21:e4:8b:4d:d1:00:9e:4d:bb:35:c4:55:54:b6: 10:f6:34:3d:f8:e7:0f:90:7d:a8:3b:f0:f6:e3:99:f6:68:87: dd:49:bc:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdHsQIEJCC1wLZEkt7OPnABMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxYzhiNzNhYjdiZGViNzZmZjQ4YjJjYTA5OTYxNmVkYmU3 MWM0MjYwHhcNMjUwNjA3MDAwMTExWhcNMjUwNjA4MDAwMTExWjAzMTEwLwYDVQQD Eyg2YjlkOWIzMDhlYWMyZjkwMTBkMWZlMjE3ODU3NDVlNDRkNDg1MjMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1vZ17v/BQmqTVzAG6D7nv7iHwLt Nxe44OL4wJgLakq68rLree3XWFfxocd1USyXOdn8ZlmbnXAsRpJGSGoKE57pQ0gV BBC5KC4wxSSXMr35Z6al48ZRyS1QGugoEy/1RCx74JtFAV3Z4RcXz/j991jbqWLG 2MbYoSLOw3OKBXlJMujHuJlkbUR1PpNnPLw919GFyhu1OuByP9+YAEwAgU9YIzhJ bjAHzNmeh2pFIaKaoZaH9cNRPV/tg8dvmoEII45IseoRZYQsrH0G4oiYfk5uEkQg xSZzEWqxLrd0tgCIsWkOu/5fOyI822IRHkbGdq98Yw9Hw9WPkgesZa6j3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGudmzCOrC+QENH+IXhXReRNSFIyMB8GA1UdIwQY MBaAFIHItzq3vet2/0iyygmWFu2+ccQmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2NpM09yZTk2M2JfU0xMS0NaWVc3YjV4eENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8yMDc5MzQtOWVkYy00YTg5LTgyMGUt ZDg0ODhiM2FiNDJmLzEvZ2NpM09yZTk2M2JfU0xMS0NaWVc3YjV4eENZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC8yMDc5MzQtOWVkYy00YTg5LTgyMGUtZDg0ODhiM2FiNDJm LzEvZ2NpM09yZTk2M2JfU0xMS0NaWVc3YjV4eENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfngu/DFB tbx1kZNhyPrkiV0hBHKIniJF//gg22Ac+ofe2HHBNgd29oQhxKu9xfxM4lZWFZfd 4YG/YUbGbWL82rUT2+Nr6QCXTzTfPYWqeGINjPsAxBQ+tcls3zVJ7GzVNNbk5UmJ ETzKVNZTSF8PjdayYuPTQSzv3erGEyq+CqvPPcuImlVbclBG1elMU555i+/Zbd94 GcLX75cggDaxCmd+qJ71CNo6T0bAMLLQboH5ZfZS/mZptwpzFAgA8enOY8VRcXQ4 XI7jQeeC/eyOx2tIXh9J2Xci02xCeiHki03RAJ5NuzXEVVS2EPY0PfjnD5B9qDvw 9uOZ9miH3Um8QQ== -----END CERTIFICATE-----Generated at Sat Jun 7 05:47:30 2025 by rpki-client