$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft File: kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft (raw, json) Hash identifier: dgPugYkvWtQ5GIjTwJg/dLAiB+PvaInbYLSlTIlluQE= Subject key identifier: BA:30:55:7F:EA:64:A0:85:C7:8C:4A:93:CE:83:20:2B:E7:B5:A7:0A Authority key identifier: 92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55 Certificate issuer: /CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055 Certificate serial: 0197BA7D16E5AC9B9855BB657BE1B6AF4C75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft Manifest number: 15C5 Signing time: Sun 29 Jun 2025 07:00:49 +0000 Manifest this update: Sun 29 Jun 2025 07:00:49 +0000 Manifest next update: Mon 30 Jun 2025 07:00:49 +0000 Files and hashes: 1: 0qAbgoW4LJAElFdWt9cFuw-rgn8.roa (hash: L8maPhEmT2n7X8a6uusm8vsVOaPlCBJtXIkemnm/t10=) 2: 26WNO431X2DrhCSuMJxs-XhHdFw.roa (hash: NIeRGI1yKvtGj8sFMzxTqCRVywS0D7qHUOhHSF/o4Dg=) 3: FLQOSktOr1hKjG4R6lRrGTwu4Y4.roa (hash: HCxQYiPGo2KxnCSlrWXoWcHI4W9ZFCE3iBJWeLRX1o8=) 4: MTxciv5mcC6g5MkOWJ_PCLUtcGw.roa (hash: sgzh4uhlDpWhAHL+IAu4cgWAxT/K2/Pct3jSfOVM8NQ=) 5: W4Pp1uZLNY6O8zypTnIooV8OKUw.roa (hash: sz2YvKmGzTepzQeb00hlOadIcmBeFimSpx3Uqur21uI=) 6: Y1uBCw2ID0YyZ99v-Z_lyCH99eg.roa (hash: cjULbx6P7MvMK4WANKsBKAVbb7nETAlX3DivVasETiQ=) 7: bCiizil2Ey8Pvh56RnqDgTk8X7Q.roa (hash: phspsqh/4y98JzmGzw3HpShtGGUJNNv7gxCq93gvxKo=) 8: gyBoR0Pr1cH4RPdcxzglRlFRHBw.roa (hash: 3pblEbuyEQGeT8WjyqKPo8c9UE3z9FtuOT2bJKOYqhg=) 9: kj7kinsfLRhL_IoV619KJi8FFL8.roa (hash: PZmgxN8/Rtu6BsEbQsN7jkEXwA4RX6FBccLjt1dXYy4=) 10: kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl (hash: Exd0giawamWPjDBNATINfBAgRBfistmnsndG6Vo83u4=) 11: ntJH0KRoZucW8VNuwTIHrnSnlKg.roa (hash: 09HbUbUgEiRqWzx65FOtxruuV31mRSjgz3dJWoNx5nA=) 12: pgkZmq53mdBn0axql3jHx0EQjb0.roa (hash: aQFrLEqXJ0R769ANrMlsyVSYn8plE/Z1heUQyyK64EM=) 13: rQI6zOSTMPr-5aSxylwS7FyovQ4.roa (hash: rfEafPW5O0SAZQwvAq0I4Fkx0LFGcfF/mHD1nsLYnQk=) 14: sjrvDPQwhWQPqwn6TmRlTLKuFYg.roa (hash: 1WK8IPxCTeSex8E0rLqfFDPE1ENBltlsB6VMf3gJcZY=) 15: u4G1_yF4TBBumrIYzOwiYZxivvM.roa (hash: KXapgrZ9J9YmS63vQiCaKhL0YwTkps2tWnrl3xdYLX4=) 16: uMHNQRmfBxlbvZLGtjT4gp4kg2M.roa (hash: F+fAKBuQq3PLDBu2sHTyZl1ELbNuh34xu5t/W6OjOpg=) 17: ywFfsakzP6gwg7h7Z-Y4enCkXVs.roa (hash: zQ4r7S3Ps9QMhK/S8Db/JFo0flSN41hhML8fbJu8SJA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Jun 2025 04:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:ba:7d:16:e5:ac:9b:98:55:bb:65:7b:e1:b6:af:4c:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055 Validity Not Before: Jun 29 07:00:49 2025 GMT Not After : Jun 30 07:00:49 2025 GMT Subject: CN=ba30557fea64a085c78c4a93ce83202be7b5a70a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:8c:1a:6f:95:33:49:1e:ea:7b:a0:77:89:81: b1:05:b2:12:8a:7b:36:c2:76:6f:be:43:1a:6b:c1: ce:77:1b:86:00:52:7a:dd:97:ad:f9:99:b2:91:90: f2:13:c9:bf:70:80:a0:63:74:f1:15:ed:bb:37:6e: 6c:9f:25:e1:d5:1d:e1:7e:df:2b:bf:31:68:99:6d: 30:a2:fa:cf:1d:06:84:4a:d9:a9:4e:2a:31:e5:a7: 7a:7c:8f:9e:f7:5b:84:09:59:47:57:16:80:b3:31: 6a:f9:c4:43:df:28:e7:72:53:66:98:3a:4b:11:f4: 4f:8d:4f:cc:86:83:66:ab:c2:ca:2c:04:db:60:45: 83:12:a8:39:56:53:35:ce:d0:17:af:1f:95:c0:45: 54:29:21:9e:d5:8f:6d:e7:44:84:c7:73:d0:60:0c: a4:00:22:da:56:ad:d8:a6:e0:78:b0:2a:25:a4:ec: 0b:39:67:a4:82:bf:1c:bd:c4:56:4d:6c:d5:62:0f: f7:ce:6c:8d:1e:c4:cc:79:b7:82:ab:0c:9f:95:3b: 05:17:a7:93:d9:09:0a:90:16:31:c4:aa:21:b8:00: f4:99:04:90:1c:24:6d:12:31:88:db:21:dc:75:6f: e3:63:13:1e:0d:e9:fd:50:e3:f5:d8:ed:60:29:7e: f5:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:30:55:7F:EA:64:A0:85:C7:8C:4A:93:CE:83:20:2B:E7:B5:A7:0A X509v3 Authority Key Identifier: keyid:92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:10:f0:73:d2:0d:68:0f:e2:ad:77:5b:6b:70:36:9f:5d:e8: cb:fc:a5:cb:2b:e3:e9:cf:ed:a2:8c:ff:12:c1:94:f3:bc:db: f8:f3:a0:11:76:0a:aa:c6:04:2c:21:8d:be:5d:19:48:55:4e: 2b:b0:02:af:d0:12:17:9a:8c:37:b2:94:8f:cc:b1:c9:34:2c: 1b:ac:73:6e:45:7d:3a:2f:cb:54:a1:34:99:28:2d:a9:af:7f: db:ba:be:01:49:13:53:2f:f3:c8:b6:f5:46:47:7e:23:56:6b: 1f:75:d3:26:3b:2d:a1:a5:8c:db:36:86:ed:9a:f2:98:78:e8: 54:e7:9c:e9:d6:89:0f:02:01:ed:32:34:17:3a:89:b5:3a:e1: b9:30:58:84:90:2b:fa:89:27:b6:ad:13:79:b2:c4:a4:8e:11: 4c:c8:b8:50:51:ac:ed:b2:b3:66:70:b3:99:a9:e9:e8:f5:46: cf:2f:88:71:2f:08:c6:fc:cc:1d:93:4e:41:5f:4d:77:8e:83: be:53:76:e0:3e:f4:45:44:9a:8a:1e:1f:5a:50:62:43:33:9a: 97:12:71:22:e3:2c:3e:65:6e:4d:d4:21:b8:be:d8:3e:c6:52: 98:78:26:c2:50:f1:47:29:10:25:b6:f1:ee:e4:fb:0e:2d:38: 22:17:cc:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe6fRblrJuYVbtle+G2r0x1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyYmY2NDY0Y2U2ZTE5YTRkY2Y4YTMyYjI3YTJmMWNiZTE1 NTEwNTUwHhcNMjUwNjI5MDcwMDQ5WhcNMjUwNjMwMDcwMDQ5WjAzMTEwLwYDVQQD EyhiYTMwNTU3ZmVhNjRhMDg1Yzc4YzRhOTNjZTgzMjAyYmU3YjVhNzBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04wab5UzSR7qe6B3iYGxBbISins2 wnZvvkMaa8HOdxuGAFJ63Zet+ZmykZDyE8m/cICgY3TxFe27N25snyXh1R3hft8r vzFomW0wovrPHQaEStmpTiox5ad6fI+e91uECVlHVxaAszFq+cRD3yjnclNmmDpL EfRPjU/MhoNmq8LKLATbYEWDEqg5VlM1ztAXrx+VwEVUKSGe1Y9t50SEx3PQYAyk ACLaVq3YpuB4sColpOwLOWekgr8cvcRWTWzVYg/3zmyNHsTMebeCqwyflTsFF6eT 2QkKkBYxxKohuAD0mQSQHCRtEjGI2yHcdW/jYxMeDen9UOP12O1gKX71vQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLowVX/qZKCFx4xKk86DICvntacKMB8GA1UdIwQY MBaAFJK/ZGTObhmk3PijKyei8cvhVRBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3I5a1pNNXVHYVRjLUtNcko2THh5LUZWRUZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9mMWQ2OTctYmM4ZS00ZjE0LThiMzct YjUzZTMwZTE0MTJhLzEva3I5a1pNNXVHYVRjLUtNcko2THh5LUZWRUZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9mMWQ2OTctYmM4ZS00ZjE0LThiMzctYjUzZTMwZTE0MTJh LzEva3I5a1pNNXVHYVRjLUtNcko2THh5LUZWRUZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYRDwc9IN aA/irXdba3A2n13oy/ylyyvj6c/tooz/EsGU87zb+POgEXYKqsYELCGNvl0ZSFVO K7ACr9ASF5qMN7KUj8yxyTQsG6xzbkV9Oi/LVKE0mSgtqa9/27q+AUkTUy/zyLb1 Rkd+I1ZrH3XTJjstoaWM2zaG7ZrymHjoVOec6daJDwIB7TI0FzqJtTrhuTBYhJAr +okntq0TebLEpI4RTMi4UFGs7bKzZnCzmanp6PVGzy+IcS8IxvzMHZNOQV9Nd46D vlN24D70RUSaih4fWlBiQzOalxJxIuMsPmVuTdQhuL7YPsZSmHgmwlDxRykQJbbx 7uT7Di04IhfMCg== -----END CERTIFICATE-----Generated at Sun Jun 29 10:22:04 2025 by rpki-client