$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft File: 09VvB74YTLpS9v3ASegRTSYWwyo.mft (raw, json) Hash identifier: Ye5NnTRD48jFd1+IdeDCxp6NTCJNsMSKF3l4tIlsAS0= Subject key identifier: D5:64:68:2E:1A:8C:13:A9:F4:8E:D8:42:99:DE:60:E3:81:31:73:B6 Authority key identifier: D3:D5:6F:07:BE:18:4C:BA:52:F6:FD:C0:49:E8:11:4D:26:16:C3:2A Certificate issuer: /CN=d3d56f07be184cba52f6fdc049e8114d2616c32a Certificate serial: 01974779A28B9EAD73CAF39BBC1D6D7EFC11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft Manifest number: 1583 Signing time: Fri 06 Jun 2025 23:00:43 +0000 Manifest this update: Fri 06 Jun 2025 23:00:43 +0000 Manifest next update: Sat 07 Jun 2025 23:00:43 +0000 Files and hashes: 1: 09VvB74YTLpS9v3ASegRTSYWwyo.crl (hash: 6osT623AIgJKjuBt19jiPxnMa+H7rBK3pGDvccBrKdY=) 2: 4c68WXa89S9GaEZ3betWtfOynEI.roa (hash: fVAp1PUxEqPq1PXw46ujCE/Pw+4uzGlNeTIsndTtQ4g=) 3: 7kfcYNNoB5VB3-_80xlsWN3weyk.roa (hash: 1wJop1mQ6qBQDepGqT5ANO4tx0iRC5GqiIyWQqeZxiY=) 4: Bs0O01jXAqadcOrA_652_6vgquk.roa (hash: hEdFCfeLg1JToe8V2oyy+hkNpnht00+5NYTQRgNDOq8=) 5: KidN7PJCXFwqwby4fVpHaeAhpFY.roa (hash: rFMoYmqrD8lR5TajeeUqUicyuRT28K2jKIN4IFZHnsU=) 6: NYzishm2ogJfRyzy8nT6kXYmzuI.roa (hash: LaEEfSMmtUB1mBqYxGiYK3KhOkpxYURIQoeWj6Zjkz4=) 7: RIPl0ZcnNzCRnoJoRMQdo7FatJo.roa (hash: V51bdAbDUbCCdG4ap1IngeKOzNBFdbTp51TPAvBkqrE=) 8: eKmkaw2M8tueZ_tzxfDI9F6CNcc.roa (hash: fg34CUb41rhu+065E2VZ9qaIx2X2iqQ2jxGQO4GwQe4=) 9: pq2QS5SBDS3pAxrbz1jylBKYb1c.roa (hash: kdt9b8eHxviCcBXo3alD6ToqY7JvOLmYwFiRPu6twu8=) 10: tpxzfABwHA4uTKjODgtKlvT10t8.roa (hash: /uiIY+OMfjw8MyTKZlNYbS4i9kHVxO0uNCEe4Op3YPE=) 11: xz6DVtU3-Ra9kwVQS1hT5B1NgIk.roa (hash: L6obqobAUv8Kf3w8kISkegiNvXZC3M7YbdVJnQVDNRA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Jun 2025 22:50:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:47:79:a2:8b:9e:ad:73:ca:f3:9b:bc:1d:6d:7e:fc:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3d56f07be184cba52f6fdc049e8114d2616c32a Validity Not Before: Jun 6 23:00:43 2025 GMT Not After : Jun 7 23:00:43 2025 GMT Subject: CN=d564682e1a8c13a9f48ed84299de60e3813173b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:33:08:49:58:1e:2d:97:23:6f:33:13:33:02: e9:82:8c:82:dd:0a:f5:83:ee:c0:db:45:f2:4b:d3: 1a:5a:57:43:ea:b8:0c:4c:d0:e7:5a:ac:91:d9:08: c8:7c:5b:f9:a1:1e:1a:13:2b:73:44:89:9c:a3:57: 24:25:1d:3e:80:d3:54:49:29:b6:f9:1d:68:8f:ac: 2d:04:e5:52:31:26:88:f3:81:6b:0e:d1:aa:31:c9: 93:a6:65:db:35:3d:a9:47:12:bb:e8:a2:45:10:90: 67:41:d8:d0:c5:85:e4:ae:1d:d6:41:61:e9:1c:11: f0:06:87:79:e1:bf:18:b4:8a:06:f1:fb:9c:1c:46: 95:03:23:62:53:f7:46:65:85:4b:d5:61:22:1a:7f: e6:1e:3e:b8:fa:ac:3d:1c:8a:6e:4f:10:71:79:50: 9a:62:b8:df:c7:bd:44:87:7d:25:7d:10:b0:ad:a0: 30:b4:91:c8:35:0f:4f:54:0d:8f:e1:ae:d5:15:6f: 64:4e:48:cb:e9:3e:7d:51:70:9a:70:80:5c:cb:1a: 97:9f:b4:6b:e4:41:76:11:2d:6f:e7:64:e5:8c:b8: 2f:29:6d:3a:18:42:fb:eb:2c:cc:d9:91:5d:0d:15: 02:23:e5:ff:00:d9:68:6a:7d:75:15:52:03:a4:fd: 9a:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:64:68:2E:1A:8C:13:A9:F4:8E:D8:42:99:DE:60:E3:81:31:73:B6 X509v3 Authority Key Identifier: keyid:D3:D5:6F:07:BE:18:4C:BA:52:F6:FD:C0:49:E8:11:4D:26:16:C3:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:0d:36:61:7c:52:50:97:c0:24:b0:71:91:65:96:c7:9b:b5: f3:c8:b3:b0:b8:8e:72:9c:08:48:75:9a:ba:33:55:20:bc:55: f5:a0:7a:5d:ce:98:12:4f:c7:5a:94:79:57:b3:99:67:87:be: e8:1b:62:9e:29:e1:0d:4e:54:2c:f0:ab:53:c1:9d:a8:54:c1: b1:fb:af:5a:07:73:5c:9f:f5:ba:04:92:26:f5:54:60:a7:c1: c4:99:7f:84:df:c0:52:fd:d4:e6:90:56:68:2f:ac:15:36:e4: 7d:4b:91:7b:33:06:f0:55:1a:f8:53:20:57:94:aa:48:a9:75: 06:b3:df:ce:03:3b:b1:ef:36:50:95:e0:e3:6b:b2:3c:aa:08: 62:e1:57:c6:e5:92:ca:3f:3e:de:22:b2:eb:c2:d5:3b:56:cd: b3:7d:90:d6:9c:cb:6f:9d:95:52:d9:1e:83:cb:40:22:4d:38: 2e:71:1b:90:3a:a9:c1:80:b3:fb:63:32:22:34:ba:fc:fd:9e: 10:0e:75:2f:5f:d2:ea:87:3b:94:ee:ef:bd:b2:75:aa:4f:f8: 74:10:c4:34:46:5d:18:55:60:19:42:c0:47:7e:1c:5d:14:0c: 40:3f:46:c9:98:b4:14:05:ae:30:7e:ca:a5:16:a8:19:09:ec: 1c:70:8d:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdHeaKLnq1zyvObvB1tfvwRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzZDU2ZjA3YmUxODRjYmE1MmY2ZmRjMDQ5ZTgxMTRkMjYx NmMzMmEwHhcNMjUwNjA2MjMwMDQzWhcNMjUwNjA3MjMwMDQzWjAzMTEwLwYDVQQD EyhkNTY0NjgyZTFhOGMxM2E5ZjQ4ZWQ4NDI5OWRlNjBlMzgxMzE3M2I2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTMISVgeLZcjbzMTMwLpgoyC3Qr1 g+7A20XyS9MaWldD6rgMTNDnWqyR2QjIfFv5oR4aEytzRImco1ckJR0+gNNUSSm2 +R1oj6wtBOVSMSaI84FrDtGqMcmTpmXbNT2pRxK76KJFEJBnQdjQxYXkrh3WQWHp HBHwBod54b8YtIoG8fucHEaVAyNiU/dGZYVL1WEiGn/mHj64+qw9HIpuTxBxeVCa Yrjfx71Eh30lfRCwraAwtJHINQ9PVA2P4a7VFW9kTkjL6T59UXCacIBcyxqXn7Rr 5EF2ES1v52TljLgvKW06GEL76yzM2ZFdDRUCI+X/ANloan11FVIDpP2azQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNVkaC4ajBOp9I7YQpneYOOBMXO2MB8GA1UdIwQY MBaAFNPVbwe+GEy6Uvb9wEnoEU0mFsMqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDlWdkI3NFlUTHBTOXYzQVNlZ1JUU1lXd3lvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC81Nzg2YWItMDY3ZS00NDBjLWIyNzYt MWIwNmQxYzcwNGMxLzEvMDlWdkI3NFlUTHBTOXYzQVNlZ1JUU1lXd3lvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC81Nzg2YWItMDY3ZS00NDBjLWIyNzYtMWIwNmQxYzcwNGMx LzEvMDlWdkI3NFlUTHBTOXYzQVNlZ1JUU1lXd3lvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkg02YXxS UJfAJLBxkWWWx5u188izsLiOcpwISHWaujNVILxV9aB6Xc6YEk/HWpR5V7OZZ4e+ 6BtininhDU5ULPCrU8GdqFTBsfuvWgdzXJ/1ugSSJvVUYKfBxJl/hN/AUv3U5pBW aC+sFTbkfUuRezMG8FUa+FMgV5SqSKl1BrPfzgM7se82UJXg42uyPKoIYuFXxuWS yj8+3iKy68LVO1bNs32Q1pzLb52VUtkeg8tAIk04LnEbkDqpwYCz+2MyIjS6/P2e EA51L1/S6oc7lO7vvbJ1qk/4dBDENEZdGFVgGULAR34cXRQMQD9GyZi0FAWuMH7K pRaoGQnsHHCN0Q== -----END CERTIFICATE-----Generated at Sat Jun 7 04:13:19 2025 by rpki-client