$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft File: xCcI35OVSqxgGu8YNb1daSRfsC8.mft (raw, json) Hash identifier: 75vCev/vDJv6+9a9Bt8QfHDKcaE/spawkR6MM/Vievw= Subject key identifier: 54:E2:8C:31:67:67:CE:2C:6E:90:CC:3E:8D:B9:03:BC:13:67:B2:02 Authority key identifier: C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F Certificate issuer: /CN=c42708df93954aac601aef1835bd5d69245fb02f Certificate serial: 0197B933F63F6FFEA3D134B4D067EE96F742 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft Manifest number: 15ED Signing time: Sun 29 Jun 2025 01:01:19 +0000 Manifest this update: Sun 29 Jun 2025 01:01:19 +0000 Manifest next update: Mon 30 Jun 2025 01:01:19 +0000 Files and hashes: 1: 74nFwIKFH3uKtRT845-Vm7iNpI0.roa (hash: dwaCUFData8ya0Po2dQ83XVjExSGr6tN155fGNNRXuQ=) 2: 8Vw-Hgob2gJJzFxw4N_7kn5Uv2U.roa (hash: yu7qW8GzkV3Hti3WFulLSHqkbPCHZbtH3t3UW9Lux70=) 3: EB1wuDmeUHpHHXGPcvwMNdqGnvs.roa (hash: S/BpxLczs5GDrHvkHydPA/TMOCqSJ4TvOwz6gx4BBLU=) 4: FF91gUN8QFsi0UjNb0hbhpegU4Q.roa (hash: rux40oh7ImTDen+JjsxYObPPdlN/NaOxBM5bJfSToH0=) 5: J0w5SdH9yfaXfZI27FnFWkxgcvQ.roa (hash: 8pwS1Eqt/nPpkIuSrw8GLk2/EWvlTk77ReSYaV8Jvi0=) 6: JNFYYPi5M46N7HWysvZAoIiQkYQ.roa (hash: 4FX/U+mKmibgMicQQFx15cVtRoPongw+FzcAthP3n5w=) 7: bUw7vUVn4cQiT9NfW716xSywuCE.roa (hash: 0o28YQYCqCXv7+7/uFNPlbdyY5SL/GVENUzDTrCxP4I=) 8: czhipXlSFQv2XtrizeOL4AkYjfQ.roa (hash: ktVLYCwHgnxekvZAuH8b1E8sdw3k+FPYtERYCRAoDw8=) 9: eiMLI2dh0653C-exQQO-o2bZ2eQ.roa (hash: IkhvxHI6cJnLtKgglasp3yMcL7l7unzpx1bcMF9QrRQ=) 10: m3NytSFQ3M-7elbGFk6F36SJ_Q8.roa (hash: rnZuJDJK8WGs0bsROLYdsrz2g2AqOwxzQCBo6kRxe1U=) 11: pKbsDSCcPoTPV9a3xyEwiNaa7KM.roa (hash: wFWQhX064Lr1eYYNNXVk7O6211MDK7H1lvoD2jj+zbk=) 12: xCcI35OVSqxgGu8YNb1daSRfsC8.crl (hash: iE30haqbdR37AWKH4Y9f5OyD2zE5YifYjAzR3gBe0P8=) 13: xVaoOo9WsmEpdGw7xGgi0JzmgcI.roa (hash: hhPTOcVJyofro9aVTmZ/Tc5fqLyU0/BYOcCQnrqIhRM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 19:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b9:33:f6:3f:6f:fe:a3:d1:34:b4:d0:67:ee:96:f7:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c42708df93954aac601aef1835bd5d69245fb02f Validity Not Before: Jun 29 01:01:19 2025 GMT Not After : Jun 30 01:01:19 2025 GMT Subject: CN=54e28c316767ce2c6e90cc3e8db903bc1367b202 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:4d:d9:df:95:39:94:c2:4e:ce:8d:af:af:3c: b3:02:e7:a1:97:55:b0:a7:c6:7c:54:51:02:5a:b8: 23:b6:91:c0:80:bf:0a:1a:8e:37:fb:a9:da:62:b8: 88:dd:38:5c:89:5c:d2:53:4f:41:1e:0a:6b:37:98: ec:5a:47:0f:5f:4a:c7:24:31:7e:f1:10:0b:db:c3: 1b:ee:d5:22:11:7f:cc:c5:4b:04:09:66:7b:9e:b3: be:07:cf:4a:49:e7:84:da:19:e1:a0:0d:ab:94:d0: b6:5e:bf:ff:d4:c2:2a:9b:e5:24:1a:73:bc:01:58: 13:17:f8:34:c1:31:c3:6d:02:94:d6:0d:62:fd:2a: 24:2b:c7:86:6e:30:5b:84:25:fb:19:46:af:56:71: 5c:43:2d:24:d0:82:24:88:9b:ff:9f:3a:0c:5d:2b: fd:27:9b:0f:15:b5:73:78:1f:df:90:65:28:78:17: 61:82:fc:45:5f:54:99:47:4f:51:59:2e:74:2e:83: 3d:1d:3d:e1:89:f7:4a:10:78:63:27:ed:a0:bb:56: 4d:aa:9d:7b:65:ee:77:9c:0f:e3:fc:ba:03:52:7e: 21:33:7e:5d:b6:62:ab:c1:2f:0a:71:9c:59:b9:e6: 16:4d:54:04:d2:3f:35:a1:29:ce:02:e8:f7:02:31: 9f:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:E2:8C:31:67:67:CE:2C:6E:90:CC:3E:8D:B9:03:BC:13:67:B2:02 X509v3 Authority Key Identifier: keyid:C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:72:29:4e:8e:74:23:3a:dd:df:2d:cb:5d:31:c6:6d:46:20: 98:a3:70:5e:d6:49:fa:3f:17:b2:a1:fb:99:4c:70:95:cc:3d: e4:c7:b0:42:ee:e8:e0:38:49:79:a2:b5:a2:60:7b:45:25:a1: 3b:24:01:8c:82:18:e6:f9:c8:aa:a3:58:f7:5f:12:82:dc:b6: a5:a9:5b:78:11:d7:69:87:a2:dc:da:c9:d8:f9:aa:aa:2a:43: dd:4f:6f:3f:f5:ac:57:68:61:a1:54:c5:36:ce:a6:2a:1b:a3: fd:ab:78:8c:4e:57:c9:e1:27:cf:77:13:0e:36:30:09:28:74: 4b:0c:a2:43:a2:78:36:11:4a:c4:b8:4c:ac:2d:cf:04:b6:d3: 18:55:25:4e:10:5f:51:96:3f:d5:20:ce:1f:50:4f:3b:07:85: 99:9f:e4:7a:fd:1f:e9:a1:66:8e:3b:7f:7f:dc:d4:59:ae:85: fe:8e:b9:93:ee:5e:98:6f:42:e6:23:24:e9:87:9a:5b:bc:6c: 6c:31:15:1e:3f:f9:06:fa:23:6c:ec:b4:0b:d0:7c:b8:ee:63: e0:00:82:e7:0f:41:6c:51:2a:60:b5:62:6c:cf:33:b4:81:a0: 16:e1:fe:bb:50:67:dc:80:de:ba:cc:16:98:46:1f:e5:3f:54: 84:b0:98:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe5M/Y/b/6j0TS00GfulvdCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0MjcwOGRmOTM5NTRhYWM2MDFhZWYxODM1YmQ1ZDY5MjQ1 ZmIwMmYwHhcNMjUwNjI5MDEwMTE5WhcNMjUwNjMwMDEwMTE5WjAzMTEwLwYDVQQD Eyg1NGUyOGMzMTY3NjdjZTJjNmU5MGNjM2U4ZGI5MDNiYzEzNjdiMjAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApk3Z35U5lMJOzo2vrzyzAuehl1Ww p8Z8VFECWrgjtpHAgL8KGo43+6naYriI3ThciVzSU09BHgprN5jsWkcPX0rHJDF+ 8RAL28Mb7tUiEX/MxUsECWZ7nrO+B89KSeeE2hnhoA2rlNC2Xr//1MIqm+UkGnO8 AVgTF/g0wTHDbQKU1g1i/SokK8eGbjBbhCX7GUavVnFcQy0k0IIkiJv/nzoMXSv9 J5sPFbVzeB/fkGUoeBdhgvxFX1SZR09RWS50LoM9HT3hifdKEHhjJ+2gu1ZNqp17 Ze53nA/j/LoDUn4hM35dtmKrwS8KcZxZueYWTVQE0j81oSnOAuj3AjGfowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFTijDFnZ84sbpDMPo25A7wTZ7ICMB8GA1UdIwQY MBaAFMQnCN+TlUqsYBrvGDW9XWkkX7AvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9mNjE3YTUtMzI0MC00OGM0LWI3MTYt NzQxYzFkOGRlYTJiLzEveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9mNjE3YTUtMzI0MC00OGM0LWI3MTYtNzQxYzFkOGRlYTJi LzEveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAanIpTo50 Izrd3y3LXTHGbUYgmKNwXtZJ+j8XsqH7mUxwlcw95MewQu7o4DhJeaK1omB7RSWh OyQBjIIY5vnIqqNY918Sgty2palbeBHXaYei3NrJ2PmqqipD3U9vP/WsV2hhoVTF Ns6mKhuj/at4jE5XyeEnz3cTDjYwCSh0SwyiQ6J4NhFKxLhMrC3PBLbTGFUlThBf UZY/1SDOH1BPOweFmZ/kev0f6aFmjjt/f9zUWa6F/o65k+5emG9C5iMk6YeaW7xs bDEVHj/5BvojbOy0C9B8uO5j4ACC5w9BbFEqYLVibM8ztIGgFuH+u1Bn3IDeuswW mEYf5T9UhLCY5A== -----END CERTIFICATE-----Generated at Sun Jun 29 04:35:10 2025 by rpki-client