$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft File: qFMQ9QMTeuizXU8yn0bwad1wOBU.mft (raw, json) Hash identifier: OJ9pI08xAAdqmCZzJc9gvTl5SGXLjHvXUdSKuX3DF+M= Subject key identifier: CC:AE:F8:9C:3E:23:57:2A:1D:4D:5D:2E:D3:73:7A:4A:62:00:B3:2A Authority key identifier: A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15 Certificate issuer: /CN=a85310f503137ae8b35d4f329f46f069dd703815 Certificate serial: 01974FD7B96F9AC474A43A6961F1BABBE88D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft Manifest number: 0D74 Signing time: Sun 08 Jun 2025 14:00:27 +0000 Manifest this update: Sun 08 Jun 2025 14:00:27 +0000 Manifest next update: Mon 09 Jun 2025 14:00:27 +0000 Files and hashes: 1: 45oKWJWNSoyMzWD0Kk8sRqagqHc.roa (hash: ZRiap7KBK/6F7WwTwhZKaIQBo6dyCPRAgO2PzUDFBBs=) 2: ATNXl5sMuCCQNc30c9l_cm0TcNw.roa (hash: JR8hJ7ucTtgcsP6vKnL9nV/ionD4rfzPRQrpuXEnEks=) 3: CFPX1ri2j5dVasAGgzMnoT-cOt4.roa (hash: XuiBdXxA9M8XJCfAqglXHp2+4b0MLMP/9FYtw4ETJG4=) 4: OlMMJhOrULR3z98uQeY6b3VXgEc.roa (hash: q6ZWYT2ZC6QfyvSsdsgx8ZD0lu2+Rk8uJl+vD5jnyPs=) 5: QRHTKN_AxXjbmDKFt4ozafbZWOw.roa (hash: vK+wvCTtBc+xdfzjCzcAglHcT6Ag6mWapdojkB+Av7Q=) 6: RzmJFM1w4lcKb-cMMQHxwOVwaGg.roa (hash: QwnOv7xt3IWs1L0a2mkMv12V+qGgnpTK/xFmjuXt76M=) 7: cD5IUm-EGBa-Vh255QRP5iyEl_s.roa (hash: /lOTEa3bqElIJJFu5D/6AmLfH6GyOP4ijF9uzNdORv0=) 8: eIw0eh3YEP-bYNeQocOrQeNT9Ho.roa (hash: BiNAvK+4yaYNt1bYkWd7/mgIyoOzJmL05f+bYFpnKTI=) 9: f8ajHMTtlNrrsyJRSeSaLdkgL4w.roa (hash: OG8Xhrawq0hNB4vX2mJ90g91tXyh7BGHjkXzp23NXFs=) 10: gHLoJSwOR2fIlfZQ84ZVB1QOa-c.roa (hash: SKoZJ8pTow2YG7a9sBl0MU1xTakkCXEyJHhzGygBuek=) 11: lrunxs8EBQWo1LhIzQdrw-3rbsE.roa (hash: 6Uc4XQPRY3dYjqUXjx+dcG63Gain6LYn70AV0wZhR+o=) 12: qFMQ9QMTeuizXU8yn0bwad1wOBU.crl (hash: j42BcYS/VZYQYSvGpiBahmYG5bhGtkuH6a2WuI9B2Mk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 09 Jun 2025 14:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:4f:d7:b9:6f:9a:c4:74:a4:3a:69:61:f1:ba:bb:e8:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a85310f503137ae8b35d4f329f46f069dd703815 Validity Not Before: Jun 8 14:00:27 2025 GMT Not After : Jun 9 14:00:27 2025 GMT Subject: CN=ccaef89c3e23572a1d4d5d2ed3737a4a6200b32a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:4b:60:72:f1:50:5f:64:b6:f3:08:38:60:45: c5:2d:2d:83:9b:14:4a:ce:7e:af:e0:56:e9:77:50: 37:33:c1:78:97:73:ee:6e:59:30:13:e7:8d:bf:f2: 70:ad:3b:d5:d6:16:fd:b5:66:0c:f5:99:c9:b1:85: e1:a7:a2:58:39:32:46:06:ca:8c:01:12:58:9c:33: cb:0c:9c:f8:e9:bd:63:d7:7a:98:7b:22:eb:6b:21: f8:57:91:3a:7e:a5:e2:35:42:c3:7b:df:f6:d0:ef: 47:5e:5a:cf:bc:4a:14:fa:39:40:90:b4:18:82:99: a4:31:f0:c1:9a:e0:89:81:5c:37:9c:ba:30:0f:0e: 79:6f:0a:64:87:0d:c2:84:4a:95:b9:2c:a7:9d:f2: b2:b8:6d:b4:38:84:1a:b8:67:7b:00:6b:65:b3:ec: 98:b2:7d:44:e1:b5:cd:0d:55:03:44:33:fe:bd:9c: 1c:16:b0:f0:37:e7:6e:ca:05:d1:17:0d:01:b5:ef: 6d:0c:a9:10:91:3e:4f:72:f3:30:dc:56:ed:43:f1: a7:10:12:7e:36:23:9e:58:ad:ea:46:32:27:d9:22: 5c:7e:c1:2b:d9:09:74:09:a1:bf:da:17:b4:a7:be: 4b:cd:e9:b7:d1:31:f3:00:67:b6:6d:a7:a8:cf:7b: 48:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:AE:F8:9C:3E:23:57:2A:1D:4D:5D:2E:D3:73:7A:4A:62:00:B3:2A X509v3 Authority Key Identifier: keyid:A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:5f:cc:b4:20:97:b6:d7:b7:23:64:36:df:f4:09:ec:db:e8: c2:28:e6:f5:a7:2e:73:96:7c:e3:a3:ff:53:68:31:1e:33:f2: c9:af:e2:f8:11:68:10:09:8b:1f:02:ce:4f:ec:4f:6f:e2:b2: 85:47:77:eb:49:48:05:8b:8f:df:37:dd:f3:52:7d:1d:e1:9c: fd:25:c5:de:70:2a:5e:8f:28:a2:33:f1:6b:fd:e2:b1:27:4f: 35:e1:17:2a:48:ce:f4:78:9d:26:f9:cc:2c:eb:a2:83:34:00: 37:e4:51:51:81:53:58:2e:2c:88:da:ed:18:f0:94:db:71:bc: 65:b9:89:f7:32:6e:b1:36:5e:d9:01:91:a3:c1:22:35:1c:bf: e8:01:5e:13:b3:4c:08:9c:31:a6:99:d2:28:37:12:6b:0a:d4: a8:0c:80:e7:b1:ab:3a:0e:f4:ba:03:ca:57:ee:26:58:20:dc: 7b:48:f4:21:5c:5c:c3:12:6b:61:f3:97:7a:da:03:86:16:c8: 44:dd:4f:85:25:bd:09:56:6c:fd:94:bd:e4:d6:42:38:47:d6: 47:7a:4c:4a:64:c5:50:d3:be:93:40:b7:d0:a7:c2:40:4b:80: f0:c3:19:fa:48:d9:ad:29:20:e7:ff:8c:91:b0:9c:a2:d1:c3: 34:33:33:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdP17lvmsR0pDppYfG6u+iNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NTMxMGY1MDMxMzdhZThiMzVkNGYzMjlmNDZmMDY5ZGQ3 MDM4MTUwHhcNMjUwNjA4MTQwMDI3WhcNMjUwNjA5MTQwMDI3WjAzMTEwLwYDVQQD EyhjY2FlZjg5YzNlMjM1NzJhMWQ0ZDVkMmVkMzczN2E0YTYyMDBiMzJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1EtgcvFQX2S28wg4YEXFLS2DmxRK zn6v4Fbpd1A3M8F4l3PublkwE+eNv/JwrTvV1hb9tWYM9ZnJsYXhp6JYOTJGBsqM ARJYnDPLDJz46b1j13qYeyLrayH4V5E6fqXiNULDe9/20O9HXlrPvEoU+jlAkLQY gpmkMfDBmuCJgVw3nLowDw55bwpkhw3ChEqVuSynnfKyuG20OIQauGd7AGtls+yY sn1E4bXNDVUDRDP+vZwcFrDwN+duygXRFw0Bte9tDKkQkT5PcvMw3FbtQ/GnEBJ+ NiOeWK3qRjIn2SJcfsEr2Ql0CaG/2he0p75Lzem30THzAGe2baeoz3tIHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMyu+Jw+I1cqHU1dLtNzekpiALMqMB8GA1UdIwQY MBaAFKhTEPUDE3ros11PMp9G8GndcDgVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUZNUTlRTVRldWl6WFU4eW4wYndhZDF3T0JVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iNDI5NDktZWUwYS00MTIzLTg3YmYt MzAxODlhNWE0ZWJhLzEvcUZNUTlRTVRldWl6WFU4eW4wYndhZDF3T0JVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9iNDI5NDktZWUwYS00MTIzLTg3YmYtMzAxODlhNWE0ZWJh LzEvcUZNUTlRTVRldWl6WFU4eW4wYndhZDF3T0JVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUV/MtCCX tte3I2Q23/QJ7Nvowijm9acuc5Z846P/U2gxHjPyya/i+BFoEAmLHwLOT+xPb+Ky hUd360lIBYuP3zfd81J9HeGc/SXF3nAqXo8oojPxa/3isSdPNeEXKkjO9HidJvnM LOuigzQAN+RRUYFTWC4siNrtGPCU23G8ZbmJ9zJusTZe2QGRo8EiNRy/6AFeE7NM CJwxppnSKDcSawrUqAyA57GrOg70ugPKV+4mWCDce0j0IVxcwxJrYfOXetoDhhbI RN1PhSW9CVZs/ZS95NZCOEfWR3pMSmTFUNO+k0C30KfCQEuA8MMZ+kjZrSkg5/+M kbCcotHDNDMz6g== -----END CERTIFICATE-----Generated at Sun Jun 8 23:29:23 2025 by rpki-client