$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.mft File: wIlCOvG-AwJxltH4HfIpkpeM2m4.mft (raw, json) Hash identifier: tlUTA/XCgfZHgKuRHA//ROcKpS48Q6/GO52frzl+VdY= Subject key identifier: 7C:89:67:34:A1:C6:B9:37:D9:2D:A8:A3:41:EA:00:65:D8:98:90:2F Authority key identifier: C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E Certificate issuer: /CN=c089423af1be03027196d1f81df22992978cda6e Certificate serial: 0197B77C1013F26FC393095A84AD23B2A701 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.mft Manifest number: 15D8 Signing time: Sat 28 Jun 2025 17:00:50 +0000 Manifest this update: Sat 28 Jun 2025 17:00:50 +0000 Manifest next update: Sun 29 Jun 2025 17:00:50 +0000 Files and hashes: 1: 7S7ARH6OeOMmEIzUWrymG1HMgUg.roa (hash: 4by5oqUTQ7giLqJYKeU0H0kpc5OHsvVhuQQi+oZ4Ey4=) 2: CTPnkSwaGYtL6imrEx676VqeZC4.roa (hash: D1Nv8O7aG0N8He1Qo3asb3aVDNKj9swYpH0SQDNKYk8=) 3: _EXnENeiZDru6Rg5eptQB0B0h-Q.roa (hash: R9ZxoaDJ13dNCFiLuLrziErqKQo2in5XnYm6NVb3JRs=) 4: cxLUtvRc1PE7p_j4spKLO77ND2g.roa (hash: 62Na0cXlNHEPB5HNROm00kPAIvHRuW520fWysT/wQWE=) 5: leNx016N_dkYChafjBIEq47VD6U.roa (hash: 71MUZoRwZSAtTYDE2sZfcbqmgD/V7iHl+V3oCDVt/es=) 6: mIPjHyHgx7EJeioOE4Q4P4Mqbt8.roa (hash: xSfoMU51fVLShF8gxOk3DAFmiELwAMru8mqI9rYFDks=) 7: pK-akxxW38kMPF3tOSehLJv18so.roa (hash: 8z7zWmQVHk3yetyyEcN2QnaYdcDrAOln5Kbg821DOsE=) 8: v2_OrqVCWea_JKzk_uWX1QKv4ow.roa (hash: rg1iH+wIMvW6P+H3H16YTC46vO9pXuraY8V/Do1pZt4=) 9: wIlCOvG-AwJxltH4HfIpkpeM2m4.crl (hash: 41TcaOtwqEkfDRr2eA8qC3K2XPMXpPFxAcGtq8qWlhA=) 10: zVdyTzKpDbl0OAfYCejOiPP6RQs.roa (hash: wp8HYAuHuZQdxEStR+YkNo073hELbbV4MwFVMqI82ug=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.mft rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b7:7c:10:13:f2:6f:c3:93:09:5a:84:ad:23:b2:a7:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c089423af1be03027196d1f81df22992978cda6e Validity Not Before: Jun 28 17:00:50 2025 GMT Not After : Jun 29 17:00:50 2025 GMT Subject: CN=7c896734a1c6b937d92da8a341ea0065d898902f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:22:6a:5b:c3:53:2e:4d:57:28:bc:33:93:17: 5c:2e:9a:d8:5f:86:88:f3:3a:ec:8b:57:b8:c8:04: 89:5d:96:87:e0:8c:81:f6:a2:44:49:f1:56:bf:55: 8d:02:f4:f4:ee:40:ba:26:31:2b:4f:a3:bf:44:65: 5d:1b:7f:65:a3:d4:0f:5b:31:42:f3:1f:82:70:83: be:50:75:2f:4b:8a:88:75:af:f8:0f:65:3d:f0:69: 23:4c:56:ab:19:33:c2:4b:0f:14:fb:a3:40:2f:75: 22:e1:34:5a:0a:90:cf:3e:19:f2:22:fd:ad:8a:1d: 7a:93:2d:8d:a1:4f:58:43:25:91:43:15:97:6c:ed: f6:11:09:bb:ca:da:f8:9d:d4:25:e7:9a:03:78:39: 67:37:d3:f2:b3:f4:3f:f2:e8:16:fc:2f:6f:5a:58: 38:45:6c:bd:4b:31:00:a2:a1:98:a7:3c:93:0f:00: 1a:5b:cf:6c:cd:73:b4:99:ca:03:1a:b5:11:c9:f3: e1:77:5d:9b:4e:02:7c:13:c7:e5:e5:ca:e0:44:b2: 69:7b:72:47:1e:22:10:e5:d4:0f:2d:5c:36:e3:7e: a2:09:f0:fd:7b:ad:f1:7a:a0:9c:c9:a2:e0:c6:ef: 3e:f1:0e:c0:cc:3f:97:2a:0b:05:2e:04:1d:5f:ba: 98:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:89:67:34:A1:C6:B9:37:D9:2D:A8:A3:41:EA:00:65:D8:98:90:2F X509v3 Authority Key Identifier: keyid:C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:0e:8d:a5:ac:40:48:db:79:36:25:86:73:1f:98:65:61:c5: a0:65:1f:f4:be:2e:53:77:83:fa:21:b4:fa:f2:ce:1e:9a:48: 4d:ff:7a:ec:81:5b:3b:d1:2c:1d:a1:42:dc:ee:10:a7:80:d0: 0b:a2:d4:3b:f5:f4:d4:aa:76:3d:9e:55:22:1d:50:2a:56:48: a9:56:c3:b0:9c:ce:d6:ce:3a:b8:a0:e8:8d:40:21:4d:2e:6e: 8a:8e:e1:2a:78:01:22:85:50:30:eb:35:15:ed:bc:bc:55:73: 48:eb:ce:cb:30:6c:20:a4:a3:60:c7:b4:e5:4b:45:21:72:64: ea:9b:84:cf:8c:95:38:55:71:ca:15:28:2f:43:79:6d:73:9b: 8a:dd:13:d4:ba:26:e0:37:fd:a1:7c:30:f1:6b:eb:a1:94:9c: 20:59:75:bb:3e:20:ba:6f:04:c7:d4:7b:39:28:9c:78:40:63: 50:a2:53:53:39:40:6f:81:e2:a7:d5:26:6a:31:12:28:7f:84: 94:b7:cd:ae:ca:06:01:35:3c:3f:89:ae:ae:16:c9:1c:37:70: 93:34:d8:df:40:38:77:8f:4e:de:f1:19:e3:a6:ef:28:d9:32: 75:7b:f7:ca:66:94:90:d5:64:f8:d1:a0:0a:dc:fe:ab:b4:c0: 56:4b:73:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe3fBAT8m/DkwlahK0jsqcBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwODk0MjNhZjFiZTAzMDI3MTk2ZDFmODFkZjIyOTkyOTc4 Y2RhNmUwHhcNMjUwNjI4MTcwMDUwWhcNMjUwNjI5MTcwMDUwWjAzMTEwLwYDVQQD Eyg3Yzg5NjczNGExYzZiOTM3ZDkyZGE4YTM0MWVhMDA2NWQ4OTg5MDJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCJqW8NTLk1XKLwzkxdcLprYX4aI 8zrsi1e4yASJXZaH4IyB9qJESfFWv1WNAvT07kC6JjErT6O/RGVdG39lo9QPWzFC 8x+CcIO+UHUvS4qIda/4D2U98GkjTFarGTPCSw8U+6NAL3Ui4TRaCpDPPhnyIv2t ih16ky2NoU9YQyWRQxWXbO32EQm7ytr4ndQl55oDeDlnN9Pys/Q/8ugW/C9vWlg4 RWy9SzEAoqGYpzyTDwAaW89szXO0mcoDGrURyfPhd12bTgJ8E8fl5crgRLJpe3JH HiIQ5dQPLVw2436iCfD9e63xeqCcyaLgxu8+8Q7AzD+XKgsFLgQdX7qYAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHyJZzShxrk32S2oo0HqAGXYmJAvMB8GA1UdIwQY MBaAFMCJQjrxvgMCcZbR+B3yKZKXjNpuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0lsQ092Ry1Bd0p4bHRINEhmSXBrcGVNMm00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9kYzI5MTItYzdiMC00ZGY0LTlhYTgt NjUzMzJiNDdmNWViLzEvd0lsQ092Ry1Bd0p4bHRINEhmSXBrcGVNMm00Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9kYzI5MTItYzdiMC00ZGY0LTlhYTgtNjUzMzJiNDdmNWVi LzEvd0lsQ092Ry1Bd0p4bHRINEhmSXBrcGVNMm00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKQ6NpaxA SNt5NiWGcx+YZWHFoGUf9L4uU3eD+iG0+vLOHppITf967IFbO9EsHaFC3O4Qp4DQ C6LUO/X01Kp2PZ5VIh1QKlZIqVbDsJzO1s46uKDojUAhTS5uio7hKngBIoVQMOs1 Fe28vFVzSOvOyzBsIKSjYMe05UtFIXJk6puEz4yVOFVxyhUoL0N5bXObit0T1Lom 4Df9oXww8WvroZScIFl1uz4gum8Ex9R7OSiceEBjUKJTUzlAb4Hip9UmajESKH+E lLfNrsoGATU8P4murhbJHDdwkzTY30A4d49O3vEZ46bvKNkydXv3ymaUkNVk+NGg Ctz+q7TAVktzQA== -----END CERTIFICATE-----Generated at Sat Jun 28 21:18:35 2025 by rpki-client