$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_339bb4cff3b44732854d9aeff1067d91/0/69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E.mft File: 69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E.mft (raw, json) Hash identifier: wtL/UOpDEC/E+vTJOPEWYqJI1ahhqf1f8+uPVpQE96E= Subject key identifier: 04:AA:B5:FE:FF:CD:70:1C:CE:38:2B:AD:15:9D:40:9C:FB:E7:C4:BC Authority key identifier: 69:BD:D1:09:2A:CE:9A:10:E4:C9:4F:AD:8B:2D:A3:DD:CC:F6:4A:9E Certificate issuer: /CN=69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E Certificate serial: 754C181B4D4472C478FAD3F72F131337DF1922E6 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_339bb4cff3b44732854d9aeff1067d91/0/69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E.mft Manifest number: 017B Signing time: Thu 17 Apr 2025 08:23:33 +0000 Manifest this update: Thu 17 Apr 2025 08:18:31 +0000 Manifest next update: Fri 18 Apr 2025 12:17:31 +0000 Files and hashes: 1: 69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E.crl (hash: qoPa69HnuXgJ05MeNvGyCaH+/JIPB+/wCz0P+amYNu0=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_339bb4cff3b44732854d9aeff1067d91/0/69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_339bb4cff3b44732854d9aeff1067d91/0/69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 18 Apr 2025 04:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:4c:18:1b:4d:44:72:c4:78:fa:d3:f7:2f:13:13:37:df:19:22:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E Validity Not Before: Apr 17 08:18:31 2025 GMT Not After : Apr 18 12:17:31 2025 GMT Subject: CN=04AAB5FEFFCD701CCE382BAD159D409CFBE7C4BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:8f:4a:65:2d:bb:ef:93:35:18:bd:d4:24:65: ef:7f:b7:c8:23:1e:15:f4:37:25:7f:c5:fd:7f:b9: 53:7c:83:a8:3f:cd:80:5e:2a:ed:35:a1:5a:d7:11: 8c:bd:5c:83:75:49:52:f5:0d:dd:34:c2:36:5d:97: e9:31:e4:b8:52:6a:8b:ae:48:de:0c:d8:57:13:f4: 93:f6:3f:c8:1f:d0:e4:8d:70:1a:46:b0:c2:cd:35: 29:97:7a:a3:58:8f:9e:73:82:49:55:3a:2c:e4:a5: 97:da:8d:6c:37:36:f3:ad:c2:4d:a9:f7:08:9e:fc: 66:df:60:ae:6b:14:be:6f:38:e1:fd:a3:e9:9f:4e: 06:b9:f2:87:b6:fe:04:b3:11:28:fc:ec:c0:f3:8d: 73:55:fd:8c:3a:ba:f7:29:be:a5:63:43:0c:29:cb: 59:5c:01:60:59:cd:69:e1:a1:d7:e8:d2:9c:72:41: 8b:b3:ad:4a:03:cd:3f:bb:6f:64:22:67:8a:a2:c4: 5f:18:7d:41:5a:95:22:59:b0:69:99:d8:25:17:e1: 31:6d:36:46:ca:a8:c9:de:ce:1a:05:2e:b0:fb:22: 42:dd:cd:cc:74:30:5a:4d:50:f0:74:51:35:cf:c4: b9:f4:80:fc:3b:e0:9c:3e:fb:84:9b:fc:e3:68:a7: 5b:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:AA:B5:FE:FF:CD:70:1C:CE:38:2B:AD:15:9D:40:9C:FB:E7:C4:BC X509v3 Authority Key Identifier: keyid:69:BD:D1:09:2A:CE:9A:10:E4:C9:4F:AD:8B:2D:A3:DD:CC:F6:4A:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_339bb4cff3b44732854d9aeff1067d91/0/69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_339bb4cff3b44732854d9aeff1067d91/0/69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:f7:3c:87:f0:94:36:ec:ec:a5:47:5a:b4:e1:1a:ed:14:73: bb:55:c1:48:58:50:6c:0c:76:77:43:23:25:34:7e:1f:f3:84: a4:ae:e9:a3:bb:4b:61:5f:b6:f4:57:23:c2:ef:83:cb:65:09: 4e:79:85:9d:a9:cb:02:42:01:2d:9c:29:ef:19:2d:50:c0:56: 13:d5:97:5d:db:0f:f6:5b:6e:7a:40:78:1b:cf:95:7f:e2:56: e0:38:7c:c7:57:91:9b:f1:16:98:94:3f:6f:c3:33:00:09:b3: 92:d4:73:af:07:70:77:bb:3e:eb:75:43:5c:4d:ea:61:b0:92: 5d:c9:da:09:b2:f5:73:a7:aa:35:12:d0:82:0d:58:64:16:56: 1a:e7:c5:8e:78:51:19:66:9b:6f:0f:50:5e:77:f1:5c:f9:c6: 5b:95:cc:39:41:d2:61:e5:f8:2c:d9:ab:87:e8:03:18:53:94: fe:19:88:a5:ff:03:df:df:08:09:85:9a:91:f1:70:1c:c0:b2: 92:72:14:bc:df:71:e5:7c:d1:26:aa:48:3f:d3:30:82:ad:21: ad:7d:c9:bb:ee:ca:ba:5e:0c:20:67:37:69:62:7f:7d:ae:9c: a5:41:94:bd:22:44:4c:e9:ce:5b:6e:90:9f:5b:cf:47:b1:95: ad:cc:87:70 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUdUwYG01EcsR4+tP3LxMTN98ZIuYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjlCREQxMDkyQUNFOUExMEU0Qzk0RkFEOEIyREEzRERD Q0Y2NEE5RTAeFw0yNTA0MTcwODE4MzFaFw0yNTA0MTgxMjE3MzFaMDMxMTAvBgNV BAMTKDA0QUFCNUZFRkZDRDcwMUNDRTM4MkJBRDE1OUQ0MDlDRkJFN0M0QkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqj0plLbvvkzUYvdQkZe9/t8gj HhX0NyV/xf1/uVN8g6g/zYBeKu01oVrXEYy9XIN1SVL1Dd00wjZdl+kx5LhSaouu SN4M2FcT9JP2P8gf0OSNcBpGsMLNNSmXeqNYj55zgklVOizkpZfajWw3NvOtwk2p 9wie/GbfYK5rFL5vOOH9o+mfTga58oe2/gSzESj87MDzjXNV/Yw6uvcpvqVjQwwp y1lcAWBZzWnhodfo0pxyQYuzrUoDzT+7b2QiZ4qixF8YfUFalSJZsGmZ2CUX4TFt NkbKqMnezhoFLrD7IkLdzcx0MFpNUPB0UTXPxLn0gPw74Jw++4Sb/ONop1vZAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUBKq1/v/NcBzOOCutFZ1AnPvnxLwwHwYDVR0j BBgwFoAUab3RCSrOmhDkyU+tiy2j3cz2Sp4wDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzMzOWJiNGNmZjNiNDQ3MzI4NTRkOWFlZmYxMDY3ZDkxLzAv NjlCREQxMDkyQUNFOUExMEU0Qzk0RkFEOEIyREEzRERDQ0Y2NEE5RS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy82OUJERDEwOTJBQ0U5QTEwRTRDOTRGQUQ4QjJEQTNE RENDRjY0QTlFLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzMzOWJi NGNmZjNiNDQ3MzI4NTRkOWFlZmYxMDY3ZDkxLzAvNjlCREQxMDkyQUNFOUExMEU0 Qzk0RkFEOEIyREEzRERDQ0Y2NEE5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAGj3PIfwlDbs7KVHWrTh Gu0Uc7tVwUhYUGwMdndDIyU0fh/zhKSu6aO7S2FftvRXI8Lvg8tlCU55hZ2pywJC AS2cKe8ZLVDAVhPVl13bD/ZbbnpAeBvPlX/iVuA4fMdXkZvxFpiUP2/DMwAJs5LU c68HcHe7Put1Q1xN6mGwkl3J2gmy9XOnqjUS0IINWGQWVhrnxY54URlmm28PUF53 8Vz5xluVzDlB0mHl+CzZq4foAxhTlP4ZiKX/A9/fCAmFmpHxcBzAspJyFLzfceV8 0SaqSD/TMIKtIa19ybvuyrpeDCBnN2lif32unKVBlL0iREzpzltukJ9bz0exla3M h3A= -----END CERTIFICATE-----Generated at Thu Apr 17 22:25:19 2025 by rpki-client