$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/BBED14E9793905EC1EA5CE10AA03C497D737B115.mft File: BBED14E9793905EC1EA5CE10AA03C497D737B115.mft (raw, json) Hash identifier: ty7V4ROUBh1NYT64HPHpNoYUAbUkySB4KHFSq+rBe7k= Subject key identifier: 48:EB:6F:6E:EC:B8:D7:E8:B6:09:0A:88:CC:06:3D:45:C4:B5:D1:1A Authority key identifier: BB:ED:14:E9:79:39:05:EC:1E:A5:CE:10:AA:03:C4:97:D7:37:B1:15 Certificate issuer: /CN=BBED14E9793905EC1EA5CE10AA03C497D737B115 Certificate serial: 18F8EDDA0277BA01AAC930919AD877E2D8130910 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/BBED14E9793905EC1EA5CE10AA03C497D737B115.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/BBED14E9793905EC1EA5CE10AA03C497D737B115.mft Manifest number: 01BA Signing time: Fri 06 Jun 2025 23:13:25 +0000 Manifest this update: Fri 06 Jun 2025 23:08:23 +0000 Manifest next update: Sun 08 Jun 2025 01:05:23 +0000 Files and hashes: 1: BBED14E9793905EC1EA5CE10AA03C497D737B115.crl (hash: z4hF5SdUeKAh1AUNKHKZfeWVdB2KGQZaVw4PNlytUTc=) 2: 326131313a663263303a666663303a3a2f34382d3438203d3e20323035353839.roa (hash: MohLLX8Sy/zW2nWkcZiofRJsITCqYsBthAW1Nb7L2Hw=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/BBED14E9793905EC1EA5CE10AA03C497D737B115.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/BBED14E9793905EC1EA5CE10AA03C497D737B115.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/BBED14E9793905EC1EA5CE10AA03C497D737B115.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Jun 2025 21:59:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:f8:ed:da:02:77:ba:01:aa:c9:30:91:9a:d8:77:e2:d8:13:09:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBED14E9793905EC1EA5CE10AA03C497D737B115 Validity Not Before: Jun 6 23:08:23 2025 GMT Not After : Jun 8 01:05:23 2025 GMT Subject: CN=48EB6F6EECB8D7E8B6090A88CC063D45C4B5D11A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:70:ba:2f:8d:99:62:e9:ce:08:8f:12:4b:b9: 1d:18:5f:a9:af:70:f2:97:0d:10:62:fc:3e:50:2a: 85:53:6e:0e:84:15:47:57:28:cc:3f:7b:0e:9e:5e: 05:06:7c:2d:4c:76:79:9f:a8:c3:63:6b:2a:e0:93: cb:ac:29:87:4f:4a:a9:a7:8d:dc:d8:60:eb:95:e7: 08:e3:c2:f3:4a:5d:af:7e:4c:36:fd:c8:61:c6:ed: aa:b5:5f:2b:a2:43:d6:34:6a:b4:03:6c:03:15:d2: e8:56:c0:b7:05:9a:07:fa:a0:b5:f9:e3:b4:1c:66: 4f:94:3f:4a:a5:8e:9e:69:c8:f2:e5:56:c3:43:50: c8:e7:c4:8d:20:df:22:71:e9:d2:e2:41:ea:d5:16: a6:dc:e5:31:9b:e5:5f:f2:fb:fc:78:c1:8e:b2:b6: 25:79:13:2e:da:a6:81:af:83:e3:da:d4:ed:d9:2b: 0d:64:03:83:12:21:6c:6b:72:3d:bd:32:bd:bb:4f: 9e:c3:5c:28:f6:cb:f0:b6:d0:0c:00:e8:9c:32:88: 8d:13:c7:96:6e:7d:cd:df:f5:f5:35:b9:3b:4f:4a: 7a:0e:11:8d:04:db:ec:8a:d4:bd:23:a1:c3:fd:62: 9b:36:e4:ae:9d:85:49:ef:8d:d0:27:62:78:13:1e: 9d:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:EB:6F:6E:EC:B8:D7:E8:B6:09:0A:88:CC:06:3D:45:C4:B5:D1:1A X509v3 Authority Key Identifier: keyid:BB:ED:14:E9:79:39:05:EC:1E:A5:CE:10:AA:03:C4:97:D7:37:B1:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/BBED14E9793905EC1EA5CE10AA03C497D737B115.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/BBED14E9793905EC1EA5CE10AA03C497D737B115.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/BBED14E9793905EC1EA5CE10AA03C497D737B115.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:b6:8f:bd:3e:8c:d2:36:95:dc:63:86:bb:1a:81:cc:ef:b1: eb:e8:40:21:fd:8a:e5:db:6e:39:1d:d7:6e:8a:27:ec:21:5e: b0:08:43:13:d3:3e:a5:fc:f9:c5:f8:ba:53:f3:33:d3:23:aa: be:50:7e:01:1b:66:f2:46:02:36:6d:94:9e:c4:db:9c:68:ee: eb:cd:58:31:6d:a8:7e:26:69:75:8d:8a:4b:0e:17:1f:29:d7: 89:45:46:57:84:48:a9:6d:6c:d9:f2:6d:59:4a:3e:c2:08:62: cc:2e:3d:28:c6:f9:12:e3:1f:c7:dd:5d:27:08:bb:4a:30:3d: 0b:fa:d0:c3:c8:53:90:77:ae:3c:bd:34:fc:2b:e5:e1:fa:98: 1c:7d:0c:76:02:23:4a:c3:67:0f:87:57:f3:43:b6:64:33:29: d8:ef:8e:e6:0f:54:8c:fe:8b:12:d8:cd:cd:f2:71:e0:ea:7e: 5e:67:17:f0:a1:3a:23:42:64:a7:c9:a0:cb:d3:1d:ad:f7:b5: 65:1e:c6:c3:c4:0e:eb:5d:72:ff:f7:16:b2:d3:69:42:8b:cb: d2:15:c4:03:7d:f8:cc:c6:e7:79:65:da:8e:d3:0f:23:64:b9: 23:9f:a5:34:a3:1b:83:6b:4b:20:bb:73:a8:21:75:62:2a:ac: 87:f6:46:97 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUGPjt2gJ3ugGqyTCRmth34tgTCRAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkJFRDE0RTk3OTM5MDVFQzFFQTVDRTEwQUEwM0M0OTdE NzM3QjExNTAeFw0yNTA2MDYyMzA4MjNaFw0yNTA2MDgwMTA1MjNaMDMxMTAvBgNV BAMTKDQ4RUI2RjZFRUNCOEQ3RThCNjA5MEE4OENDMDYzRDQ1QzRCNUQxMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVcLovjZli6c4IjxJLuR0YX6mv cPKXDRBi/D5QKoVTbg6EFUdXKMw/ew6eXgUGfC1MdnmfqMNjayrgk8usKYdPSqmn jdzYYOuV5wjjwvNKXa9+TDb9yGHG7aq1XyuiQ9Y0arQDbAMV0uhWwLcFmgf6oLX5 47QcZk+UP0qljp5pyPLlVsNDUMjnxI0g3yJx6dLiQerVFqbc5TGb5V/y+/x4wY6y tiV5Ey7apoGvg+Pa1O3ZKw1kA4MSIWxrcj29Mr27T57DXCj2y/C20AwA6JwyiI0T x5Zufc3f9fU1uTtPSnoOEY0E2+yK1L0jocP9Yps25K6dhUnvjdAnYngTHp0lAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUSOtvbuy41+i2CQqIzAY9RcS10RowHwYDVR0j BBgwFoAUu+0U6Xk5Bewepc4QqgPEl9c3sRUwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzNhOTdmNzYxODAzODRkMjNhNzIxZDQ2YWUwZTUwNjhmLzAv QkJFRDE0RTk3OTM5MDVFQzFFQTVDRTEwQUEwM0M0OTdENzM3QjExNS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9CQkVEMTRFOTc5MzkwNUVDMUVBNUNFMTBBQTAzQzQ5 N0Q3MzdCMTE1LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzNhOTdm NzYxODAzODRkMjNhNzIxZDQ2YWUwZTUwNjhmLzAvQkJFRDE0RTk3OTM5MDVFQzFF QTVDRTEwQUEwM0M0OTdENzM3QjExNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAJ22j70+jNI2ldxjhrsa gczvsevoQCH9iuXbbjkd126KJ+whXrAIQxPTPqX8+cX4ulPzM9Mjqr5QfgEbZvJG AjZtlJ7E25xo7uvNWDFtqH4maXWNiksOFx8p14lFRleESKltbNnybVlKPsIIYswu PSjG+RLjH8fdXScIu0owPQv60MPIU5B3rjy9NPwr5eH6mBx9DHYCI0rDZw+HV/ND tmQzKdjvjuYPVIz+ixLYzc3yceDqfl5nF/ChOiNCZKfJoMvTHa33tWUexsPEDutd cv/3FrLTaUKLy9IVxAN9+MzG53ll2o7TDyNkuSOfpTSjG4NrSyC7c6ghdWIqrIf2 Rpc= -----END CERTIFICATE-----Generated at Sat Jun 7 04:15:35 2025 by rpki-client