$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/02AMuv0m_uUGT8ifMB38jjwdPKU.mft File: 02AMuv0m_uUGT8ifMB38jjwdPKU.mft (raw, json) Hash identifier: OMc1B+SY0FlCK1hikDhDyBmPzjjiriZbH5ar3MewPbo= Subject key identifier: 15:BF:07:0D:03:CA:2E:F3:2D:5A:2D:A6:7E:A3:62:4D:EF:DF:13:FA Authority key identifier: D3:60:0C:BA:FD:26:FE:E5:06:4F:C8:9F:30:1D:FC:8E:3C:1D:3C:A5 Certificate issuer: /CN=d3600cbafd26fee5064fc89f301dfc8e3c1d3ca5 Certificate serial: 019738743CC3B2C5310FCBE9F7A4BBFB4AE7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02AMuv0m_uUGT8ifMB38jjwdPKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/02AMuv0m_uUGT8ifMB38jjwdPKU.mft Manifest number: 1580 Signing time: Wed 04 Jun 2025 01:00:31 +0000 Manifest this update: Wed 04 Jun 2025 01:00:31 +0000 Manifest next update: Thu 05 Jun 2025 01:00:31 +0000 Files and hashes: 1: 02AMuv0m_uUGT8ifMB38jjwdPKU.crl (hash: ZAX2Cku+FaxS53b2zyPcpKRkLL4KRNHfiNa9MuSq/mA=) 2: 2WkxZ6d8ewxrLWO8WH12o0AY6xw.roa (hash: nbEjkYORzyFd58OrYmjVC1fHN4kRwapxAIIPY/slelc=) 3: 4kCyuSPPrXsbU9QOAHaicAmHwD0.roa (hash: UItrJSqbNqJpjVkVyURO/DW/ecr4i3goD+N+znJcDDg=) 4: 7WBr1YnHsoup1UkbmIJWHNzDX0E.roa (hash: W4SWAwkwaa5kcD/y0ZmDJSccOFKGfkQE9QaUWTtSQO4=) 5: AG97hJvhy0UeDTt3HIas70L9MWQ.roa (hash: CpGaF4KcigctK1KLFQXtXWhD0jjodHuaq3LolhI5NC8=) 6: EEkMm6nCb9R4YLtB4IXzgCR8OOM.roa (hash: 7A7HQmXagHkrgjRynPlWf1aNJTOS5cJM4PvFKY2czsg=) 7: JdavXfgS1C88UGPje2KGgh-CbRs.roa (hash: fsvo1+m2SxrjapW7ugn4l/vkPt8HqDS/T913gxJRh4I=) 8: M-yd6Ugm4j37VvR5jMt-KNJrmEI.roa (hash: vqjDdTSN4DxJrQed7BY7JJ0opDc9Ee98YYBmwBxXED4=) 9: Nedx1_M66uIc0vDKNZQnQXlLIdM.roa (hash: zJ8+VfMNsVLvkhPB7kvPUzmVC3uoyAUluiAWRCM46n4=) 10: Qi9XVq-dT2o75N7dfhs2g5GBACU.roa (hash: ZA6fIgi4q3HA9rAbCvC+Xiwj/72PmBX2B2EUlsP/w2Q=) 11: jLnip0BdB36NRqrdIhQucDZy8-A.roa (hash: PgGmCULcevmCru0Kv0QVroNMx8/gH95JrLZ6JaAFDWc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/02AMuv0m_uUGT8ifMB38jjwdPKU.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/02AMuv0m_uUGT8ifMB38jjwdPKU.mft rsync://rpki.ripe.net/repository/DEFAULT/02AMuv0m_uUGT8ifMB38jjwdPKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:38:74:3c:c3:b2:c5:31:0f:cb:e9:f7:a4:bb:fb:4a:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3600cbafd26fee5064fc89f301dfc8e3c1d3ca5 Validity Not Before: Jun 4 01:00:31 2025 GMT Not After : Jun 5 01:00:31 2025 GMT Subject: CN=15bf070d03ca2ef32d5a2da67ea3624defdf13fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:64:45:32:82:9f:71:c9:32:e2:7c:de:c6:2d: 3e:5a:47:51:d3:7c:5e:e6:02:fb:56:a9:28:b4:de: 71:c0:04:1c:2b:dd:78:11:49:e0:fc:d9:ba:11:ca: ee:a7:b5:b9:17:91:4b:52:db:31:82:0c:2a:45:c9: 8c:6f:e8:0d:cb:3c:21:00:58:e5:bb:9e:5a:ad:c2: 9d:16:3a:71:39:6e:b0:7e:de:59:af:0d:50:e8:8d: ca:14:67:73:17:9e:5f:e4:17:2b:d8:3b:d8:30:62: b8:f1:69:36:bd:e4:40:a5:57:6b:0f:13:49:ba:4b: e0:72:6a:08:42:6e:3b:d0:65:a8:ad:5b:3a:58:1d: 47:5e:ea:89:98:b5:25:32:72:e0:07:30:47:56:04: 6d:62:05:32:7e:0d:fb:8f:fb:b4:5d:4d:c1:0d:b8: c5:58:a2:98:47:eb:47:83:d1:60:39:54:25:1c:23: 74:08:74:2a:c6:19:55:c4:da:58:ea:e8:67:8a:de: 7c:aa:6a:5b:1f:09:ce:1d:f7:33:ff:7f:f7:b3:5e: 5c:1e:8e:74:14:02:c1:32:a6:1e:8a:94:a9:79:b4: c4:1d:8a:a3:e5:fb:20:1f:91:c6:82:65:d6:7b:ca: ce:18:e4:d2:5a:a2:fe:25:e7:54:01:36:96:da:f5: 5c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:BF:07:0D:03:CA:2E:F3:2D:5A:2D:A6:7E:A3:62:4D:EF:DF:13:FA X509v3 Authority Key Identifier: keyid:D3:60:0C:BA:FD:26:FE:E5:06:4F:C8:9F:30:1D:FC:8E:3C:1D:3C:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02AMuv0m_uUGT8ifMB38jjwdPKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/02AMuv0m_uUGT8ifMB38jjwdPKU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/02AMuv0m_uUGT8ifMB38jjwdPKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:d1:cd:58:72:99:49:ab:4c:fa:7a:67:ab:c0:e4:30:3a:44: 27:6d:52:16:5a:ed:41:3e:83:5e:e3:13:f4:95:7b:81:c0:bd: 3e:2f:50:03:1f:5c:93:63:86:60:07:ee:c3:0c:28:97:d9:0b: a9:3a:ab:44:48:a8:0a:20:a3:4a:b1:ab:0e:71:52:c6:17:50: 4a:7d:d0:e7:7e:bc:8d:54:81:2a:8c:f8:35:f1:8e:1a:98:76: 17:ee:a2:4e:3d:e3:05:dc:40:59:f5:39:2b:a8:1a:35:0c:8e: e5:cb:89:ea:31:69:3a:ca:cb:fe:48:97:ab:38:05:61:15:17: e5:40:9c:12:fe:29:4b:6c:87:d0:a7:65:a5:84:d5:7d:13:76: f0:b9:d0:89:04:14:7e:6d:48:e0:e2:73:80:45:14:d0:47:3b: 29:69:9e:cc:22:a4:17:7e:b0:4d:1e:23:21:2c:ac:cb:58:74: 17:54:9f:85:07:f6:17:e0:2e:1c:51:73:1d:29:44:cc:00:18: 5d:30:3f:60:1a:28:a2:25:82:bc:70:5e:dc:0d:16:d3:df:01: 22:33:0e:ac:78:8f:a4:a8:52:d3:fb:78:b2:1a:f1:5a:02:8c: 90:b2:4e:8c:39:77:95:80:60:9f:cc:58:8c:9c:8e:71:38:15: 6f:6c:37:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZc4dDzDssUxD8vp96S7+0rnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzNjAwY2JhZmQyNmZlZTUwNjRmYzg5ZjMwMWRmYzhlM2Mx ZDNjYTUwHhcNMjUwNjA0MDEwMDMxWhcNMjUwNjA1MDEwMDMxWjAzMTEwLwYDVQQD EygxNWJmMDcwZDAzY2EyZWYzMmQ1YTJkYTY3ZWEzNjI0ZGVmZGYxM2ZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmRFMoKfccky4nzexi0+WkdR03xe 5gL7VqkotN5xwAQcK914EUng/Nm6Ecrup7W5F5FLUtsxggwqRcmMb+gNyzwhAFjl u55arcKdFjpxOW6wft5Zrw1Q6I3KFGdzF55f5Bcr2DvYMGK48Wk2veRApVdrDxNJ ukvgcmoIQm470GWorVs6WB1HXuqJmLUlMnLgBzBHVgRtYgUyfg37j/u0XU3BDbjF WKKYR+tHg9FgOVQlHCN0CHQqxhlVxNpY6uhnit58qmpbHwnOHfcz/3/3s15cHo50 FALBMqYeipSpebTEHYqj5fsgH5HGgmXWe8rOGOTSWqL+JedUATaW2vVcIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBW/Bw0Dyi7zLVotpn6jYk3v3xP6MB8GA1UdIwQY MBaAFNNgDLr9Jv7lBk/InzAd/I48HTylMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDJBTXV2MG1fdVVHVDhpZk1CMzhqandkUEtVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9iNzA2NTgtZTFkYy00OTQ0LWEwNmIt MWM2ODBhZGY3YTI2LzEvMDJBTXV2MG1fdVVHVDhpZk1CMzhqandkUEtVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9iNzA2NTgtZTFkYy00OTQ0LWEwNmItMWM2ODBhZGY3YTI2 LzEvMDJBTXV2MG1fdVVHVDhpZk1CMzhqandkUEtVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiNHNWHKZ SatM+npnq8DkMDpEJ21SFlrtQT6DXuMT9JV7gcC9Pi9QAx9ck2OGYAfuwwwol9kL qTqrREioCiCjSrGrDnFSxhdQSn3Q5368jVSBKoz4NfGOGph2F+6iTj3jBdxAWfU5 K6gaNQyO5cuJ6jFpOsrL/kiXqzgFYRUX5UCcEv4pS2yH0KdlpYTVfRN28LnQiQQU fm1I4OJzgEUU0Ec7KWmezCKkF36wTR4jISysy1h0F1SfhQf2F+AuHFFzHSlEzAAY XTA/YBoooiWCvHBe3A0W098BIjMOrHiPpKhS0/t4shrxWgKMkLJOjDl3lYBgn8xY jJyOcTgVb2w34w== -----END CERTIFICATE-----Generated at Wed Jun 4 10:19:04 2025 by rpki-client