$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft File: KUC2lLuglTROS9uZ9R4fECO-V84.mft (raw, json) Hash identifier: kxn7xH8ZBlDxT9bgiN1l7cpMEMTDLnng+ZYlUfAUEwk= Subject key identifier: DD:2B:89:73:EC:37:96:18:BB:3B:18:45:E0:49:71:77:7C:0E:E4:AA Authority key identifier: 29:40:B6:94:BB:A0:95:34:4E:4B:DB:99:F5:1E:1F:10:23:BE:57:CE Certificate issuer: /CN=2940b694bba095344e4bdb99f51e1f1023be57ce Certificate serial: 019739196EE76CD8BCE839B8FFC6BC11CDBD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft Manifest number: 11C5 Signing time: Wed 04 Jun 2025 04:00:57 +0000 Manifest this update: Wed 04 Jun 2025 04:00:57 +0000 Manifest next update: Thu 05 Jun 2025 04:00:57 +0000 Files and hashes: 1: 1ovUioPSRpwIq2x5dlTtKSWuJt4.roa (hash: glwS98kItQ5aoRJZQt2/p+Tl6Vu2+KBQ6fnWyRCpxeE=) 2: 5ukXNC3ufs5Ifk5kp-hI7U2U8bk.roa (hash: 7ZgXZStDcuyKQtO7JFrlQRnqUqaRLXXlsW/IZ58nkBY=) 3: 6RkSnq1YobTmQ_SgAx2wlTkM2hY.roa (hash: Qt/KZiThTuHL2rOKsl4Ng5FOwbzizcKz0/dUQrpTSQc=) 4: B5wkeGWZjqgz1y_Wsk4MaKTCZiQ.roa (hash: ygucH/c6MgSrKR9IgUN2NMGsbIDgc3W5HpOJEaJUGPw=) 5: BXsWIMS27-emUbxg3N856ta0Zhs.roa (hash: VLEvZClMBOllgwcFIEd17EnHHY/+y56YDL+ioA9gy2o=) 6: KUC2lLuglTROS9uZ9R4fECO-V84.crl (hash: zc5oVmx87ptg6uOc5N95qh6+4f7idP3EhdfOrbpZST0=) 7: YCe-DX5vspCo53n_t9ku3ipwr0c.roa (hash: bsw052ayicKeBY1zBDEewyIk2nJP8d+tgqf/wW7oirc=) 8: i4f1t__SHD-QTSI70hcDe0-iLuE.roa (hash: x5mSq7hcGWnjVGsMlKR9T5XBSWXyZ8MGhLOD1IalJyI=) 9: nlwD__Rr_Kz3vDBdg3j2YS8w3UU.roa (hash: oYim5zXBclNnekk/jArnYzaiEFQpBbNaF9nzqE+fJWU=) 10: t_T_n2rHgRaUg9w286JLApHuPsY.roa (hash: Xw7YLCCdVoaSNcuVfBLtogrNakQDxTgFieuFH7n8sSI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:39:19:6e:e7:6c:d8:bc:e8:39:b8:ff:c6:bc:11:cd:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2940b694bba095344e4bdb99f51e1f1023be57ce Validity Not Before: Jun 4 04:00:57 2025 GMT Not After : Jun 5 04:00:57 2025 GMT Subject: CN=dd2b8973ec379618bb3b1845e04971777c0ee4aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:0a:40:c1:e6:cc:e5:05:06:fd:2f:61:95:09: 2a:87:f8:b0:7e:a4:53:84:42:4f:15:8d:8a:8b:c4: 28:84:3e:dc:22:fb:c1:8c:0f:16:71:15:0f:ac:d4: 91:39:e7:14:37:87:7c:76:1b:04:db:56:58:bf:48: 41:55:b2:5b:94:8b:83:55:87:e0:63:b9:29:f2:63: ab:d7:d5:04:ec:28:33:8c:aa:6e:9b:0a:89:ad:62: 04:e5:f3:6d:30:b2:f1:c4:93:71:16:e4:9e:55:6a: f7:f9:54:92:92:5c:f8:06:9f:a1:4c:dc:11:69:9c: c1:0f:46:30:ff:26:29:90:a1:d3:12:83:d9:24:15: 9c:f8:ba:bb:2f:ca:07:56:a7:68:9a:e9:57:57:5c: e5:04:cb:18:b5:49:f4:43:c6:1a:32:08:b9:ac:41: ea:72:6e:12:97:34:cb:14:c4:c9:b7:72:d7:71:34: cc:c5:c5:86:8f:16:c3:ef:60:d8:bf:22:8e:33:19: b3:bb:5d:81:ae:79:62:64:8c:bd:e0:9a:bc:a4:25: df:14:10:11:79:65:ed:4c:68:2b:ac:9b:08:8c:fb: 5f:20:2d:29:0e:6c:ff:6c:2a:ce:ec:b1:8c:77:77: de:a3:3b:38:9a:b5:e0:a8:95:22:b7:2f:25:26:41: 15:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:2B:89:73:EC:37:96:18:BB:3B:18:45:E0:49:71:77:7C:0E:E4:AA X509v3 Authority Key Identifier: keyid:29:40:B6:94:BB:A0:95:34:4E:4B:DB:99:F5:1E:1F:10:23:BE:57:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:8c:bc:c0:7a:88:bd:e7:cc:fd:ca:28:0e:f4:05:7f:05:19: 5e:a4:19:5e:a0:55:d8:64:7c:0a:08:89:36:cb:a7:80:49:65: d6:46:3e:cf:af:51:ed:cd:1f:52:a6:5e:2e:16:98:03:9d:29: c2:d0:96:2d:1c:21:18:d6:aa:d2:9f:a0:54:49:3c:bd:55:f1: ba:7d:42:e8:bc:55:19:e5:ec:c7:09:50:78:e4:1d:9f:41:99: 15:c3:92:f9:3c:7b:29:01:e6:d7:97:cb:7b:65:3b:0c:01:29: 7f:ef:c1:9c:18:5e:0f:91:bc:04:c9:4c:00:4c:69:f1:8d:0e: d8:da:7c:e1:87:af:f0:e3:60:c4:76:99:ca:ec:e1:9e:f2:c5: e8:a2:48:f4:f1:a8:7b:88:d3:af:d4:a3:2b:ad:3e:d3:94:cb: d6:94:9f:21:eb:2c:ed:3b:93:01:28:7f:9d:75:ae:23:3d:76: db:ce:06:7f:cb:4c:67:0c:ea:9d:e2:cb:e0:7f:43:52:0f:79: 8a:e1:5c:12:f0:f6:7b:ee:56:86:8f:f6:c8:63:7e:4d:95:24: c3:28:0a:4c:ca:7f:5b:21:dc:40:5a:b7:5f:32:16:f0:80:6c: e4:5c:bf:11:9d:fb:8e:63:be:a7:fa:ab:21:fa:c7:dc:99:10: 48:fa:03:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZc5GW7nbNi86Dm4/8a8Ec29MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NDBiNjk0YmJhMDk1MzQ0ZTRiZGI5OWY1MWUxZjEwMjNi ZTU3Y2UwHhcNMjUwNjA0MDQwMDU3WhcNMjUwNjA1MDQwMDU3WjAzMTEwLwYDVQQD EyhkZDJiODk3M2VjMzc5NjE4YmIzYjE4NDVlMDQ5NzE3NzdjMGVlNGFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkApAwebM5QUG/S9hlQkqh/iwfqRT hEJPFY2Ki8QohD7cIvvBjA8WcRUPrNSROecUN4d8dhsE21ZYv0hBVbJblIuDVYfg Y7kp8mOr19UE7CgzjKpumwqJrWIE5fNtMLLxxJNxFuSeVWr3+VSSklz4Bp+hTNwR aZzBD0Yw/yYpkKHTEoPZJBWc+Lq7L8oHVqdomulXV1zlBMsYtUn0Q8YaMgi5rEHq cm4SlzTLFMTJt3LXcTTMxcWGjxbD72DYvyKOMxmzu12BrnliZIy94Jq8pCXfFBAR eWXtTGgrrJsIjPtfIC0pDmz/bCrO7LGMd3feozs4mrXgqJUity8lJkEV9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN0riXPsN5YYuzsYReBJcXd8DuSqMB8GA1UdIwQY MBaAFClAtpS7oJU0TkvbmfUeHxAjvlfOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1VDMmxMdWdsVFJPUzl1WjlSNGZFQ08tVjg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi82MTA3ZTQtNDM5My00Y2JlLWE2YzIt MjdjMWEzNTk3NmRlLzEvS1VDMmxMdWdsVFJPUzl1WjlSNGZFQ08tVjg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi82MTA3ZTQtNDM5My00Y2JlLWE2YzItMjdjMWEzNTk3NmRl LzEvS1VDMmxMdWdsVFJPUzl1WjlSNGZFQ08tVjg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlYy8wHqI vefM/cooDvQFfwUZXqQZXqBV2GR8CgiJNsungEll1kY+z69R7c0fUqZeLhaYA50p wtCWLRwhGNaq0p+gVEk8vVXxun1C6LxVGeXsxwlQeOQdn0GZFcOS+Tx7KQHm15fL e2U7DAEpf+/BnBheD5G8BMlMAExp8Y0O2Np84Yev8ONgxHaZyuzhnvLF6KJI9PGo e4jTr9SjK60+05TL1pSfIess7TuTASh/nXWuIz12284Gf8tMZwzqneLL4H9DUg95 iuFcEvD2e+5Who/2yGN+TZUkwygKTMp/WyHcQFq3XzIW8IBs5Fy/EZ37jmO+p/qr IfrH3JkQSPoDHA== -----END CERTIFICATE-----Generated at Wed Jun 4 11:50:36 2025 by rpki-client