$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft File: GstjdqFkjUnVXk17ATcTZ7DcKvk.mft (raw, json) Hash identifier: Yc5X7zu+UdLIclHuziTdJIi2eNp1cPfKoD+0dDSNXWI= Subject key identifier: 3D:50:33:BF:8D:BC:9E:74:06:44:22:F5:90:4D:D9:6F:7E:BF:B2:7A Authority key identifier: 1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9 Certificate issuer: /CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9 Certificate serial: 0197D0CE2A0932EFDF06B928458C16B35BDF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft Manifest number: 09FC Signing time: Thu 03 Jul 2025 15:01:01 +0000 Manifest this update: Thu 03 Jul 2025 15:01:01 +0000 Manifest next update: Fri 04 Jul 2025 15:01:01 +0000 Files and hashes: 1: 2qbv-Pz4jvP3wMojh-nzxxXsgEA.roa (hash: 6+tOpgdGlSlIz8zd2wwUoB5CJwy5U+RYKeXiB03sSqI=) 2: 4iz3Hu7F2tbrDoJ4Ra5IwOQBcc8.roa (hash: IuX1GQGX1ljfGB12u2KgCWJaKWaeRSMtVHGJgPlmubc=) 3: CIdrqclZnSmjRFuSBAbdKW19zw4.roa (hash: 9geTO1Fm8NuZG2BgvP5/MT++gloTQfJHuTiZpCoTKho=) 4: FK7ySAm15wLL-A5orFXHLmT_3-4.roa (hash: euYKdJ6l4Q6ZCJVn8FSzuiK3t+z0DHSmXlQqQRNIQAA=) 5: GstjdqFkjUnVXk17ATcTZ7DcKvk.crl (hash: WIBpjC3VHaaj7yWbx9LTtd0+PwY68V/ilHXkFWZdCng=) 6: m8Tdxvep8gBoC6AvkeleXRfcmoc.roa (hash: JYOwdAc9iDDM7jQ9HDSgVBqUbsa0fTnhwbYX6eo7TMw=) 7: mgJS3W7Q1z7oQKmX5lJZfvASfdU.roa (hash: txXvckVXMlcgRykwLcE07dh3QNh7v2yueF/O/NOTi+w=) 8: r0MpZWGF2my5L4ptog2DrTmu7No.roa (hash: z4pivdKzari5mOdXF7fYltYsmUc2SDlRQvzzFytcUVQ=) 9: r1Iga4svRdXgkzzcH3Kg0RXZCVM.roa (hash: JeLfIM6nAeSe3Dl7vi7FqJjfcjK2HshwWCY2+gwSDpU=) 10: xdWwTqIEbBWD-ayZaCrJQr7xhvk.roa (hash: XVK45wg0nZbg1ksXLgfN8TmYvrajdIvWajx9rGkrzcs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 04 Jul 2025 14:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:d0:ce:2a:09:32:ef:df:06:b9:28:45:8c:16:b3:5b:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9 Validity Not Before: Jul 3 15:01:01 2025 GMT Not After : Jul 4 15:01:01 2025 GMT Subject: CN=3d5033bf8dbc9e74064422f5904dd96f7ebfb27a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:c4:43:6b:35:3a:5d:f6:0b:12:10:9c:b7:fb: 2a:07:3c:4d:92:04:27:f8:f1:7d:b1:99:d6:ad:6a: 8b:ff:20:6d:ef:89:37:d2:d5:f5:fa:f1:56:07:e7: 3d:27:6a:ea:f1:7a:96:1a:4b:91:71:2e:63:ec:8f: 3f:7a:af:2f:6a:9b:cb:5a:b6:90:19:d5:5f:a5:32: 0a:30:43:88:35:04:eb:26:24:41:71:16:90:de:c3: b9:fc:14:16:8a:c3:97:20:4e:1e:c1:f9:71:d1:20: 03:54:10:33:16:82:26:63:8b:95:10:ab:18:6b:6f: 4e:15:11:23:ea:c8:4a:fe:32:81:92:4e:a0:27:57: 92:df:9b:d1:3d:da:da:80:a9:52:46:ab:d7:8c:28: 7b:1c:27:78:74:92:f6:d4:6e:52:e8:fd:32:c7:2f: f8:17:b7:c6:ef:57:8d:66:ba:cd:87:a0:fb:c1:c0: 42:40:45:f7:de:2c:c4:2c:f9:82:72:ba:df:09:91: e3:d7:75:25:9d:00:d7:b7:c5:e3:00:db:e2:18:dc: 0a:e6:16:c3:7e:2c:40:97:c1:22:9c:c3:77:f3:dc: de:57:48:3d:e5:f1:92:96:a4:7a:55:47:7e:cd:5d: 6d:c4:35:58:83:c1:38:b2:45:ba:24:7c:19:f4:1f: f0:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:50:33:BF:8D:BC:9E:74:06:44:22:F5:90:4D:D9:6F:7E:BF:B2:7A X509v3 Authority Key Identifier: keyid:1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:3d:1e:09:23:2a:29:d1:5e:f8:1b:eb:35:e7:7c:0d:2b:1e: 10:c0:ed:b0:71:f4:82:7b:43:04:67:35:5c:bd:bc:cc:0c:4d: 04:0e:d0:11:0f:be:02:15:04:6d:a1:7b:b5:ef:84:5c:82:6e: f0:16:4c:47:b3:44:39:ae:33:3a:32:63:ab:cc:6a:dd:a2:45: 16:d5:44:8a:af:01:6b:41:86:d8:2e:b5:2e:56:c3:2f:68:ab: 91:8f:74:7b:cd:66:58:7c:01:35:11:11:7b:08:29:40:8a:29: 4a:56:aa:3a:46:54:8f:46:37:25:89:9b:16:54:cd:2b:dd:40: 56:b5:27:02:b0:3f:fa:f8:61:2e:66:d1:c7:48:62:18:77:63: bc:6e:c7:fb:26:85:6d:9e:7b:0a:d8:21:eb:ff:a2:c5:18:b4: f9:f0:73:7a:e8:e2:d6:bb:b1:4d:69:cd:e5:ed:d4:e6:a3:2a: 4d:50:ab:33:6e:99:a2:e0:d5:22:a6:eb:eb:d3:49:ff:fd:d7: 42:81:e2:99:60:61:1d:96:2a:3b:95:0a:5d:05:70:8f:b7:88: ce:db:59:9c:cb:95:dc:98:69:33:4e:2b:67:c6:ad:0f:5a:8e: f7:6d:37:36:b4:8a:e5:bb:6f:43:fa:4e:ef:7d:20:8d:f5:4e: 17:93:be:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZfQzioJMu/fBrkoRYwWs1vfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhY2I2Mzc2YTE2NDhkNDlkNTVlNGQ3YjAxMzcxMzY3YjBk YzJhZjkwHhcNMjUwNzAzMTUwMTAxWhcNMjUwNzA0MTUwMTAxWjAzMTEwLwYDVQQD EygzZDUwMzNiZjhkYmM5ZTc0MDY0NDIyZjU5MDRkZDk2ZjdlYmZiMjdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8RDazU6XfYLEhCct/sqBzxNkgQn +PF9sZnWrWqL/yBt74k30tX1+vFWB+c9J2rq8XqWGkuRcS5j7I8/eq8vapvLWraQ GdVfpTIKMEOINQTrJiRBcRaQ3sO5/BQWisOXIE4ewflx0SADVBAzFoImY4uVEKsY a29OFREj6shK/jKBkk6gJ1eS35vRPdragKlSRqvXjCh7HCd4dJL21G5S6P0yxy/4 F7fG71eNZrrNh6D7wcBCQEX33izELPmCcrrfCZHj13UlnQDXt8XjANviGNwK5hbD fixAl8EinMN389zeV0g95fGSlqR6VUd+zV1txDVYg8E4skW6JHwZ9B/wlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD1QM7+NvJ50BkQi9ZBN2W9+v7J6MB8GA1UdIwQY MBaAFBrLY3ahZI1J1V5NewE3E2ew3Cr5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3N0amRxRmtqVW5WWGsxN0FUY1RaN0RjS3ZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS83MjQ3YjAtNDk4OS00M2VhLTkzNTAt N2E5MzY3NTFkYjFiLzEvR3N0amRxRmtqVW5WWGsxN0FUY1RaN0RjS3ZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS83MjQ3YjAtNDk4OS00M2VhLTkzNTAtN2E5MzY3NTFkYjFi LzEvR3N0amRxRmtqVW5WWGsxN0FUY1RaN0RjS3ZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQT0eCSMq KdFe+BvrNed8DSseEMDtsHH0gntDBGc1XL28zAxNBA7QEQ++AhUEbaF7te+EXIJu 8BZMR7NEOa4zOjJjq8xq3aJFFtVEiq8Ba0GG2C61LlbDL2irkY90e81mWHwBNRER ewgpQIopSlaqOkZUj0Y3JYmbFlTNK91AVrUnArA/+vhhLmbRx0hiGHdjvG7H+yaF bZ57Ctgh6/+ixRi0+fBzeuji1ruxTWnN5e3U5qMqTVCrM26ZouDVIqbr69NJ//3X QoHimWBhHZYqO5UKXQVwj7eIzttZnMuV3JhpM04rZ8atD1qO9203NrSK5btvQ/pO 730gjfVOF5O+Rw== -----END CERTIFICATE-----Generated at Thu Jul 3 17:30:05 2025 by rpki-client