$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft File: 2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft (raw, json) Hash identifier: GsUW/BVoOXQter1gx7uzI77/DQ6X2YcH3EDIS1s2MMo= Subject key identifier: B1:C7:EC:C8:E5:CF:40:36:B1:10:26:55:EE:20:A0:E2:07:F9:37:B6 Authority key identifier: 2F:2C:31:24:01:2C:07:F6:77:5A:62:41:DF:C6:3B:E0:41:4C:98:AD Certificate issuer: /CN=2F2C3124012C07F6775A6241DFC63BE0414C98AD Certificate serial: 6335D51F8751E87943F85809C986E9D3BE06D48D Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/2F2C3124012C07F6775A6241DFC63BE0414C98AD.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft Manifest number: 46 Signing time: Sat 23 Aug 2025 08:27:10 +0000 Manifest this update: Sat 23 Aug 2025 08:22:10 +0000 Manifest next update: Sun 24 Aug 2025 12:02:10 +0000 Files and hashes: 1: 2F2C3124012C07F6775A6241DFC63BE0414C98AD.crl (hash: SbfyGUNys6T1dy/wkYevRE1VHZvNWyS48bSS5BCyS04=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.crl rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft rsync://krill.47272.net/repo/HYEHOST/5/2F2C3124012C07F6775A6241DFC63BE0414C98AD.cer rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 12:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:35:d5:1f:87:51:e8:79:43:f8:58:09:c9:86:e9:d3:be:06:d4:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F2C3124012C07F6775A6241DFC63BE0414C98AD Validity Not Before: Aug 23 08:22:10 2025 GMT Not After : Aug 24 12:02:10 2025 GMT Subject: CN=B1C7ECC8E5CF4036B1102655EE20A0E207F937B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:d0:f8:58:08:a2:82:34:e2:52:87:9b:55:99: 67:a0:68:ea:aa:eb:ae:df:5b:52:9c:7c:5d:93:6b: 64:f9:df:80:7f:e1:ba:fc:d4:ca:ad:68:9f:8c:34: d0:d2:7f:5e:ad:71:6e:8a:c5:fc:33:8c:36:eb:3f: 59:85:46:85:be:78:3f:6a:29:1b:a7:89:b2:4e:59: 9c:74:4e:71:25:b0:04:cc:68:69:48:fe:b7:65:e2: c4:a9:7b:17:5c:12:df:c8:50:38:f8:78:89:ab:4a: 41:81:3a:db:c3:2d:5f:0c:be:a2:50:e7:7d:39:33: 69:76:2d:1d:d6:9d:71:bd:7c:40:30:8c:49:31:da: 31:47:60:4a:75:9e:d1:6e:f1:71:48:15:74:f9:0b: 76:1e:7c:62:83:19:49:06:9d:f4:9d:63:28:1f:07: 5f:5d:a4:d0:fd:34:76:e1:ec:87:e9:09:05:03:a8: 9b:6d:34:13:f0:96:6f:2c:ad:9f:6a:de:e5:6c:3f: 54:69:a9:3b:87:c7:ad:2e:cb:01:57:82:28:4e:cd: 48:12:02:bf:99:fd:2e:14:81:e3:fa:19:5d:a6:98: d1:f6:49:85:28:5d:60:76:3c:67:bf:52:92:35:2e: 2a:f8:4f:6b:bc:e2:16:56:f9:29:65:c4:c8:f8:22: a5:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:C7:EC:C8:E5:CF:40:36:B1:10:26:55:EE:20:A0:E2:07:F9:37:B6 X509v3 Authority Key Identifier: keyid:2F:2C:31:24:01:2C:07:F6:77:5A:62:41:DF:C6:3B:E0:41:4C:98:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.crl Authority Information Access: CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/2F2C3124012C07F6775A6241DFC63BE0414C98AD.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:fb:72:dc:55:e1:aa:58:40:73:d2:62:fc:de:ca:7c:59:44: aa:dd:1e:b5:bf:bd:85:8e:dd:72:7d:2d:54:cb:dd:93:70:84: f2:e1:d9:1c:75:e1:10:18:ba:a2:ca:0a:fa:fa:91:ff:5b:b7: 9b:52:5c:41:1e:22:09:03:09:32:bb:59:2e:a2:0e:43:cb:21: c9:d9:29:12:07:ec:bc:53:67:45:ab:0c:7d:2b:66:a5:1e:47: 22:8b:00:40:50:a2:08:a3:39:cb:f9:1e:29:3c:c6:0d:40:db: 0e:2c:f1:ab:33:0d:78:31:99:07:14:73:00:b2:9c:da:7e:55: a2:a6:bb:a5:8b:ac:eb:fd:88:af:c8:66:a8:ad:27:a4:9c:44: 97:24:b9:d7:08:70:6b:4e:3f:9c:cd:89:e4:cf:3a:ef:f2:e1: ca:42:84:94:18:42:1e:a5:78:f4:3a:6b:51:99:0c:da:97:72: 0b:60:f1:0d:03:23:35:2e:3e:2f:fe:55:00:41:cc:98:ee:a1: 4c:9f:be:6c:42:b5:10:60:f6:01:0f:53:f6:fa:8c:20:78:92: 94:7b:62:fd:81:de:a4:35:c4:0e:94:d9:ad:c0:30:fc:f9:84: 2e:6a:e1:8f:dc:58:42:a3:09:aa:2c:bd:73:bc:1d:e6:7f:88: 2d:59:91:3b -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUYzXVH4dR6HlD+FgJyYbp074G1I0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkYyQzMxMjQwMTJDMDdGNjc3NUE2MjQxREZDNjNCRTA0 MTRDOThBRDAeFw0yNTA4MjMwODIyMTBaFw0yNTA4MjQxMjAyMTBaMDMxMTAvBgNV BAMTKEIxQzdFQ0M4RTVDRjQwMzZCMTEwMjY1NUVFMjBBMEUyMDdGOTM3QjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDu0PhYCKKCNOJSh5tVmWegaOqq 667fW1KcfF2Ta2T534B/4br81MqtaJ+MNNDSf16tcW6KxfwzjDbrP1mFRoW+eD9q KRunibJOWZx0TnElsATMaGlI/rdl4sSpexdcEt/IUDj4eImrSkGBOtvDLV8MvqJQ 5305M2l2LR3WnXG9fEAwjEkx2jFHYEp1ntFu8XFIFXT5C3YefGKDGUkGnfSdYygf B19dpND9NHbh7IfpCQUDqJttNBPwlm8srZ9q3uVsP1RpqTuHx60uywFXgihOzUgS Ar+Z/S4UgeP6GV2mmNH2SYUoXWB2PGe/UpI1Lir4T2u84hZW+SllxMj4IqWDAgMB AAGjggJSMIICTjAdBgNVHQ4EFgQUscfsyOXPQDaxECZV7iCg4gf5N7YwHwYDVR0j BBgwFoAULywxJAEsB/Z3WmJB38Y74EFMmK0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGU3ZDU1ZjctZWU2MC00MDA1LWJhZDctYjQyODE4Y2Y1 MGU4LzkvMkYyQzMxMjQwMTJDMDdGNjc3NUE2MjQxREZDNjNCRTA0MTRDOThBRC5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL2tyaWxsLjQ3 MjcyLm5ldC9yZXBvL0hZRUhPU1QvNS8yRjJDMzEyNDAxMkMwN0Y2Nzc1QTYyNDFE RkM2M0JFMDQxNEM5OEFELmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2RlN2Q1NWY3LWVlNjAtNDAwNS1iYWQ3LWI0MjgxOGNmNTBlOC85LzJGMkMzMTI0 MDEyQzA3RjY3NzVBNjI0MURGQzYzQkUwNDE0Qzk4QUQubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBD+3Lc VeGqWEBz0mL83sp8WUSq3R61v72Fjt1yfS1Uy92TcITy4dkcdeEQGLqiygr6+pH/ W7ebUlxBHiIJAwkyu1kuog5DyyHJ2SkSB+y8U2dFqwx9K2alHkciiwBAUKIIoznL +R4pPMYNQNsOLPGrMw14MZkHFHMAspzaflWipruli6zr/YivyGaorSeknESXJLnX CHBrTj+czYnkzzrv8uHKQoSUGEIepXj0OmtRmQzal3ILYPENAyM1Lj4v/lUAQcyY 7qFMn75sQrUQYPYBD1P2+owgeJKUe2L9gd6kNcQOlNmtwDD8+YQuauGP3FhCowmq LL1zvB3mf4gtWZE7 -----END CERTIFICATE-----Generated at Sun Aug 24 00:29:58 2025 by rpki-client