$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft File: mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft (raw, json) Hash identifier: Gjgk0Bl75qL9EDQV73OLv3gnHsW04nadNPUs7jn1rcM= Subject key identifier: A8:E1:36:CB:DB:6B:5B:C0:59:1E:7F:62:CD:37:C0:02:B5:C5:FA:81 Authority key identifier: 99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E Certificate issuer: /CN=99ce569a14c2db3772f23187ce68e6541ec0048e Certificate serial: 01973D9AEAB817338656EB1EEB0006CD9D13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft Manifest number: 1597 Signing time: Thu 05 Jun 2025 01:00:51 +0000 Manifest this update: Thu 05 Jun 2025 01:00:51 +0000 Manifest next update: Fri 06 Jun 2025 01:00:51 +0000 Files and hashes: 1: 7hlWKm8vTIF0LH1H2oS6Admh1TI.roa (hash: JGgMMA+OZIrWq67kkKcLVk/aNndkz3SnG1R5RYOVvj8=) 2: 8Okcs_WzeZSlRzql6-e5V5V7syA.roa (hash: Bgf74cz9Nwo/ctlxM9vVhY3z4DibfYQP6Uszu31EXc8=) 3: AJpw_2i3EoQNYD9kunMPYOdByi8.roa (hash: 2y+udfjFmNVer5C4pJzKndxIM53KHs0ELdljGNxXclM=) 4: BW-ZjApW-eGpyxFEOc0qqC_7S5k.roa (hash: RqpMiCDIPeUSPd1EPbgHwl0XZwlcr7/eFSWcSxO7pPY=) 5: FjCA5Ak9pc8iYQAo2kd8vxWMg2c.roa (hash: LWHCt8fi0ffLNOHRJ69hCW6DNWkN+nY4S8kMpRaQ7ss=) 6: Ik8Kqt-zKfrsdQjyrAjHXX-mlLc.roa (hash: Zg9C0+0W8n0QIjR6RRPkp/OJIpBk8iu2+syGMIoxQyg=) 7: P82-6fcmXy1vqdLrwWWqytTl0TM.roa (hash: z01aDruR3yMRSRzpiGY2CGLWYQwuEAMQJV+YU0LBGGA=) 8: RYdEtsOojE3SXyShhqAjMIQl9xQ.roa (hash: bxAZYk1bj8j4gGSsg9+CUkCHFq1GRl7baVopFxolE0s=) 9: WBeAt2UOvPgAdfpllYF8DBrXsx8.roa (hash: IGhLKO/rQTI4tOBHJDgWqI73xTyqxuZsgF0ztyC/dOc=) 10: bbmenZqkY_bNQyceoK-fLvwWxdc.roa (hash: 5/uuA7PsJ4CyNOajTBR0J1Bkylsmq9V39AJtX9hFgFU=) 11: dMlBq16YcIM7-JR7sVrQGjUo5Ts.roa (hash: i7NU7NT4PhY/w3tg6T+Z3qdRHBm2oFSaLm/74+Urx2g=) 12: f4e7IUwG3JkPasx3oPPOpKnw014.roa (hash: oT75cSQjF7ggxHOJOkz6Sxjs0hfilCF0H6NE1nJtUfo=) 13: mNguxrQSssFTgOvDx-TtVJcngJ0.roa (hash: p4yScE1NaP9LVRZLGH/RikX/bIEDOl76JK/45ns5C9Q=) 14: mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl (hash: /YO7de053Nkfql3uY0zNWY64rZ5AZ2kTNtwhzXm76uQ=) 15: u_mqTybwgy-hqVDwwCNi1Bf-8tI.roa (hash: JZzfV1nFUUQsICoBUJ9//kJmxjSvH3d3D7ybB8QQr/Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Jun 2025 01:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:3d:9a:ea:b8:17:33:86:56:eb:1e:eb:00:06:cd:9d:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99ce569a14c2db3772f23187ce68e6541ec0048e Validity Not Before: Jun 5 01:00:51 2025 GMT Not After : Jun 6 01:00:51 2025 GMT Subject: CN=a8e136cbdb6b5bc0591e7f62cd37c002b5c5fa81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:09:48:99:ba:09:0b:2c:ad:a4:b6:70:15:14: d4:d9:e7:93:ea:5f:d1:b3:b5:bb:2c:dc:68:96:94: 09:7a:00:c3:b5:4b:d3:15:4b:19:a5:75:75:d2:97: df:6f:37:e7:49:54:95:2b:cd:29:eb:e2:cb:f7:4e: 83:f2:3f:9c:8b:23:79:dc:ba:25:f9:3a:7c:bb:4f: a2:e5:59:b1:8a:ab:33:29:c3:e5:b7:46:8c:38:71: 59:e1:87:c2:58:4f:b9:93:4c:f6:32:3c:3f:df:e6: 5e:53:20:93:ad:50:3f:0a:fa:90:7a:f8:20:2d:eb: aa:07:95:61:fc:62:35:e6:76:f4:6a:bf:56:6a:f8: c5:88:7c:00:94:9e:bc:7d:16:20:d8:8c:98:6a:81: 16:61:56:27:af:c1:ca:91:f3:a6:2b:74:5b:e4:67: 12:51:47:e4:18:68:58:b2:77:da:26:35:09:16:d6: 1b:82:f1:1c:d3:eb:2e:88:58:47:b6:11:f8:60:7f: 96:d2:44:f6:e6:3e:e8:8c:77:47:b5:f6:99:e8:50: 61:77:5c:f8:55:39:c9:d0:4a:1f:8c:d2:e6:04:2c: d0:2b:83:26:09:f8:3a:52:a0:1b:08:4d:72:37:33: a0:5c:48:a9:25:77:69:07:6c:4a:9d:a4:42:3d:29: b2:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:E1:36:CB:DB:6B:5B:C0:59:1E:7F:62:CD:37:C0:02:B5:C5:FA:81 X509v3 Authority Key Identifier: keyid:99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:4d:f8:25:5c:48:98:08:03:e6:ff:47:48:57:b9:b7:cb:53: ee:5e:01:df:7d:ff:55:73:64:49:49:11:87:4a:37:b9:43:40: cb:f5:91:b4:fe:45:f7:50:52:f1:19:a9:3d:e3:2c:52:b3:ef: 06:52:73:c5:89:b7:be:34:d0:1d:1d:21:a1:67:66:6b:b7:22: d6:5f:90:d9:59:8d:37:1d:77:d5:45:d9:2e:97:07:49:9c:e0: 3d:80:be:de:bf:fb:ba:2e:1c:d1:2a:76:c3:8a:c1:8b:9b:f3: 3e:36:6f:dc:e3:34:5b:a5:06:77:d0:4b:08:47:2b:31:ba:da: a1:97:19:8a:61:33:65:97:79:e3:1e:67:49:a2:87:35:d8:3b: 41:bd:07:0e:24:bd:6b:b1:43:7b:7e:63:43:e6:bc:73:6b:27: b5:9a:fe:1a:2f:66:d8:36:06:8c:c7:58:e2:dd:31:ca:c0:87: 49:51:22:da:0a:59:5c:52:42:c4:8b:6d:44:f2:2b:2d:44:c6: 7e:06:2a:11:e6:36:05:0a:0e:3c:21:4c:29:2f:48:40:58:33: cb:b1:f3:66:33:c6:f3:15:94:da:eb:da:06:7e:d5:73:64:d3: 80:4d:3a:a1:f6:39:6b:ce:81:e2:d1:68:b5:d0:29:16:95:b9: e9:09:bc:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZc9muq4FzOGVuse6wAGzZ0TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5Y2U1NjlhMTRjMmRiMzc3MmYyMzE4N2NlNjhlNjU0MWVj MDA0OGUwHhcNMjUwNjA1MDEwMDUxWhcNMjUwNjA2MDEwMDUxWjAzMTEwLwYDVQQD EyhhOGUxMzZjYmRiNmI1YmMwNTkxZTdmNjJjZDM3YzAwMmI1YzVmYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwlImboJCyytpLZwFRTU2eeT6l/R s7W7LNxolpQJegDDtUvTFUsZpXV10pffbzfnSVSVK80p6+LL906D8j+ciyN53Lol +Tp8u0+i5VmxiqszKcPlt0aMOHFZ4YfCWE+5k0z2Mjw/3+ZeUyCTrVA/CvqQevgg LeuqB5Vh/GI15nb0ar9WavjFiHwAlJ68fRYg2IyYaoEWYVYnr8HKkfOmK3Rb5GcS UUfkGGhYsnfaJjUJFtYbgvEc0+suiFhHthH4YH+W0kT25j7ojHdHtfaZ6FBhd1z4 VTnJ0EofjNLmBCzQK4MmCfg6UqAbCE1yNzOgXEipJXdpB2xKnaRCPSmycwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKjhNsvba1vAWR5/Ys03wAK1xfqBMB8GA1UdIwQY MBaAFJnOVpoUwts3cvIxh85o5lQewASOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWM1V21oVEMyemR5OGpHSHptam1WQjdBQkk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9jYzZlOTktNmU1Zi00MDFiLTkxMmQt MTA5NTU0NGM2YzUwLzEvbWM1V21oVEMyemR5OGpHSHptam1WQjdBQkk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi9jYzZlOTktNmU1Zi00MDFiLTkxMmQtMTA5NTU0NGM2YzUw LzEvbWM1V21oVEMyemR5OGpHSHptam1WQjdBQkk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKk34JVxI mAgD5v9HSFe5t8tT7l4B333/VXNkSUkRh0o3uUNAy/WRtP5F91BS8RmpPeMsUrPv BlJzxYm3vjTQHR0hoWdma7ci1l+Q2VmNNx131UXZLpcHSZzgPYC+3r/7ui4c0Sp2 w4rBi5vzPjZv3OM0W6UGd9BLCEcrMbraoZcZimEzZZd54x5nSaKHNdg7Qb0HDiS9 a7FDe35jQ+a8c2sntZr+Gi9m2DYGjMdY4t0xysCHSVEi2gpZXFJCxIttRPIrLUTG fgYqEeY2BQoOPCFMKS9IQFgzy7HzZjPG8xWU2uvaBn7Vc2TTgE06ofY5a86B4tFo tdApFpW56Qm8uA== -----END CERTIFICATE-----Generated at Thu Jun 5 06:42:03 2025 by rpki-client