$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft File: ge7UCROD2e1AVtn07_fSYi3c4gU.mft (raw, json) Hash identifier: uO1iW9BXVPnSsrCI5dXwQfW9M1plhXhauC31ReYwy+Y= Subject key identifier: D2:DF:7E:38:2A:E3:46:48:33:D0:13:86:38:41:BD:4F:AC:07:04:49 Authority key identifier: 81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05 Certificate issuer: /CN=81eed4091383d9ed4056d9f4eff7d2622ddce205 Certificate serial: 0197B7EA8DA0F3A072BF984E99EE5449B1D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft Manifest number: 15CD Signing time: Sat 28 Jun 2025 19:01:31 +0000 Manifest this update: Sat 28 Jun 2025 19:01:31 +0000 Manifest next update: Sun 29 Jun 2025 19:01:31 +0000 Files and hashes: 1: 1-FVNiQvWEXUQsyhSP2mXL7ZeFhI.roa (hash: h2VWp4VUz/KwikufobsIYuUTWP+PbubtA5kM1+IYNJ4=) 2: 1-cC_8sf2Sjlcbm7-DZh4XuYIArQ.roa (hash: 0N5yH6BWqUs7tPNNDSMGPx2mfE/ZRDiPQfeLQl52Wgo=) 3: GTiO-SupitdTmKiZ_HKcU4MJuTk.roa (hash: +PZAxnriWNXJlrxxhGkuM8aqghAi9SsDw/xLwTjAVR8=) 4: Oe4b0YKTYWpvik3U2IZ6qMIqY0Q.roa (hash: UL3WTeHzd5FXSU3d7socZAKRgjBZ+Jri4TxH4t/75EI=) 5: XF9ImwV6WWJIs0xQcjK4t7jAy60.roa (hash: cqd2xtXIiuriNNQV4wixCocQ/6vU5JsRpBkdhH+9z5k=) 6: f6ghH_7B3PzM3ktCIJpbMer11MQ.roa (hash: gQOe3jDJjm6Z8U0Sg1BUTciGU/YhoqXEIyyDOVhhKCY=) 7: ge7UCROD2e1AVtn07_fSYi3c4gU.crl (hash: /H//AmK5KHRpOoP37DLSt9MEKaZGPC6o1kBLG2OWZPA=) 8: i30xTo-UR4_VbHo8fjprUc4AF6g.roa (hash: a1dsNKX1kvmUfXHRJMRlL3dZirJz9clcR1rF2jPzapU=) 9: uhgMFZw8rs0tJvJzvMK6WeU68F0.roa (hash: qV6k2QQIZBdjD0SstNGQRZVonpUjQ86it1wpOl33iLI=) 10: xb_V8FoCziLwhsNf2nDbMavL4CE.roa (hash: FYXyUhIT7c2rjGPzDYmHZI9gN0Jm7MertTGE0IiU5ck=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b7:ea:8d:a0:f3:a0:72:bf:98:4e:99:ee:54:49:b1:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81eed4091383d9ed4056d9f4eff7d2622ddce205 Validity Not Before: Jun 28 19:01:31 2025 GMT Not After : Jun 29 19:01:31 2025 GMT Subject: CN=d2df7e382ae3464833d013863841bd4fac070449 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:9b:b6:7c:bc:75:54:81:77:23:8b:17:e8:f6: 12:97:7c:26:b3:78:8f:54:2c:42:b1:ab:48:e6:bc: 7f:39:7f:ba:6c:e7:3c:42:78:87:9d:22:94:56:e6: 5b:14:23:3c:56:d9:70:b3:03:66:9d:18:7f:31:12: 74:a0:97:50:b7:45:d0:09:86:67:42:52:1f:97:af: e0:38:62:e1:31:1b:a4:aa:6e:f9:4b:29:85:7b:b1: ab:bc:c1:c0:0d:cd:50:f9:37:6e:ef:07:03:0b:5d: ad:a6:15:52:de:06:a0:d1:a2:66:a1:6c:0a:be:5f: 93:b8:51:89:71:5f:44:a5:01:5f:e9:7c:37:2e:8a: 38:33:f1:0c:b6:d5:9e:11:b7:53:9f:f4:be:eb:f2: 80:9d:6b:92:b4:e6:76:76:ca:17:18:0b:42:78:48: 67:a5:32:41:50:d1:ea:2f:cf:11:a8:3c:1f:3e:88: bf:22:6c:b4:a7:6b:19:88:c0:af:9c:1e:20:0c:7b: 11:41:c2:8b:7a:b9:73:14:8b:e0:9d:3d:1d:89:9a: 9e:32:e1:ba:fa:e3:3b:72:71:f3:c7:57:0b:0f:e1: cf:8f:c1:df:76:36:c4:1a:28:75:6c:bf:b1:a6:b1: df:ba:69:15:cb:b0:e4:57:0f:93:40:1d:12:5e:85: 6e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:DF:7E:38:2A:E3:46:48:33:D0:13:86:38:41:BD:4F:AC:07:04:49 X509v3 Authority Key Identifier: keyid:81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:30:0f:47:cb:ab:12:0f:4d:74:f9:54:75:34:85:11:04:1b: 69:e9:a1:e9:0f:02:5f:11:6d:1d:54:e0:42:3b:ff:6a:b6:fa: 0b:48:6a:6b:85:d9:c0:d1:4c:7e:ce:2b:f7:5a:6c:a6:65:7f: e2:75:48:02:7c:18:2d:de:8a:e0:3b:05:33:e5:d1:1b:c1:1c: b3:ef:2e:56:3e:f8:74:55:8a:67:86:5b:08:d3:92:fc:b5:d8: 34:a2:1c:18:09:64:51:d4:31:2e:76:0b:5b:c0:ff:d3:ae:94: f7:cd:38:d6:3b:fc:37:26:a4:82:bd:c0:2b:0a:ad:17:21:dd: 32:ba:99:4c:8c:53:b5:6f:64:df:30:1c:6c:9d:f9:5b:66:e1: a8:38:63:72:19:89:71:33:59:bf:65:30:ab:2f:e4:a2:e7:e0: e4:95:56:84:fb:b9:65:95:e2:61:44:83:d5:d1:0a:5f:da:e8: f2:33:66:0a:46:b8:fb:8c:43:5d:30:ef:bb:cb:b8:9e:d7:50: 88:86:d9:29:c9:be:f1:b8:97:2c:90:ca:04:f0:73:59:d0:75: 55:e1:30:b1:0c:e1:18:72:8d:e5:d1:c4:ec:36:92:5a:e2:f0: de:1e:e8:da:cc:37:cb:d2:46:65:15:d3:8a:6b:8d:0a:c9:84: f7:e1:e3:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe36o2g86Byv5hOme5USbHQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxZWVkNDA5MTM4M2Q5ZWQ0MDU2ZDlmNGVmZjdkMjYyMmRk Y2UyMDUwHhcNMjUwNjI4MTkwMTMxWhcNMjUwNjI5MTkwMTMxWjAzMTEwLwYDVQQD EyhkMmRmN2UzODJhZTM0NjQ4MzNkMDEzODYzODQxYmQ0ZmFjMDcwNDQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3pu2fLx1VIF3I4sX6PYSl3wms3iP VCxCsatI5rx/OX+6bOc8QniHnSKUVuZbFCM8VtlwswNmnRh/MRJ0oJdQt0XQCYZn QlIfl6/gOGLhMRukqm75SymFe7GrvMHADc1Q+Tdu7wcDC12tphVS3gag0aJmoWwK vl+TuFGJcV9EpQFf6Xw3Loo4M/EMttWeEbdTn/S+6/KAnWuStOZ2dsoXGAtCeEhn pTJBUNHqL88RqDwfPoi/Imy0p2sZiMCvnB4gDHsRQcKLerlzFIvgnT0diZqeMuG6 +uM7cnHzx1cLD+HPj8HfdjbEGih1bL+xprHfumkVy7DkVw+TQB0SXoVuxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNLffjgq40ZIM9AThjhBvU+sBwRJMB8GA1UdIwQY MBaAFIHu1AkTg9ntQFbZ9O/30mIt3OIFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2U3VUNST0QyZTFBVnRuMDdfZlNZaTNjNGdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS80YTljYzQtMmI5YS00ZWYyLWEzM2Et ODcyYjM3MTBjMmExLzEvZ2U3VUNST0QyZTFBVnRuMDdfZlNZaTNjNGdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS80YTljYzQtMmI5YS00ZWYyLWEzM2EtODcyYjM3MTBjMmEx LzEvZ2U3VUNST0QyZTFBVnRuMDdfZlNZaTNjNGdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATDAPR8ur Eg9NdPlUdTSFEQQbaemh6Q8CXxFtHVTgQjv/arb6C0hqa4XZwNFMfs4r91pspmV/ 4nVIAnwYLd6K4DsFM+XRG8Ecs+8uVj74dFWKZ4ZbCNOS/LXYNKIcGAlkUdQxLnYL W8D/066U98041jv8Nyakgr3AKwqtFyHdMrqZTIxTtW9k3zAcbJ35W2bhqDhjchmJ cTNZv2Uwqy/koufg5JVWhPu5ZZXiYUSD1dEKX9ro8jNmCka4+4xDXTDvu8u4ntdQ iIbZKcm+8biXLJDKBPBzWdB1VeEwsQzhGHKN5dHE7DaSWuLw3h7o2sw3y9JGZRXT imuNCsmE9+HjhA== -----END CERTIFICATE-----Generated at Sat Jun 28 21:37:53 2025 by rpki-client