$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft File: 4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft (raw, json) Hash identifier: lzRJw3DWqx8l7g9p0gXcGV+4q9G4YG466PEKts/qE/s= Subject key identifier: 2C:39:9E:8C:F5:58:0F:6C:CF:4A:70:B4:05:67:E2:85:8D:64:62:27 Authority key identifier: 4B:A4:51:1F:4B:81:C5:65:CE:D3:E7:0B:30:20:FB:D0:ED:05:56:2F Certificate issuer: /CN=4BA4511F4B81C565CED3E70B3020FBD0ED05562F Certificate serial: 5E90C450CF94F4CEA4A32F7829CD9C9E2B820532 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft Manifest number: 01E3 Signing time: Sun 29 Jun 2025 00:26:01 +0000 Manifest this update: Sun 29 Jun 2025 00:21:01 +0000 Manifest next update: Mon 30 Jun 2025 04:12:01 +0000 Files and hashes: 1: 4BA4511F4B81C565CED3E70B3020FBD0ED05562F.crl (hash: 6uyGUh0xB6zusTHoeqNve9a+yE10aXkaPUXN1bkm9ec=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 18:35:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:90:c4:50:cf:94:f4:ce:a4:a3:2f:78:29:cd:9c:9e:2b:82:05:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BA4511F4B81C565CED3E70B3020FBD0ED05562F Validity Not Before: Jun 29 00:21:01 2025 GMT Not After : Jun 30 04:12:01 2025 GMT Subject: CN=2C399E8CF5580F6CCF4A70B40567E2858D646227 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:51:55:af:af:f5:54:3f:a0:3c:76:9e:d4:89: 3b:9c:a7:b3:9c:f1:ac:68:01:81:d6:ad:83:7e:d2: 05:a7:3e:8b:98:0b:36:fc:5b:82:ae:87:4a:5a:6e: 95:be:b6:b2:ec:e9:1c:cb:45:ec:fb:0f:3d:09:d8: 39:d0:a5:10:29:03:f7:05:c1:b8:e0:44:2a:6a:e3: 31:16:11:6e:4c:69:27:a1:d0:37:d0:25:a2:69:88: 7d:94:da:cb:dc:60:d0:a0:63:68:09:79:47:6b:46: d5:a2:90:4c:0a:c0:70:60:aa:23:4c:c3:89:39:d5: 00:1f:d9:d8:9a:6b:31:10:e5:72:35:6e:cb:57:9a: f7:6e:0e:15:0d:7d:5b:46:eb:5d:fa:af:18:e7:d4: f8:58:fc:41:19:6f:d8:3f:52:3a:f8:17:96:3e:7b: 66:df:4a:cc:9a:cf:d3:bd:59:29:68:f2:6b:df:fe: da:d7:cb:6f:51:10:ef:e7:86:36:4c:48:85:7e:71: 79:8f:88:c9:0d:ea:ef:9c:2c:4f:f8:7d:2c:1f:e1: 52:95:fb:df:0c:e7:e8:cb:92:bb:6e:61:f9:be:f7: 6e:67:11:ae:04:93:ee:4b:ca:f9:10:07:b2:55:f2: e1:91:23:30:73:e3:ba:3f:a9:f7:ff:61:fc:9c:2b: d5:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:39:9E:8C:F5:58:0F:6C:CF:4A:70:B4:05:67:E2:85:8D:64:62:27 X509v3 Authority Key Identifier: keyid:4B:A4:51:1F:4B:81:C5:65:CE:D3:E7:0B:30:20:FB:D0:ED:05:56:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:b0:86:41:90:71:54:1c:62:62:da:be:fa:e2:c4:24:83:7c: a4:5a:49:90:9e:e1:24:77:b0:c6:73:41:48:87:22:b4:4b:38: 9f:03:9a:f6:32:9b:6b:1a:fc:3a:d1:94:53:82:f8:1a:ff:cb: 46:4a:2e:d4:ce:db:77:67:10:30:e1:e3:fe:4c:e5:ba:cb:38: ae:95:fe:c1:2a:49:aa:0e:c3:53:2b:eb:5c:8b:74:05:ad:9d: f7:07:fb:5d:6a:63:b5:71:1c:20:2a:83:2f:68:3a:22:62:eb: 2e:34:66:51:66:2c:eb:21:82:b6:25:b0:8e:d6:68:39:8d:38: a7:fa:31:35:79:f0:c5:cb:1c:23:ca:24:f9:f3:f1:2f:9a:13: 01:2f:51:43:ba:70:b1:93:2d:d2:c7:f2:e3:f3:b0:5d:da:24: a1:57:ad:e2:36:eb:d1:54:05:c6:fd:d2:02:5a:9d:e9:b5:bf: ec:a6:03:c3:e5:b2:ca:cc:b7:b3:bd:85:f2:74:14:ee:33:3a: 6a:30:1c:21:ab:7a:f5:e4:d4:63:71:48:ad:92:8f:ef:e0:10: 11:9c:f8:31:50:ae:d1:1d:ff:9d:ad:50:c8:5c:a0:18:34:4d: b3:0a:09:b3:c3:5c:c2:f4:3b:7c:a9:20:2a:ee:23:6e:fe:c8: f5:58:24:c1 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUXpDEUM+U9M6koy94Kc2cniuCBTIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJBNDUxMUY0QjgxQzU2NUNFRDNFNzBCMzAyMEZCRDBF RDA1NTYyRjAeFw0yNTA2MjkwMDIxMDFaFw0yNTA2MzAwNDEyMDFaMDMxMTAvBgNV BAMTKDJDMzk5RThDRjU1ODBGNkNDRjRBNzBCNDA1NjdFMjg1OEQ2NDYyMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZUVWvr/VUP6A8dp7UiTucp7Oc 8axoAYHWrYN+0gWnPouYCzb8W4Kuh0pabpW+trLs6RzLRez7Dz0J2DnQpRApA/cF wbjgRCpq4zEWEW5MaSeh0DfQJaJpiH2U2svcYNCgY2gJeUdrRtWikEwKwHBgqiNM w4k51QAf2diaazEQ5XI1bstXmvduDhUNfVtG6136rxjn1PhY/EEZb9g/Ujr4F5Y+ e2bfSsyaz9O9WSlo8mvf/trXy29REO/nhjZMSIV+cXmPiMkN6u+cLE/4fSwf4VKV +98M5+jLkrtuYfm+925nEa4Ek+5LyvkQB7JV8uGRIzBz47o/qff/YfycK9WzAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQULDmejPVYD2zPSnC0BWfihY1kYicwHwYDVR0j BBgwFoAUS6RRH0uBxWXO0+cLMCD70O0FVi8wDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzk3M2U3YTk4YTcxYjQ5ZmZiYjIyYjc2ZWQ1ZjEyOWUyLzAv NEJBNDUxMUY0QjgxQzU2NUNFRDNFNzBCMzAyMEZCRDBFRDA1NTYyRi5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy80QkE0NTExRjRCODFDNTY1Q0VEM0U3MEIzMDIwRkJE MEVEMDU1NjJGLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzk3M2U3 YTk4YTcxYjQ5ZmZiYjIyYjc2ZWQ1ZjEyOWUyLzAvNEJBNDUxMUY0QjgxQzU2NUNF RDNFNzBCMzAyMEZCRDBFRDA1NTYyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAA2whkGQcVQcYmLavvri xCSDfKRaSZCe4SR3sMZzQUiHIrRLOJ8DmvYym2sa/DrRlFOC+Br/y0ZKLtTO23dn EDDh4/5M5brLOK6V/sEqSaoOw1Mr61yLdAWtnfcH+11qY7VxHCAqgy9oOiJi6y40 ZlFmLOshgrYlsI7WaDmNOKf6MTV58MXLHCPKJPnz8S+aEwEvUUO6cLGTLdLH8uPz sF3aJKFXreI269FUBcb90gJanem1v+ymA8PlssrMt7O9hfJ0FO4zOmowHCGrevXk 1GNxSK2Sj+/gEBGc+DFQrtEd/52tUMhcoBg0TbMKCbPDXML0O3ypICruI27+yPVY JME= -----END CERTIFICATE-----Generated at Sun Jun 29 07:32:17 2025 by rpki-client