$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft File: vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft (raw, json) Hash identifier: gwrSJ8ti3ihmt8siQc2I1+PO0VTkOO+TnIXaMRigT+0= Subject key identifier: F1:21:64:24:88:40:15:8A:28:E5:D5:25:E8:A9:9F:EB:61:1D:1A:2B Authority key identifier: BC:47:03:E0:8C:A0:D6:A3:10:CB:C6:43:FF:CB:30:7F:F6:CD:C6:5C Certificate issuer: /CN=bc4703e08ca0d6a310cbc643ffcb307ff6cdc65c Certificate serial: 0197B77CBECD4D2594A4B0F8163F73938304 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft Manifest number: 12C5 Signing time: Sat 28 Jun 2025 17:01:35 +0000 Manifest this update: Sat 28 Jun 2025 17:01:35 +0000 Manifest next update: Sun 29 Jun 2025 17:01:35 +0000 Files and hashes: 1: 8Fk9kDKNu_wHTuVpwQ1FTDYEEUM.roa (hash: R9lk1OKBJor+p6Fk8Cm9760Y52YkNlkiK4HwLBjauEw=) 2: LCMzGb8KK1XAn7ueElCREh4ehR0.roa (hash: 9Gw2b+IOeGIlGw5y7XNoxgCnQ7hXETrnIXJowIYGjqA=) 3: LShVVLJCwZTpOQVpRu4BHXCMY5o.roa (hash: qOW5Q7zU6W8XRrp7RUj6wZmvzkpmHb4NVAohhcOeaxY=) 4: bmuOfACYZiZOnCTz9ES9s06c_ac.roa (hash: kxF+XBYjW7ExfLjJidwuYPma+i/t1erJy7+ooTz+eSY=) 5: dqSVfYV4r9M8RMZopTNsSTKHeIY.roa (hash: XrN+1wwdRwyX8n7r+VHCtW4D45jLjIPlWVhNaBZnVwQ=) 6: h9mNIwplN3HJblv2au9Os6COmfk.roa (hash: MUN1yxszebSMcti0G9u7TeXrwfcHsFyRaIzpQnCM9XQ=) 7: mUZj0w-uWUstpfqo5cH06vK19uA.roa (hash: MzyNzzDoUFyK/QZw2a/+HQPhRLTClRfb/mdHjVRhByQ=) 8: r0mTEa6qt-IyELm4t03iQrSQvaU.roa (hash: 5O0ZRSkH9lwLC8LUcZsdLUDFOU7u/lNlnWwcFjFATOs=) 9: rHoYFPQ0T9Hef-z6s-pJ7i0yyQo.roa (hash: xQJ9yww4YSKaaEyQBdYXA5up0iEVqjr/At6e2xJMUB8=) 10: vEcD4Iyg1qMQy8ZD_8swf_bNxlw.crl (hash: 2jOaYeu1T2T+K5lVXifWYsy8HjF/cKG/7+HnUADZ6JU=) 11: vfYaTtc4brt0Ov1kx9oCUOHIJXI.roa (hash: eB+hXGbiqW76z1VHwcXpM+YfyI+lZHNYCy9KL7CJ5lM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.crl rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b7:7c:be:cd:4d:25:94:a4:b0:f8:16:3f:73:93:83:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc4703e08ca0d6a310cbc643ffcb307ff6cdc65c Validity Not Before: Jun 28 17:01:35 2025 GMT Not After : Jun 29 17:01:35 2025 GMT Subject: CN=f12164248840158a28e5d525e8a99feb611d1a2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c5:2e:41:84:0f:b0:e7:cf:ab:8e:6d:22:e9: 87:1f:21:80:f9:2a:45:e6:9c:c7:f6:19:c2:a9:36: 0f:98:cc:5e:97:25:f7:19:20:56:82:ff:c1:52:aa: 56:bd:7b:5e:81:88:29:cf:9d:64:d8:bc:4f:06:7d: d9:d9:5c:57:2c:6c:58:e4:4f:09:04:e4:a9:1d:02: df:33:43:1d:ee:5d:32:b9:7c:02:d9:5f:f7:96:83: 78:2d:e8:f5:6f:9b:50:a5:7d:db:0e:a0:28:3f:72: 86:87:d3:a2:ec:88:7a:64:11:44:6e:ac:8c:a1:c3: a3:aa:07:07:a3:8b:d3:0e:e7:51:05:87:96:3e:64: 77:ba:ac:f4:bc:09:69:22:e4:d6:76:88:d3:c7:ba: 97:86:bd:ab:1e:ec:6c:4e:1f:3d:dc:ab:50:2d:1e: fb:4e:d6:fe:75:62:28:10:f4:f2:c4:a7:f0:e0:d8: e1:5f:d3:2f:ba:fa:af:a7:0f:72:e4:d7:a0:2b:41: af:23:5f:ce:59:f3:cb:47:7b:de:c7:45:b8:1b:a4: e2:20:f9:6e:f0:c3:6a:97:1e:39:28:13:1d:ae:fd: fe:a7:f8:05:f2:3a:8e:ae:d4:2f:35:5b:a4:50:18: ed:e4:84:0e:8e:ea:eb:e6:7b:79:35:70:7e:65:fe: 89:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:21:64:24:88:40:15:8A:28:E5:D5:25:E8:A9:9F:EB:61:1D:1A:2B X509v3 Authority Key Identifier: keyid:BC:47:03:E0:8C:A0:D6:A3:10:CB:C6:43:FF:CB:30:7F:F6:CD:C6:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:4d:bd:53:00:33:e6:5c:1c:46:2d:a1:27:ea:e2:ed:ba:09: 32:63:f4:c5:e0:ea:56:30:da:e7:11:2a:04:07:88:39:3a:ad: 18:31:9d:6e:fa:77:07:c3:03:be:0c:ab:31:80:45:ee:d0:9f: d9:37:50:e0:81:90:48:4a:c3:f8:c9:df:d4:e4:00:01:82:2e: 43:ef:81:b2:86:7a:da:7c:b5:c1:77:eb:29:40:15:55:05:e0: d3:3f:0f:b4:2e:57:eb:b9:43:42:f6:25:35:09:dc:0f:1b:6a: cf:5e:9b:d2:de:8a:9f:0e:12:27:48:72:a5:26:9f:e6:0d:04: 0c:ea:62:e1:f0:a3:80:48:55:b9:06:8a:d1:53:da:8a:74:5c: a5:54:6b:37:01:81:7d:19:75:64:3d:57:11:3f:78:c0:15:ce: 6c:7f:e0:97:6c:be:d2:5b:16:ed:cd:cb:5b:8c:c0:6f:34:63: 82:9a:83:cd:ae:93:22:82:84:63:c2:ee:ae:98:5d:a3:9c:ec: e6:66:5e:b9:cd:48:f8:87:21:2a:a9:b2:aa:e1:73:c1:15:3c: 2b:21:97:6d:ca:a7:e3:14:56:da:f4:5a:eb:19:12:79:92:bd: 72:fa:5e:fd:bd:01:69:7c:7f:11:7a:34:a7:d5:44:74:84:de: a3:b9:a8:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe3fL7NTSWUpLD4Fj9zk4MEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjNDcwM2UwOGNhMGQ2YTMxMGNiYzY0M2ZmY2IzMDdmZjZj ZGM2NWMwHhcNMjUwNjI4MTcwMTM1WhcNMjUwNjI5MTcwMTM1WjAzMTEwLwYDVQQD EyhmMTIxNjQyNDg4NDAxNThhMjhlNWQ1MjVlOGE5OWZlYjYxMWQxYTJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzcUuQYQPsOfPq45tIumHHyGA+SpF 5pzH9hnCqTYPmMxelyX3GSBWgv/BUqpWvXtegYgpz51k2LxPBn3Z2VxXLGxY5E8J BOSpHQLfM0Md7l0yuXwC2V/3loN4Lej1b5tQpX3bDqAoP3KGh9Oi7Ih6ZBFEbqyM ocOjqgcHo4vTDudRBYeWPmR3uqz0vAlpIuTWdojTx7qXhr2rHuxsTh893KtQLR77 Ttb+dWIoEPTyxKfw4NjhX9Mvuvqvpw9y5NegK0GvI1/OWfPLR3vex0W4G6TiIPlu 8MNqlx45KBMdrv3+p/gF8jqOrtQvNVukUBjt5IQOjurr5nt5NXB+Zf6J3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPEhZCSIQBWKKOXVJeipn+thHRorMB8GA1UdIwQY MBaAFLxHA+CMoNajEMvGQ//LMH/2zcZcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkVjRDRJeWcxcU1ReThaRF84c3dmX2JOeGx3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy84NjNiYTAtMDQ3Ni00M2Q3LThiZTct NjZlZGEyMjhmZWM3LzEvdkVjRDRJeWcxcU1ReThaRF84c3dmX2JOeGx3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy84NjNiYTAtMDQ3Ni00M2Q3LThiZTctNjZlZGEyMjhmZWM3 LzEvdkVjRDRJeWcxcU1ReThaRF84c3dmX2JOeGx3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ029UwAz 5lwcRi2hJ+ri7boJMmP0xeDqVjDa5xEqBAeIOTqtGDGdbvp3B8MDvgyrMYBF7tCf 2TdQ4IGQSErD+Mnf1OQAAYIuQ++BsoZ62ny1wXfrKUAVVQXg0z8PtC5X67lDQvYl NQncDxtqz16b0t6Knw4SJ0hypSaf5g0EDOpi4fCjgEhVuQaK0VPainRcpVRrNwGB fRl1ZD1XET94wBXObH/gl2y+0lsW7c3LW4zAbzRjgpqDza6TIoKEY8Lurphdo5zs 5mZeuc1I+IchKqmyquFzwRU8KyGXbcqn4xRW2vRa6xkSeZK9cvpe/b0BaXx/EXo0 p9VEdITeo7moIQ== -----END CERTIFICATE-----Generated at Sat Jun 28 22:45:17 2025 by rpki-client