$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft File: 1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft (raw, json) Hash identifier: VFlS6L3nY42l6lN+ZwFSstptQ/4fzNFAPQunjkFxdEc= Subject key identifier: A1:18:3B:BC:57:D9:CB:D7:3B:03:2F:AB:D5:4F:82:F6:94:37:B9:01 Authority key identifier: D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F Certificate issuer: /CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f Certificate serial: 01974177AED5CA8447ACC891D1E78A0D348D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft Manifest number: 0184 Signing time: Thu 05 Jun 2025 19:00:51 +0000 Manifest this update: Thu 05 Jun 2025 19:00:51 +0000 Manifest next update: Fri 06 Jun 2025 19:00:51 +0000 Files and hashes: 1: 1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl (hash: cTmHR0Cj8Xaj9iDfQ8f/DOSx7XyN2Hlbrl055Ycodtk=) 2: 1wpYbJjMVS82TVxPAOVX6pCPGKQ.roa (hash: 3xvTuCB41F6sdLRUmzqEl3VOI6ssNS6IFJHIQv00iw4=) 3: 41khnizxBGanK3xTNiHjAvKipH8.roa (hash: +2nPBjFX53lA3rBvCP4G7QFUiek8gLIOpEYxktzzHC0=) 4: 5-QMYbv6g-FN-fdVOJNV1HH1m6M.roa (hash: xV1NRgYtEODMWOlzwhSaxIa7QyWEWgoeYdySvkmH+s4=) 5: 7nqYSNRgpsvM-UlPtwo-uw5JdC8.roa (hash: zbZzHQxFPE9nkpfPwYSh1rCa28pAH7nN65AJIuORwmA=) 6: E4KcJHE0n0TKLaC6bMZFCAcb_VQ.roa (hash: hPXmeWeNB758yPScVGfaU0vyDbInbo0zBYshzkP1Pxo=) 7: NyqyG7fPk-uaBV3NXtzHh7POROs.roa (hash: qLY68+vvoU/SWf1iD3VPHA3MqaHYRinOutWS8NLVROo=) 8: TatL9OoUWxXZgHGxaDUj4GDLE9o.roa (hash: +7WpBtxQIB4QfQxia/0uvzsc5xW01CueIK7yUh8b2As=) 9: oMfkKGXFcnmSViJxvMVaXYN-WMc.roa (hash: dHmlqEj0EtV9pApFZVhgBPJ1DnVEoibHvmv/oANdXq0=) 10: osl7KzSOgMl0BA3IKYuC-EBfUyo.roa (hash: 0BANXCYD/nKLAgu9nDU4e1ZVArlN7v2aY71LQoAs1lw=) 11: qhRts2cf4P5t7bHqjMHL0FdipSw.roa (hash: eN2E4ioyfVg0a1c+Sdpb0/GA9hP7MUujM4zMFqNQiyw=) 12: uCMSjxkOkfzHdypyvUOewV8qw9A.roa (hash: bfz4N8RVke/0ZUN0349iWnmXb4vrOxiJS20dfxPr4zQ=) 13: zve48iCRLcxAfyRqEYbhVJaDbkc.roa (hash: hcNZnUJ77WU5RzlZ8fQ1M+4ucnK5Pr12OcO2QKPdDls=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Jun 2025 19:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:41:77:ae:d5:ca:84:47:ac:c8:91:d1:e7:8a:0d:34:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f Validity Not Before: Jun 5 19:00:51 2025 GMT Not After : Jun 6 19:00:51 2025 GMT Subject: CN=a1183bbc57d9cbd73b032fabd54f82f69437b901 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:8b:2e:a8:b7:43:66:e1:63:cf:49:c6:f1:bd: ff:76:4e:6e:cb:7b:30:22:0e:08:7a:05:fc:6e:a7: 6a:9a:54:f6:f4:a5:df:2c:22:9f:ce:43:18:38:fa: 5b:56:66:cb:91:e6:0c:f8:18:80:84:ed:70:da:52: 9a:1c:51:b9:34:49:dd:6c:1a:4f:6e:67:d4:34:6e: d1:31:70:2c:bf:a5:25:0c:db:0f:e9:0a:62:05:1c: 20:be:99:32:e8:69:56:52:4c:8c:37:67:56:bb:63: 5f:49:1d:45:a6:26:a5:54:5c:63:30:83:92:d6:10: 87:c6:89:54:7f:97:d0:ea:9d:a7:b4:50:d6:82:0f: c6:da:08:e9:77:ec:d4:f1:bf:6f:e0:87:7f:73:8c: 8c:d0:f0:83:c3:a9:34:72:e4:38:c0:6b:20:39:f2: 29:7f:2a:ce:19:56:35:bf:78:a3:7b:ff:93:0c:04: 7e:33:e1:60:0b:42:ac:0b:1b:fa:cf:80:37:d4:bd: 7c:35:1e:55:c4:05:fa:92:80:e9:15:ac:ce:db:c1: 2c:6f:6e:24:eb:c1:5b:a9:64:27:61:96:7e:af:a7: 5b:62:20:ae:96:3a:44:42:d3:8a:0b:d8:11:ce:c8: 66:d7:70:78:f9:aa:94:a0:d2:06:2d:2a:e5:fd:69: 54:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:18:3B:BC:57:D9:CB:D7:3B:03:2F:AB:D5:4F:82:F6:94:37:B9:01 X509v3 Authority Key Identifier: keyid:D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:78:97:ec:ca:07:0c:48:d5:49:89:04:8d:e3:0a:f9:36:64: bb:72:1d:81:28:ea:42:43:dc:db:7d:e0:85:19:84:30:a9:36: 24:01:5c:af:f3:22:eb:21:8e:ec:1e:9d:61:05:c9:2a:7a:90: 05:c6:59:24:68:77:c0:95:3f:10:c4:8c:f7:6b:73:54:f7:e6: 4b:b1:12:96:de:1b:57:5b:7f:61:e1:64:47:03:7e:6f:6f:ce: 66:1a:84:24:d9:d6:76:d3:aa:86:2f:a7:67:59:e0:5a:b4:46: 8b:3b:60:e5:85:37:96:d2:d5:49:dc:25:8c:ff:dd:1e:66:d6: b4:d5:e6:b7:1b:f3:bf:f0:f1:91:b7:6e:a1:a1:5f:d2:5a:8b: d8:a6:66:cd:e4:63:a4:11:18:11:4b:41:82:75:d8:74:83:32: a4:e0:4d:d4:da:51:5b:55:f8:ec:94:05:dd:23:b4:c4:bb:2a: 5c:93:13:e8:f6:5d:5c:46:99:8c:a3:31:0a:7d:c7:c2:a4:3d: 70:31:96:be:67:d5:dc:80:97:ab:76:a5:ce:3f:95:36:f1:18: d2:f4:a5:09:26:22:4b:36:17:63:43:53:d1:4a:ba:d8:f1:13: 5f:95:58:1b:45:d3:fe:ee:b9:62:8b:f6:de:fb:db:b4:ef:b2: dd:2c:bb:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdBd67VyoRHrMiR0eeKDTSNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0Yjk1MzMwNzM0YzlhYWY2NmQxMWJjZDJiZWRkMzgwZjQx MGY5M2YwHhcNMjUwNjA1MTkwMDUxWhcNMjUwNjA2MTkwMDUxWjAzMTEwLwYDVQQD EyhhMTE4M2JiYzU3ZDljYmQ3M2IwMzJmYWJkNTRmODJmNjk0MzdiOTAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4suqLdDZuFjz0nG8b3/dk5uy3sw Ig4IegX8bqdqmlT29KXfLCKfzkMYOPpbVmbLkeYM+BiAhO1w2lKaHFG5NEndbBpP bmfUNG7RMXAsv6UlDNsP6QpiBRwgvpky6GlWUkyMN2dWu2NfSR1FpialVFxjMIOS 1hCHxolUf5fQ6p2ntFDWgg/G2gjpd+zU8b9v4Id/c4yM0PCDw6k0cuQ4wGsgOfIp fyrOGVY1v3ije/+TDAR+M+FgC0KsCxv6z4A31L18NR5VxAX6koDpFazO28Esb24k 68FbqWQnYZZ+r6dbYiCuljpEQtOKC9gRzshm13B4+aqUoNIGLSrl/WlUXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKEYO7xX2cvXOwMvq9VPgvaUN7kBMB8GA1UdIwQY MBaAFNS5UzBzTJqvZtEbzSvt04D0EPk/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUxsVE1ITk1tcTltMFJ2TkstM1RnUFFRLVQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8xNWQyNzEtMDVjZC00NjFlLWE3YjYt NDMwMTNiMjhkOWQ2LzEvMUxsVE1ITk1tcTltMFJ2TkstM1RnUFFRLVQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy8xNWQyNzEtMDVjZC00NjFlLWE3YjYtNDMwMTNiMjhkOWQ2 LzEvMUxsVE1ITk1tcTltMFJ2TkstM1RnUFFRLVQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOHiX7MoH DEjVSYkEjeMK+TZku3IdgSjqQkPc233ghRmEMKk2JAFcr/Mi6yGO7B6dYQXJKnqQ BcZZJGh3wJU/EMSM92tzVPfmS7ESlt4bV1t/YeFkRwN+b2/OZhqEJNnWdtOqhi+n Z1ngWrRGiztg5YU3ltLVSdwljP/dHmbWtNXmtxvzv/DxkbduoaFf0lqL2KZmzeRj pBEYEUtBgnXYdIMypOBN1NpRW1X47JQF3SO0xLsqXJMT6PZdXEaZjKMxCn3HwqQ9 cDGWvmfV3ICXq3alzj+VNvEY0vSlCSYiSzYXY0NT0Uq62PETX5VYG0XT/u65Yov2 3vvbtO+y3Sy7ig== -----END CERTIFICATE-----Generated at Fri Jun 6 04:56:50 2025 by rpki-client