$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft File: BbHRPC4m4SeGJGpexMW-pphksg8.mft (raw, json) Hash identifier: md5Aa4jOURgWZC1MayjpCs4RZk1TXLcLQ+OPVYWwfts= Subject key identifier: AC:5A:49:D3:15:22:34:BA:50:44:1B:02:7C:A6:2C:E2:CC:63:FA:C3 Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f Certificate serial: 019738E25A42A6F01C94A3361FED464E105C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft Manifest number: 1675 Signing time: Wed 04 Jun 2025 03:00:47 +0000 Manifest this update: Wed 04 Jun 2025 03:00:47 +0000 Manifest next update: Thu 05 Jun 2025 03:00:47 +0000 Files and hashes: 1: 05Tg0UTrs2bglsb4atVMOsvRYS0.roa (hash: VhJZRocRnbLToarK8Wb3G47273juDPcLT4qOnhmDcBI=) 2: 1UUsByoEofzjEeiAmIAz-WfMDBU.roa (hash: /7lgakegoy05PQfBI5+T4clOyf4KsMTGCdFLL/29XDY=) 3: 5QoLvq-WQhi5T97Feko4QBKbJJw.roa (hash: 7I36hNQka2fyL1Q374RiVWWXD4L+NmzEsqbBYn/pLlM=) 4: 6MJLp_dcMYXwk9RiE3DAAxY4oSw.roa (hash: iMyO6h7kJ4PGNfYetznIkMIkkeZszd0XbN1GelrAgSQ=) 5: 6NDDKTXIzRZHe_ehTDWU_WHQrJE.roa (hash: JW5KsBQslWl7UMV/MlFKqi9hwR7KoSJt1apypxuQJ5Y=) 6: 7qByDki_pKXz-mNnSCgIXHS1XaM.roa (hash: LGUK2l5AC67T1BEV+gQvM8QIjOAp9/K6aMTWDWsKeLc=) 7: BbHRPC4m4SeGJGpexMW-pphksg8.crl (hash: eFcDJQXuq5cNWW7X+XDOWBBOPGAP6T0M0Ffu0gDov90=) 8: DgTpLrRRquHSXvxiLZB-Fh9YeG4.roa (hash: DlQDXNMbatjiry2Z/1lohQ5Y3aQ3whRLmr2gMIHuKEk=) 9: OGaXmBMfcWvZ6ltHdLZ9jEV9lOE.roa (hash: eJOYvtDNe3FhBqS6Vln19RuplvlaDGsRE5/7K05uBUA=) 10: PsG0AtBemY9a4yDfPpt9i4Kr2GY.roa (hash: sBzY2h3ELjAXI6xknFWXGyJRwY7PSfLmEfEaa7NAk3M=) 11: SwcgVnhGmzMWqIm_KFB-KKc0RJo.roa (hash: zsctMXkFR2wIfF/ZZB2QR24YMG6LeLpv/U7aSRBkmeo=) 12: TGoRKnPJi8w2mb-huIb9J65xjBo.roa (hash: ePazxEN5ghQaWUW2X4iM0oyeSePfu0C9ZykGzy3wrTA=) 13: TWE2GQbK5ZzsTrZP_-cvHhqi5o4.roa (hash: Ukt/h+lTDs0ybwVVqLmtBTv2gykUegHHPF+gzdqT32U=) 14: UUpwIiVcqDAAnpr6ilJo-OXFSZk.roa (hash: pd9P0IlgabDMIpT9nXZW5tJdWZ7mt1qbF+E2T8hCSg0=) 15: hj8L9GkvIvtNkKP3RDq4IS6qH84.roa (hash: Bkn5aqxtoPsMfsZ5PI8rL7/trWBK1cuaEqeQuBeWvM0=) 16: mMmotuD0TZKdicQDfZ6Z_N35ZqI.roa (hash: 07jH3RAfwMd/hMMXiDE+Mo4JGAXBcfNHakucWyLpJhk=) 17: ptXbX8Zqa-anm64RYPO3MNfDgCc.roa (hash: X1KaAT7AfL8kdySxiP0OJr7eJjZG/di68v2W2Al5EUw=) 18: te211TKQz2Pk8IALmy95oPDOlAo.roa (hash: 6m2ob5nsGlLuQ9RcRXpg5CWRSsEUhhwU4klUczhb2D4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:38:e2:5a:42:a6:f0:1c:94:a3:36:1f:ed:46:4e:10:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f Validity Not Before: Jun 4 03:00:47 2025 GMT Not After : Jun 5 03:00:47 2025 GMT Subject: CN=ac5a49d3152234ba50441b027ca62ce2cc63fac3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ca:49:4f:c9:fa:e5:d1:ad:dd:f8:ab:9d:8c: 5b:5a:87:60:9b:1b:65:a3:1a:1d:b2:ef:31:2e:b9: 8c:8a:40:34:89:18:22:b6:6c:b9:1a:88:1c:80:a5: 82:71:20:5e:67:cd:e7:84:3a:9a:29:3b:0f:ce:11: 6f:59:68:f6:d6:b9:02:01:33:99:aa:79:09:d8:6c: 82:ff:1c:8f:82:4f:d7:7e:1b:ea:ec:58:ed:84:38: 90:5f:0c:ee:c9:45:bc:f0:45:87:81:94:0b:1b:53: 6d:db:fb:4c:24:e7:60:01:02:c6:9c:34:f3:f1:34: a9:77:91:ee:1f:b7:87:40:7c:83:1b:fb:e2:57:d8: 46:ab:79:bb:09:8c:d8:2c:c0:22:ca:9a:fa:87:70: cf:2f:9e:56:1d:28:06:a7:64:33:1f:d8:ac:7f:44: 5a:dd:6b:8c:91:c2:c7:18:18:6c:f1:8b:b6:9f:5d: 48:6e:4b:c3:16:f2:f1:77:65:b1:06:54:e0:f1:09: 57:04:d1:87:b0:69:3c:5e:6e:8e:4b:30:1a:4a:6e: e9:58:fb:68:75:2c:4a:51:02:37:35:31:83:ae:e2: 8c:f0:b4:95:f2:4f:64:9a:79:bb:2b:0b:f0:9d:2c: 44:9d:5a:57:f9:82:a9:58:43:f7:27:ea:18:88:94: ea:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:5A:49:D3:15:22:34:BA:50:44:1B:02:7C:A6:2C:E2:CC:63:FA:C3 X509v3 Authority Key Identifier: keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:e3:94:27:6d:a5:94:70:64:03:b5:34:ef:ae:99:cc:9d:db: 6e:6e:b5:68:4d:57:01:f5:63:00:fe:e2:fb:b2:56:78:36:b7: 23:75:1d:8a:9e:f1:d4:cb:3c:6a:01:2f:5f:36:1a:4b:5e:bb: 1c:8d:96:37:d2:33:65:5b:d9:ae:3c:4c:46:51:53:34:0d:0c: 37:e9:0f:c4:0a:c2:4e:3d:5f:3f:7d:85:c0:c9:7c:f9:52:36: 4f:0c:5f:e1:21:fb:0f:53:4d:30:bb:80:2e:30:fd:26:57:f6: 94:a6:45:34:ef:22:e1:71:2c:ac:4a:55:c4:ec:10:f1:bd:97: 8a:1a:7f:6c:83:9b:1c:99:73:a8:c9:d1:fd:15:11:6d:ba:d5: 32:34:7c:9d:68:85:62:31:87:2c:a3:9e:9a:68:81:8e:a4:d5: 70:ff:98:8d:66:b6:19:74:27:6a:8a:d2:60:2d:51:00:d8:ee: a5:d8:eb:17:27:c6:c1:f2:2f:b6:0f:27:07:c7:de:0e:7d:34: f7:1c:19:f4:41:37:ae:20:20:79:92:b8:74:8e:5d:d6:44:1a: 71:1a:4f:fe:5d:ea:80:20:8a:71:ac:14:da:34:ed:28:25:2f: 71:df:89:c8:55:56:49:ae:08:c6:c7:5c:21:c9:85:11:c7:ed: e5:a9:cc:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZc44lpCpvAclKM2H+1GThBcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1YjFkMTNjMmUyNmUxMjc4NjI0NmE1ZWM0YzViZWE2OTg2 NGIyMGYwHhcNMjUwNjA0MDMwMDQ3WhcNMjUwNjA1MDMwMDQ3WjAzMTEwLwYDVQQD EyhhYzVhNDlkMzE1MjIzNGJhNTA0NDFiMDI3Y2E2MmNlMmNjNjNmYWMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyspJT8n65dGt3firnYxbWodgmxtl oxodsu8xLrmMikA0iRgitmy5GogcgKWCcSBeZ83nhDqaKTsPzhFvWWj21rkCATOZ qnkJ2GyC/xyPgk/Xfhvq7FjthDiQXwzuyUW88EWHgZQLG1Nt2/tMJOdgAQLGnDTz 8TSpd5HuH7eHQHyDG/viV9hGq3m7CYzYLMAiypr6h3DPL55WHSgGp2QzH9isf0Ra 3WuMkcLHGBhs8Yu2n11IbkvDFvLxd2WxBlTg8QlXBNGHsGk8Xm6OSzAaSm7pWPto dSxKUQI3NTGDruKM8LSV8k9kmnm7KwvwnSxEnVpX+YKpWEP3J+oYiJTqHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKxaSdMVIjS6UEQbAnymLOLMY/rDMB8GA1UdIwQY MBaAFAWx0TwuJuEnhiRqXsTFvqaYZLIPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmJIUlBDNG00U2VHSkdwZXhNVy1wcGhrc2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9jNjEwOTItNzM0YS00ZWVmLTlkNjct NDkwNTI0M2JjODI4LzEvQmJIUlBDNG00U2VHSkdwZXhNVy1wcGhrc2c4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9jNjEwOTItNzM0YS00ZWVmLTlkNjctNDkwNTI0M2JjODI4 LzEvQmJIUlBDNG00U2VHSkdwZXhNVy1wcGhrc2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbuOUJ22l lHBkA7U0766ZzJ3bbm61aE1XAfVjAP7i+7JWeDa3I3Udip7x1Ms8agEvXzYaS167 HI2WN9IzZVvZrjxMRlFTNA0MN+kPxArCTj1fP32FwMl8+VI2Twxf4SH7D1NNMLuA LjD9Jlf2lKZFNO8i4XEsrEpVxOwQ8b2Xihp/bIObHJlzqMnR/RURbbrVMjR8nWiF YjGHLKOemmiBjqTVcP+YjWa2GXQnaorSYC1RANjupdjrFyfGwfIvtg8nB8feDn00 9xwZ9EE3riAgeZK4dI5d1kQacRpP/l3qgCCKcawU2jTtKCUvcd+JyFVWSa4Ixsdc IcmFEcft5anMhA== -----END CERTIFICATE-----Generated at Wed Jun 4 11:38:15 2025 by rpki-client