$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft File: Qk_v-1duQR3lEYcdweC9eiDixNc.mft (raw, json) Hash identifier: wZSmjU+DTXPyMwKyMuPli6l5yB6KR8rDsHbwM7EJEQU= Subject key identifier: 5B:4E:3A:F0:B2:20:96:5A:20:AC:C3:EC:76:18:0F:C4:3D:09:35:70 Authority key identifier: 42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7 Certificate issuer: /CN=424feffb576e411de511871dc1e0bd7a20e2c4d7 Certificate serial: 01992B8FA1006F6EC4104047EF7AF3A73931 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft Manifest number: 1255 Signing time: Mon 08 Sep 2025 23:00:57 +0000 Manifest this update: Mon 08 Sep 2025 23:00:57 +0000 Manifest next update: Tue 09 Sep 2025 23:00:57 +0000 Files and hashes: 1: DkWRQ6AFjFv7rFQxgp89eDWwZzQ.roa (hash: k4LFdro8EdWirWfXizr76ZtFjuGb6M0FW+ROBsiX2e8=) 2: EqxrefdyqjYZzrCHrTrk9NHiht0.roa (hash: PPHZGYMZ3zZjXKQA0ijIhbbL3UF83eAk3Rgwiwv4iE0=) 3: Qk_v-1duQR3lEYcdweC9eiDixNc.crl (hash: mDejv9uCXBOy6ogDb4OgKtvUOK/8OnZ/+y77d8XB3fw=) 4: WZk41uDGz8aqTuMK5_6Ovbbhicc.roa (hash: 5tAgdvaBn8Xzr7bEMaN+4RyehKAGk3MjK0uZbZfdeTE=) 5: XLX74-2fz_xcT8jjeK7YOxawwwc.roa (hash: b+kTBN0QlzOTjI1a+jkjVcwIWZ2nk7a5/iBtKxwJ0UQ=) 6: bfcBA_m7rGFWZUrLHbxdnwQav2M.roa (hash: 4dU7FEoFdtXhvQL59inDOPJXsvneQJU94I/fuz7sgSI=) 7: dE-dE1C98bzQfzFp4viryEzVGNI.roa (hash: keoRfTd2k6052VngqSZmL9fG3jF6ZyNryRy3nAsLGG4=) 8: msTbd_cRgqE8u0I4x9SddZe62KE.roa (hash: mupJQETdaQVPnbs2vC2bYij0saRrza6SHsY1QyVDaJY=) 9: tM1Yq2bXiB1kWHQqw1R7qqhyJN0.roa (hash: oZHMmFERFSMV3UaFbDA8Gmy32zJZA3mRLZIu5Egtw7c=) 10: zLAA5CUhIEdukEthrOgBOAwbyZM.roa (hash: MW2hOZqoAax6b0hos7zyQQFLCe7uqIGCikNzhGtl+O0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Sep 2025 23:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:2b:8f:a1:00:6f:6e:c4:10:40:47:ef:7a:f3:a7:39:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=424feffb576e411de511871dc1e0bd7a20e2c4d7 Validity Not Before: Sep 8 23:00:57 2025 GMT Not After : Sep 9 23:00:57 2025 GMT Subject: CN=5b4e3af0b220965a20acc3ec76180fc43d093570 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ef:b6:bf:f2:fa:a4:d3:b3:30:7c:bd:dc:92: ce:ed:fd:20:ed:90:94:c9:02:52:51:27:3e:90:cb: 44:24:21:2a:dc:cf:ef:bd:77:a8:00:77:a4:7a:4a: 45:06:30:44:c4:53:7b:20:69:46:1f:c4:f1:54:ce: ab:99:0e:9c:24:b5:6d:d1:5c:ea:af:62:f8:31:54: 69:80:28:2e:56:dc:3a:97:c6:d3:61:a0:f4:84:b2: 2e:fb:4d:25:23:2a:75:f3:56:70:af:d3:c3:97:d7: 00:d0:b8:e5:8a:c7:92:13:1b:fb:25:c2:9d:ca:21: 18:cf:de:af:98:0a:10:f0:05:4c:dd:21:b6:00:80: 1e:42:b0:67:cb:36:18:93:0d:fa:dd:77:a1:bc:b0: 6e:4d:5c:ef:ed:7e:8e:4b:1a:08:d8:75:8d:39:a5: 0c:93:7d:40:a7:18:5f:67:94:ac:81:21:ad:1f:94: dd:fb:23:d9:8d:aa:e3:ce:97:08:6d:6c:f9:8c:0d: dc:7d:01:f5:00:6f:80:e2:4a:87:6b:7d:48:a5:37: 84:f7:58:df:e2:08:a7:75:f6:e6:c9:0b:63:e5:2f: 77:45:1f:63:70:cc:6c:1b:3b:1c:9b:de:2e:e2:91: 5d:77:e3:a0:77:6c:bc:4e:00:94:e0:b8:d9:aa:d3: 8c:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:4E:3A:F0:B2:20:96:5A:20:AC:C3:EC:76:18:0F:C4:3D:09:35:70 X509v3 Authority Key Identifier: keyid:42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:59:ae:19:56:ab:ec:d7:cb:57:12:fa:c6:fc:2b:de:9d:ca: 8f:6f:25:60:8d:83:e8:3b:19:8c:9e:c4:0f:91:85:7f:4e:02: 51:b9:e4:57:79:fb:23:07:91:bd:25:0a:05:0c:48:d9:57:8b: 8b:e4:99:70:be:1c:09:0c:4a:62:10:d3:04:d1:0a:a9:3e:b2: a9:6f:67:ce:80:2b:69:c3:b4:28:df:63:91:36:c7:65:c1:ff: 01:f8:e9:40:02:ea:bd:10:bd:c7:3d:0a:f2:e6:7e:71:34:54: 23:6f:4a:97:e6:17:df:f8:83:ae:a0:25:11:09:ca:da:59:37: d3:8c:8d:1c:d3:a1:a4:e3:cb:a5:0f:f2:3c:4d:3c:d5:d4:0d: 10:b2:55:ba:0c:8c:a3:27:03:ad:6c:88:da:25:8c:84:35:26: c8:a6:69:83:24:52:85:8b:f1:27:2f:b3:f4:34:04:82:4a:4d: 08:2a:03:71:bd:9b:d6:a1:79:e5:cb:82:54:68:a7:81:28:28: 0f:2c:c0:1d:0b:ec:fd:ca:98:71:0a:95:c2:cc:74:a4:04:a9: 19:11:f0:af:29:4f:1c:28:88:32:a4:6a:0c:86:7e:32:b1:1b: 73:06:f8:29:cb:ec:47:41:47:3c:01:34:f3:17:4b:28:58:5b: b0:bf:b8:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkrj6EAb27EEEBH73rzpzkxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyNGZlZmZiNTc2ZTQxMWRlNTExODcxZGMxZTBiZDdhMjBl MmM0ZDcwHhcNMjUwOTA4MjMwMDU3WhcNMjUwOTA5MjMwMDU3WjAzMTEwLwYDVQQD Eyg1YjRlM2FmMGIyMjA5NjVhMjBhY2MzZWM3NjE4MGZjNDNkMDkzNTcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAne+2v/L6pNOzMHy93JLO7f0g7ZCU yQJSUSc+kMtEJCEq3M/vvXeoAHekekpFBjBExFN7IGlGH8TxVM6rmQ6cJLVt0Vzq r2L4MVRpgCguVtw6l8bTYaD0hLIu+00lIyp181Zwr9PDl9cA0LjliseSExv7JcKd yiEYz96vmAoQ8AVM3SG2AIAeQrBnyzYYkw363XehvLBuTVzv7X6OSxoI2HWNOaUM k31ApxhfZ5SsgSGtH5Td+yPZjarjzpcIbWz5jA3cfQH1AG+A4kqHa31IpTeE91jf 4gindfbmyQtj5S93RR9jcMxsGzscm94u4pFdd+Ogd2y8TgCU4LjZqtOMBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFtOOvCyIJZaIKzD7HYYD8Q9CTVwMB8GA1UdIwQY MBaAFEJP7/tXbkEd5RGHHcHgvXog4sTXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWtfdi0xZHVRUjNsRVljZHdlQzllaURpeE5jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy82MTM1MDgtMDgzMi00MWY2LWFjYjct ODMxZjdlNmY1Y2NkLzEvUWtfdi0xZHVRUjNsRVljZHdlQzllaURpeE5jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy82MTM1MDgtMDgzMi00MWY2LWFjYjctODMxZjdlNmY1Y2Nk LzEvUWtfdi0xZHVRUjNsRVljZHdlQzllaURpeE5jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYFmuGVar 7NfLVxL6xvwr3p3Kj28lYI2D6DsZjJ7ED5GFf04CUbnkV3n7IweRvSUKBQxI2VeL i+SZcL4cCQxKYhDTBNEKqT6yqW9nzoAracO0KN9jkTbHZcH/AfjpQALqvRC9xz0K 8uZ+cTRUI29Kl+YX3/iDrqAlEQnK2lk304yNHNOhpOPLpQ/yPE081dQNELJVugyM oycDrWyI2iWMhDUmyKZpgyRShYvxJy+z9DQEgkpNCCoDcb2b1qF55cuCVGingSgo DyzAHQvs/cqYcQqVwsx0pASpGRHwrylPHCiIMqRqDIZ+MrEbcwb4KcvsR0FHPAE0 8xdLKFhbsL+4sA== -----END CERTIFICATE-----Generated at Tue Sep 9 07:57:26 2025 by rpki-client