$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft File: I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft (raw, json) Hash identifier: JWdIR/r9RWphuTdkXLDJ6vbL7zubhRfHQZ2bBlFYNJA= Subject key identifier: F7:43:8D:0F:A1:0B:35:24:AA:F2:BA:C4:F9:C3:80:7F:B9:4F:BC:94 Authority key identifier: 23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47 Certificate issuer: /CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47 Certificate serial: 0197B6D759277C595A5FEB75EF02F96FCD2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft Manifest number: 12E0 Signing time: Sat 28 Jun 2025 14:00:55 +0000 Manifest this update: Sat 28 Jun 2025 14:00:55 +0000 Manifest next update: Sun 29 Jun 2025 14:00:55 +0000 Files and hashes: 1: 0qZlk63Gwo6PVve3R8hoNJeSalk.roa (hash: 9K8bAvhRQIcuHPJMwOdonfj+LysEV1qKdWBg1zShX+0=) 2: 1aR-_v953E36WGgYgibzeTBiCDE.roa (hash: FoIR2LSFc6nQ5Kqt0WYRr1Y8u7rsf9kyNtd6rG0B9zM=) 3: 2S36hALNEuA4FHD_a934872Co8w.roa (hash: 7vbdkC8QrVhET/DTmD2itapsbG53efZ5NYts2gI1WdE=) 4: Aqln2oXW1vmV-PUzF6Cd9Q8xD70.roa (hash: KUC6ZVgJ309wVObTlhs383nGmhCFSSEIPpt/KXrwLus=) 5: I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl (hash: QyiD7nEw/SPN3YMd6qXJaBQE2fFZw58uqyXfNTD+wtw=) 6: JiS1Tiph5HTmGNzZ0KtBUIEaf7A.roa (hash: Gom6zOjgSh5rBVSKZ2f6ZCcspQ3wfulcfmXimj0TCtQ=) 7: ZpGAbaG9iTc5mQjGkWx21egzJos.roa (hash: hVROdEr8DhK5izAOiu4sPZbk59hiOCePPc1b1fzj7Mc=) 8: aCwRSHVYBYpytuE1o9MjNgDXz9I.roa (hash: lR91pW0BeR+aoFpolYB6lJ9nl5KY3mWGfuxUgw4Zch4=) 9: hTDGmmn2FYXUzU7TBnMKhJwzgBA.roa (hash: 1eTmB0t+VZgY89Mes1TNlFqfs2UJeJff1ZjTxBLpw/g=) 10: jlKsVMX7wEteoIWfSN3Uc9eAuVQ.roa (hash: 5HOZUuYu7Rw+ksliSgplThO4PdfYnW2rqUfOLfK21mA=) 11: k8Tsh2igTKK0UWxKZTZKxjOauZg.roa (hash: 2YaWS9l2TW+UMAMDTk1uUSdz30uNtfJAEAiFghKc1/k=) 12: uIweupJOqhNaFZ9FFVay5RTc__M.roa (hash: t7JJhUA0yW4Du8+W3we/rUkzjJyZFVBXiW73J3eZJK8=) 13: z1a3i0frazTQqXgXDMZwXIVumzA.roa (hash: 8QcYCFJ7DbfNpdlzOwLSm6hk+eQgt4rWp4xCUkBVN6Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 14:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b6:d7:59:27:7c:59:5a:5f:eb:75:ef:02:f9:6f:cd:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47 Validity Not Before: Jun 28 14:00:55 2025 GMT Not After : Jun 29 14:00:55 2025 GMT Subject: CN=f7438d0fa10b3524aaf2bac4f9c3807fb94fbc94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:2d:bc:fc:1d:25:2c:f8:fe:ce:13:0c:c1:6d: 19:95:6e:fc:17:4e:07:32:05:ef:89:51:db:e4:d5: d3:1f:ec:c1:7f:e0:18:87:c5:c8:19:a4:44:be:34: 62:15:14:e6:04:77:ec:7c:32:89:dd:cb:15:38:21: 0f:ba:8c:2d:64:a9:1e:cc:d3:d3:df:f6:5b:45:74: c1:39:d8:22:90:50:4c:e6:59:27:e6:e7:ab:11:3d: 51:82:e2:84:84:d2:80:c6:49:da:9d:7c:3a:72:1e: bd:95:7c:b8:40:28:a6:6a:a8:bf:57:b5:70:00:2f: a5:22:ca:95:5d:d4:da:f4:c6:b1:f4:b9:98:7e:6e: ef:49:b1:62:57:30:54:f7:f1:4f:aa:5a:d7:77:75: 84:7b:fc:9c:2a:d4:3f:d1:2f:71:1e:59:21:e6:30: 93:a4:63:56:16:9e:e5:52:5f:2b:d5:ae:a6:49:16: 8c:48:41:90:cb:ff:64:30:33:e6:f9:e8:fc:30:e6: 4e:e3:70:8d:50:02:c8:01:2c:75:9b:d8:92:ca:3a: 67:cc:05:05:d5:81:14:69:37:f8:a3:4f:68:bc:81: b2:45:f4:dd:e5:b3:8d:49:42:88:0e:98:21:41:e7: b4:fa:fa:ca:7b:4a:b6:48:6c:fb:76:ad:9b:14:3f: af:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:43:8D:0F:A1:0B:35:24:AA:F2:BA:C4:F9:C3:80:7F:B9:4F:BC:94 X509v3 Authority Key Identifier: keyid:23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:e0:c8:18:0a:e6:24:88:36:87:5b:72:32:58:92:e3:dc:34: 0a:b4:ad:9d:c9:da:73:bf:6f:26:c8:c6:7d:f9:cb:31:29:f4: 1d:f9:4a:93:5c:9e:65:fe:a7:fd:56:12:7e:aa:23:f8:fa:11: 86:57:2c:d7:68:ae:5a:07:b9:5d:b4:3c:8b:78:d1:a9:98:ff: 5c:0c:89:4e:80:72:92:48:10:51:d5:88:60:62:29:fd:c9:d1: 1b:a0:1b:11:c5:41:27:83:fd:9c:ae:74:3a:86:c8:61:73:16: 21:ae:d8:eb:f6:e7:78:07:41:f1:44:bf:ba:b7:51:25:b2:6f: 81:a3:fd:f0:ad:e9:48:23:4e:eb:d2:94:2d:ae:7d:12:44:4c: ec:b0:a9:51:40:ff:9d:df:6c:39:8d:42:18:63:7e:3c:0e:05: ee:65:b8:c7:ed:1d:1b:b8:e2:31:d0:63:32:88:fe:20:c9:a9: 37:2e:fd:84:05:0b:6e:0f:42:1c:9e:a9:2b:00:fa:b6:88:6e: aa:b7:a4:5c:17:c0:fa:e1:32:01:df:30:36:a2:5f:a5:b6:a4: 15:a7:f5:d2:2b:0b:29:0c:2e:fb:30:69:ec:a6:9b:d4:0a:65: 6e:07:ae:5e:28:72:19:d3:c1:9e:97:7f:6b:f3:04:da:a1:60: 18:f0:eb:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe211knfFlaX+t17wL5b80qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzZTNkOTJiZmUxNjYxOWNhNTAwYzAzMjY3ZWZmYTlhYTdj YTBjNDcwHhcNMjUwNjI4MTQwMDU1WhcNMjUwNjI5MTQwMDU1WjAzMTEwLwYDVQQD EyhmNzQzOGQwZmExMGIzNTI0YWFmMmJhYzRmOWMzODA3ZmI5NGZiYzk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1y28/B0lLPj+zhMMwW0ZlW78F04H MgXviVHb5NXTH+zBf+AYh8XIGaREvjRiFRTmBHfsfDKJ3csVOCEPuowtZKkezNPT 3/ZbRXTBOdgikFBM5lkn5uerET1RguKEhNKAxknanXw6ch69lXy4QCimaqi/V7Vw AC+lIsqVXdTa9Max9LmYfm7vSbFiVzBU9/FPqlrXd3WEe/ycKtQ/0S9xHlkh5jCT pGNWFp7lUl8r1a6mSRaMSEGQy/9kMDPm+ej8MOZO43CNUALIASx1m9iSyjpnzAUF 1YEUaTf4o09ovIGyRfTd5bONSUKIDpghQee0+vrKe0q2SGz7dq2bFD+veQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPdDjQ+hCzUkqvK6xPnDgH+5T7yUMB8GA1UdIwQY MBaAFCPj2Sv+FmGcpQDAMmfv+pqnygxHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSS1QWktfNFdZWnlsQU1BeVotXzZtcWZLREVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC85YzJjOTAtYzdkNC00OGI3LTliYWYt ZjFiZjBjMzNhOTA4LzEvSS1QWktfNFdZWnlsQU1BeVotXzZtcWZLREVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC85YzJjOTAtYzdkNC00OGI3LTliYWYtZjFiZjBjMzNhOTA4 LzEvSS1QWktfNFdZWnlsQU1BeVotXzZtcWZLREVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgeDIGArm JIg2h1tyMliS49w0CrStncnac79vJsjGffnLMSn0HflKk1yeZf6n/VYSfqoj+PoR hlcs12iuWge5XbQ8i3jRqZj/XAyJToBykkgQUdWIYGIp/cnRG6AbEcVBJ4P9nK50 OobIYXMWIa7Y6/bneAdB8US/urdRJbJvgaP98K3pSCNO69KULa59EkRM7LCpUUD/ nd9sOY1CGGN+PA4F7mW4x+0dG7jiMdBjMoj+IMmpNy79hAULbg9CHJ6pKwD6tohu qrekXBfA+uEyAd8wNqJfpbakFaf10isLKQwu+zBp7Kab1AplbgeuXihyGdPBnpd/ a/ME2qFgGPDrBg== -----END CERTIFICATE-----Generated at Sat Jun 28 22:15:49 2025 by rpki-client