$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.mft File: 1DdYFDRN8L9tAXczrNxIjwAmMbI.mft (raw, json) Hash identifier: fKeZ8Q6YxkWpOjA8Q1UJKfA1Cfe7OFalhDbzJBnlKi8= Subject key identifier: 1B:D8:42:54:AE:72:AD:D8:54:1B:2E:A1:A6:C4:AD:3D:CB:A3:4E:37 Authority key identifier: D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2 Certificate issuer: /CN=d4375814344df0bf6d017733acdc488f002631b2 Certificate serial: 0197B6326F10E83959521ED41ABDAB5E64CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.mft Manifest number: 15D0 Signing time: Sat 28 Jun 2025 11:00:47 +0000 Manifest this update: Sat 28 Jun 2025 11:00:47 +0000 Manifest next update: Sun 29 Jun 2025 11:00:47 +0000 Files and hashes: 1: 1DdYFDRN8L9tAXczrNxIjwAmMbI.crl (hash: 0TlS2lw9uOnLW9SsGFcF4TPjkIWE43XiSZZqG0UIOTQ=) 2: Dx5FhBrZZELGzOEoOYjOQgEtqO0.roa (hash: KCgCEgctUS7Rpr5Y2lyKXbnXeeBrDbnuOsvXdWPfJZo=) 3: KQPVZjd8uXoJ_0dV4AjDeWiqQQI.roa (hash: 9hWXYGll9zn/YFmZU7mBxZ+s82nTPV++un3qIDJzhn0=) 4: LO-lQuCqbX-vzrEDWaS2yzD8HPo.roa (hash: 2Ab5VCBVIHwbJUy5TszPUSkoTaAoMm4DE4cVzWjji7Y=) 5: RNIC7mCPENX0iBKXNTIzci3mkX4.roa (hash: A50pnUKiWPzKeEOP7HAPInfDXRQ8D20n1h9JK0jOgX4=) 6: atn5vU-LUDLVuG9_jCJwAEGbEYc.roa (hash: Se1mBbI1MkbJDFobm6H8aQSyPPadkVuTf7O6JGFke8o=) 7: brY4nnZyBTnIJY3z6C6ymKubOY0.roa (hash: pc5OYc6oXnHxBvDdnE06MSd2CPJ6fIkq22aelBFfNl8=) 8: e6SEtk0abHJpIIPSZrkKDZg95R0.roa (hash: kM/7bJruXzijo8AO7ozJ/bVJBpuUfOvwamojNF2t4fk=) 9: seE_QBv0ygPjzgaL3rSesYLY_0A.roa (hash: a0LlQt6AmApHnlV4lK2J/7kzRpmbLO4Rryqmz0kEEGc=) 10: smSXSjOqkSm8yhu8ksysc8GRhzQ.roa (hash: Jq/+rwvgSdEvWUi01IBzdtKDZwEjK2lpfqbnsHzjr3s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.crl rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.mft rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 11:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b6:32:6f:10:e8:39:59:52:1e:d4:1a:bd:ab:5e:64:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4375814344df0bf6d017733acdc488f002631b2 Validity Not Before: Jun 28 11:00:47 2025 GMT Not After : Jun 29 11:00:47 2025 GMT Subject: CN=1bd84254ae72add8541b2ea1a6c4ad3dcba34e37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e1:7f:89:0b:f9:32:9a:57:16:a3:39:58:7b: 94:38:f7:c1:aa:19:b1:01:48:94:b5:5d:02:99:48: 54:fa:4d:31:2b:b2:90:84:80:a8:68:d0:68:80:f1: 19:c1:2f:f8:ee:56:bd:db:43:c3:85:be:8c:25:6d: 87:cd:40:82:0b:a7:74:1b:16:7f:d6:4e:4d:3c:ae: 4b:06:48:f3:37:52:01:43:86:31:1e:64:3b:0e:b2: e4:40:a3:21:81:3f:9a:e4:76:7f:1d:44:87:9f:a4: e5:f1:30:10:f7:91:c5:98:06:f8:48:d5:ca:71:19: 63:6e:c2:2a:9b:17:c4:e1:51:76:93:f8:03:7a:0a: 5e:cd:85:b0:18:5a:eb:f2:94:69:84:56:fb:90:f5: be:77:96:79:c2:3d:f0:86:f7:55:35:75:47:8f:a3: 9f:c7:fe:ea:c4:be:b3:22:55:db:64:54:49:f3:f3: 3c:fd:fa:9a:22:bf:53:a3:70:d5:8e:96:61:1d:16: a3:f2:5c:bc:46:70:33:d2:92:6f:18:5b:74:9b:c6: 6e:60:a7:a4:74:11:01:97:c4:2a:03:57:c5:ee:91: 9b:53:0f:13:40:76:3b:c9:89:ca:c9:1e:c8:09:a3: 55:83:fd:3b:71:f3:ea:f9:82:d4:93:ed:3e:f3:29: 44:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:D8:42:54:AE:72:AD:D8:54:1B:2E:A1:A6:C4:AD:3D:CB:A3:4E:37 X509v3 Authority Key Identifier: keyid:D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:22:6f:49:83:ee:1b:3f:54:f7:5a:84:81:e0:60:53:c4:b0: 3e:89:9f:56:45:84:2a:cf:7d:b4:74:cb:58:0e:41:fe:16:c5: ae:c6:54:fd:4b:ec:56:41:99:7e:72:d8:92:20:ae:6b:71:58: f1:74:8a:38:3a:5e:e1:a2:4d:72:76:92:ea:8e:b2:9a:98:85: fb:5e:0d:d0:45:24:57:ac:be:b2:5d:cb:48:ce:e6:e3:48:86: 1a:42:ba:b5:6a:ff:f1:82:75:ec:9a:9e:28:3a:54:12:f6:53: ab:d9:1d:64:1b:79:57:94:e6:43:e4:48:8d:01:84:86:c4:eb: 91:bc:2d:42:33:de:69:8b:ca:8e:a7:f1:c4:39:e5:63:88:19: 5e:2e:2a:94:88:3f:6b:e6:42:31:6f:ee:06:89:83:22:18:ca: 10:b5:e1:a4:40:43:4e:eb:c9:20:46:90:04:af:68:17:e2:f1: 34:3f:ac:c2:9c:f4:95:be:36:06:f9:a8:02:86:93:18:0c:5c: 67:76:56:e1:1f:ab:d0:1d:94:61:3c:db:18:81:52:a0:1f:21: 37:c4:26:51:e9:8c:d2:db:ec:2e:a4:0e:dc:0e:6f:15:67:f7: 65:95:20:06:61:c1:61:aa:4c:9c:fb:1f:aa:86:90:bf:6d:cd: 86:70:57:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe2Mm8Q6DlZUh7UGr2rXmTMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0Mzc1ODE0MzQ0ZGYwYmY2ZDAxNzczM2FjZGM0ODhmMDAy NjMxYjIwHhcNMjUwNjI4MTEwMDQ3WhcNMjUwNjI5MTEwMDQ3WjAzMTEwLwYDVQQD EygxYmQ4NDI1NGFlNzJhZGQ4NTQxYjJlYTFhNmM0YWQzZGNiYTM0ZTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOF/iQv5MppXFqM5WHuUOPfBqhmx AUiUtV0CmUhU+k0xK7KQhICoaNBogPEZwS/47la920PDhb6MJW2HzUCCC6d0GxZ/ 1k5NPK5LBkjzN1IBQ4YxHmQ7DrLkQKMhgT+a5HZ/HUSHn6Tl8TAQ95HFmAb4SNXK cRljbsIqmxfE4VF2k/gDegpezYWwGFrr8pRphFb7kPW+d5Z5wj3whvdVNXVHj6Of x/7qxL6zIlXbZFRJ8/M8/fqaIr9To3DVjpZhHRaj8ly8RnAz0pJvGFt0m8ZuYKek dBEBl8QqA1fF7pGbUw8TQHY7yYnKyR7ICaNVg/07cfPq+YLUk+0+8ylE6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBvYQlSucq3YVBsuoabErT3Lo043MB8GA1UdIwQY MBaAFNQ3WBQ0TfC/bQF3M6zcSI8AJjGyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMURkWUZEUk44TDl0QVhjenJOeElqd0FtTWJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9iMjRiMmQtMzUyMy00MjJlLTliY2Yt MzY3MWQ2N2ViOWY4LzEvMURkWUZEUk44TDl0QVhjenJOeElqd0FtTWJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9iMjRiMmQtMzUyMy00MjJlLTliY2YtMzY3MWQ2N2ViOWY4 LzEvMURkWUZEUk44TDl0QVhjenJOeElqd0FtTWJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACyJvSYPu Gz9U91qEgeBgU8SwPomfVkWEKs99tHTLWA5B/hbFrsZU/UvsVkGZfnLYkiCua3FY 8XSKODpe4aJNcnaS6o6ympiF+14N0EUkV6y+sl3LSM7m40iGGkK6tWr/8YJ17Jqe KDpUEvZTq9kdZBt5V5TmQ+RIjQGEhsTrkbwtQjPeaYvKjqfxxDnlY4gZXi4qlIg/ a+ZCMW/uBomDIhjKELXhpEBDTuvJIEaQBK9oF+LxND+swpz0lb42BvmoAoaTGAxc Z3ZW4R+r0B2UYTzbGIFSoB8hN8QmUemM0tvsLqQO3A5vFWf3ZZUgBmHBYapMnPsf qoaQv23NhnBXIw== -----END CERTIFICATE-----Generated at Sat Jun 28 20:52:24 2025 by rpki-client