$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft File: CK8JGFi7mWUXZDmcZWXfegg0260.mft (raw, json) Hash identifier: vw/t4w3PFx3CS2WvLXNBjLLuYq7I8CZYrd8QaB5/rL4= Subject key identifier: 0C:B5:4C:A9:BE:D5:21:B5:8F:88:EE:61:85:01:CC:9C:B4:9D:59:20 Authority key identifier: 08:AF:09:18:58:BB:99:65:17:64:39:9C:65:65:DF:7A:08:34:DB:AD Certificate issuer: /CN=08af091858bb99651764399c6565df7a0834dbad Certificate serial: 0197B77CCAF779466C617CB108EE73378DD0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft Manifest number: 0882 Signing time: Sat 28 Jun 2025 17:01:38 +0000 Manifest this update: Sat 28 Jun 2025 17:01:38 +0000 Manifest next update: Sun 29 Jun 2025 17:01:38 +0000 Files and hashes: 1: 1YffucAnrX0zrPGVUVBeyKH78tE.roa (hash: F+0MkZW1rwniUkgJEFMqZDUVPzIQlWc77ANUG11yVk0=) 2: CK8JGFi7mWUXZDmcZWXfegg0260.crl (hash: vi7v2ID937iL/zZZ552vwgpfEnZsUz8TneEbysshQBY=) 3: HHgp5sq5yc4_sgJa6AXu1wOFQNM.roa (hash: 7azvHrY82JhsqK3mxuoAki0dX0VXyY18Oolw0K+QPEw=) 4: QIYUcsbQNAYJ49MS9GSzg6HzMws.roa (hash: 25Ipjti12DAizEBm/x19xImh3kKTX0L8ySHToWXRDaw=) 5: b6ZEK46tBFQpFeGihP04dAsRVEs.roa (hash: QgioZFeGRbfakufTGnBIdfmvDS/FUhl+3OYWyWgTaL4=) 6: dntaOaxuIDGd8pI8wGTFAJRgyN0.roa (hash: ZmPkwqzAaYGLrLg5+RqVjoLEOwPFE1N2kmesXzCCUwI=) 7: pM8VKNSiqXyxvrYM2CF2U0Iw0pw.roa (hash: fs4sKC29dVzpn86XWfZbe24a1J4GrvjTCH4XsQbkw6c=) 8: qQrVFVU2zYEeKI_c1sPfgRBsdws.roa (hash: Q0Q6+jTPsyoLSIpvRXxP/rur4NZVUawp72Ly9Y4IL/A=) 9: tstTYn_D9Pn-4nRlBfI2UB_WSGg.roa (hash: ZjiObePgXbEPhVg4yY+Q8sRWmDFO/c82OdQ5TNgpPAM=) 10: zEb6SCNh9IA2ZcmgZWwsmTznbFk.roa (hash: tgHdlVCEN4GvD5zc3JRTYHWhACpqWoQ7O4VCFRbyik4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b7:7c:ca:f7:79:46:6c:61:7c:b1:08:ee:73:37:8d:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08af091858bb99651764399c6565df7a0834dbad Validity Not Before: Jun 28 17:01:38 2025 GMT Not After : Jun 29 17:01:38 2025 GMT Subject: CN=0cb54ca9bed521b58f88ee618501cc9cb49d5920 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c9:47:38:b4:17:d2:f2:87:d6:f9:05:24:4b: 9b:d8:8f:e9:66:2f:a5:6b:5d:56:6a:c2:08:7b:47: 4d:ad:22:45:f8:02:97:4e:ef:c4:70:fd:44:a6:16: de:48:f3:8a:99:6d:d1:18:4f:d7:19:44:d6:e0:69: ad:06:44:80:19:9f:d7:11:16:56:61:ba:ba:9d:12: 61:59:11:f9:3f:85:12:cc:ef:19:84:07:0c:58:5e: 5a:98:33:6c:09:3d:25:94:53:2b:c5:0d:a3:b0:18: ff:13:33:d4:79:c8:e6:50:9f:a4:4f:5f:fc:11:42: 48:24:a4:17:f9:f4:d3:c2:39:0e:69:8a:8e:ef:c8: 18:2f:60:c2:57:ab:f2:fd:43:91:ec:e2:83:3e:7d: 4b:2e:37:50:65:20:19:a6:1b:a1:d7:4e:7f:21:3f: e7:a7:7d:96:5e:49:06:32:35:1e:07:fa:29:1d:55: 62:c0:ec:28:0a:db:ae:01:b6:a0:6c:38:db:bc:8a: 86:f1:75:f3:e0:b3:0d:39:fb:69:9f:f0:57:a7:50: 60:d4:de:6e:df:e3:15:b5:53:a4:1b:28:d9:32:dc: 35:47:b9:86:19:c2:5e:97:e4:65:f2:27:1a:8f:e7: f7:17:40:bb:95:ca:d4:0f:39:01:90:3c:f1:12:9b: f0:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:B5:4C:A9:BE:D5:21:B5:8F:88:EE:61:85:01:CC:9C:B4:9D:59:20 X509v3 Authority Key Identifier: keyid:08:AF:09:18:58:BB:99:65:17:64:39:9C:65:65:DF:7A:08:34:DB:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:6c:3b:8a:cc:45:23:63:d3:be:9e:86:b3:6b:54:e4:71:c2: 5e:3c:4f:28:66:27:f6:56:a4:a1:8e:0e:c4:73:80:a1:60:65: c4:7a:64:94:83:11:df:88:61:b6:19:38:d4:b9:eb:0f:e4:c8: 00:c4:ac:32:af:cd:bb:73:3f:da:0f:1b:5d:f6:4f:70:9d:c6: 1d:d1:af:19:db:b9:f3:5e:c9:2d:bd:1f:40:61:5d:f0:d7:df: 18:3a:10:25:66:a3:60:bc:f6:e1:e3:dc:fc:5c:6d:a8:17:00: c7:a4:3f:b7:fc:ce:9d:5d:7e:5f:5b:53:b8:cc:34:d8:1b:ff: 2f:82:0f:7c:a5:7a:2a:9b:8c:dc:e1:10:8c:e4:30:7c:41:30: ce:63:b5:87:ef:fb:ca:65:57:91:0a:40:e0:b7:bf:7f:38:01: 67:e2:a5:57:a0:6b:00:bb:34:c2:34:1a:a8:62:69:48:a0:92: ee:9c:4c:bc:0c:c5:3d:d7:87:23:de:e0:f2:a6:59:7f:32:0e: 73:f6:b2:b9:ff:2c:58:ff:1a:ce:24:fa:77:e7:73:3f:60:1f: ca:b0:59:82:d2:a1:8c:7f:d6:18:37:5d:89:ad:72:a8:7d:48: c4:53:99:69:e5:a4:92:6d:db:c6:69:91:1f:28:9b:ce:ef:33: 32:03:53:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe3fMr3eUZsYXyxCO5zN43QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4YWYwOTE4NThiYjk5NjUxNzY0Mzk5YzY1NjVkZjdhMDgz NGRiYWQwHhcNMjUwNjI4MTcwMTM4WhcNMjUwNjI5MTcwMTM4WjAzMTEwLwYDVQQD EygwY2I1NGNhOWJlZDUyMWI1OGY4OGVlNjE4NTAxY2M5Y2I0OWQ1OTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMlHOLQX0vKH1vkFJEub2I/pZi+l a11WasIIe0dNrSJF+AKXTu/EcP1EphbeSPOKmW3RGE/XGUTW4GmtBkSAGZ/XERZW Ybq6nRJhWRH5P4USzO8ZhAcMWF5amDNsCT0llFMrxQ2jsBj/EzPUecjmUJ+kT1/8 EUJIJKQX+fTTwjkOaYqO78gYL2DCV6vy/UOR7OKDPn1LLjdQZSAZphuh105/IT/n p32WXkkGMjUeB/opHVViwOwoCtuuAbagbDjbvIqG8XXz4LMNOftpn/BXp1Bg1N5u 3+MVtVOkGyjZMtw1R7mGGcJel+Rl8icaj+f3F0C7lcrUDzkBkDzxEpvwBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAy1TKm+1SG1j4juYYUBzJy0nVkgMB8GA1UdIwQY MBaAFAivCRhYu5llF2Q5nGVl33oINNutMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0s4SkdGaTdtV1VYWkRtY1pXWGZlZ2cwMjYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS83MDBmZDMtYzM2MC00OGFiLThhMDYt NTYxMjliN2RjMDE4LzEvQ0s4SkdGaTdtV1VYWkRtY1pXWGZlZ2cwMjYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS83MDBmZDMtYzM2MC00OGFiLThhMDYtNTYxMjliN2RjMDE4 LzEvQ0s4SkdGaTdtV1VYWkRtY1pXWGZlZ2cwMjYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY2w7isxF I2PTvp6Gs2tU5HHCXjxPKGYn9lakoY4OxHOAoWBlxHpklIMR34hhthk41LnrD+TI AMSsMq/Nu3M/2g8bXfZPcJ3GHdGvGdu5817JLb0fQGFd8NffGDoQJWajYLz24ePc /FxtqBcAx6Q/t/zOnV1+X1tTuMw02Bv/L4IPfKV6KpuM3OEQjOQwfEEwzmO1h+/7 ymVXkQpA4Le/fzgBZ+KlV6BrALs0wjQaqGJpSKCS7pxMvAzFPdeHI97g8qZZfzIO c/ayuf8sWP8aziT6d+dzP2AfyrBZgtKhjH/WGDddia1yqH1IxFOZaeWkkm3bxmmR Hyibzu8zMgNTvQ== -----END CERTIFICATE-----Generated at Sat Jun 28 20:48:08 2025 by rpki-client