$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft File: Qk_v-1duQR3lEYcdweC9eiDixNc.mft (raw, json) Hash identifier: cmUY8T2gZTjL1mH6vutC52XdoNhv0LTo55QUG0igaDk= Subject key identifier: 16:49:5A:8B:4A:15:D7:F5:CF:4F:11:25:46:A5:E6:28:C2:9C:EE:04 Authority key identifier: 42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7 Certificate issuer: /CN=424feffb576e411de511871dc1e0bd7a20e2c4d7 Certificate serial: 0197B6D756C2070D436F183E7EA71573B431 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft Manifest number: 1194 Signing time: Sat 28 Jun 2025 14:00:55 +0000 Manifest this update: Sat 28 Jun 2025 14:00:55 +0000 Manifest next update: Sun 29 Jun 2025 14:00:55 +0000 Files and hashes: 1: DkWRQ6AFjFv7rFQxgp89eDWwZzQ.roa (hash: k4LFdro8EdWirWfXizr76ZtFjuGb6M0FW+ROBsiX2e8=) 2: EqxrefdyqjYZzrCHrTrk9NHiht0.roa (hash: PPHZGYMZ3zZjXKQA0ijIhbbL3UF83eAk3Rgwiwv4iE0=) 3: Qk_v-1duQR3lEYcdweC9eiDixNc.crl (hash: mYZSzrCxp1ra2OGyQlk5iIbQJyumFoxpsJ3siVFGz6Y=) 4: WZk41uDGz8aqTuMK5_6Ovbbhicc.roa (hash: 5tAgdvaBn8Xzr7bEMaN+4RyehKAGk3MjK0uZbZfdeTE=) 5: XLX74-2fz_xcT8jjeK7YOxawwwc.roa (hash: b+kTBN0QlzOTjI1a+jkjVcwIWZ2nk7a5/iBtKxwJ0UQ=) 6: bfcBA_m7rGFWZUrLHbxdnwQav2M.roa (hash: 4dU7FEoFdtXhvQL59inDOPJXsvneQJU94I/fuz7sgSI=) 7: dE-dE1C98bzQfzFp4viryEzVGNI.roa (hash: keoRfTd2k6052VngqSZmL9fG3jF6ZyNryRy3nAsLGG4=) 8: msTbd_cRgqE8u0I4x9SddZe62KE.roa (hash: mupJQETdaQVPnbs2vC2bYij0saRrza6SHsY1QyVDaJY=) 9: tM1Yq2bXiB1kWHQqw1R7qqhyJN0.roa (hash: oZHMmFERFSMV3UaFbDA8Gmy32zJZA3mRLZIu5Egtw7c=) 10: zLAA5CUhIEdukEthrOgBOAwbyZM.roa (hash: MW2hOZqoAax6b0hos7zyQQFLCe7uqIGCikNzhGtl+O0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 10:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b6:d7:56:c2:07:0d:43:6f:18:3e:7e:a7:15:73:b4:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=424feffb576e411de511871dc1e0bd7a20e2c4d7 Validity Not Before: Jun 28 14:00:55 2025 GMT Not After : Jun 29 14:00:55 2025 GMT Subject: CN=16495a8b4a15d7f5cf4f112546a5e628c29cee04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:3a:9d:69:42:9c:5d:ac:45:ce:a7:0b:0f:59: 4d:73:8e:0e:56:f8:46:e2:f6:2f:fd:ae:62:77:e5: 17:b3:d5:45:0d:08:5f:b7:19:9b:69:1e:ac:09:19: df:d8:71:10:09:02:90:5e:6a:e6:01:b0:45:ef:7c: f3:46:ad:aa:d5:81:cd:49:30:23:69:b7:fc:c7:5a: 26:ba:bb:13:84:e0:1d:8b:78:d4:64:b7:b8:44:c1: 67:4b:1b:4d:b4:0b:66:19:48:3c:9e:51:b9:6c:96: 26:55:a2:2c:d5:5f:bb:56:15:a4:74:3f:47:ef:a2: a6:7f:35:6a:8b:ed:e5:42:3a:8b:b0:de:88:d9:37: af:c5:85:d7:c7:6b:37:55:34:d9:fc:44:f4:15:cf: f9:d5:69:5f:de:c1:77:66:aa:a4:7b:78:ad:13:83: f1:58:85:5a:7e:d8:62:d7:cb:db:b7:6b:c9:14:5d: 3d:5f:22:2a:37:e2:4c:29:8b:a8:7c:da:12:17:ae: fe:c2:a5:8a:13:92:01:be:c6:a5:74:14:d5:f4:0b: a7:b0:a1:41:fb:8e:5b:b5:23:3f:3d:79:41:90:b8: 25:72:6c:ba:bd:97:3a:80:43:61:88:c8:67:3d:f5: 66:96:6a:49:58:c8:08:09:fe:46:15:2f:d6:67:3e: bb:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:49:5A:8B:4A:15:D7:F5:CF:4F:11:25:46:A5:E6:28:C2:9C:EE:04 X509v3 Authority Key Identifier: keyid:42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:de:c5:e1:a4:c6:ef:ee:68:c3:cd:86:55:33:59:22:f8:08: 12:dc:96:f2:56:2c:71:33:cd:10:04:76:98:9d:37:0a:a4:9f: 11:30:a4:00:d1:5c:ff:42:53:4a:19:44:b6:35:49:99:6e:07: 43:ee:54:d3:33:88:b4:4c:07:cb:e0:b0:fd:9c:aa:11:d7:5b: f0:3d:24:8a:37:b4:70:b0:05:46:3a:59:10:f3:ff:78:02:1f: b3:34:df:ab:f3:36:b0:45:9e:6c:9b:22:81:4c:1c:8b:5f:41: 25:10:40:96:28:85:ff:08:7c:38:86:54:b0:c9:18:58:1f:ce: 2f:ff:60:cd:83:1f:5e:0f:6d:88:72:ac:cb:de:11:76:38:6c: 66:78:05:40:90:8f:d5:45:77:08:99:63:60:9d:ae:09:90:9b: a9:16:a6:dd:2d:44:3f:ae:b9:22:c4:1d:8f:9c:75:6b:e5:1b: a2:06:1d:c8:45:19:b0:03:2f:84:2a:16:4a:5f:a8:e0:43:c7: 8c:94:fa:e2:db:da:fb:53:9f:e1:03:fc:9e:81:0b:de:95:91: e0:23:d3:c4:3f:3d:1d:ab:98:e6:51:a1:6a:35:11:d2:af:84: 42:d7:40:5a:f1:7c:52:98:6c:f6:0f:f4:4b:7c:b1:06:21:de: 7b:a7:07:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe211bCBw1Dbxg+fqcVc7QxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyNGZlZmZiNTc2ZTQxMWRlNTExODcxZGMxZTBiZDdhMjBl MmM0ZDcwHhcNMjUwNjI4MTQwMDU1WhcNMjUwNjI5MTQwMDU1WjAzMTEwLwYDVQQD EygxNjQ5NWE4YjRhMTVkN2Y1Y2Y0ZjExMjU0NmE1ZTYyOGMyOWNlZTA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDqdaUKcXaxFzqcLD1lNc44OVvhG 4vYv/a5id+UXs9VFDQhftxmbaR6sCRnf2HEQCQKQXmrmAbBF73zzRq2q1YHNSTAj abf8x1omursThOAdi3jUZLe4RMFnSxtNtAtmGUg8nlG5bJYmVaIs1V+7VhWkdD9H 76KmfzVqi+3lQjqLsN6I2TevxYXXx2s3VTTZ/ET0Fc/51Wlf3sF3Zqqke3itE4Px WIVafthi18vbt2vJFF09XyIqN+JMKYuofNoSF67+wqWKE5IBvsaldBTV9AunsKFB +45btSM/PXlBkLglcmy6vZc6gENhiMhnPfVmlmpJWMgICf5GFS/WZz67NwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBZJWotKFdf1z08RJUal5ijCnO4EMB8GA1UdIwQY MBaAFEJP7/tXbkEd5RGHHcHgvXog4sTXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWtfdi0xZHVRUjNsRVljZHdlQzllaURpeE5jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy82MTM1MDgtMDgzMi00MWY2LWFjYjct ODMxZjdlNmY1Y2NkLzEvUWtfdi0xZHVRUjNsRVljZHdlQzllaURpeE5jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy82MTM1MDgtMDgzMi00MWY2LWFjYjctODMxZjdlNmY1Y2Nk LzEvUWtfdi0xZHVRUjNsRVljZHdlQzllaURpeE5jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw97F4aTG 7+5ow82GVTNZIvgIEtyW8lYscTPNEAR2mJ03CqSfETCkANFc/0JTShlEtjVJmW4H Q+5U0zOItEwHy+Cw/ZyqEddb8D0kije0cLAFRjpZEPP/eAIfszTfq/M2sEWebJsi gUwci19BJRBAliiF/wh8OIZUsMkYWB/OL/9gzYMfXg9tiHKsy94RdjhsZngFQJCP 1UV3CJljYJ2uCZCbqRam3S1EP665IsQdj5x1a+UbogYdyEUZsAMvhCoWSl+o4EPH jJT64tva+1Of4QP8noEL3pWR4CPTxD89HauY5lGhajUR0q+EQtdAWvF8Uphs9g/0 S3yxBiHee6cHxA== -----END CERTIFICATE-----Generated at Sat Jun 28 19:27:53 2025 by rpki-client