$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft File: 8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft (raw, json) Hash identifier: MhIhRItvBcwEE0DWsL2Eb7CQu7jP5KlV8t0NNJ14fpU= Subject key identifier: 1C:B7:7F:2F:80:A0:FD:E3:52:E9:6F:1A:A1:05:34:C3:8D:28:49:F1 Authority key identifier: F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43 Certificate issuer: /CN=f0ff2c6229af763a99f5349a32510df4a4526143 Certificate serial: 0197481E7DB4C7EA6083EDA9BE646D045066 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft Manifest number: 1580 Signing time: Sat 07 Jun 2025 02:00:47 +0000 Manifest this update: Sat 07 Jun 2025 02:00:47 +0000 Manifest next update: Sun 08 Jun 2025 02:00:47 +0000 Files and hashes: 1: 00x2a7vYcUP_RgzqZlJDShLq9Do.roa (hash: cq08qt5t6pt7+g4zB6xtHZuctjeJqy9pw/L/lk8TYFo=) 2: 8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl (hash: tlkbezFxMx2YmlHGznOjrM7afoJAgKpkY/M6q4cMYn4=) 3: KVMzJG-tiBiXKGfDbX7s-fqSUcs.roa (hash: izdiO/l04uY0Tl9GP7xbaa4HsWMYkrOgbs0SiG0a1K8=) 4: OBC2jp5FIHT7G9c2m1xsJUD2ivs.roa (hash: DrwuyysosoB70lBjSllnHo3rVU0U0NusilzO8tRi9Q0=) 5: OxF-ngX6YGUArZrbAYmh9hpGzkU.roa (hash: zhEaR7GNPbf+2lOaH8uFUPJFKzbpuLS5x4CvU7dkxPs=) 6: Q2Pg2GNHELVKyFoNgxOuT8YFvLY.roa (hash: DsyRU7FSw+3XDKbBM9HrtgkzYSVPnqWwqknbD6CWVSU=) 7: RO-InVXPYoHaB1ZpM-19yr94dQs.roa (hash: 8Y6VcUcgO4alufdIJ4djN2KAnB4AyYetp1VZzDDuyNk=) 8: TbcAJ-7kgZbLEMeBArn-aI2s0Oc.roa (hash: ebCgIhbDpPxtlRtDjitUarjC0W1nxe0ujpocy11Koxs=) 9: _gM5SG_4QQqKocZtcQPCR80SAmI.roa (hash: ee8TJS3VrEj5YXrt15hISXpN3dVXM3P5ROyjlVEMHSs=) 10: fG6If6WZh4pXAVRu1gEQ7wbPbEs.roa (hash: OIBSpF8oXZotrR8RVX6KacBPnJZCoNiFLIZ7aWyayQU=) 11: gfQeyx6Q7sjS4Xpny9IUQ8tQxLY.roa (hash: zrq/geD7ajZHxMLm7OvFbnGGXeIS14GfMNfAscurlR8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Jun 2025 22:50:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:48:1e:7d:b4:c7:ea:60:83:ed:a9:be:64:6d:04:50:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0ff2c6229af763a99f5349a32510df4a4526143 Validity Not Before: Jun 7 02:00:47 2025 GMT Not After : Jun 8 02:00:47 2025 GMT Subject: CN=1cb77f2f80a0fde352e96f1aa10534c38d2849f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:67:1c:aa:ba:a1:57:67:a3:12:3a:e4:52:9e: 35:fe:cd:c9:dc:3c:74:8f:82:5b:82:d2:f6:8b:d9: 8f:a3:17:5d:eb:bb:9a:50:8e:1d:19:b7:42:8d:76: 9b:26:8e:75:90:03:f2:79:4d:ee:c1:9e:fe:27:64: 3c:66:93:7d:03:af:4f:17:a0:2d:ff:c0:28:67:eb: f2:b6:1d:5a:97:da:ad:96:9e:8b:2d:78:79:5d:76: 7b:36:ad:5b:52:17:1d:f2:9d:c7:72:35:c1:5b:bd: f2:ce:fa:a8:70:07:9d:f1:eb:f6:fc:36:86:ac:bb: 3f:b7:ce:2c:de:1a:8c:03:38:b7:1b:a7:b9:9c:da: df:11:9c:2e:01:dc:25:bf:ff:92:88:31:9f:84:e7: c4:a8:8b:c7:97:9d:9e:62:f5:26:c5:f9:0b:52:15: bd:11:91:bd:1e:2d:ca:67:f8:ef:e9:78:4d:a0:7c: c2:2d:43:81:43:1d:2e:de:9f:14:72:e0:45:64:5b: 1b:fa:d2:70:70:7b:f9:bf:db:b3:a3:e0:25:35:d9: 0e:63:45:01:1d:65:3f:dd:b3:c6:7b:e0:8e:98:10: b9:3b:3d:ce:64:b2:e3:a4:b9:a2:6e:94:8f:4b:03: ec:da:03:3e:b6:46:c0:5b:41:65:e1:98:52:f7:ff: ac:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:B7:7F:2F:80:A0:FD:E3:52:E9:6F:1A:A1:05:34:C3:8D:28:49:F1 X509v3 Authority Key Identifier: keyid:F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:99:ca:47:18:48:03:2e:99:54:d3:d3:09:ba:ae:95:89:42: 4d:08:f1:69:5e:b2:5a:81:c8:60:fc:d5:62:78:47:30:f2:06: 35:9a:d4:fd:d3:da:cc:65:4e:c8:c1:d2:61:ba:5e:5a:fe:3a: 4a:fa:98:e7:19:3c:5e:ad:67:8c:03:d8:86:68:32:45:d9:46: a6:c2:e9:82:51:15:75:f3:91:32:7b:c1:18:3e:a2:10:74:90: d8:eb:c5:56:e9:d8:33:77:ae:84:67:7d:20:b5:d3:a3:9d:da: 71:ac:45:12:9e:a8:a3:e5:e9:b8:83:38:06:6a:fb:95:5c:b4: 9d:a7:f0:6e:51:ef:83:e7:24:bf:53:e5:3e:73:25:b6:c1:81: bf:37:e8:fd:f2:0c:c9:60:c3:bb:c0:25:ce:d9:18:d9:96:2d: 5e:e0:2b:0d:f7:37:7a:a4:35:e8:91:b0:45:c1:03:05:f5:97: bc:b3:a4:b7:f3:10:4e:b8:b5:b9:17:f6:56:35:1d:57:c4:a3: 00:9f:8f:24:05:2e:cb:5a:a1:8e:64:a4:10:2c:8f:df:23:8c: 06:f8:e1:2b:89:e1:b7:59:56:f9:0f:6f:8f:2f:4f:a3:6b:67: 1e:dc:ee:cd:75:69:1d:5d:06:96:b6:bb:09:1e:32:c5:8b:9e: 69:75:65:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdIHn20x+pgg+2pvmRtBFBmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwZmYyYzYyMjlhZjc2M2E5OWY1MzQ5YTMyNTEwZGY0YTQ1 MjYxNDMwHhcNMjUwNjA3MDIwMDQ3WhcNMjUwNjA4MDIwMDQ3WjAzMTEwLwYDVQQD EygxY2I3N2YyZjgwYTBmZGUzNTJlOTZmMWFhMTA1MzRjMzhkMjg0OWYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2ccqrqhV2ejEjrkUp41/s3J3Dx0 j4JbgtL2i9mPoxdd67uaUI4dGbdCjXabJo51kAPyeU3uwZ7+J2Q8ZpN9A69PF6At /8AoZ+vyth1al9qtlp6LLXh5XXZ7Nq1bUhcd8p3HcjXBW73yzvqocAed8ev2/DaG rLs/t84s3hqMAzi3G6e5nNrfEZwuAdwlv/+SiDGfhOfEqIvHl52eYvUmxfkLUhW9 EZG9Hi3KZ/jv6XhNoHzCLUOBQx0u3p8UcuBFZFsb+tJwcHv5v9uzo+AlNdkOY0UB HWU/3bPGe+COmBC5Oz3OZLLjpLmibpSPSwPs2gM+tkbAW0Fl4ZhS9/+s5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBy3fy+AoP3jUulvGqEFNMONKEnxMB8GA1UdIwQY MBaAFPD/LGIpr3Y6mfU0mjJRDfSkUmFDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFA4c1lpbXZkanFaOVRTYU1sRU45S1JTWVVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wNTFmYTItYzU4MC00YTAyLWExODYt ZTY5ZjdhNWQyZDkwLzEvOFA4c1lpbXZkanFaOVRTYU1sRU45S1JTWVVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8wNTFmYTItYzU4MC00YTAyLWExODYtZTY5ZjdhNWQyZDkw LzEvOFA4c1lpbXZkanFaOVRTYU1sRU45S1JTWVVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY5nKRxhI Ay6ZVNPTCbqulYlCTQjxaV6yWoHIYPzVYnhHMPIGNZrU/dPazGVOyMHSYbpeWv46 SvqY5xk8Xq1njAPYhmgyRdlGpsLpglEVdfORMnvBGD6iEHSQ2OvFVunYM3euhGd9 ILXTo53acaxFEp6oo+XpuIM4Bmr7lVy0nafwblHvg+ckv1PlPnMltsGBvzfo/fIM yWDDu8AlztkY2ZYtXuArDfc3eqQ16JGwRcEDBfWXvLOkt/MQTri1uRf2VjUdV8Sj AJ+PJAUuy1qhjmSkECyP3yOMBvjhK4nht1lW+Q9vjy9Po2tnHtzuzXVpHV0Glra7 CR4yxYueaXVlbw== -----END CERTIFICATE-----Generated at Sat Jun 7 04:00:42 2025 by rpki-client