$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft File: DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft (raw, json) Hash identifier: i/8R9UMMWOSyEmLFi055AQXVgRhl1LFOpLwsS1C0sxE= Subject key identifier: 29:D9:C7:9F:19:C7:EA:AC:8C:B5:3B:B9:24:EF:49:D1:C1:DB:E8:B8 Authority key identifier: DD:C2:5A:D2:F1:A4:89:24:77:13:EE:39:B1:C0:3E:A2:FD:DA:41:18 Certificate issuer: /CN=DDC25AD2F1A489247713EE39B1C03EA2FDDA4118 Certificate serial: 069CE5C881A8BB3031FC4B13C30B5511B0F904CB Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft Manifest number: 85 Signing time: Sun 29 Jun 2025 16:19:51 +0000 Manifest this update: Sun 29 Jun 2025 16:14:51 +0000 Manifest next update: Tue 01 Jul 2025 04:58:51 +0000 Files and hashes: 1: DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.crl (hash: MQeYKsufbzKvuCXIComU6GtdtJ2GhckgptnMe46N13Y=) 2: 326130623a346530373a363065303a3a2f34342d3438203d3e203339333531.roa (hash: /JgrvpSR1ZDGP36oDONfP8baAAR4FG/skafz4v4Fs6E=) 3: 326130623a346530373a363030303a3a2f34312d3438203d3e20323134373031.roa (hash: 4kUbGyjkNaSVg+CdxZZIcLS92ZdRbZtwjsOz4Bjkgro=) 4: 326130623a346530373a363064303a3a2f34342d3438203d3e20323134373031.roa (hash: uV2TLwh180zk/DItScOuiwKDHaU99Mhyx8m59bwZFmA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.crl rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Jun 2025 08:36:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:9c:e5:c8:81:a8:bb:30:31:fc:4b:13:c3:0b:55:11:b0:f9:04:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDC25AD2F1A489247713EE39B1C03EA2FDDA4118 Validity Not Before: Jun 29 16:14:51 2025 GMT Not After : Jul 1 04:58:51 2025 GMT Subject: CN=29D9C79F19C7EAAC8CB53BB924EF49D1C1DBE8B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:15:e8:8f:50:67:a9:9a:c7:dd:6c:03:8f:3c: e0:9f:b3:b1:e0:9a:f6:37:bd:1b:6c:c1:a1:cf:2a: eb:f0:cb:65:16:a8:07:8b:c4:0b:65:90:7d:f9:e3: 87:30:96:8d:ac:6e:cb:a5:22:7d:d9:cb:1d:31:25: 4f:43:1b:40:7e:33:06:d7:d7:97:40:74:d6:28:f6: 4b:db:80:23:9d:e8:d9:7c:2d:f3:19:78:e4:1e:b1: e7:4c:69:1a:a2:40:fa:ae:76:02:56:b2:5e:99:13: 62:02:36:d1:8e:1f:be:a2:90:11:5a:a3:14:04:9e: 2f:e8:a8:3d:4b:dc:22:f8:6f:07:0e:65:e1:bb:0f: 59:28:c1:77:20:7f:c6:ea:4e:32:b3:7c:85:df:9b: b1:8a:08:b3:22:4f:4e:22:b0:35:3a:f6:7a:a9:a9: 79:c6:c3:4f:6b:12:c5:75:8b:b2:c2:05:b7:c1:4e: c0:99:73:6f:68:da:39:4b:6f:0f:3e:d0:0b:a0:1d: d2:e7:e8:f2:62:b0:e2:24:21:7e:a3:3d:96:74:bf: 38:48:0e:8f:5d:cf:e5:46:cc:81:97:e2:63:0b:c3: 64:1a:c0:10:f9:90:32:4f:2c:b7:97:53:d6:21:8d: 4e:31:81:18:62:e3:f5:56:90:41:01:f8:cd:3c:1a: f0:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:D9:C7:9F:19:C7:EA:AC:8C:B5:3B:B9:24:EF:49:D1:C1:DB:E8:B8 X509v3 Authority Key Identifier: keyid:DD:C2:5A:D2:F1:A4:89:24:77:13:EE:39:B1:C0:3E:A2:FD:DA:41:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:07:b4:96:ef:af:ef:ab:f0:5c:35:4f:9f:dc:f1:5d:63:93: 8e:b2:58:df:e2:86:2c:7a:81:c8:f5:0a:1b:4e:14:84:a2:4a: 2a:8e:9b:84:11:d3:a4:3f:83:0c:fd:2d:88:fd:61:c1:16:8e: ed:4d:7e:92:31:0a:50:c5:72:81:39:31:73:7a:14:59:74:74: 9a:eb:bb:da:df:46:26:f1:86:8f:35:91:66:98:94:1a:cc:97: 7f:46:dc:86:bf:8b:9e:6c:52:50:81:9d:7a:c3:f5:1d:7e:75: fa:2b:fb:8d:b3:04:5a:35:50:89:b7:e7:f8:a3:c1:78:d8:5f: 62:80:10:51:69:08:50:bb:c0:0d:11:b0:8c:4d:c1:06:6b:e0: f5:9a:4e:b6:9d:53:07:5f:04:af:c7:56:33:1a:3c:23:6f:54: 72:a3:aa:d2:06:c6:a6:f4:96:d3:3f:86:0d:c6:f8:02:5d:a9: 38:14:bd:16:7c:cf:e7:d8:e2:7f:61:db:99:1d:28:11:c1:37: d5:9a:90:10:26:68:fe:d2:c9:10:0a:bd:71:dc:f5:f5:ad:51: 68:96:16:b6:b8:fb:f2:15:dd:52:9f:e9:07:3b:da:0a:09:ea: c1:73:8e:ed:78:09:be:3e:a2:fd:08:9e:20:d5:03:bd:a4:c9: a3:7a:dc:62 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUBpzlyIGouzAx/EsTwwtVEbD5BMswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERDMjVBRDJGMUE0ODkyNDc3MTNFRTM5QjFDMDNFQTJG RERBNDExODAeFw0yNTA2MjkxNjE0NTFaFw0yNTA3MDEwNDU4NTFaMDMxMTAvBgNV BAMTKDI5RDlDNzlGMTlDN0VBQUM4Q0I1M0JCOTI0RUY0OUQxQzFEQkU4QjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdFeiPUGepmsfdbAOPPOCfs7Hg mvY3vRtswaHPKuvwy2UWqAeLxAtlkH3544cwlo2sbsulIn3Zyx0xJU9DG0B+MwbX 15dAdNYo9kvbgCOd6Nl8LfMZeOQesedMaRqiQPqudgJWsl6ZE2ICNtGOH76ikBFa oxQEni/oqD1L3CL4bwcOZeG7D1kowXcgf8bqTjKzfIXfm7GKCLMiT04isDU69nqp qXnGw09rEsV1i7LCBbfBTsCZc29o2jlLbw8+0AugHdLn6PJisOIkIX6jPZZ0vzhI Do9dz+VGzIGX4mMLw2QawBD5kDJPLLeXU9YhjU4xgRhi4/VWkEEB+M08GvDxAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUKdnHnxnH6qyMtTu5JO9J0cHb6LgwHwYDVR0j BBgwFoAU3cJa0vGkiSR3E+45scA+ov3aQRgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmVhZDJkY2YtZWFkNS00OTU0LWFkODQtNjU4MGNkMmE5 YzUwLzMvRERDMjVBRDJGMUE0ODkyNDc3MTNFRTM5QjFDMDNFQTJGRERBNDExOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvRERDMjVBRDJGMUE0ODkyNDc3MTNFRTM5QjFDMDNFQTJGRERB NDExOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZWFkMmRjZi1l YWQ1LTQ5NTQtYWQ4NC02NTgwY2QyYTljNTAvMy9EREMyNUFEMkYxQTQ4OTI0Nzcx M0VFMzlCMUMwM0VBMkZEREE0MTE4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdge0lu+v76vwXDVPn9zx XWOTjrJY3+KGLHqByPUKG04UhKJKKo6bhBHTpD+DDP0tiP1hwRaO7U1+kjEKUMVy gTkxc3oUWXR0muu72t9GJvGGjzWRZpiUGsyXf0bchr+LnmxSUIGdesP1HX51+iv7 jbMEWjVQibfn+KPBeNhfYoAQUWkIULvADRGwjE3BBmvg9ZpOtp1TB18Er8dWMxo8 I29UcqOq0gbGpvSW0z+GDcb4Al2pOBS9FnzP59jif2HbmR0oEcE31ZqQECZo/tLJ EAq9cdz19a1RaJYWtrj78hXdUp/pBzvaCgnqwXOO7XgJvj6i/QieINUDvaTJo3rc Yg== -----END CERTIFICATE-----Generated at Sun Jun 29 20:27:58 2025 by rpki-client