$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.mft File: nZibOZjhn8APhnDPbJ10AXFc808.mft (raw, json) Hash identifier: rYXb+qIS9KGGXRtIt6Tz9FQZ+YqKrtQNkBEstcs/sdM= Subject key identifier: D5:90:C9:31:65:63:97:0B:A2:3D:C3:6C:A3:04:9C:F6:D4:E9:59:2E Authority key identifier: 9D:98:9B:39:98:E1:9F:C0:0F:86:70:CF:6C:9D:74:01:71:5C:F3:4F Certificate issuer: /CN=9d989b3998e19fc00f8670cf6c9d7401715cf34f Certificate serial: 019749310F862B9DBC8C6979041E621304C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nZibOZjhn8APhnDPbJ10AXFc808.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.mft Manifest number: 70 Signing time: Sat 07 Jun 2025 07:00:41 +0000 Manifest this update: Sat 07 Jun 2025 07:00:41 +0000 Manifest next update: Sun 08 Jun 2025 07:00:41 +0000 Files and hashes: 1: 2d84iaAy9peqMc8uPtiQJUVpqhA.roa (hash: XonhU7MQtuyMxgxQYBP6Y8GxbPwqjebSF5A8W+e+9Dk=) 2: 7dhCE4YFHCUjlqkpkZY7lO72jeU.roa (hash: U8fxbXZIOaigGsLrKkx21Oe8R/4CGL6VvmyMHjpBRGE=) 3: EzmgW5SIzKZhd3gcqi5vbAQspRs.roa (hash: 9GSjRSh1NRSv4vNrPQJMwH5N/rEwdp6boN/thonioHA=) 4: OWURZZQfXBLCjrMIo9lI7C6_8rU.roa (hash: mhkt0q1UgZZPM01b3Aszei1MJkXP1Fj7gDNO1ZQ7Zg0=) 5: Oi5y3oR-zAeDQVQqnqlub4mxZBY.roa (hash: wiW5g0XVDHNy1QPGb/8FJ3EhNGUt4wPgRz1ROLxdqCE=) 6: SWb9dWC7dX_rwlK0omJMc3wlDks.roa (hash: LsnTgIHVTvCHjZWRXF28FLY3Qh1KmfRKmu1wsQo8XRo=) 7: Vkn5Fjc1blCjW36pRVzcI2dLeRM.roa (hash: b4zxuu0+PWf6Y2gL35zDWaLiEcfMZ+LL8pUvtmTR45E=) 8: VtA0sYtoBS8bGZyWtELDxZdV15w.roa (hash: qr5xc7yY1HYHlnNGTTUy5XqyOe3bNLkhXLhBpl8oti4=) 9: XqFMryLIw1x1QzwoXKE2TA0QsD8.roa (hash: 4jdqgSKXalwNBkWrPQkzkWpgRaMNA4FVpS3FsC5tqMU=) 10: YzR4bVvYuilSAsgyIIG5IHRToDw.roa (hash: aeoTN5jE2adPRR+yahq8zhU6/6Zb1ls1gStL9w3wSCY=) 11: lcQi5Bm9eFSfTGrvmV8ciQpCrmk.roa (hash: RYrQUk3+RUhAVWqgU4UejdbJ0Pp8G4DFGkckRr+4ALw=) 12: nK63OUw5HovdmnJOU8TA3IOqFXc.roa (hash: At6fl1NEh3tU3v5PbKWMv3k4BjWoFVeGE3Mdg5kqGAA=) 13: nZibOZjhn8APhnDPbJ10AXFc808.crl (hash: QvpT50UErsMyG8VC/ohF948yGrTqk9zjIDosgF9y2Ko=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.mft rsync://rpki.ripe.net/repository/DEFAULT/nZibOZjhn8APhnDPbJ10AXFc808.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Jun 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:49:31:0f:86:2b:9d:bc:8c:69:79:04:1e:62:13:04:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d989b3998e19fc00f8670cf6c9d7401715cf34f Validity Not Before: Jun 7 07:00:41 2025 GMT Not After : Jun 8 07:00:41 2025 GMT Subject: CN=d590c9316563970ba23dc36ca3049cf6d4e9592e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c1:21:53:0c:f4:c2:c4:b9:59:b9:fd:cb:03: d4:1e:95:1b:ab:aa:a1:07:c2:fc:d4:69:f9:53:d0: e3:de:00:f6:c7:82:71:7f:80:31:1b:e8:6f:03:34: 11:c3:74:ca:9c:3c:5d:32:cc:23:18:16:0a:4e:20: e0:25:54:d2:64:b6:c2:8c:cf:ac:a6:28:97:1e:71: 7a:4b:7a:fa:09:8a:61:1e:36:f9:15:82:5e:44:b8: d5:14:c6:af:f7:73:2b:01:e7:5c:a4:ea:0e:d7:e9: c2:68:cb:a0:18:73:fa:4f:7f:42:f7:8f:87:ef:89: fc:cf:a7:a1:c2:21:2c:20:b3:1b:65:c2:61:93:66: e6:80:3c:03:af:a7:b9:ed:96:c0:72:73:f4:64:c6: 58:bc:b3:07:66:5c:50:3f:02:65:4f:cc:b2:f2:1b: e3:06:23:61:f2:12:5a:99:7a:ea:cd:1f:b3:78:8e: 05:44:46:8c:9c:34:32:bc:4a:14:70:33:ea:24:15: 57:2e:e8:46:84:17:53:00:2b:f6:cb:8e:fa:41:ab: dc:90:d2:35:f9:84:1c:dc:9f:46:97:73:2d:29:96: 8f:ee:41:39:c4:90:60:a6:5d:76:da:7a:32:57:9e: 18:aa:57:0d:f3:d1:0e:96:d8:5a:cd:27:d4:2b:51: dc:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:90:C9:31:65:63:97:0B:A2:3D:C3:6C:A3:04:9C:F6:D4:E9:59:2E X509v3 Authority Key Identifier: keyid:9D:98:9B:39:98:E1:9F:C0:0F:86:70:CF:6C:9D:74:01:71:5C:F3:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nZibOZjhn8APhnDPbJ10AXFc808.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption eb:e3:6b:9b:cd:3e:e1:94:9d:21:68:68:2b:f3:ff:0e:2a:55: e0:6c:88:cc:1e:b2:97:f3:c6:c7:b1:c6:d8:5b:b1:19:42:c2: 16:06:5f:da:84:a4:77:f9:b5:a0:c8:6f:8f:9e:3d:28:8e:cc: 74:77:03:92:79:ac:3d:b5:a1:0a:42:74:08:1a:ac:f0:6b:9d: 50:de:4b:35:bf:62:23:9e:a9:82:1d:49:32:23:cc:16:57:63: 46:88:06:b1:38:af:cb:59:36:31:81:c7:61:22:da:f3:2a:7c: 8d:05:10:c8:3b:43:30:49:8b:f8:43:b8:ae:8e:bb:28:b2:fc: 07:31:54:dc:ee:ea:ed:97:ff:12:15:f9:70:e3:dd:fc:ac:4d: c2:fd:ea:44:d8:c3:57:8d:79:dc:a6:a8:5b:24:2f:ed:9a:ce: 98:46:d8:b7:a6:ed:89:a1:a6:64:ec:0a:17:ce:fc:68:6b:d2: 2c:b3:77:48:ba:c2:59:58:db:a1:56:71:83:2d:7b:1b:14:ca: 88:ee:59:bf:cc:7b:06:4e:fa:08:7a:0a:f0:2d:fc:79:9b:68: 51:08:1a:33:7c:7e:a6:7d:09:ab:8b:10:d8:b8:7a:8b:96:3a: 84:15:8c:76:dc:b2:d3:01:f6:d5:04:32:aa:52:0b:c9:95:cc: 9e:16:43:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdJMQ+GK528jGl5BB5iEwTJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkOTg5YjM5OThlMTlmYzAwZjg2NzBjZjZjOWQ3NDAxNzE1 Y2YzNGYwHhcNMjUwNjA3MDcwMDQxWhcNMjUwNjA4MDcwMDQxWjAzMTEwLwYDVQQD EyhkNTkwYzkzMTY1NjM5NzBiYTIzZGMzNmNhMzA0OWNmNmQ0ZTk1OTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8EhUwz0wsS5Wbn9ywPUHpUbq6qh B8L81Gn5U9Dj3gD2x4Jxf4AxG+hvAzQRw3TKnDxdMswjGBYKTiDgJVTSZLbCjM+s piiXHnF6S3r6CYphHjb5FYJeRLjVFMav93MrAedcpOoO1+nCaMugGHP6T39C94+H 74n8z6ehwiEsILMbZcJhk2bmgDwDr6e57ZbAcnP0ZMZYvLMHZlxQPwJlT8yy8hvj BiNh8hJamXrqzR+zeI4FREaMnDQyvEoUcDPqJBVXLuhGhBdTACv2y476QavckNI1 +YQc3J9Gl3MtKZaP7kE5xJBgpl122noyV54YqlcN89EOlthazSfUK1HcCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNWQyTFlY5cLoj3DbKMEnPbU6VkuMB8GA1UdIwQY MBaAFJ2YmzmY4Z/AD4Zwz2yddAFxXPNPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblppYk9aamhuOEFQaG5EUGJKMTBBWEZjODA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC84YzVmNWEtODA0Yi00ZGY2LTgyN2It YzdjY2Q3OTQzMTA2LzEvblppYk9aamhuOEFQaG5EUGJKMTBBWEZjODA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC84YzVmNWEtODA0Yi00ZGY2LTgyN2ItYzdjY2Q3OTQzMTA2 LzEvblppYk9aamhuOEFQaG5EUGJKMTBBWEZjODA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA6+Nrm80+ 4ZSdIWhoK/P/DipV4GyIzB6yl/PGx7HG2FuxGULCFgZf2oSkd/m1oMhvj549KI7M dHcDknmsPbWhCkJ0CBqs8GudUN5LNb9iI56pgh1JMiPMFldjRogGsTivy1k2MYHH YSLa8yp8jQUQyDtDMEmL+EO4ro67KLL8BzFU3O7q7Zf/EhX5cOPd/KxNwv3qRNjD V4153KaoWyQv7ZrOmEbYt6btiaGmZOwKF878aGvSLLN3SLrCWVjboVZxgy17GxTK iO5Zv8x7Bk76CHoK8C38eZtoUQgaM3x+pn0Jq4sQ2Lh6i5Y6hBWMdtyy0wH21QQy qlILyZXMnhZDCg== -----END CERTIFICATE-----Generated at Sat Jun 7 10:31:32 2025 by rpki-client