$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft File: DFFAKCWR-ZEvljnuFBK20dz_CGE.mft (raw, json) Hash identifier: cMLBSWUsVo1SplRtu3K/3K0YmROGYtNtJM0hpKsN/Ac= Subject key identifier: D3:E7:70:03:CB:7B:D5:87:5C:22:56:E6:24:52:0A:22:81:81:A1:63 Authority key identifier: 0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61 Certificate issuer: /CN=0c5140282591f9912f9639ee1412b6d1dcff0861 Certificate serial: 019748C322340F9FBA2D8572B9941B37B9C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft Manifest number: 1076 Signing time: Sat 07 Jun 2025 05:00:37 +0000 Manifest this update: Sat 07 Jun 2025 05:00:37 +0000 Manifest next update: Sun 08 Jun 2025 05:00:37 +0000 Files and hashes: 1: 11LkwQ-N6VfEoL2UOolTTtwyC0A.roa (hash: 4IiXXwUiHVJn5G6ZxhwvZ1hIOI9+INkjTA9o1uNtGQ0=) 2: 67xwFwY8Vk2ZubSlLJvHrRraSTM.roa (hash: jU5f+Ei9hwCgrVDyChiwT3f+vBtT/uSvK7fGn1pfLCc=) 3: CGn4s2pU7K3VeOrkYLpYpgrWn-I.roa (hash: GQqBG/Vl4bd5VzIuhCKjbzMj1VUBaxRbMg/a4MUGD6Q=) 4: DFFAKCWR-ZEvljnuFBK20dz_CGE.crl (hash: ZhnJSP45Y6tXNSzRk1jG7nPetBcfzFOReawyIb/8K2Y=) 5: DiliRPwRjP6D-WBIXNpcI_uIJzI.roa (hash: ut4bSKD0jhs7WDv5PHmxnpCUZErJkrPwIwtAwTPpjBU=) 6: FI6bfjPN7t6NFAgQVExPOIQtMIg.roa (hash: PXiteBbCStnt/SqubPRrbNoWhhfQi1ko8O4Z1tf6P4k=) 7: PUVo5ST7GwSNOno6GEB7-_75840.roa (hash: cD6D5iZgvHwEh63NtvZYi1ih3mUJsM/67jxgu3bl/KM=) 8: QmLqclIeKgJyec7JezomHprMxUI.roa (hash: jnGw1aX/bbjBYQipqNzcy1dm9N/v8qMjZ2OnfDvSpes=) 9: VzoNXL780cFrtxBAM22HPsqCfbY.roa (hash: r8ASjL2fERxq4oWQV1zbe0dNGLgz5xWOZYb0jAuonuU=) 10: bnr5M42KRWXFv7chSu2D1KxB-cw.roa (hash: ScAYtfr9XW53vAvDd9YH+2F+3RelzhQ8EtRFMubEhTw=) 11: fs2NqdHmBWbdljnYXU7Xc8k9FFw.roa (hash: d42+qHA3Gw35e9i+slzRwkeTMrNV+saclrLYPR5KBMU=) 12: j-BmNE1PL8fJEwiUUtO9Mv28nV0.roa (hash: z6EQyduvcoZf7YV0u5wyMfuoZtiWFaeEgvTRcTy87Qk=) 13: j3OTuke_mRknBmt1C4J4dhIEdOk.roa (hash: EmP6SaUNKBb8hBPbpdHrMv/BtY++jtNe3kNkjqBzyN8=) 14: kh0epdLNSddiQFDfyRWlWNSgNTc.roa (hash: hMYh6cNkenwqAq3pUFKO3vM0qKRLjOoLvXbL/3HS8fo=) 15: lSA3-P81lGkm7lfiM62ZONoLQ8o.roa (hash: BtM051ZzrqYida10JCA45Qbdudn+mcjbrJv0lanGaek=) 16: vJODnu8qBB0BlR1jt5n-BRo4qmc.roa (hash: cVd7WS0pSoOiicbKp9gmdhaO5+PWfMgG5srT6gEkT+I=) 17: ykinNBKuv2aUf3zoGP_gc5Krh-g.roa (hash: UHYGkWwi+Bc8CtX9dR7vpwojaXCxSC9SxUum639MnAM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Jun 2025 05:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:48:c3:22:34:0f:9f:ba:2d:85:72:b9:94:1b:37:b9:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c5140282591f9912f9639ee1412b6d1dcff0861 Validity Not Before: Jun 7 05:00:37 2025 GMT Not After : Jun 8 05:00:37 2025 GMT Subject: CN=d3e77003cb7bd5875c2256e624520a228181a163 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:9c:89:4a:fb:b3:8a:7c:b0:a6:61:56:c1:00: 3f:6d:db:a5:37:f0:4f:44:c9:f7:12:dc:d9:09:a8: 2a:ad:f9:c1:9d:cc:7c:85:d4:56:96:03:ad:32:6c: 40:06:91:4b:06:50:6f:80:9e:55:b1:e9:12:9d:94: e6:5b:8b:cd:4a:98:de:36:46:46:09:34:a4:d7:89: aa:42:71:d4:20:38:95:66:9c:d2:6b:16:70:59:e7: aa:e2:53:49:46:21:2d:c1:2e:6f:b7:ea:0c:bd:58: 05:83:b6:fd:e4:40:b0:84:b2:ca:73:09:e2:6d:44: 34:8d:d7:ee:46:92:67:30:1f:25:ae:8d:2e:9d:05: a3:4a:97:67:a0:79:a2:a8:be:d0:e2:73:07:7b:6f: d7:b0:20:33:f1:43:46:26:98:71:07:1f:f9:df:f5: c8:80:7b:70:53:1b:88:de:ff:c4:97:d9:37:5a:bb: b2:d1:b7:8b:d6:f4:3d:43:95:fc:2f:59:6f:b7:fe: ec:db:c5:0a:98:00:d0:ec:1a:e9:17:cc:65:12:39: 58:ab:54:74:1e:13:7b:a9:c6:10:c6:88:15:f0:77: 7f:4f:8d:f8:11:78:7e:9b:be:06:db:6d:87:5e:97: f1:4d:41:e3:4f:ae:6e:ac:7e:9d:01:37:70:6b:4a: bf:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:E7:70:03:CB:7B:D5:87:5C:22:56:E6:24:52:0A:22:81:81:A1:63 X509v3 Authority Key Identifier: keyid:0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:99:4a:ea:33:d2:db:82:a2:41:50:52:e8:1b:68:fd:04:cc: e5:b4:d2:40:82:30:52:21:eb:fb:27:a4:63:9b:c5:45:45:2d: e1:fb:64:d4:95:da:c5:c3:3c:0c:bb:69:05:fe:57:06:e2:aa: 5e:93:d1:8c:7a:81:28:8c:75:51:84:36:48:09:43:18:c2:d6: 8f:d9:55:38:a5:d7:33:4d:03:75:9e:0d:4e:40:fc:d2:aa:e8: 71:cc:30:f6:65:9a:df:42:08:f6:01:f5:ac:7c:28:89:71:99: 52:a3:47:f3:aa:32:68:94:47:9a:9f:50:38:b6:eb:75:ff:c8: d9:f9:c8:4a:96:65:33:13:9a:a0:76:74:3d:96:78:3a:d6:ab: 73:19:46:8c:25:82:b4:bf:f8:c2:1c:74:b2:28:de:17:92:ea: 10:5b:a2:e8:0e:ac:c3:f6:fa:91:da:2b:f2:32:68:29:9b:63: dd:6e:fb:d3:cc:17:25:1a:9f:9f:e4:80:4e:51:36:c5:6a:09: 0d:13:90:b4:b2:9b:04:f4:03:a0:8a:9d:dd:5d:20:f1:8c:48: 20:22:cf:6d:6d:e6:b2:94:35:35:3d:31:7d:a2:8a:23:3e:41: f7:a2:04:e0:74:6e:37:cd:c1:c2:a3:c0:62:bc:ac:bd:73:c4: e5:70:f0:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdIwyI0D5+6LYVyuZQbN7nDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjNTE0MDI4MjU5MWY5OTEyZjk2MzllZTE0MTJiNmQxZGNm ZjA4NjEwHhcNMjUwNjA3MDUwMDM3WhcNMjUwNjA4MDUwMDM3WjAzMTEwLwYDVQQD EyhkM2U3NzAwM2NiN2JkNTg3NWMyMjU2ZTYyNDUyMGEyMjgxODFhMTYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJyJSvuzinywpmFWwQA/bdulN/BP RMn3EtzZCagqrfnBncx8hdRWlgOtMmxABpFLBlBvgJ5VsekSnZTmW4vNSpjeNkZG CTSk14mqQnHUIDiVZpzSaxZwWeeq4lNJRiEtwS5vt+oMvVgFg7b95ECwhLLKcwni bUQ0jdfuRpJnMB8lro0unQWjSpdnoHmiqL7Q4nMHe2/XsCAz8UNGJphxBx/53/XI gHtwUxuI3v/El9k3Wruy0beL1vQ9Q5X8L1lvt/7s28UKmADQ7BrpF8xlEjlYq1R0 HhN7qcYQxogV8Hd/T434EXh+m74G222HXpfxTUHjT65urH6dATdwa0q/7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNPncAPLe9WHXCJW5iRSCiKBgaFjMB8GA1UdIwQY MBaAFAxRQCglkfmRL5Y57hQSttHc/whhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wNTU0YTItZDNkOS00ZmM0LThlZDUt ZGU5MTQ2OWQzNzcyLzEvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8wNTU0YTItZDNkOS00ZmM0LThlZDUtZGU5MTQ2OWQzNzcy LzEvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaplK6jPS 24KiQVBS6Bto/QTM5bTSQIIwUiHr+yekY5vFRUUt4ftk1JXaxcM8DLtpBf5XBuKq XpPRjHqBKIx1UYQ2SAlDGMLWj9lVOKXXM00DdZ4NTkD80qroccww9mWa30II9gH1 rHwoiXGZUqNH86oyaJRHmp9QOLbrdf/I2fnISpZlMxOaoHZ0PZZ4OtarcxlGjCWC tL/4whx0sijeF5LqEFui6A6sw/b6kdor8jJoKZtj3W7708wXJRqfn+SATlE2xWoJ DROQtLKbBPQDoIqd3V0g8YxIICLPbW3mspQ1NT0xfaKKIz5B96IE4HRuN83BwqPA YrysvXPE5XDwfg== -----END CERTIFICATE-----Generated at Sat Jun 7 14:52:37 2025 by rpki-client