$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/BBED14E9793905EC1EA5CE10AA03C497D737B115.mft File: BBED14E9793905EC1EA5CE10AA03C497D737B115.mft (raw, json) Hash identifier: /izUvAkmesGUtJbemg3uQOMF04B3HfMfmqznL8U6ulw= Subject key identifier: 03:67:50:16:2C:1F:83:23:9C:A4:48:28:7C:96:6C:AE:FA:BE:00:A1 Authority key identifier: BB:ED:14:E9:79:39:05:EC:1E:A5:CE:10:AA:03:C4:97:D7:37:B1:15 Certificate issuer: /CN=BBED14E9793905EC1EA5CE10AA03C497D737B115 Certificate serial: 45F40FC562301DA6D1BB0E6E0FBCB5D3FB4609AF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/BBED14E9793905EC1EA5CE10AA03C497D737B115.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/BBED14E9793905EC1EA5CE10AA03C497D737B115.mft Manifest number: 01D7 Signing time: Sat 28 Jun 2025 14:10:40 +0000 Manifest this update: Sat 28 Jun 2025 14:05:40 +0000 Manifest next update: Sun 29 Jun 2025 18:00:40 +0000 Files and hashes: 1: 326131313a663263303a666663303a3a2f34382d3438203d3e20323035353839.roa (hash: MpewGrhFOYc7jc70q6ubpOkEuQ0IJ7Wp+DrSPfwP1vQ=) 2: BBED14E9793905EC1EA5CE10AA03C497D737B115.crl (hash: 7YHoGGUMiSbLA8/xa9Wg1rZUJq/N9loX96PA1wmULkA=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/BBED14E9793905EC1EA5CE10AA03C497D737B115.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/BBED14E9793905EC1EA5CE10AA03C497D737B115.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/BBED14E9793905EC1EA5CE10AA03C497D737B115.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 18:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:f4:0f:c5:62:30:1d:a6:d1:bb:0e:6e:0f:bc:b5:d3:fb:46:09:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBED14E9793905EC1EA5CE10AA03C497D737B115 Validity Not Before: Jun 28 14:05:40 2025 GMT Not After : Jun 29 18:00:40 2025 GMT Subject: CN=036750162C1F83239CA448287C966CAEFABE00A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:31:11:d3:ad:fe:77:41:3e:27:2c:cd:4a:51: d1:d2:5f:f6:05:8d:c5:bb:16:a7:92:bb:68:63:b2: c4:4e:53:f0:74:4b:06:d4:36:3b:7b:9a:47:0b:25: 4b:b0:fa:bc:7c:de:f4:95:04:a5:50:45:fd:77:ce: c1:f1:d3:88:ff:c0:78:5a:8d:ce:29:95:68:b3:35: 74:8d:f5:af:5c:17:ee:0c:cd:7a:75:8c:1c:bc:95: 0e:bb:7e:09:09:74:9c:a3:2f:ca:f8:70:cc:cd:4e: 10:91:de:45:26:45:be:84:e0:1e:d9:b4:16:8c:55: 87:1e:cc:df:16:b0:4c:3b:c8:69:4c:84:63:dc:ae: 88:90:01:f8:3f:c6:a6:2c:c5:e9:b7:35:79:78:64: b5:84:07:42:fc:fe:ab:57:d8:60:29:75:c6:5e:b2: 02:66:94:06:81:27:3a:71:f7:79:4b:68:40:82:2a: 92:27:3b:fd:02:2c:19:76:68:01:c3:eb:0d:61:25: de:0f:f7:62:33:2d:6d:17:06:54:c3:8f:e8:33:be: 0d:12:e5:04:9d:ed:39:6e:a4:56:b6:72:42:42:aa: 2b:de:da:d8:c4:75:fa:2d:fb:8b:22:53:5f:b7:80: e3:b9:f4:30:c5:79:cd:a2:48:70:d1:c3:ea:91:d4: fb:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:67:50:16:2C:1F:83:23:9C:A4:48:28:7C:96:6C:AE:FA:BE:00:A1 X509v3 Authority Key Identifier: keyid:BB:ED:14:E9:79:39:05:EC:1E:A5:CE:10:AA:03:C4:97:D7:37:B1:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/BBED14E9793905EC1EA5CE10AA03C497D737B115.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/BBED14E9793905EC1EA5CE10AA03C497D737B115.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/BBED14E9793905EC1EA5CE10AA03C497D737B115.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:14:02:a1:76:f7:59:1b:7b:86:2b:b1:db:fa:47:c5:2b:aa: 39:06:84:76:3e:5e:74:98:58:2b:03:6a:e4:74:3b:b4:f4:da: 89:6e:86:fa:e3:ab:99:db:94:52:ad:ec:7b:1a:6e:fb:b1:0a: 57:c2:0b:f6:09:bd:d9:b7:8b:6c:85:57:fb:0a:79:ce:c1:38: 1d:4e:02:45:0e:6e:8f:29:d3:ce:27:68:38:cc:e6:eb:57:1c: e2:41:89:99:38:01:1d:95:95:ff:18:f3:df:88:14:06:f1:ca: a0:7f:ef:b0:2d:07:ba:ec:64:a2:0b:02:50:50:11:55:ab:6b: 6c:32:22:7f:b3:5c:fe:ac:72:96:c4:33:9e:4b:52:6d:a0:ea: f4:09:19:4a:84:dd:16:ae:ba:c9:3e:58:cf:a4:5d:6a:a7:b0: 9d:46:2e:b0:25:92:c9:58:0a:de:04:88:82:a1:66:ee:f4:17: ed:7c:7b:f1:85:aa:f5:71:c9:65:37:77:c0:7c:49:5a:f3:b0: 2f:12:98:da:b8:e2:99:d5:8f:74:7d:88:dc:b5:38:e1:46:7a: 1e:70:fd:02:f3:fd:2d:38:56:e7:97:93:e1:5d:47:8d:37:83: dd:83:0c:ce:40:07:45:8f:86:c5:ed:53:43:02:7d:f1:dc:23: 1c:75:bb:a5 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIURfQPxWIwHabRuw5uD7y10/tGCa8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkJFRDE0RTk3OTM5MDVFQzFFQTVDRTEwQUEwM0M0OTdE NzM3QjExNTAeFw0yNTA2MjgxNDA1NDBaFw0yNTA2MjkxODAwNDBaMDMxMTAvBgNV BAMTKDAzNjc1MDE2MkMxRjgzMjM5Q0E0NDgyODdDOTY2Q0FFRkFCRTAwQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNMRHTrf53QT4nLM1KUdHSX/YF jcW7FqeSu2hjssROU/B0SwbUNjt7mkcLJUuw+rx83vSVBKVQRf13zsHx04j/wHha jc4plWizNXSN9a9cF+4MzXp1jBy8lQ67fgkJdJyjL8r4cMzNThCR3kUmRb6E4B7Z tBaMVYcezN8WsEw7yGlMhGPcroiQAfg/xqYsxem3NXl4ZLWEB0L8/qtX2GApdcZe sgJmlAaBJzpx93lLaECCKpInO/0CLBl2aAHD6w1hJd4P92IzLW0XBlTDj+gzvg0S 5QSd7TlupFa2ckJCqive2tjEdfot+4siU1+3gOO59DDFec2iSHDRw+qR1Pt9AgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUA2dQFiwfgyOcpEgofJZsrvq+AKEwHwYDVR0j BBgwFoAUu+0U6Xk5Bewepc4QqgPEl9c3sRUwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzNhOTdmNzYxODAzODRkMjNhNzIxZDQ2YWUwZTUwNjhmLzAv QkJFRDE0RTk3OTM5MDVFQzFFQTVDRTEwQUEwM0M0OTdENzM3QjExNS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9CQkVEMTRFOTc5MzkwNUVDMUVBNUNFMTBBQTAzQzQ5 N0Q3MzdCMTE1LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzNhOTdm NzYxODAzODRkMjNhNzIxZDQ2YWUwZTUwNjhmLzAvQkJFRDE0RTk3OTM5MDVFQzFF QTVDRTEwQUEwM0M0OTdENzM3QjExNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAB8UAqF291kbe4Yrsdv6 R8UrqjkGhHY+XnSYWCsDauR0O7T02oluhvrjq5nblFKt7HsabvuxClfCC/YJvdm3 i2yFV/sKec7BOB1OAkUObo8p084naDjM5utXHOJBiZk4AR2Vlf8Y89+IFAbxyqB/ 77AtB7rsZKILAlBQEVWra2wyIn+zXP6scpbEM55LUm2g6vQJGUqE3Rauusk+WM+k XWqnsJ1GLrAlkslYCt4EiIKhZu70F+18e/GFqvVxyWU3d8B8SVrzsC8SmNq44pnV j3R9iNy1OOFGeh5w/QLz/S04VueXk+FdR403g92DDM5AB0WPhsXtU0MCffHcIxx1 u6U= -----END CERTIFICATE-----Generated at Sun Jun 29 06:16:39 2025 by rpki-client