$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/0/DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.mft File: DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.mft (raw, json) Hash identifier: sG0I+CppwzFabVtAfMC98bChasJGVSZrTjvfGh+hCgc= Subject key identifier: B1:1B:C2:C5:45:87:8E:0B:F7:B4:4C:54:CB:4A:28:5B:44:4B:AD:61 Authority key identifier: DC:2D:34:FE:0F:8C:90:B2:A8:CA:EC:47:27:D6:BA:31:B9:8D:25:D1 Certificate issuer: /CN=DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1 Certificate serial: 03ED041A39AA41647DA43F0D5EFEB779F2BE5150 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/0/DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.mft Manifest number: 019A Signing time: Fri 09 May 2025 13:07:52 +0000 Manifest this update: Fri 09 May 2025 13:02:49 +0000 Manifest next update: Sat 10 May 2025 16:01:49 +0000 Files and hashes: 1: 326131313a663263303a666665303a3a2f34342d3434203d3e20323038303531.roa (hash: bIttpen3IjgsR1QdlNNcRrtX2dBZba5UCB54iz2dEbU=) 2: DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.crl (hash: SaWKo2plLs7ZBvi3a2XRU+AhFtYSI5vyxehQhyzeTp0=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/0/DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/0/DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 May 2025 16:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:ed:04:1a:39:aa:41:64:7d:a4:3f:0d:5e:fe:b7:79:f2:be:51:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1 Validity Not Before: May 9 13:02:49 2025 GMT Not After : May 10 16:01:49 2025 GMT Subject: CN=B11BC2C545878E0BF7B44C54CB4A285B444BAD61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:94:da:eb:48:2a:7c:8b:7e:e8:a6:5f:e2:d6: 27:f2:0a:f5:ac:f9:48:73:15:e0:90:12:95:0d:7e: 77:c0:16:d6:3e:fb:a4:cc:c2:f5:3d:0b:53:35:e6: 12:23:b9:d4:cb:08:2b:59:1a:d5:f7:d0:a1:8b:52: b1:5c:45:11:93:84:67:36:05:33:d4:0a:bb:98:46: 24:85:15:a7:7a:66:a2:1d:44:c4:4e:e6:e1:bc:f1: ae:3e:b5:bf:ce:bd:8d:a3:76:7d:a9:73:b1:ac:e3: 3c:3e:5b:9e:af:6b:29:f7:dc:92:7f:6a:0c:20:c6: cd:9b:03:11:fb:cb:19:58:17:e6:27:02:d4:92:35: 85:27:6e:a2:eb:65:4b:23:63:c5:79:ab:ff:9e:59: 07:8e:fc:27:7f:69:6e:b5:b7:48:c2:87:e8:81:8a: 29:be:99:14:6a:b4:b0:61:eb:f6:2f:a7:b2:88:cd: 9c:26:d4:e6:21:8c:d5:56:b3:7b:c6:84:8d:62:d2: 12:8b:b6:78:b7:37:1c:f7:2a:60:ad:be:64:b9:49: c1:ed:f0:24:c3:7f:0a:30:fa:25:33:42:16:d3:f2: 4e:96:1a:ed:8e:9a:70:4f:00:c9:94:5b:84:42:bd: 52:2b:27:d6:7f:23:75:50:22:ef:4a:8b:bc:7a:7a: ae:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:1B:C2:C5:45:87:8E:0B:F7:B4:4C:54:CB:4A:28:5B:44:4B:AD:61 X509v3 Authority Key Identifier: keyid:DC:2D:34:FE:0F:8C:90:B2:A8:CA:EC:47:27:D6:BA:31:B9:8D:25:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/0/DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/0/DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:f3:87:0a:33:94:b9:eb:60:42:06:d5:89:5b:ae:87:98:73: b3:55:1c:09:e7:a4:fd:3e:4f:f0:08:22:dc:b6:61:27:07:43: 32:49:4a:2b:52:26:53:1e:61:06:8d:6f:ca:49:86:bf:7d:e4: fb:c9:7c:1e:86:3e:ab:c2:75:ee:04:7e:00:6f:da:f1:a2:15: 1f:0e:0a:dc:99:fd:88:e0:f4:a4:ae:69:58:5a:b9:6c:c1:50: 5c:fe:ce:91:98:0c:56:05:8a:d4:d7:27:b0:1f:86:c6:10:a8: 1b:40:34:21:34:27:2c:ab:50:04:94:41:a6:a8:8a:ab:07:69: d5:9f:52:a7:c2:f8:c0:57:e8:96:37:0f:4d:77:7e:5b:53:4e: 11:3e:44:b5:c5:84:7c:b1:b1:2c:c6:3c:42:00:36:6c:46:74: 0e:18:9f:cc:a2:d3:b7:1b:11:69:fb:10:7c:b7:88:1a:2c:ab: 48:df:a7:98:2e:6b:5c:84:1c:9c:8d:21:9f:ff:3b:63:be:21: 53:db:5c:32:f7:71:a1:e8:0f:70:cd:fd:6d:9a:3b:22:71:49: e3:16:e9:c6:19:6f:d5:e5:4f:28:40:33:28:a0:4b:56:96:be: 30:b9:bf:13:29:7b:89:ff:ff:24:05:b3:b3:33:85:26:3c:b2: 3b:ec:17:38 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUA+0EGjmqQWR9pD8NXv63efK+UVAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREMyRDM0RkUwRjhDOTBCMkE4Q0FFQzQ3MjdENkJBMzFC OThEMjVEMTAeFw0yNTA1MDkxMzAyNDlaFw0yNTA1MTAxNjAxNDlaMDMxMTAvBgNV BAMTKEIxMUJDMkM1NDU4NzhFMEJGN0I0NEM1NENCNEEyODVCNDQ0QkFENjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBlNrrSCp8i37opl/i1ifyCvWs +UhzFeCQEpUNfnfAFtY++6TMwvU9C1M15hIjudTLCCtZGtX30KGLUrFcRRGThGc2 BTPUCruYRiSFFad6ZqIdRMRO5uG88a4+tb/OvY2jdn2pc7Gs4zw+W56vayn33JJ/ agwgxs2bAxH7yxlYF+YnAtSSNYUnbqLrZUsjY8V5q/+eWQeO/Cd/aW61t0jCh+iB iim+mRRqtLBh6/Yvp7KIzZwm1OYhjNVWs3vGhI1i0hKLtni3Nxz3KmCtvmS5ScHt 8CTDfwow+iUzQhbT8k6WGu2OmnBPAMmUW4RCvVIrJ9Z/I3VQIu9Ki7x6eq45AgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUsRvCxUWHjgv3tExUy0ooW0RLrWEwHwYDVR0j BBgwFoAU3C00/g+MkLKoyuxHJ9a6MbmNJdEwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzVjNTUyMmJhNjlmZTQ3ZDJiNjNjN2I2NTMxYTI0NGY4LzAv REMyRDM0RkUwRjhDOTBCMkE4Q0FFQzQ3MjdENkJBMzFCOThEMjVEMS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9EQzJEMzRGRTBGOEM5MEIyQThDQUVDNDcyN0Q2QkEz MUI5OEQyNUQxLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzVjNTUy MmJhNjlmZTQ3ZDJiNjNjN2I2NTMxYTI0NGY4LzAvREMyRDM0RkUwRjhDOTBCMkE4 Q0FFQzQ3MjdENkJBMzFCOThEMjVEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAGHzhwozlLnrYEIG1Ylb roeYc7NVHAnnpP0+T/AIIty2YScHQzJJSitSJlMeYQaNb8pJhr995PvJfB6GPqvC de4EfgBv2vGiFR8OCtyZ/Yjg9KSuaVhauWzBUFz+zpGYDFYFitTXJ7AfhsYQqBtA NCE0JyyrUASUQaaoiqsHadWfUqfC+MBX6JY3D013fltTThE+RLXFhHyxsSzGPEIA NmxGdA4Yn8yi07cbEWn7EHy3iBosq0jfp5gua1yEHJyNIZ//O2O+IVPbXDL3caHo D3DN/W2aOyJxSeMW6cYZb9XlTyhAMyigS1aWvjC5vxMpe4n//yQFs7MzhSY8sjvs Fzg= -----END CERTIFICATE-----Generated at Sat May 10 02:59:05 2025 by rpki-client