$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.mft File: Z7WwLcQBZm7gRauQzIiBf-CdcGo.mft (raw, json) Hash identifier: ucOjnqgRLycybPVnDgII0Jcn34hoaV2F1yQ3n17bJi8= Subject key identifier: C0:B8:5C:7C:E1:11:4D:2E:64:49:A5:E5:FA:6E:7E:58:29:A9:B5:5A Authority key identifier: 67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A Certificate issuer: /CN=67b5b02dc401666ee045ab90cc88817fe09d706a Certificate serial: 0197B9D8DEF6E3970C74174DAB7B1B29850E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.mft Manifest number: 12DE Signing time: Sun 29 Jun 2025 04:01:27 +0000 Manifest this update: Sun 29 Jun 2025 04:01:27 +0000 Manifest next update: Mon 30 Jun 2025 04:01:27 +0000 Files and hashes: 1: 2hV2Eva-Yq0Tj6R_zRma3IFAz5U.roa (hash: xaAXokmFBA+GIkC2gCBEPvYGMsKwjG9cFEwuB3Zkoqw=) 2: 3vr6MmTJusXLHnoomZaTFzf2R_Y.roa (hash: wwVRXCGEVqcIpkBMKuCLGQDGcvT246U/Ud4fDza9yz4=) 3: C0SmlmF4B_mlZfUDeIYvqwcBzGY.roa (hash: 6q7bl16uuvTNC36XbpE099Ngw4/OmUomn2V4cIi5tMM=) 4: CnW3qR_oIITaOQij9dhtcxmI3Ew.roa (hash: c6jiCaV7kJAiM633jZnJHCKNng9Erj/W/XlTBj+QRpY=) 5: DHALUAN5tK6vdZdATqkw-W3Rehs.roa (hash: 7l9RAeo7N/jmnp2dP2Muv9E6xCL1r9O+gLOg/k2Fq2s=) 6: Q4p-qYS2sgvt0GJ7uYJPvsOIkIg.roa (hash: j/H5JWeQ0CkSOjcFdGwjX75ybxoyKIcMgX/vQel3jRk=) 7: Z7WwLcQBZm7gRauQzIiBf-CdcGo.crl (hash: TfHX/U3x/vAlIHnSMZkx9oVGdTcqxxL0WjkTdD1In9I=) 8: k7Uhxcf1dLyLbabkMZGt9dayq9s.roa (hash: gFVryfVaKzHzs9H28hxg6aO05RnxqjKmSXgUNR+b4kg=) 9: kIbghkBOfoXjY46mtdWaD6ECFzI.roa (hash: 0pGxzPrydHhKJZ3AyBjYXBgg0KwtH0VaWuahmKMYYJY=) 10: n-1P-bnNMbfHyYOOBdFHAhTQeeU.roa (hash: VCctCwWgn1+jYqEkjhICyTVDTXkxSrSucpTbDGLkOEU=) 11: wCTFVOhH1_JXXaKELRZTghNafbE.roa (hash: uIydk4XczljVO9qTa7Z+Ts/JZRVkQzKoeoyTGqvobdE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.crl rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.mft rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Jun 2025 04:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b9:d8:de:f6:e3:97:0c:74:17:4d:ab:7b:1b:29:85:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67b5b02dc401666ee045ab90cc88817fe09d706a Validity Not Before: Jun 29 04:01:27 2025 GMT Not After : Jun 30 04:01:27 2025 GMT Subject: CN=c0b85c7ce1114d2e6449a5e5fa6e7e5829a9b55a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:54:9e:19:66:7c:a7:45:a2:39:80:43:14:e7: e4:24:07:bf:f9:7d:3a:04:27:2a:6b:a0:aa:03:c4: 84:d6:fe:f5:02:2a:d3:64:d4:ae:a2:22:e1:ae:cb: 0a:ff:41:3f:13:1f:34:84:90:9d:9d:ec:90:15:33: 21:c4:6a:e6:a2:8f:7c:d6:c6:b0:53:54:b8:70:bb: 21:59:be:1f:77:9c:3e:cc:72:95:d9:b6:a2:55:b1: 57:5e:07:d6:bf:61:db:55:d2:1e:d2:6f:59:c0:2f: 71:09:36:89:26:30:11:14:4f:93:31:1c:93:16:c2: ae:cd:5e:80:d9:b5:c9:93:3b:1a:ed:1f:b4:ba:3e: 18:29:bb:f2:fc:13:fd:97:81:10:18:3a:fb:fb:ef: 22:78:b6:b3:de:a9:69:5b:13:fb:8e:f8:69:a7:27: 56:01:fa:5d:94:36:3e:44:be:f8:1b:80:a3:ca:06: 28:09:22:ba:55:b9:fd:cb:32:2c:36:ab:02:2c:db: 5f:f6:8c:af:be:96:89:1f:33:b5:ba:61:d0:3a:e3: 6d:fb:a0:b4:d8:51:54:79:21:7c:fc:0c:b2:f0:fe: e7:40:4c:36:2d:c0:c8:d7:66:a3:11:54:30:b3:3c: cd:91:69:5c:bc:9b:62:97:c4:ea:62:ac:46:7d:87: 48:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:B8:5C:7C:E1:11:4D:2E:64:49:A5:E5:FA:6E:7E:58:29:A9:B5:5A X509v3 Authority Key Identifier: keyid:67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:d8:75:66:61:55:e7:71:60:48:81:be:73:71:a4:72:d9:f8: a4:54:3d:43:37:b9:86:ca:08:b0:2f:c1:c8:50:c3:7b:57:29: d1:8a:b2:cf:b5:e2:bb:d7:a8:65:0e:2b:a5:6f:f6:5f:4e:ac: df:2c:89:fb:1a:70:ad:62:8a:83:fd:6c:29:c5:5f:24:ba:69: 18:6e:3b:38:54:03:61:3c:56:33:de:ad:e1:38:f2:0c:bd:89: f0:cc:b3:8e:c4:9f:a1:26:11:cb:83:9f:c5:ee:4e:8f:1a:10: a9:b0:24:67:bd:2a:52:1c:3e:75:76:50:93:96:97:3e:ee:fb: 4d:96:26:da:cd:af:6f:cd:f0:48:a1:52:3e:a1:65:50:e5:57: ae:1f:a5:70:41:93:c6:f7:28:18:d7:17:5d:d7:58:f2:2b:30: 75:9c:67:51:bb:43:b8:a4:aa:da:64:2d:88:ee:c2:4a:3c:4b: 0f:22:ce:94:ff:09:fe:f0:27:2d:8a:59:5d:71:3d:38:69:af: 28:81:1a:ea:7b:5c:a4:8e:a2:b5:f4:a2:44:85:77:89:3f:57: 31:43:08:0c:af:8c:de:4d:d8:2e:2c:68:8d:4d:6e:21:67:38: 4d:22:1d:2f:97:f6:3b:c4:9a:30:11:ec:f6:de:0f:ca:2f:fb: 33:84:a8:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe52N7245cMdBdNq3sbKYUOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3YjViMDJkYzQwMTY2NmVlMDQ1YWI5MGNjODg4MTdmZTA5 ZDcwNmEwHhcNMjUwNjI5MDQwMTI3WhcNMjUwNjMwMDQwMTI3WjAzMTEwLwYDVQQD EyhjMGI4NWM3Y2UxMTE0ZDJlNjQ0OWE1ZTVmYTZlN2U1ODI5YTliNTVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFSeGWZ8p0WiOYBDFOfkJAe/+X06 BCcqa6CqA8SE1v71AirTZNSuoiLhrssK/0E/Ex80hJCdneyQFTMhxGrmoo981saw U1S4cLshWb4fd5w+zHKV2baiVbFXXgfWv2HbVdIe0m9ZwC9xCTaJJjARFE+TMRyT FsKuzV6A2bXJkzsa7R+0uj4YKbvy/BP9l4EQGDr7++8ieLaz3qlpWxP7jvhppydW AfpdlDY+RL74G4CjygYoCSK6Vbn9yzIsNqsCLNtf9oyvvpaJHzO1umHQOuNt+6C0 2FFUeSF8/Ayy8P7nQEw2LcDI12ajEVQwszzNkWlcvJtil8TqYqxGfYdIWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMC4XHzhEU0uZEml5fpuflgpqbVaMB8GA1UdIwQY MBaAFGe1sC3EAWZu4EWrkMyIgX/gnXBqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjdXd0xjUUJabTdnUmF1UXpJaUJmLUNkY0dvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82NGEzZGUtODEyYS00YWNlLTgxNGQt YjVkODg4YWRmZDM3LzEvWjdXd0xjUUJabTdnUmF1UXpJaUJmLUNkY0dvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82NGEzZGUtODEyYS00YWNlLTgxNGQtYjVkODg4YWRmZDM3 LzEvWjdXd0xjUUJabTdnUmF1UXpJaUJmLUNkY0dvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk9h1ZmFV 53FgSIG+c3Gkctn4pFQ9Qze5hsoIsC/ByFDDe1cp0Yqyz7Xiu9eoZQ4rpW/2X06s 3yyJ+xpwrWKKg/1sKcVfJLppGG47OFQDYTxWM96t4TjyDL2J8MyzjsSfoSYRy4Of xe5OjxoQqbAkZ70qUhw+dXZQk5aXPu77TZYm2s2vb83wSKFSPqFlUOVXrh+lcEGT xvcoGNcXXddY8iswdZxnUbtDuKSq2mQtiO7CSjxLDyLOlP8J/vAnLYpZXXE9OGmv KIEa6ntcpI6itfSiRIV3iT9XMUMIDK+M3k3YLixojU1uIWc4TSIdL5f2O8SaMBHs 9t4Pyi/7M4Sogg== -----END CERTIFICATE-----Generated at Sun Jun 29 14:24:14 2025 by rpki-client