$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft File: 2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft (raw, json) Hash identifier: FhmrzpvRWD4XH9aIQsf8177+O2EYEnKF4AntuBRU1cQ= Subject key identifier: 1C:67:AA:D2:94:02:B8:A8:F3:E0:AA:DD:AC:91:11:98:E1:1B:73:7E Authority key identifier: D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2 Certificate issuer: /CN=d82cb43ca3c0c57816cee360478d0cf882207fd2 Certificate serial: 0197B7B2F90929443BB312BA512BA9F90F3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft Manifest number: 0467 Signing time: Sat 28 Jun 2025 18:00:49 +0000 Manifest this update: Sat 28 Jun 2025 18:00:49 +0000 Manifest next update: Sun 29 Jun 2025 18:00:49 +0000 Files and hashes: 1: 2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl (hash: ArPaNxsUufHxH4qS+Ae7mT6+4YWiQqQ+jMWtxA1YNyI=) 2: 3NKK36OzbyCVvAW6QnBXCk0vC-E.roa (hash: gHjjORGkqgV1v9V5gvG+Gu8C2uJp9VohURGk9hhqXCY=) 3: DWnysDNu_v7yNNJ1aIjDqps-5LM.roa (hash: JPD53SzaSyMUMEmsWnAbUrfvGclz72WlfPM6q3RIsCk=) 4: RaE5smqHwTpdBVtd89_5CUvQKsE.roa (hash: UtehD4VO0l8o+LKAy2Z/geys1UM7QHPafm/iIQaT0/U=) 5: SOWcqaYhZ7YX4OOHhJe96In9itw.roa (hash: UaSEArJ4Ty/99oB9k6ZnmXrGKJLGr0L+yE1xo+K6dEg=) 6: f7lR2qdNzNhMHZctwhySnx52rh8.roa (hash: uc/3dtcmzwA7XSJMfP+6pPiS8XT6tGwBC3iJr2Zlmhg=) 7: kcbMP36K9zR3OAqVvtstfD6Qc1E.roa (hash: kKzo7D93m1wQVJ52FPItkIqrFxN6fMh/dyqt/5KaXWw=) 8: ksCUkPPXGRQEiQCKOl3Wp67HpYk.roa (hash: Fa0gD5gnN233i5uopk4/0YW9tKdVwYrJaJzPk4e1vT4=) 9: p8WEIwXo7Clnw_lkUVuyGNIeOvM.roa (hash: Ur1mz6OTaNWSYai5Ah9bPYej/Ck8pv/XZW+9ZEpR3q8=) 10: qJyacpBlbWQwXSv5l4Lxk3gU7sA.roa (hash: A2lDMN5zFwbdpcFJxDl5a8uW8CFGyTpmaP19LpWfeHE=) 11: r9xTyNget5zcXlE9TLs7M3SNT04.roa (hash: AESrTW2Rp0Ova6EIN8mRWsiWri5RUSzYkj7e2h2UwnM=) 12: wBcaC1_PamN7lirmMN3fzCp6jH4.roa (hash: G/3j6WArnTAj7/DCB5dCgU40hqdUmgoP9O96RyuFd1M=) 13: wWRwvyrn-LAOgtkAhCo3MlchYWQ.roa (hash: Uba3h/vRuJ26W0MxcGsxkEurmXFyfeD+ONZVIUG7QEM=) 14: xQ1rwm6oO8jHA9kZhQvVDEfMToU.roa (hash: rR/azYUh2GUL8HTdYkb3GDWX8S5vRgxNHhornEovZ9o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b7:b2:f9:09:29:44:3b:b3:12:ba:51:2b:a9:f9:0f:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d82cb43ca3c0c57816cee360478d0cf882207fd2 Validity Not Before: Jun 28 18:00:49 2025 GMT Not After : Jun 29 18:00:49 2025 GMT Subject: CN=1c67aad29402b8a8f3e0aaddac911198e11b737e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:71:84:3c:51:a6:14:69:81:ce:f6:4c:79:34: d5:0e:d7:19:3f:0d:c1:88:3b:a9:6f:b8:95:55:e0: 7c:73:63:49:7e:0c:95:6a:56:d3:4e:6a:b7:c8:1c: f7:c6:4b:a5:9c:1c:b8:f5:08:6d:41:f1:71:46:e3: 9a:76:24:ff:ca:ff:16:47:8e:98:d3:9f:14:2a:2c: 9e:74:68:9a:c4:11:6d:32:92:b9:36:fa:89:f3:c0: 6a:6e:50:5a:14:3f:65:ad:41:8f:2e:2c:06:d4:fb: 35:9d:a4:f5:31:d0:22:fd:bb:94:3e:6e:e6:ad:b2: 0b:9b:2c:2b:63:af:48:65:f6:1f:61:54:fa:de:4e: 76:04:bd:f6:6e:5d:1e:4b:64:40:c4:ce:09:38:9c: 4f:6c:cc:c8:30:c7:fb:2b:fa:f8:d2:d7:4b:b8:dc: 6f:3f:0a:d6:ac:ef:7a:e2:dd:fd:7f:4e:0b:8d:41: 2d:7a:e4:8a:fa:e3:b6:fa:93:5e:e5:43:58:62:3b: 07:16:04:88:38:9b:22:8e:e0:36:90:87:d7:a1:1d: ac:4b:a8:8a:96:ea:b1:34:47:9a:15:2d:4d:72:3b: a8:f2:cf:4c:f4:3a:be:83:5f:4e:4f:41:0f:6a:17: fa:94:0c:aa:6b:b0:14:4a:e1:e5:5a:9e:b9:62:03: 83:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:67:AA:D2:94:02:B8:A8:F3:E0:AA:DD:AC:91:11:98:E1:1B:73:7E X509v3 Authority Key Identifier: keyid:D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:5d:d5:01:1e:e4:8e:e7:35:fe:a0:29:2f:c4:fb:15:26:92: c6:8b:93:4a:ce:f8:3b:a3:64:33:79:5c:63:dd:5f:4f:78:22: 96:2b:9d:19:4d:c3:46:2c:2d:c8:1f:4a:f1:4c:0d:4f:4f:6d: e3:78:58:d6:1e:0d:82:2e:f7:e7:c4:73:19:57:a4:3f:9c:03: b7:5c:8e:bd:e7:cb:1d:6f:3e:25:1d:d8:bf:78:7f:a1:33:71: 93:54:2a:62:8b:f0:f0:5d:e7:58:3b:a7:61:02:72:ad:c7:57: 16:83:0c:a1:b3:17:d7:83:f3:46:fd:8d:af:12:ec:f8:b7:b1: 57:28:1f:5c:71:60:41:aa:69:8e:b9:5e:10:3c:e9:81:bb:39: 74:7c:ef:9a:da:dc:db:82:68:73:99:e6:94:2b:b3:bb:5c:b4: 53:f2:ee:f9:61:08:10:19:59:5c:d3:d9:22:4c:f4:0d:da:b0: 65:43:a5:93:4e:05:43:30:3e:15:2c:1c:ae:b8:44:a7:b8:09: 11:73:10:ba:7d:a4:ec:cb:07:6c:7b:23:6e:5b:7e:a1:2a:0e: 29:9e:f3:e6:ea:f5:4f:f7:39:af:4e:b8:47:e0:91:37:74:e1: b3:20:8a:dd:64:82:ca:74:d7:9c:c0:82:14:e1:d2:e2:d0:dc: 48:f6:63:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe3svkJKUQ7sxK6USup+Q8+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4MmNiNDNjYTNjMGM1NzgxNmNlZTM2MDQ3OGQwY2Y4ODIy MDdmZDIwHhcNMjUwNjI4MTgwMDQ5WhcNMjUwNjI5MTgwMDQ5WjAzMTEwLwYDVQQD EygxYzY3YWFkMjk0MDJiOGE4ZjNlMGFhZGRhYzkxMTE5OGUxMWI3MzdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3GEPFGmFGmBzvZMeTTVDtcZPw3B iDupb7iVVeB8c2NJfgyValbTTmq3yBz3xkulnBy49QhtQfFxRuOadiT/yv8WR46Y 058UKiyedGiaxBFtMpK5NvqJ88BqblBaFD9lrUGPLiwG1Ps1naT1MdAi/buUPm7m rbILmywrY69IZfYfYVT63k52BL32bl0eS2RAxM4JOJxPbMzIMMf7K/r40tdLuNxv PwrWrO964t39f04LjUEteuSK+uO2+pNe5UNYYjsHFgSIOJsijuA2kIfXoR2sS6iK luqxNEeaFS1Ncjuo8s9M9Dq+g19OT0EPahf6lAyqa7AUSuHlWp65YgOD2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBxnqtKUArio8+Cq3ayREZjhG3N+MB8GA1UdIwQY MBaAFNgstDyjwMV4Fs7jYEeNDPiCIH/SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8zYjUxYjgtMTBjNi00MzhiLWExMjAt MTVmMTNlM2Y3ZDg1LzEvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8zYjUxYjgtMTBjNi00MzhiLWExMjAtMTVmMTNlM2Y3ZDg1 LzEvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACV3VAR7k juc1/qApL8T7FSaSxouTSs74O6NkM3lcY91fT3giliudGU3DRiwtyB9K8UwNT09t 43hY1h4Ngi7358RzGVekP5wDt1yOvefLHW8+JR3Yv3h/oTNxk1QqYovw8F3nWDun YQJyrcdXFoMMobMX14PzRv2NrxLs+LexVygfXHFgQappjrleEDzpgbs5dHzvmtrc 24Joc5nmlCuzu1y0U/Lu+WEIEBlZXNPZIkz0DdqwZUOlk04FQzA+FSwcrrhEp7gJ EXMQun2k7MsHbHsjblt+oSoOKZ7z5ur1T/c5r064R+CRN3ThsyCK3WSCynTXnMCC FOHS4tDcSPZjtg== -----END CERTIFICATE-----Generated at Sat Jun 28 21:48:42 2025 by rpki-client