$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.mft File: TahNJHzjfNzPBuFXHSJqK4Vne80.mft (raw, json) Hash identifier: gQJAaEKnzhwMkV774jwrbL4kvUtXSva0UN+xeQ9q+Cw= Subject key identifier: 84:D5:52:05:55:C7:74:5F:1B:C8:F5:92:0B:13:C9:07:24:6E:C6:AB Authority key identifier: 4D:A8:4D:24:7C:E3:7C:DC:CF:06:E1:57:1D:22:6A:2B:85:67:7B:CD Certificate issuer: /CN=4da84d247ce37cdccf06e1571d226a2b85677bcd Certificate serial: 0197C42668F0B9D148FC048AA1990AB6D0E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.mft Manifest number: 15D7 Signing time: Tue 01 Jul 2025 04:02:20 +0000 Manifest this update: Tue 01 Jul 2025 04:02:20 +0000 Manifest next update: Wed 02 Jul 2025 04:02:20 +0000 Files and hashes: 1: 5Tj38Bsn0hJUYrmVNSahq5IYxas.roa (hash: GZ7T7PHhO62jK4WQFKNvOrwYNZYOPPS6icOBzwnz7nI=) 2: 6p9AkcbnlE4Z8IbJhSYYYojDJrg.roa (hash: SKcAYEFRxxbeCI1HsQW06reRx+d5nEWDWPFTqTMItNM=) 3: Dn1x9nqC0rA_VncF-BuvaeIn_Yc.roa (hash: HSjxAg+X+QFqjbXeKMYZbr1j8n6ewv+Jo99Iqhyk6hE=) 4: IZrh2fKkBSEsZhHZW1V-vS3SOsU.roa (hash: Bu6uRwEYKgZWKKUFSCHxc6kWVnShkzj76gtymj7qNwg=) 5: IhsNkpEObyOhrdScw0XLGeqSfjU.roa (hash: cYBkSPS8A7jki3ADlXunYLfb3jaAdvC2BeR0D6SyyQw=) 6: NGPkgc-gMBPWvfnpR_WESooqffM.roa (hash: h7f13JmtNSfs0kxRIebuhHcsUGxQLBWtTWJQue5vIeg=) 7: RLeyW7lqx5hu9s9VIH-LZ4c9FSQ.roa (hash: 8qkFZX4fO9IGCK+/hjULowdb/hcL+0qKwz4xQec6iUE=) 8: TahNJHzjfNzPBuFXHSJqK4Vne80.crl (hash: syupfQpYdBabzuD9bachUauwmvsuut/xDk0Xp3m9kLY=) 9: pmDvMLO2RE0O4Ex_JrEkUC8Orjc.roa (hash: EobRSKgdMhfP9qw1zU6ZKGGyelmEJlJ7Zo4kdI4/8FI=) 10: sTgj5gtBXlZvbQkuD303wv14ZJM.roa (hash: 2lGTVGTpWSlL4AKzK4tCKidrFOFRYmSZ+Qh+p4OiuBc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.crl rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.mft rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 01 Jul 2025 23:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:c4:26:68:f0:b9:d1:48:fc:04:8a:a1:99:0a:b6:d0:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4da84d247ce37cdccf06e1571d226a2b85677bcd Validity Not Before: Jul 1 04:02:20 2025 GMT Not After : Jul 2 04:02:20 2025 GMT Subject: CN=84d5520555c7745f1bc8f5920b13c907246ec6ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a8:5f:d6:cf:8e:7f:2e:da:1c:23:df:82:9e: dc:c0:22:cb:4b:9b:c7:cd:be:a0:cf:aa:d2:7f:02: 32:53:6a:60:2b:6d:fd:da:db:ad:3a:bc:c7:4e:7e: 07:57:7f:1b:f6:ee:40:a2:c7:d9:95:83:c6:14:c7: 41:82:9e:5b:d0:48:d9:2a:b2:a0:f9:b9:4a:b2:42: ba:f8:23:91:14:e1:43:60:a1:c0:8f:85:f1:a4:1d: 87:44:5c:a8:c5:ea:4d:ac:42:7a:e8:1c:0e:a3:0d: 70:c5:9a:8d:48:5e:0e:77:c7:ff:b7:8d:7c:16:d4: 00:63:3f:e8:70:9e:c8:ab:25:89:32:be:4b:b1:23: 04:bc:9a:50:8d:95:e0:67:b0:36:b2:a7:21:9c:3f: d8:bb:d2:ae:7e:29:c9:6b:27:98:b2:f1:98:63:36: ec:09:c4:60:69:3c:7a:bf:00:a9:ae:5f:0a:9b:1a: 7f:e0:9f:8d:c9:d5:b9:48:04:22:fe:07:a8:75:41: 1b:4f:b5:99:46:94:ac:30:0f:b8:1a:0c:13:76:aa: 08:0d:a2:24:e6:eb:ed:1c:ad:11:95:31:2e:f5:8a: e8:f8:20:2d:1a:53:02:2a:f6:2b:7d:72:32:a7:d7: 87:6f:d0:29:62:e7:f5:7b:ce:25:e4:bd:e3:1d:f8: 0c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:D5:52:05:55:C7:74:5F:1B:C8:F5:92:0B:13:C9:07:24:6E:C6:AB X509v3 Authority Key Identifier: keyid:4D:A8:4D:24:7C:E3:7C:DC:CF:06:E1:57:1D:22:6A:2B:85:67:7B:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:59:0d:d4:4f:fc:bb:25:24:74:1e:0a:78:7d:3d:2c:ef:70: fb:e0:19:03:10:9c:6c:bc:e5:e5:09:da:fd:48:80:98:38:19: 7a:64:a0:82:29:92:bc:77:cd:ff:00:85:3e:99:0b:6f:13:d8: c8:29:0f:0c:22:85:dc:39:11:6b:20:7a:47:bc:18:17:d1:c6: 5e:f8:b3:5c:e1:ed:1e:f2:c5:61:53:e1:cb:95:55:f5:ec:19: 18:a7:9e:df:dc:7e:7c:8e:90:3a:e0:0a:6a:98:f9:4b:42:0d: 79:5d:59:01:01:95:ba:1f:7a:77:58:be:08:30:14:c9:ac:09: ff:00:ce:c3:b2:71:2d:12:28:87:cc:23:a5:0e:df:fc:75:f4: a2:51:6c:d2:9d:95:c8:b0:35:ba:d3:3e:37:8d:d3:b4:65:18: 04:77:c5:5f:52:9a:01:40:3c:60:a3:58:bc:bb:1b:ee:dc:0c: d0:05:12:b5:76:37:c2:c8:62:99:11:ba:f6:70:92:55:8b:64: 54:3c:19:a4:d2:7a:da:f6:ac:33:99:ad:77:c8:21:56:86:d5: 8e:17:aa:7b:43:72:4d:1a:bd:f0:89:41:15:7a:55:ba:96:af: 20:d4:d9:b6:ec:d8:f7:6e:fa:36:4c:7a:8e:5b:2a:10:f0:ad: 7a:22:e2:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZfEJmjwudFI/ASKoZkKttDmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkYTg0ZDI0N2NlMzdjZGNjZjA2ZTE1NzFkMjI2YTJiODU2 NzdiY2QwHhcNMjUwNzAxMDQwMjIwWhcNMjUwNzAyMDQwMjIwWjAzMTEwLwYDVQQD Eyg4NGQ1NTIwNTU1Yzc3NDVmMWJjOGY1OTIwYjEzYzkwNzI0NmVjNmFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyahf1s+Ofy7aHCPfgp7cwCLLS5vH zb6gz6rSfwIyU2pgK2392tutOrzHTn4HV38b9u5AosfZlYPGFMdBgp5b0EjZKrKg +blKskK6+CORFOFDYKHAj4XxpB2HRFyoxepNrEJ66BwOow1wxZqNSF4Od8f/t418 FtQAYz/ocJ7IqyWJMr5LsSMEvJpQjZXgZ7A2sqchnD/Yu9KufinJayeYsvGYYzbs CcRgaTx6vwCprl8Kmxp/4J+NydW5SAQi/geodUEbT7WZRpSsMA+4GgwTdqoIDaIk 5uvtHK0RlTEu9Yro+CAtGlMCKvYrfXIyp9eHb9ApYuf1e84l5L3jHfgMvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFITVUgVVx3RfG8j1kgsTyQckbsarMB8GA1UdIwQY MBaAFE2oTSR843zczwbhVx0iaiuFZ3vNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGFoTkpIempmTnpQQnVGWEhTSnFLNFZuZTgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8yMTBmYmItYWE2ZS00OWM5LTkxOGIt NTU1OGE4YjUzZTNkLzEvVGFoTkpIempmTnpQQnVGWEhTSnFLNFZuZTgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC8yMTBmYmItYWE2ZS00OWM5LTkxOGItNTU1OGE4YjUzZTNk LzEvVGFoTkpIempmTnpQQnVGWEhTSnFLNFZuZTgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACVkN1E/8 uyUkdB4KeH09LO9w++AZAxCcbLzl5Qna/UiAmDgZemSggimSvHfN/wCFPpkLbxPY yCkPDCKF3DkRayB6R7wYF9HGXvizXOHtHvLFYVPhy5VV9ewZGKee39x+fI6QOuAK apj5S0INeV1ZAQGVuh96d1i+CDAUyawJ/wDOw7JxLRIoh8wjpQ7f/HX0olFs0p2V yLA1utM+N43TtGUYBHfFX1KaAUA8YKNYvLsb7twM0AUStXY3wshimRG69nCSVYtk VDwZpNJ62vasM5mtd8ghVobVjheqe0NyTRq98IlBFXpVupavINTZtuzY9276Nkx6 jlsqEPCteiLiNA== -----END CERTIFICATE-----Generated at Tue Jul 1 07:06:17 2025 by rpki-client