$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft File: cPmxat8v0xmIhZkitEV0gd1-70A.mft (raw, json) Hash identifier: jQkVii6DlnRD1ueKtuUJdhshH9vsTBuD+VwtVgha+0w= Subject key identifier: 74:15:B5:EC:67:F8:78:EC:82:EA:D1:4C:EC:7B:02:CD:1C:72:F0:8E Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40 Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40 Certificate serial: 0197B820BE18AF8D092B83466AD5B47B0F86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft Manifest number: 134E Signing time: Sat 28 Jun 2025 20:00:42 +0000 Manifest this update: Sat 28 Jun 2025 20:00:42 +0000 Manifest next update: Sun 29 Jun 2025 20:00:42 +0000 Files and hashes: 1: 5WpWrypca4XGx0ISHtuZYRT_cno.roa (hash: R8ZoU8UZw1Z3gy7t3IJTFumdlDzgJjWSubPKAJkbvV0=) 2: 6Tq_leUsVpFgI85zp_wIyChN4WA.roa (hash: //rXy+p6IdrQ6jHZrRlFQGf563PHiLpmYBPTnbSHBxk=) 3: 8wA7Z8R93JqOIr4nUCX1S5SLIf0.roa (hash: 8DXy5Yj333BXczsMQt5oYuiRo4BwLMddhajfUUPGovk=) 4: ElpdsCAHWnrspf_BQqwQgScgsBo.roa (hash: qGJ7OM5aBe7dvyjzLtp4kDohE2tNL4nfvnY6+uLyiBw=) 5: JOBERo-vgg6dldBoWViTCfV7X-A.roa (hash: ce+d5taUPY+G9x5sjcA70ndAe38v7dhbZx0JrAG/CD4=) 6: RYSW4-JdkoBKfIznV9vyOBl6v0k.roa (hash: tfbM0g7bQsYb1raiS9o3/ZoSCJhkN7ErYxyrCWx4xjs=) 7: T1V76bxlhezLMl4Tzlvgqgk0pcg.roa (hash: Hk9kWyBSS3VZQ3ORtc2F2qsaXDclUxsqlus/HDJzLds=) 8: Z5phhVwVfpK6dkc5C1-vYmhcYUU.roa (hash: iIyIPk2NBxkdVR06TYJeH+vh01QOalQb+F2tpumtM+w=) 9: cPmxat8v0xmIhZkitEV0gd1-70A.crl (hash: E8nnV5NHkobPcr94AJFUq/emMo5fJimtYQhjsS8ZLAI=) 10: ezMLdhISIqr2PAqGoulAf-qQ6FY.roa (hash: MoVmtNQ9G0A/NJidABkGuBmF42AfIIukbBtAhp8lY68=) 11: mA4IEAHXR0LDJS0AO7AgvdyymfA.roa (hash: B62czMPy2pKQJ5FL2R2C5ZUZdywtpL+Cj+O5hZ16Rv4=) 12: qQMnV_AHkaoypfzXBStNqOIC8i4.roa (hash: 8/gHPP6AgbL3NuW+OG2JLB+jSLFsV5WrdZq7Of0LMpg=) 13: t-GC4kGf7lvSnOYAiTpgmlkKEL4.roa (hash: 9rNbslHDQxGg0Ew50MQa2Fk3HC4+vs4VNNeusuZLYr8=) 14: x9Pa4FjGFuSawk-SEv2Ok6k19yY.roa (hash: KV0RsDBtETgbugEI2r4ib263Vs08/yFDjc5KML8G+A0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b8:20:be:18:af:8d:09:2b:83:46:6a:d5:b4:7b:0f:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40 Validity Not Before: Jun 28 20:00:42 2025 GMT Not After : Jun 29 20:00:42 2025 GMT Subject: CN=7415b5ec67f878ec82ead14cec7b02cd1c72f08e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:85:33:f0:75:48:61:c1:d8:7a:71:8f:fd:79: 92:65:ec:04:c6:1e:1f:4c:40:da:dd:8e:dd:b5:e4: 69:89:96:ad:c4:02:60:df:dd:c0:2a:79:bf:61:35: c0:c4:c7:ba:a0:67:6b:e8:c5:b3:ae:cb:ea:81:11: 15:e5:c4:0d:ee:59:98:fd:6a:50:c6:28:94:fb:1a: 89:ea:19:7b:3e:1f:ae:c0:e2:4e:11:7d:c9:97:fe: 25:3a:94:58:c9:22:eb:3d:22:e4:e8:6c:23:ed:88: 7d:66:4c:09:79:77:52:97:bd:6f:ae:70:1b:c7:ac: 9a:2b:2e:f3:97:03:de:7c:ea:0b:5e:99:d8:c9:c7: e9:1f:39:c6:da:10:0e:70:a7:d1:b7:d3:03:77:41: 31:89:19:34:53:b9:39:22:68:1f:18:ef:a3:c0:a1: d7:fb:7b:58:3c:4a:e7:71:7c:a0:39:a5:97:0f:a5: 73:2c:bb:f0:bf:c9:da:75:9d:61:c0:94:13:45:cd: ab:41:81:ee:4c:b7:eb:28:ce:98:95:43:98:24:3a: c7:a2:4c:57:8c:76:3d:89:c8:70:94:37:15:d2:21: 8f:a2:f9:33:1f:e5:3c:55:92:e2:0d:15:90:c2:47: 38:b8:9f:db:08:c7:4b:3e:d2:97:75:8b:5f:f8:1d: 11:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:15:B5:EC:67:F8:78:EC:82:EA:D1:4C:EC:7B:02:CD:1C:72:F0:8E X509v3 Authority Key Identifier: keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:90:d9:8a:a4:5e:e0:11:3e:1e:1e:8b:f6:e6:71:ae:63:07: f7:54:7f:b9:c7:9a:6b:3d:70:34:93:f1:b2:de:70:3d:e7:51: ea:99:95:fc:b3:39:28:65:94:aa:07:66:15:27:6d:c4:ab:f5: 09:3d:ec:b0:91:f4:88:a4:2e:e2:43:d1:3b:bf:7b:5e:df:b2: ed:0e:ac:8d:1d:5a:cc:c4:7d:f8:af:89:0c:7e:4a:8f:84:36: 82:d1:3c:d3:ab:5c:6a:b1:17:97:4b:6c:d8:5c:c2:3f:9f:c9: a9:0e:07:fd:d1:14:fe:a1:19:3e:0a:9f:ab:50:8d:d9:dc:69: e8:14:a2:87:39:0e:52:0f:cd:bf:17:0b:5f:9e:00:a4:c8:08: f3:20:a7:a5:e9:fc:08:9e:cb:26:de:87:c9:ae:1a:0d:ee:11: a5:eb:08:ff:d0:c2:bb:3a:86:3e:1d:d2:7c:ec:b3:61:30:80: 70:07:31:a2:0b:4f:e4:8a:67:d1:21:76:fc:65:4c:68:23:3d: ab:aa:c8:9f:90:75:e1:f5:55:fb:e9:78:9f:26:62:51:64:65: b1:d0:71:61:69:5f:15:1b:f5:b5:96:ee:f3:f6:cd:cf:08:f5: 3e:74:91:12:30:d6:c3:be:e7:b2:05:d8:71:37:5b:b7:3c:37: 29:9d:35:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe4IL4Yr40JK4NGatW0ew+GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwZjliMTZhZGYyZmQzMTk4ODg1OTkyMmI0NDU3NDgxZGQ3 ZWVmNDAwHhcNMjUwNjI4MjAwMDQyWhcNMjUwNjI5MjAwMDQyWjAzMTEwLwYDVQQD Eyg3NDE1YjVlYzY3Zjg3OGVjODJlYWQxNGNlYzdiMDJjZDFjNzJmMDhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkoUz8HVIYcHYenGP/XmSZewExh4f TEDa3Y7dteRpiZatxAJg393AKnm/YTXAxMe6oGdr6MWzrsvqgREV5cQN7lmY/WpQ xiiU+xqJ6hl7Ph+uwOJOEX3Jl/4lOpRYySLrPSLk6Gwj7Yh9ZkwJeXdSl71vrnAb x6yaKy7zlwPefOoLXpnYycfpHznG2hAOcKfRt9MDd0ExiRk0U7k5ImgfGO+jwKHX +3tYPErncXygOaWXD6VzLLvwv8nadZ1hwJQTRc2rQYHuTLfrKM6YlUOYJDrHokxX jHY9ichwlDcV0iGPovkzH+U8VZLiDRWQwkc4uJ/bCMdLPtKXdYtf+B0R6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHQVtexn+HjsgurRTOx7As0ccvCOMB8GA1UdIwQY MBaAFHD5sWrfL9MZiIWZIrRFdIHdfu9AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUt YmM2ZGI3MjQ4YWRkLzEvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUtYmM2ZGI3MjQ4YWRk LzEvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgZDZiqRe 4BE+Hh6L9uZxrmMH91R/uceaaz1wNJPxst5wPedR6pmV/LM5KGWUqgdmFSdtxKv1 CT3ssJH0iKQu4kPRO797Xt+y7Q6sjR1azMR9+K+JDH5Kj4Q2gtE806tcarEXl0ts 2FzCP5/JqQ4H/dEU/qEZPgqfq1CN2dxp6BSihzkOUg/NvxcLX54ApMgI8yCnpen8 CJ7LJt6Hya4aDe4RpesI/9DCuzqGPh3SfOyzYTCAcAcxogtP5Ipn0SF2/GVMaCM9 q6rIn5B14fVV++l4nyZiUWRlsdBxYWlfFRv1tZbu8/bNzwj1PnSREjDWw77nsgXY cTdbtzw3KZ01SA== -----END CERTIFICATE-----Generated at Sat Jun 28 21:22:59 2025 by rpki-client