$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft File: IvNEpj3LcOiQV9644nYdxFFliBo.mft (raw, json) Hash identifier: LuBXIW5eTA22PDdgkeFsQ45Pd6wp9Y2pS+lw268E5z8= Subject key identifier: A1:7C:3A:C1:F5:12:A9:BC:B0:82:1D:1E:DF:22:7C:84:3C:43:E0:C2 Authority key identifier: 22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A Certificate issuer: /CN=22f344a63dcb70e89057deb8e2761dc45165881a Certificate serial: 01973C1A9F94B33A70A67C0E36669124D3D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft Manifest number: 114D Signing time: Wed 04 Jun 2025 18:01:06 +0000 Manifest this update: Wed 04 Jun 2025 18:01:06 +0000 Manifest next update: Thu 05 Jun 2025 18:01:06 +0000 Files and hashes: 1: 1LZHe8Ty2Ecrf76DoSxkwAbV2Ec.roa (hash: z+MqJylNHYWp3NqFgOzBgiG5CjCUL0P0np/w7hgCYN0=) 2: B2yHxHbEm9GmCNVxvcrZFxarDHM.roa (hash: bgz2Ull5wnGI0goKFONDZrQdSvmkexqh99prCGIqdUQ=) 3: IvNEpj3LcOiQV9644nYdxFFliBo.crl (hash: lIU9kJmgTZgoJTAIbSEnkVeA1VQcSpKi+RSXIYUQI3w=) 4: K2GN8Q4wuI9TOv_O5rPOY6UOVuw.roa (hash: x81e2mavHKbR2e6iStjfXJXmlwyjRYwbRrSYSDYjLu8=) 5: Rqg6__jB0I59YqNi0V3OG_MGBp8.roa (hash: dXgwdC+H6aPwaIuzA6ajakpboy2/DkMtHCDvVma8C2I=) 6: Tj6608f-1a6fYqa_z-5d8FeCzjM.roa (hash: anRpP2NDSpzZ3SrjHh0tnQVCsHbMwvsJQ4PMBnavsdk=) 7: YpiZDj15UQloSo6Ej-P-5_wLmX0.roa (hash: U0LGxcrLnRjidOqQnFEuAvzeubqh8HZ24iVIBxmVgMY=) 8: btDz2u-l_wj6W8KIfCMAlnW0P24.roa (hash: sfK0ptsNBV2+LnneQNYSIHQ7XVoVHUaME+qXGkJagVw=) 9: d-S7YgetzEwMrrxbSdTzmhWIDOU.roa (hash: 3G/Eu15jWX5wqv+LVcJ9iVdKlsYAltsvYTFwqOC6jKg=) 10: f6GDqb9nJIgj_F1z2AEUbY6YnmQ.roa (hash: jKya+L5/uP3Dz7PfxR54wCUY1sMiu+aWWncKs50X+nY=) 11: hI0tUC415NEH9XUX9W5_NYjc6b0.roa (hash: vIUGWL+jywzP4nOG3s5yRhGXD3r26uV/UoGJVBb5x6o=) 12: y72ioZ9vcp7DqGWY8rVyBxu728s.roa (hash: PbIGmtWe0+HcZ3GBbrnUP6pZwodFKUDC/Q3NIX5q6Jg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Jun 2025 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:3c:1a:9f:94:b3:3a:70:a6:7c:0e:36:66:91:24:d3:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22f344a63dcb70e89057deb8e2761dc45165881a Validity Not Before: Jun 4 18:01:06 2025 GMT Not After : Jun 5 18:01:06 2025 GMT Subject: CN=a17c3ac1f512a9bcb0821d1edf227c843c43e0c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:33:c7:98:71:4b:23:c8:57:a8:fe:d2:8a:4b: c1:6b:f7:2f:dc:d9:8e:72:e4:1f:e0:17:f3:a7:a0: 24:79:08:15:fd:2e:74:15:3f:1d:e9:87:0f:02:ae: 9a:f4:ec:2c:21:87:30:6b:72:19:38:18:c9:e4:cc: ae:24:4c:8e:58:d6:5e:75:37:7b:66:8f:a2:4a:ef: 7f:b0:25:ba:66:d4:83:ba:85:08:1d:9d:3d:fa:47: f0:cf:c2:0a:85:16:6e:da:ae:34:98:87:b5:6c:b7: 96:7d:b9:9e:d6:56:1b:e1:97:99:ac:63:56:a8:88: a5:d7:41:af:e2:d3:f8:82:8f:1b:76:34:9d:8f:70: 80:46:ea:c9:7c:83:71:f5:4b:79:a0:82:95:1a:8f: d9:5f:66:c7:0f:86:cf:2a:3d:ca:68:81:cf:d3:49: 17:8c:f6:a3:a6:9b:4a:fd:c6:5b:ba:c2:cb:5e:f1: 0e:a8:96:a2:7c:e1:00:66:d9:b7:15:1a:b5:aa:76: 79:b5:c2:51:e0:11:17:52:60:71:e0:ca:b7:e1:0f: 1c:ee:a5:43:b4:b3:20:ed:db:79:a2:16:d0:f8:62: e1:68:69:ef:cc:8d:34:14:f5:9c:fd:af:3c:f8:1e: f7:c8:78:cd:66:d1:fb:ec:54:56:12:4c:f4:03:a9: d7:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:7C:3A:C1:F5:12:A9:BC:B0:82:1D:1E:DF:22:7C:84:3C:43:E0:C2 X509v3 Authority Key Identifier: keyid:22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:d7:35:5d:80:66:02:27:55:50:68:ac:40:3b:fd:e5:40:df: bb:9e:8f:30:ca:56:05:c6:e7:9c:e6:60:6a:40:38:eb:f5:6f: bb:3f:35:8f:67:1c:9f:2d:4d:22:7d:4b:35:75:49:95:28:c5: de:a8:83:99:2b:4c:bd:d2:04:1a:ff:99:3f:40:17:e6:50:f3: b0:fa:5f:4d:f1:28:c4:9d:3c:1a:c9:42:01:8a:d4:44:1d:d5: cb:e8:0f:77:0b:f9:5d:8a:63:c4:45:65:60:d1:9b:0b:7c:7a: bc:9b:37:5c:8e:b2:d7:87:9e:37:94:08:4e:f4:d1:82:a7:31: 49:06:32:f2:34:8b:f3:6a:b7:8c:eb:6b:eb:ea:f5:ac:c6:21: d4:12:e7:54:4f:9c:f1:a0:45:b0:34:93:2a:2c:18:11:df:6c: 35:49:69:83:f4:57:1d:df:08:ba:7e:97:bf:63:87:35:a6:da: 0c:1d:db:5e:34:56:1f:a1:63:e3:8b:0b:d4:d7:bf:60:7e:80: 8b:6c:a3:4a:fb:26:e6:a1:97:73:b4:6c:9e:a9:bc:7f:f7:e1: 1b:0b:ff:96:36:2d:23:9f:f0:33:9f:6f:f2:9f:45:db:8a:8f: f0:63:58:e6:fa:e1:7d:a4:49:39:5f:c2:99:f6:c3:eb:0a:e6: 1f:d6:3e:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZc8Gp+UszpwpnwONmaRJNPWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyZjM0NGE2M2RjYjcwZTg5MDU3ZGViOGUyNzYxZGM0NTE2 NTg4MWEwHhcNMjUwNjA0MTgwMTA2WhcNMjUwNjA1MTgwMTA2WjAzMTEwLwYDVQQD EyhhMTdjM2FjMWY1MTJhOWJjYjA4MjFkMWVkZjIyN2M4NDNjNDNlMGMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1jPHmHFLI8hXqP7SikvBa/cv3NmO cuQf4Bfzp6AkeQgV/S50FT8d6YcPAq6a9OwsIYcwa3IZOBjJ5MyuJEyOWNZedTd7 Zo+iSu9/sCW6ZtSDuoUIHZ09+kfwz8IKhRZu2q40mIe1bLeWfbme1lYb4ZeZrGNW qIil10Gv4tP4go8bdjSdj3CARurJfINx9Ut5oIKVGo/ZX2bHD4bPKj3KaIHP00kX jPajpptK/cZbusLLXvEOqJaifOEAZtm3FRq1qnZ5tcJR4BEXUmBx4Mq34Q8c7qVD tLMg7dt5ohbQ+GLhaGnvzI00FPWc/a88+B73yHjNZtH77FRWEkz0A6nXgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKF8OsH1Eqm8sIIdHt8ifIQ8Q+DCMB8GA1UdIwQY MBaAFCLzRKY9y3DokFfeuOJ2HcRRZYgaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXZORXBqM0xjT2lRVjk2NDRuWWR4RkZsaUJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi81MzYwZTctZjAyYS00NzM3LTk5Yzct ZmViYjY0YjVlMTY0LzEvSXZORXBqM0xjT2lRVjk2NDRuWWR4RkZsaUJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi81MzYwZTctZjAyYS00NzM3LTk5YzctZmViYjY0YjVlMTY0 LzEvSXZORXBqM0xjT2lRVjk2NDRuWWR4RkZsaUJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQtc1XYBm AidVUGisQDv95UDfu56PMMpWBcbnnOZgakA46/Vvuz81j2ccny1NIn1LNXVJlSjF 3qiDmStMvdIEGv+ZP0AX5lDzsPpfTfEoxJ08GslCAYrURB3Vy+gPdwv5XYpjxEVl YNGbC3x6vJs3XI6y14eeN5QITvTRgqcxSQYy8jSL82q3jOtr6+r1rMYh1BLnVE+c 8aBFsDSTKiwYEd9sNUlpg/RXHd8Iun6Xv2OHNabaDB3bXjRWH6Fj44sL1Ne/YH6A i2yjSvsm5qGXc7Rsnqm8f/fhGwv/ljYtI5/wM59v8p9F24qP8GNY5vrhfaRJOV/C mfbD6wrmH9Y+DQ== -----END CERTIFICATE-----Generated at Thu Jun 5 05:25:26 2025 by rpki-client