$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft File: Ben8oKhYT-scEjGQcUIwYbCP5FY.mft (raw, json) Hash identifier: aTcU259bdJ3tvmaeeygxd+A4fy1H/JXKU/wNXd3Kf3E= Subject key identifier: 35:2F:1C:BD:E1:5B:FF:43:1A:57:8A:37:7C:A0:75:4D:FB:A6:02:B7 Authority key identifier: 05:E9:FC:A0:A8:58:4F:EB:1C:12:31:90:71:42:30:61:B0:8F:E4:56 Certificate issuer: /CN=05e9fca0a8584feb1c12319071423061b08fe456 Certificate serial: 019747E77DD71A2FABAF923A0D3041080F08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft Manifest number: 0D8A Signing time: Sat 07 Jun 2025 01:00:42 +0000 Manifest this update: Sat 07 Jun 2025 01:00:42 +0000 Manifest next update: Sun 08 Jun 2025 01:00:42 +0000 Files and hashes: 1: 4JQtl6CjZI4Ed81VYmD8y3s93nc.roa (hash: DNWzfbgNl38BTmSJIdFxCJ7U9WCYuq21jLucbQaekUg=) 2: BL3LZfi-f3ywcf3FmAmJwnbzASI.roa (hash: DVAE75CLKTBw2pzOs2zlkLoQMMQUvF717xgboLC73+I=) 3: Ben8oKhYT-scEjGQcUIwYbCP5FY.crl (hash: uzSizNqPNZvEYEpUAzaQqvojIGr8J/DjND7mwdjyrUM=) 4: DeACqwGcvIcEJ9pagEhHd4n2i_M.roa (hash: WPp0dLB9p4cnbOnLtVE+B38AXmBSQMpiDZZIvPoqViw=) 5: FMfF0PRqbPl1Xgf7uetPmo11RwY.roa (hash: Nmk2r9tNYQqNw9x7igBvoQ88flRwtwnRPqDYVBzi6Zk=) 6: Q146qaaxZ1xmkBzI32xjl700K7Q.roa (hash: Dmot/z3pbyFtlPpe5Va8TlDgzImhsPNQJ1rELTx4Aro=) 7: XNBwXrAiwZu96uMUjODQvvz_Bzw.roa (hash: mCW8/M59wIOxOS0wM2q/LR+3KGIdWjCxHtDVDd4aiCU=) 8: Z4WfPAHr0U4HuMsBXDWE11AR6SY.roa (hash: nIFqFX+PoOUUY+ho0HNN5VDHjMoLJi/JVpJHhVS9zMY=) 9: fETfH_XiNbseiVsjZA2HM6Af2jI.roa (hash: uyRqpIalZYJdXa3YW/3/Z8wVH+1oAHTZduFpskFWKhg=) 10: foM10PwLyaHwLhfbaJzkwnbAE_w.roa (hash: DIaKJkxL7f9BTL5/9GbSSi0rXtJN9gz1NV5M8HRodzE=) 11: phO7epvCoYFhkG0dTV5RtGTfFoE.roa (hash: jkhzkXF+DB42uMow0dB8LWjmxEVbOyoIZtbBsaP8XFo=) 12: rS554DqYgNK00lANZV007fZTVkM.roa (hash: 3SSYULxYvCw8XOXXkyZRjzf+FifSR5lE3jD5NyjPQ0I=) 13: uZ82HsSJfJMX-injZJkIBGdxGBY.roa (hash: mT1BefewYqT0QULFBWTWCpATALXi+6J6LGgvQIVpGhI=) 14: wacKSVeFcrTyL4jcOjnOwrcddYQ.roa (hash: n1rU/BStziAQk9f5pDE6L63EitmHb6FHEduDthm4TxU=) 15: ytwdpN2_MmIz-ujAGkeOSyxFnQQ.roa (hash: Q1K4a50MOqKpSRbaxfZO8lYsK/lxhMtlTC8aBU8fdHU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Jun 2025 22:50:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:47:e7:7d:d7:1a:2f:ab:af:92:3a:0d:30:41:08:0f:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05e9fca0a8584feb1c12319071423061b08fe456 Validity Not Before: Jun 7 01:00:42 2025 GMT Not After : Jun 8 01:00:42 2025 GMT Subject: CN=352f1cbde15bff431a578a377ca0754dfba602b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:92:a5:28:ce:5e:ff:5b:51:3c:85:0e:84:82: d8:d8:b9:96:d6:54:d3:04:a9:09:c5:44:f5:82:39: 6c:a3:82:97:fa:79:0a:af:3f:64:f0:a3:28:4b:95: 92:55:03:d3:40:52:6d:68:9a:31:5b:1c:56:e4:64: d1:88:3a:b9:31:9c:68:7b:e7:58:1e:1d:07:c6:17: 89:32:01:4a:3a:44:db:d8:55:02:1f:e2:1e:70:26: 85:2e:35:05:d8:7e:44:c7:3c:3a:65:ef:71:b6:02: c8:fc:61:5c:b8:b5:bc:d1:45:22:c3:e8:4c:1f:9a: 03:83:05:ed:cb:1e:cd:1c:bf:d3:b1:38:89:d1:34: cd:55:ae:49:d0:ce:74:89:0d:0a:b7:78:3c:d1:e9: 1f:8c:dc:f3:29:18:6d:41:b0:3b:f2:01:0d:c0:73: 4e:ed:cb:93:11:af:f2:99:35:df:80:ed:9c:91:60: a6:6a:97:ad:7e:7c:be:3a:42:d3:8b:fc:b1:0c:38: 20:f4:4c:02:da:16:c9:8a:77:1c:e5:74:50:83:40: d0:1d:a1:ba:c6:f9:7c:c6:33:b4:24:07:b2:80:1d: ff:67:f5:5e:d0:9a:c1:a5:86:9e:27:41:de:84:e0: c2:a7:a2:23:33:aa:47:9d:22:12:ea:51:b1:a7:b3: 82:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:2F:1C:BD:E1:5B:FF:43:1A:57:8A:37:7C:A0:75:4D:FB:A6:02:B7 X509v3 Authority Key Identifier: keyid:05:E9:FC:A0:A8:58:4F:EB:1C:12:31:90:71:42:30:61:B0:8F:E4:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:29:f5:f9:95:ad:9b:d2:fb:12:34:1f:a1:0c:52:68:3f:2a: 9f:d2:24:6d:b3:2d:6d:11:d2:ce:72:b4:74:4e:9f:c6:84:40: 17:f7:89:7e:dd:f3:54:e3:cc:07:c4:d7:a3:06:06:af:9f:43: df:ce:5c:ab:de:6b:ee:26:b7:bc:f2:29:43:1c:63:57:ae:94: 69:8c:49:53:ea:f1:c7:86:6d:2c:8a:97:27:7d:ee:d3:91:72: a8:97:d1:e9:76:40:81:23:4e:b2:2f:e0:73:40:6b:55:3f:68: ff:dd:7e:e7:87:8b:97:f7:e1:88:53:c7:cf:de:d3:f9:6a:44: 05:b8:3a:73:5b:6b:06:0b:64:e6:79:45:ee:7f:78:10:12:a9: 18:8b:d2:c6:76:e3:55:1d:ec:2f:d6:32:d8:e6:8d:7e:fd:f1: c8:d5:dd:64:04:da:e1:c7:79:ac:a7:27:c0:eb:dc:9c:f4:5f: 97:04:a6:d6:fd:d2:27:3f:b5:89:6a:b8:2f:74:f5:bb:37:62: 84:f9:37:c7:bc:7a:73:4f:e3:ec:10:b5:29:7c:a4:4a:61:c6: 8d:94:84:52:11:79:92:65:a7:2b:89:8e:da:95:f3:72:d4:82: 92:37:b7:bd:8d:6d:15:95:6e:19:5e:38:a2:52:d9:70:02:53: 53:84:a0:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdH533XGi+rr5I6DTBBCA8IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ZTlmY2EwYTg1ODRmZWIxYzEyMzE5MDcxNDIzMDYxYjA4 ZmU0NTYwHhcNMjUwNjA3MDEwMDQyWhcNMjUwNjA4MDEwMDQyWjAzMTEwLwYDVQQD EygzNTJmMWNiZGUxNWJmZjQzMWE1NzhhMzc3Y2EwNzU0ZGZiYTYwMmI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJKlKM5e/1tRPIUOhILY2LmW1lTT BKkJxUT1gjlso4KX+nkKrz9k8KMoS5WSVQPTQFJtaJoxWxxW5GTRiDq5MZxoe+dY Hh0HxheJMgFKOkTb2FUCH+IecCaFLjUF2H5Exzw6Ze9xtgLI/GFcuLW80UUiw+hM H5oDgwXtyx7NHL/TsTiJ0TTNVa5J0M50iQ0Kt3g80ekfjNzzKRhtQbA78gENwHNO 7cuTEa/ymTXfgO2ckWCmapetfny+OkLTi/yxDDgg9EwC2hbJincc5XRQg0DQHaG6 xvl8xjO0JAeygB3/Z/Ve0JrBpYaeJ0HehODCp6IjM6pHnSIS6lGxp7OC8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDUvHL3hW/9DGleKN3ygdU37pgK3MB8GA1UdIwQY MBaAFAXp/KCoWE/rHBIxkHFCMGGwj+RWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmVuOG9LaFlULXNjRWpHUWNVSXdZYkNQNUZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jN2VlOWUtYjViZi00YzJkLWE5ODMt ZGVlM2VkNDk3YWVlLzEvQmVuOG9LaFlULXNjRWpHUWNVSXdZYkNQNUZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9jN2VlOWUtYjViZi00YzJkLWE5ODMtZGVlM2VkNDk3YWVl LzEvQmVuOG9LaFlULXNjRWpHUWNVSXdZYkNQNUZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdSn1+ZWt m9L7EjQfoQxSaD8qn9IkbbMtbRHSznK0dE6fxoRAF/eJft3zVOPMB8TXowYGr59D 385cq95r7ia3vPIpQxxjV66UaYxJU+rxx4ZtLIqXJ33u05FyqJfR6XZAgSNOsi/g c0BrVT9o/91+54eLl/fhiFPHz97T+WpEBbg6c1trBgtk5nlF7n94EBKpGIvSxnbj VR3sL9Yy2OaNfv3xyNXdZATa4cd5rKcnwOvcnPRflwSm1v3SJz+1iWq4L3T1uzdi hPk3x7x6c0/j7BC1KXykSmHGjZSEUhF5kmWnK4mO2pXzctSCkje3vY1tFZVuGV44 olLZcAJTU4SgJg== -----END CERTIFICATE-----Generated at Sat Jun 7 04:14:03 2025 by rpki-client