$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft File: IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft (raw, json) Hash identifier: IttThOdUqHOU2/tOcxSOKcIfIxMaoJ5k0uz3p68KFYU= Subject key identifier: 0F:46:56:BE:E6:AF:22:44:0D:45:43:66:D2:CF:67:0B:AB:34:C6:89 Authority key identifier: 20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3 Certificate issuer: /CN=206f1c32bc0a9006081d552fede67d6842921ec3 Certificate serial: 019747B0F6767530F8AF32439801BAFA8D5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft Manifest number: 1589 Signing time: Sat 07 Jun 2025 00:01:09 +0000 Manifest this update: Sat 07 Jun 2025 00:01:09 +0000 Manifest next update: Sun 08 Jun 2025 00:01:09 +0000 Files and hashes: 1: IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl (hash: 9ULfc37R04mbZJxfG2ZgDSZjiM0AhLLEx6yJ8+EYUCM=) 2: JjcnCrAAiOsbtS7AQ5Vn8A4gz1M.roa (hash: Bl/z5aP7DAGwrycXozMkXlfeTf64sYGT5hnwhdq38jQ=) 3: Mlh1OUvdMvBOzqjOSbLyZKTH_2c.roa (hash: yCEdCTCJqqvCW5+LOgXVNkg5W1DuVkh3vuL3mSHNHSQ=) 4: NlD60E7lLlgKw-PAVTBiBt31h5g.roa (hash: Be7pkoxW5md2fMzfMMkXfWt3s8AQ9PfjTdxxsGL6hhM=) 5: O4pIscar-T5J7wN4zdwq7SCw37o.roa (hash: vINaa0L+6gqqQWj7X6CWh0AhbZ33Gs5iMEtG/RPtaW4=) 6: RHTgJJC8qpvMfj8eUatfxfhezWA.roa (hash: ofcXjVh/NZbvKJndtnjeeh4aHwmeKnUVYyFaL9vHuqs=) 7: TgKFslseYsCcxq6hrybuWIYEhgE.roa (hash: +vMPxdsdJB0rdmiczN+V/eLqs7K7ErkjymCEJGzYw2Y=) 8: eOgvquigvzDPj-8dhQt95xkui_E.roa (hash: zEpy4lJB9tJ5de8zvRSwkcXfAVk3pin2iihLqa8DHd8=) 9: gTSl0s8ecjgcIAeVeUFH15zCuTo.roa (hash: NI2Bkr1fj2ydaK7ynlfqI3wFAzEUjTgFHJwBlzpASFI=) 10: s6l73Ozc9G__irpTpPlNucOT8bs.roa (hash: GqBwmeoAuFCGB9Y+I57QWriPb1mo81JmyaYf7vUIrHc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Jun 2025 22:50:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:47:b0:f6:76:75:30:f8:af:32:43:98:01:ba:fa:8d:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=206f1c32bc0a9006081d552fede67d6842921ec3 Validity Not Before: Jun 7 00:01:09 2025 GMT Not After : Jun 8 00:01:09 2025 GMT Subject: CN=0f4656bee6af22440d454366d2cf670bab34c689 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:70:32:e7:1f:5b:72:62:44:d6:7e:2a:e0:e9: 88:39:f2:53:91:89:2d:b9:2f:d5:29:37:3d:3a:04: 70:29:15:a9:4a:77:df:8d:9f:be:b2:29:82:aa:34: 26:9e:95:e9:5f:13:ef:9c:95:88:72:c6:a5:9b:ee: fd:4d:00:24:2c:ec:c5:f9:3d:c8:e6:03:40:0f:c5: 62:4b:58:fb:f7:dc:d9:22:5b:1b:cf:a7:03:6e:5a: d7:9c:16:e0:8f:35:55:7d:42:78:88:3c:c3:76:3d: 1f:e5:60:54:2b:23:29:4c:99:51:fd:f1:d8:bf:24: aa:3e:5b:81:37:61:0a:ec:61:b6:39:41:4b:e0:4d: c1:a3:4c:66:b7:bf:de:bb:73:6e:2d:8c:10:4a:ea: d5:fa:8b:1a:30:61:ef:a1:2f:b2:65:a7:b8:f6:96: 0a:45:af:83:88:a7:0f:9a:64:39:3a:bc:ea:f1:81: 77:72:37:3a:09:f6:48:bc:cf:2d:d1:9c:d1:e2:3c: 14:69:4a:47:65:a6:dc:05:51:88:83:18:a6:67:13: 83:ce:4b:c7:9b:76:1b:19:a1:33:d1:f3:7b:d1:a8: 37:60:13:f5:02:e6:14:0d:d0:f2:1a:ad:a1:ab:dd: 44:94:30:54:71:39:cd:99:2a:c4:b3:b7:41:34:6f: 8c:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:46:56:BE:E6:AF:22:44:0D:45:43:66:D2:CF:67:0B:AB:34:C6:89 X509v3 Authority Key Identifier: keyid:20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:37:ab:a6:27:e1:bb:cc:ab:78:44:be:df:ca:8f:de:64:b1: 1d:89:ea:7f:63:ec:f6:8a:50:51:ab:04:91:4e:17:8e:dd:05: e0:c0:ac:0f:d4:5c:74:41:9d:f2:a3:8e:49:0c:48:02:ea:d3: 69:b5:71:dc:40:ea:ce:15:62:34:ef:b9:49:6a:60:3d:d3:4c: 68:00:e7:e9:61:80:08:64:b6:7e:0a:bc:07:9d:6f:5a:8d:95: 53:99:c2:1a:9b:70:65:ef:dc:fb:91:72:0f:a2:7a:0d:ad:bd: bc:67:ee:71:15:e0:88:0e:20:bf:71:78:f5:9b:1f:a5:f8:d6: 1a:44:c9:ed:f6:69:8c:b8:9f:d8:80:b7:7f:41:34:9e:30:05: 86:e9:c0:2f:ce:42:28:ee:f3:db:59:2f:8d:35:56:33:5b:24: ec:67:8a:22:ef:81:5a:6c:10:2b:62:bc:46:88:62:22:c5:9e: 75:66:d1:3f:74:3f:cc:26:db:46:a3:ba:6f:13:a7:80:03:a2: 33:c4:90:f1:dd:6f:2f:a0:b6:d8:d2:bd:c2:cd:00:28:90:2c: e0:cd:96:2c:1a:79:87:82:6a:bb:14:e4:1e:0d:1f:d7:45:f7: 00:c4:23:38:9b:47:e5:6d:e9:4b:f2:b1:a7:ed:e1:19:eb:ed: 76:88:b2:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdHsPZ2dTD4rzJDmAG6+o1eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwNmYxYzMyYmMwYTkwMDYwODFkNTUyZmVkZTY3ZDY4NDI5 MjFlYzMwHhcNMjUwNjA3MDAwMTA5WhcNMjUwNjA4MDAwMTA5WjAzMTEwLwYDVQQD EygwZjQ2NTZiZWU2YWYyMjQ0MGQ0NTQzNjZkMmNmNjcwYmFiMzRjNjg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnAy5x9bcmJE1n4q4OmIOfJTkYkt uS/VKTc9OgRwKRWpSnffjZ++simCqjQmnpXpXxPvnJWIcsalm+79TQAkLOzF+T3I 5gNAD8ViS1j799zZIlsbz6cDblrXnBbgjzVVfUJ4iDzDdj0f5WBUKyMpTJlR/fHY vySqPluBN2EK7GG2OUFL4E3Bo0xmt7/eu3NuLYwQSurV+osaMGHvoS+yZae49pYK Ra+DiKcPmmQ5Orzq8YF3cjc6CfZIvM8t0ZzR4jwUaUpHZabcBVGIgximZxODzkvH m3YbGaEz0fN70ag3YBP1AuYUDdDyGq2hq91ElDBUcTnNmSrEs7dBNG+MHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA9GVr7mryJEDUVDZtLPZwurNMaJMB8GA1UdIwQY MBaAFCBvHDK8CpAGCB1VL+3mfWhCkh7DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUc4Y01yd0trQVlJSFZVdjdlWjlhRUtTSHNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9hOTE4ODQtNmY1OC00ZGRkLTg5MzIt YmJhODYwYjI2YzAyLzEvSUc4Y01yd0trQVlJSFZVdjdlWjlhRUtTSHNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9hOTE4ODQtNmY1OC00ZGRkLTg5MzItYmJhODYwYjI2YzAy LzEvSUc4Y01yd0trQVlJSFZVdjdlWjlhRUtTSHNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyDerpifh u8yreES+38qP3mSxHYnqf2Ps9opQUasEkU4Xjt0F4MCsD9RcdEGd8qOOSQxIAurT abVx3EDqzhViNO+5SWpgPdNMaADn6WGACGS2fgq8B51vWo2VU5nCGptwZe/c+5Fy D6J6Da29vGfucRXgiA4gv3F49ZsfpfjWGkTJ7fZpjLif2IC3f0E0njAFhunAL85C KO7z21kvjTVWM1sk7GeKIu+BWmwQK2K8RohiIsWedWbRP3Q/zCbbRqO6bxOngAOi M8SQ8d1vL6C22NK9ws0AKJAs4M2WLBp5h4JquxTkHg0f10X3AMQjOJtH5W3pS/Kx p+3hGevtdoiyMA== -----END CERTIFICATE-----Generated at Sat Jun 7 03:33:29 2025 by rpki-client