$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft File: DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft (raw, json) Hash identifier: Urjx/aieAgRs7MZxFPraKV7kApxwX8dA56rwQNyzkE8= Subject key identifier: 97:50:15:12:07:A5:C7:40:B9:6A:B1:91:3E:2B:14:02:FE:A7:87:57 Authority key identifier: DD:C2:5A:D2:F1:A4:89:24:77:13:EE:39:B1:C0:3E:A2:FD:DA:41:18 Certificate issuer: /CN=DDC25AD2F1A489247713EE39B1C03EA2FDDA4118 Certificate serial: 25A9CB327F1E134595741F04B5ACE8CAD17592C9 Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft Manifest number: 31 Signing time: Mon 12 May 2025 03:04:37 +0000 Manifest this update: Mon 12 May 2025 02:59:37 +0000 Manifest next update: Tue 13 May 2025 17:25:37 +0000 Files and hashes: 1: DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.crl (hash: F8Ww4V5gi7sMQi2GyICEnNCvWDbAcOPT+fMvT/OKZ1o=) 2: 326130623a346530373a363064303a3a2f34342d3438203d3e20323134373031.roa (hash: uV2TLwh180zk/DItScOuiwKDHaU99Mhyx8m59bwZFmA=) 3: 326130623a346530373a363065303a3a2f34342d3438203d3e203339333531.roa (hash: /JgrvpSR1ZDGP36oDONfP8baAAR4FG/skafz4v4Fs6E=) 4: 326130623a346530373a363030303a3a2f34312d3438203d3e20323134373031.roa (hash: 4kUbGyjkNaSVg+CdxZZIcLS92ZdRbZtwjsOz4Bjkgro=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.crl rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 May 2025 12:41:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:a9:cb:32:7f:1e:13:45:95:74:1f:04:b5:ac:e8:ca:d1:75:92:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDC25AD2F1A489247713EE39B1C03EA2FDDA4118 Validity Not Before: May 12 02:59:37 2025 GMT Not After : May 13 17:25:37 2025 GMT Subject: CN=9750151207A5C740B96AB1913E2B1402FEA78757 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:36:76:b1:c9:3a:d5:db:fc:67:f5:2c:1a:24: 1b:e0:0f:18:f4:81:ec:54:40:68:d4:68:23:7d:65: e0:51:35:0f:4f:ef:8f:4d:de:6c:34:4a:02:1c:56: 9c:9a:00:47:54:51:71:15:92:d1:41:83:b9:e7:56: e7:47:15:56:30:2d:e7:0c:19:e9:75:c2:c5:2d:bd: 3e:fe:d4:d9:9b:e0:08:d4:46:f0:ee:fc:8e:02:3c: 15:45:4a:1e:f1:73:93:84:53:97:60:15:b8:d2:cd: 26:4e:f6:75:7b:c5:b3:e2:60:4a:96:ff:93:ba:2d: e5:84:a8:69:dc:05:24:99:e1:fa:56:4b:ed:2a:c5: e4:48:38:8a:3e:db:eb:b0:73:e7:08:a7:8b:a8:cc: 45:ba:b7:78:39:69:55:54:b9:c1:ea:c5:f8:35:f1: a1:43:76:e6:9c:d1:61:c9:7e:25:95:19:69:16:0d: 3f:14:4b:47:64:9c:78:b3:6e:70:36:44:bd:a5:06: b5:6b:23:09:33:a6:a4:7e:5e:e3:69:06:3a:bf:84: b5:64:7c:54:61:54:96:74:af:54:9d:2d:aa:72:62: f4:aa:00:16:6e:09:6d:2c:4a:1a:4a:83:53:9c:a9: a2:ab:76:b4:cb:68:01:6f:90:85:3c:61:d7:b3:95: ad:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:50:15:12:07:A5:C7:40:B9:6A:B1:91:3E:2B:14:02:FE:A7:87:57 X509v3 Authority Key Identifier: keyid:DD:C2:5A:D2:F1:A4:89:24:77:13:EE:39:B1:C0:3E:A2:FD:DA:41:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:d0:89:71:32:3d:9f:c2:e0:ea:c0:39:68:80:fe:cd:e7:c0: fd:58:a7:8b:e9:1b:1b:65:24:7a:f5:3e:34:70:f0:ac:44:1f: d8:ef:7c:58:c4:5a:bb:0c:f7:70:2d:0c:c1:6b:d4:b1:5f:7a: e9:2c:57:a2:cf:f7:5c:92:45:1a:d0:a4:f1:64:70:3d:b4:1e: 23:f6:e9:67:b4:03:13:96:b9:af:78:9b:d5:f1:47:00:69:07: ba:94:34:45:ed:bb:78:37:b4:cc:39:03:1d:11:30:63:48:51: 68:ce:c2:ba:4d:f8:c2:5b:6c:c5:84:5c:74:e9:cf:03:e3:59: 2c:da:30:48:15:fe:c9:e6:64:d6:15:c0:48:c7:9a:08:aa:64: 92:67:db:7f:7d:a2:00:d7:e9:13:da:28:aa:12:0a:38:3f:e5: 1a:a6:90:b1:e1:45:dc:b2:9c:01:ac:7e:e2:4f:15:fa:5f:5d: 45:79:e2:0e:d2:ee:63:08:63:bb:6a:a1:9b:c0:10:06:41:dd: e8:71:c3:43:f1:41:d3:e9:fd:aa:19:89:dc:3c:e0:0a:93:27: 6c:fc:b4:ad:04:c8:b1:6c:73:04:fc:1a:32:a6:a1:1d:e5:e2: 44:c8:8d:a4:93:85:17:f1:fe:38:04:9e:75:eb:f0:cf:09:1a: 0e:bc:d6:6f -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUJanLMn8eE0WVdB8EtazoytF1kskwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERDMjVBRDJGMUE0ODkyNDc3MTNFRTM5QjFDMDNFQTJG RERBNDExODAeFw0yNTA1MTIwMjU5MzdaFw0yNTA1MTMxNzI1MzdaMDMxMTAvBgNV BAMTKDk3NTAxNTEyMDdBNUM3NDBCOTZBQjE5MTNFMkIxNDAyRkVBNzg3NTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkNnaxyTrV2/xn9SwaJBvgDxj0 gexUQGjUaCN9ZeBRNQ9P749N3mw0SgIcVpyaAEdUUXEVktFBg7nnVudHFVYwLecM Gel1wsUtvT7+1Nmb4AjURvDu/I4CPBVFSh7xc5OEU5dgFbjSzSZO9nV7xbPiYEqW /5O6LeWEqGncBSSZ4fpWS+0qxeRIOIo+2+uwc+cIp4uozEW6t3g5aVVUucHqxfg1 8aFDduac0WHJfiWVGWkWDT8US0dknHizbnA2RL2lBrVrIwkzpqR+XuNpBjq/hLVk fFRhVJZ0r1SdLapyYvSqABZuCW0sShpKg1OcqaKrdrTLaAFvkIU8Ydezla25AgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUl1AVEgelx0C5arGRPisUAv6nh1cwHwYDVR0j BBgwFoAU3cJa0vGkiSR3E+45scA+ov3aQRgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmVhZDJkY2YtZWFkNS00OTU0LWFkODQtNjU4MGNkMmE5 YzUwLzMvRERDMjVBRDJGMUE0ODkyNDc3MTNFRTM5QjFDMDNFQTJGRERBNDExOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvRERDMjVBRDJGMUE0ODkyNDc3MTNFRTM5QjFDMDNFQTJGRERB NDExOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZWFkMmRjZi1l YWQ1LTQ5NTQtYWQ4NC02NTgwY2QyYTljNTAvMy9EREMyNUFEMkYxQTQ4OTI0Nzcx M0VFMzlCMUMwM0VBMkZEREE0MTE4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALtCJcTI9n8Lg6sA5aID+ zefA/Vini+kbG2UkevU+NHDwrEQf2O98WMRauwz3cC0MwWvUsV966SxXos/3XJJF GtCk8WRwPbQeI/bpZ7QDE5a5r3ib1fFHAGkHupQ0Re27eDe0zDkDHREwY0hRaM7C uk34wltsxYRcdOnPA+NZLNowSBX+yeZk1hXASMeaCKpkkmfbf32iANfpE9ooqhIK OD/lGqaQseFF3LKcAax+4k8V+l9dRXniDtLuYwhju2qhm8AQBkHd6HHDQ/FB0+n9 qhmJ3DzgCpMnbPy0rQTIsWxzBPwaMqahHeXiRMiNpJOFF/H+OASedevwzwkaDrzW bw== -----END CERTIFICATE-----Generated at Mon May 12 05:17:13 2025 by rpki-client