$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.mft File: RotZLzEQvGw1JJqCcaDawamssM4.mft (raw, json) Hash identifier: D+I4z4dRb3DQA9ytHLffqtAGx/qQMDkE61Bco5kwqkA= Subject key identifier: 94:45:80:F3:AE:50:44:5D:65:B3:72:B5:6D:55:24:1E:DF:1A:35:CB Authority key identifier: 46:8B:59:2F:31:10:BC:6C:35:24:9A:82:71:A0:DA:C1:A9:AC:B0:CE Certificate issuer: /CN=468b592f3110bc6c35249a8271a0dac1a9acb0ce Certificate serial: 0197B63279F183B6FAAB104B5623566A31C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.mft Manifest number: 05C0 Signing time: Sat 28 Jun 2025 11:00:50 +0000 Manifest this update: Sat 28 Jun 2025 11:00:50 +0000 Manifest next update: Sun 29 Jun 2025 11:00:50 +0000 Files and hashes: 1: 4PdFFqbPgnyAF8OAZU59EP79EQE.roa (hash: 0N0pRYIfSwp4rQqEao9ImOBW5Z4au+nqt0SGDhOprnI=) 2: 8u1Ww9yNVHCXoKy959EsUaU71zs.roa (hash: MCjwWNvinwMVi61YdY3QarB5BMMcy4gUuYfqYD2T3PI=) 3: B5kdDxNFhlA9AT3PyqFkTX6RY6M.roa (hash: Xin+IDogu4+kKllgKutdfXdJm2piOKuXIHOph9bE8Zw=) 4: RotZLzEQvGw1JJqCcaDawamssM4.crl (hash: eWggrYI7ENbFO9EBVwGYJYZhFpIEoeiIA0cewSbsfxs=) 5: _vYyrixRE-yXYNd95EagmmedMZs.roa (hash: Nq9E9fzlDdc1TerNy7pW2Y+cp+tsEL9ANsKsoDQ0Pwo=) 6: bvgsPr3D5PPxL6J89BfI0hjp6nU.roa (hash: gQ8pHX8IE1KeaNe50ukz0WLLfO6NzXHlCO7loLPh0Ow=) 7: elD2CPARB_SCiElYBqX86L528iA.roa (hash: 4GpojDoTFDR9/As1unQ2wQcCWk8x0pykSLzc87gKTZw=) 8: i1oSM0zm6FdsD8GW2rr18ZJYU9c.roa (hash: vhtU0Gjcgqwk2dDqzgcdqq71xJAqWywoPwJaRLlLExA=) 9: moar5P9-vHm1h7dW1fwgc72NFhw.roa (hash: JbVrT9GvQCxgYaVUxgeC2lZytQA7NzFvIW4W5mDjY3A=) 10: wpO2gWHd7fIiJY2UmwBghuKU8Pk.roa (hash: eNcYuQe4vVrI0lLxGnwWNPY5OwCaWdtNSK5bPAl0Ug8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.mft rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 11:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b6:32:79:f1:83:b6:fa:ab:10:4b:56:23:56:6a:31:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=468b592f3110bc6c35249a8271a0dac1a9acb0ce Validity Not Before: Jun 28 11:00:50 2025 GMT Not After : Jun 29 11:00:50 2025 GMT Subject: CN=944580f3ae50445d65b372b56d55241edf1a35cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:49:ad:f4:83:bf:17:5c:fe:4a:b0:03:6a:b9: 36:b4:73:e5:8e:29:cc:eb:3b:f1:4c:80:eb:b3:93: 6e:f9:8e:b4:f4:d6:40:4a:1b:61:57:88:2c:77:a6: 9e:0e:53:fc:28:b1:99:24:6c:b1:de:2c:dc:79:3b: 6e:70:d1:9a:a2:dc:4c:b8:30:e9:c3:ed:6a:56:2d: fb:f2:a3:48:92:6a:f6:98:c1:20:9c:64:6f:cc:c7: 0e:de:6d:23:4a:35:8b:64:a3:df:77:ba:ab:54:d6: 04:89:33:0d:d9:d2:52:fb:4c:e3:04:d5:c1:66:20: d0:91:8e:8c:fc:32:2b:75:33:a3:3a:ec:ac:2c:96: 47:ab:b3:69:09:97:65:53:1f:5a:69:ea:fd:e1:18: a0:6a:53:eb:f0:7a:bd:ed:0a:68:37:f4:5a:99:84: 9b:54:c7:c6:b4:d2:b4:1e:26:f7:1f:54:99:70:94: df:a9:9a:ca:af:de:fd:bb:d2:79:df:25:a0:ca:9a: 37:55:d0:12:75:69:9b:53:9c:6c:87:65:58:87:4f: 30:48:de:9c:8f:49:94:b1:08:dd:26:ad:2c:89:a5: a6:77:3a:55:af:0e:24:c5:71:0d:b6:69:15:4a:bd: eb:3c:79:e2:f9:dd:e8:81:b8:43:dd:ad:16:4d:fc: d9:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:45:80:F3:AE:50:44:5D:65:B3:72:B5:6D:55:24:1E:DF:1A:35:CB X509v3 Authority Key Identifier: keyid:46:8B:59:2F:31:10:BC:6C:35:24:9A:82:71:A0:DA:C1:A9:AC:B0:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:82:a1:ec:44:2a:79:2c:91:d7:65:41:6c:87:06:e8:46:85: 84:69:22:e7:f4:6d:a2:8a:33:b4:72:77:5d:d4:c3:e2:0f:d2: 30:04:38:a6:a5:88:d1:14:f2:28:09:0a:29:30:ff:7e:4b:0d: 8f:d1:d1:22:43:3e:14:2a:a0:56:30:41:54:d8:5e:c5:b2:82: 9a:14:57:db:37:9c:6a:90:17:bc:31:ab:59:7a:7c:86:41:df: aa:a5:7c:63:2d:aa:51:52:4c:26:b7:32:b1:03:a1:83:e9:e0: a2:0f:fd:72:1a:36:43:6f:76:cc:46:5c:0c:db:6c:79:00:ef: f4:ed:0e:a4:e0:4b:39:31:9c:a4:85:7a:b4:ca:e2:77:a2:53: c2:aa:fa:65:f8:a7:3d:03:02:af:c4:31:5c:bd:a9:78:7b:21: da:86:f7:58:52:bf:78:e6:53:97:86:57:a6:b6:08:5b:4b:d6: d9:03:dd:fe:0a:a6:1f:04:ed:2a:4d:1a:b5:56:50:a0:b5:45: 0c:e1:b7:57:94:24:b9:11:71:22:86:12:9f:d7:ab:df:c5:6f: cc:0b:90:9c:b6:1a:65:dd:51:37:a6:e5:ca:5b:58:32:97:55: 45:16:8a:eb:08:3b:24:f7:4e:85:f9:bc:e2:89:8f:4b:b4:64: dc:10:71:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe2Mnnxg7b6qxBLViNWajHEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2OGI1OTJmMzExMGJjNmMzNTI0OWE4MjcxYTBkYWMxYTlh Y2IwY2UwHhcNMjUwNjI4MTEwMDUwWhcNMjUwNjI5MTEwMDUwWjAzMTEwLwYDVQQD Eyg5NDQ1ODBmM2FlNTA0NDVkNjViMzcyYjU2ZDU1MjQxZWRmMWEzNWNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEmt9IO/F1z+SrADark2tHPljinM 6zvxTIDrs5Nu+Y609NZAShthV4gsd6aeDlP8KLGZJGyx3izceTtucNGaotxMuDDp w+1qVi378qNIkmr2mMEgnGRvzMcO3m0jSjWLZKPfd7qrVNYEiTMN2dJS+0zjBNXB ZiDQkY6M/DIrdTOjOuysLJZHq7NpCZdlUx9aaer94RigalPr8Hq97QpoN/RamYSb VMfGtNK0Hib3H1SZcJTfqZrKr979u9J53yWgypo3VdASdWmbU5xsh2VYh08wSN6c j0mUsQjdJq0siaWmdzpVrw4kxXENtmkVSr3rPHni+d3ogbhD3a0WTfzZNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJRFgPOuUERdZbNytW1VJB7fGjXLMB8GA1UdIwQY MBaAFEaLWS8xELxsNSSagnGg2sGprLDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUm90Wkx6RVF2R3cxSkpxQ2NhRGF3YW1zc000LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8yOWUxNjYtOThkMi00OWYyLTg0OTct MDUwMzc0OWFkZWEwLzEvUm90Wkx6RVF2R3cxSkpxQ2NhRGF3YW1zc000Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy8yOWUxNjYtOThkMi00OWYyLTg0OTctMDUwMzc0OWFkZWEw LzEvUm90Wkx6RVF2R3cxSkpxQ2NhRGF3YW1zc000LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiIKh7EQq eSyR12VBbIcG6EaFhGki5/RtoooztHJ3XdTD4g/SMAQ4pqWI0RTyKAkKKTD/fksN j9HRIkM+FCqgVjBBVNhexbKCmhRX2zecapAXvDGrWXp8hkHfqqV8Yy2qUVJMJrcy sQOhg+ngog/9cho2Q292zEZcDNtseQDv9O0OpOBLOTGcpIV6tMrid6JTwqr6Zfin PQMCr8QxXL2peHsh2ob3WFK/eOZTl4ZXprYIW0vW2QPd/gqmHwTtKk0atVZQoLVF DOG3V5QkuRFxIoYSn9er38VvzAuQnLYaZd1RN6blyltYMpdVRRaK6wg7JPdOhfm8 4omPS7Rk3BBxJQ== -----END CERTIFICATE-----Generated at Sat Jun 28 20:43:18 2025 by rpki-client