$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft File: vfrSPhHPDSSkd1lOugn5msxvH_8.mft (raw, json) Hash identifier: jcHApwn2fdX8bLDl/uJW76WilcK6mJLh8WWsIaEZleQ= Subject key identifier: 02:33:F8:E5:0E:30:56:4E:A7:82:35:1A:A4:BB:DB:E7:61:8D:E6:F8 Authority key identifier: BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF Certificate issuer: /CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff Certificate serial: 0197B7B37AD55EAE7932504D01E9BD9344C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft Manifest number: 15D0 Signing time: Sat 28 Jun 2025 18:01:22 +0000 Manifest this update: Sat 28 Jun 2025 18:01:22 +0000 Manifest next update: Sun 29 Jun 2025 18:01:22 +0000 Files and hashes: 1: 6WLkt-CJrHz9HrmJ80IE8yLiggQ.roa (hash: A1D8GCMAKibxSwfJYYFLTLyOk7V1Z8lwvSAEOW0OnkI=) 2: 7vjowzcPet99DpSwRMSRoDCwwzU.roa (hash: X+UxdfFDiClGq5vQ6ru5h4wKAEV+wpHwdLPZ+uKZ1dI=) 3: KrWr-uxPx9ROkw1dMPy0luW9rHI.roa (hash: wAvc90Nk+tLmXZJ7T3uA3J3ZDaVOAEjfbFhLJlJ5p7c=) 4: W6ybVPAGTpEsw7meUuR6P0SBWi0.roa (hash: Pk0B2oz1VW/tzo+fvfG4VG2dc2avAQtB88TgpiGpr1s=) 5: _l-kXEP7uNjKBXPQ_iDyaiai-0s.roa (hash: yKpSNSngqAM/eyMmWKP/S33qgMa9todToBwJi00eda0=) 6: e5O39jLwx-J5_GwekaRwgr2d2RE.roa (hash: HUk8Z3Nkmb3qkmakGlU4y4u1qV2j7sm1wiYlhVDlC1I=) 7: fL3fAtFLchxlzuCc2GY65y6LmZ0.roa (hash: XRZwhdg6OIZelMOuq2OiZcg4UiZ6j5YXWUKJ7b9dB2A=) 8: jVxo0eRrcP2pgqEM2o5yJCaDJF8.roa (hash: 16iXvR9xhaKTmRi0zkcfcRjJRbOmgMjKBuv8xrJfUx4=) 9: lVRxioxScoDE7zhaCYNE7hVti4o.roa (hash: 2SOb+vjF9aw2d+xYqFyVysIAXg1nOJ/HsxNH3uvPjjc=) 10: oFZG6FuqcB6CEgUjG9AbuL9dAS0.roa (hash: UZD/yf7XHoNO7JDGnUu+XcMvM0jiJ1W2cL6Q6ekzwvE=) 11: rzIhKyyjXlSGxIVHnVv7j-nWQ4A.roa (hash: wyAyy8rxCcwgCB+QLmatxIedkc9CxRz+G4M60YbCHcQ=) 12: tiIoys09kmXMH3pj0eYY3jB6F7o.roa (hash: /BFY3lyPkgwMGI6Yoxtr7ZIkhvJMoAS7umXiaAeUjKk=) 13: vfrSPhHPDSSkd1lOugn5msxvH_8.crl (hash: /NQv3gdnnS6iNsZsUhusqIKqA7n6q4VsrHRDHJpHD2U=) 14: yNNopewn85t08Znw5j3oTWUISEc.roa (hash: ZkUCX6gB41bOpnUPfzdbRC3CiwRZ4yyWFwXTC/D9/dc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b7:b3:7a:d5:5e:ae:79:32:50:4d:01:e9:bd:93:44:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff Validity Not Before: Jun 28 18:01:22 2025 GMT Not After : Jun 29 18:01:22 2025 GMT Subject: CN=0233f8e50e30564ea782351aa4bbdbe7618de6f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:11:9a:1a:12:00:97:5f:c8:6f:6b:6a:6f:71: d2:ef:77:4a:ac:3c:3d:73:74:05:3d:09:bc:4d:35: 10:f2:2d:1e:5b:fa:30:a7:f0:80:8d:45:1d:05:a4: 99:5c:0f:39:75:b2:d7:50:d5:62:d4:c8:2a:c1:cb: d2:5e:64:f7:05:9e:8f:24:40:80:eb:3b:3c:f7:34: b0:f4:68:6d:84:7c:70:02:10:a7:c2:57:7b:2f:20: de:a5:86:d9:b6:9c:f9:81:4d:09:7c:24:2b:45:9f: 6a:24:4d:7a:52:96:b4:68:70:ea:0b:c9:dc:70:c0: e9:9b:73:2c:10:37:32:ee:69:b6:ce:82:5c:e1:0f: 24:61:13:09:76:e7:45:23:4b:3e:21:cc:55:4c:fc: 22:c3:f2:eb:48:f2:6a:39:26:9a:2c:3c:4e:4f:84: ea:1a:1f:7a:e9:96:cd:9f:21:e5:16:f2:fa:0f:9c: a4:6e:e9:c5:47:a7:be:d1:12:83:57:24:fc:09:6f: 15:a1:9b:07:14:11:80:06:60:76:ab:c5:56:1c:19: d0:34:15:f7:93:71:14:60:81:51:e9:33:70:c5:41: 03:8e:df:db:40:83:2a:69:25:2b:8c:4f:05:d0:ae: 18:da:10:9a:82:bd:fc:66:5e:3d:dd:6b:79:70:dd: da:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:33:F8:E5:0E:30:56:4E:A7:82:35:1A:A4:BB:DB:E7:61:8D:E6:F8 X509v3 Authority Key Identifier: keyid:BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:1a:f1:4e:6e:cd:db:40:58:5d:22:67:39:fb:a0:8d:10:92: e5:eb:c0:e8:ba:16:18:3e:27:e9:e1:33:87:78:a4:5e:72:fd: a4:93:06:5c:4f:70:93:af:f3:c9:f0:44:fc:7a:6c:97:35:bd: ac:55:2c:4e:83:a0:e1:f1:94:1a:a9:7e:75:a6:2d:5a:8c:37: 87:31:3a:66:df:87:1d:ba:d2:cb:5a:f2:d2:85:43:e1:13:e9: ae:7d:13:23:95:ea:cf:8c:d4:47:b0:27:48:5b:71:f7:8c:8f: b2:d0:6c:e7:48:71:30:3b:d7:67:87:c5:77:b3:99:49:6c:87: 94:1d:e0:59:b5:9f:9c:1b:2a:7f:0d:ae:2c:01:96:11:e1:fe: 5b:21:f1:bc:3a:d3:dd:b4:9a:79:5e:2f:51:bd:6e:5a:ad:a0: de:be:bd:bc:c6:b9:a6:dc:f3:d5:5b:7b:1d:78:8d:aa:96:40: c9:9d:de:2d:e5:65:b4:0c:09:0a:0c:bc:63:a9:07:e1:93:c4: 52:15:a1:20:26:5a:5a:89:5c:be:b8:fc:9c:0d:20:66:71:44: 56:62:be:17:ad:00:9e:3f:96:b4:6d:ef:06:8c:a2:8f:8c:e2: ee:3e:66:ba:17:e4:1a:ba:21:76:ca:ad:fd:36:11:a1:ce:a2: 44:4d:d7:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe3s3rVXq55MlBNAem9k0TDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkZmFkMjNlMTFjZjBkMjRhNDc3NTk0ZWJhMDlmOTlhY2M2 ZjFmZmYwHhcNMjUwNjI4MTgwMTIyWhcNMjUwNjI5MTgwMTIyWjAzMTEwLwYDVQQD EygwMjMzZjhlNTBlMzA1NjRlYTc4MjM1MWFhNGJiZGJlNzYxOGRlNmY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRGaGhIAl1/Ib2tqb3HS73dKrDw9 c3QFPQm8TTUQ8i0eW/owp/CAjUUdBaSZXA85dbLXUNVi1MgqwcvSXmT3BZ6PJECA 6zs89zSw9GhthHxwAhCnwld7LyDepYbZtpz5gU0JfCQrRZ9qJE16Upa0aHDqC8nc cMDpm3MsEDcy7mm2zoJc4Q8kYRMJdudFI0s+IcxVTPwiw/LrSPJqOSaaLDxOT4Tq Gh966ZbNnyHlFvL6D5ykbunFR6e+0RKDVyT8CW8VoZsHFBGABmB2q8VWHBnQNBX3 k3EUYIFR6TNwxUEDjt/bQIMqaSUrjE8F0K4Y2hCagr38Zl493Wt5cN3auQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAIz+OUOMFZOp4I1GqS72+dhjeb4MB8GA1UdIwQY MBaAFL360j4Rzw0kpHdZTroJ+ZrMbx//MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmZyU1BoSFBEU1NrZDFsT3VnbjVtc3h2SF84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9lMjUyMzktNmFiMC00OTE5LWE3NmEt NGY0ZTcxZTMyMDg0LzEvdmZyU1BoSFBEU1NrZDFsT3VnbjVtc3h2SF84Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9lMjUyMzktNmFiMC00OTE5LWE3NmEtNGY0ZTcxZTMyMDg0 LzEvdmZyU1BoSFBEU1NrZDFsT3VnbjVtc3h2SF84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqhrxTm7N 20BYXSJnOfugjRCS5evA6LoWGD4n6eEzh3ikXnL9pJMGXE9wk6/zyfBE/HpslzW9 rFUsToOg4fGUGql+daYtWow3hzE6Zt+HHbrSy1ry0oVD4RPprn0TI5Xqz4zUR7An SFtx94yPstBs50hxMDvXZ4fFd7OZSWyHlB3gWbWfnBsqfw2uLAGWEeH+WyHxvDrT 3bSaeV4vUb1uWq2g3r69vMa5ptzz1Vt7HXiNqpZAyZ3eLeVltAwJCgy8Y6kH4ZPE UhWhICZaWolcvrj8nA0gZnFEVmK+F60Anj+WtG3vBoyij4zi7j5muhfkGrohdsqt /TYRoc6iRE3XhQ== -----END CERTIFICATE-----Generated at Sat Jun 28 22:46:41 2025 by rpki-client