$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft File: 16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft (raw, json) Hash identifier: gC9eFzLRu8H+gDIuBM11E4zsg3kd+ujqYugsEfv3Obc= Subject key identifier: DB:8D:DB:BA:1A:38:D8:D7:2C:FC:67:5C:ED:14:3C:06:ED:A1:39:80 Authority key identifier: 16:58:9C:DE:5D:C3:33:9C:E7:BB:D4:BB:1C:7C:14:64:74:97:C9:56 Certificate issuer: /CN=16589CDE5DC3339CE7BBD4BB1C7C14647497C956 Certificate serial: 320009D1B0D83579E1F4BE53D678FEFF4EB51B6C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft Manifest number: 016A Signing time: Fri 04 Apr 2025 14:17:55 +0000 Manifest this update: Fri 04 Apr 2025 14:12:53 +0000 Manifest next update: Sat 05 Apr 2025 17:21:53 +0000 Files and hashes: 1: 326131313a663263303a666666623a3a2f34382d3438203d3e20323033313035.roa (hash: CRdzdHWSYcmiZSUenz1Z8qs+SDNJcoSUoxr755stLH4=) 2: 16589CDE5DC3339CE7BBD4BB1C7C14647497C956.crl (hash: 7T1KPp0KYoMFEtgIaFjTmRIa8k0v4OFDxMtsx3X6kBA=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Apr 2025 10:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:00:09:d1:b0:d8:35:79:e1:f4:be:53:d6:78:fe:ff:4e:b5:1b:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16589CDE5DC3339CE7BBD4BB1C7C14647497C956 Validity Not Before: Apr 4 14:12:53 2025 GMT Not After : Apr 5 17:21:53 2025 GMT Subject: CN=DB8DDBBA1A38D8D72CFC675CED143C06EDA13980 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:7d:28:5c:e6:6e:f5:22:2c:31:6c:78:7c:be: 79:4b:7a:42:e7:bb:05:5c:d2:d3:6a:bd:23:33:c7: 42:ec:ba:81:63:b8:d8:b7:3e:59:2b:b5:1c:2b:3e: a1:a4:8d:90:65:6e:3e:43:62:19:ca:d3:58:9d:34: fd:0c:1d:f8:64:ca:cd:ab:7b:b2:96:5d:20:18:ce: 5d:9f:eb:72:34:3b:fc:b7:ef:b4:43:00:44:f7:b1: d6:ce:38:82:a3:90:b1:6a:3e:f7:45:37:a3:b3:71: 3b:86:c9:aa:5e:b1:84:b5:0c:ff:f1:b2:d8:a3:d5: ba:2d:d5:94:c7:9d:a2:38:f2:8d:7b:83:d0:13:ef: 58:ce:b3:53:0f:07:c6:c8:6e:48:46:09:74:f3:1f: c5:da:f2:2f:8d:8e:cd:61:32:1c:84:85:28:2d:fd: f4:f0:42:ec:49:e8:5a:4b:7e:96:3e:cb:48:4f:93: 9e:a8:f3:20:81:af:1e:e8:9a:f3:e7:0b:90:f3:5a: de:28:b5:f1:46:c6:79:64:fe:8a:63:de:70:db:0a: 4c:44:2c:07:e8:81:6b:02:09:42:32:81:d3:61:cb: 9c:31:d7:bb:a1:f9:1e:e5:73:62:77:b2:8e:58:e4: ef:90:03:92:5f:b0:76:24:fa:5c:fb:cc:a2:13:71: 75:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:8D:DB:BA:1A:38:D8:D7:2C:FC:67:5C:ED:14:3C:06:ED:A1:39:80 X509v3 Authority Key Identifier: keyid:16:58:9C:DE:5D:C3:33:9C:E7:BB:D4:BB:1C:7C:14:64:74:97:C9:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:f9:29:31:e3:c8:24:75:76:7d:1c:e8:a4:de:33:00:a3:7a: d1:f2:30:4d:63:f4:f1:fe:b3:7f:51:37:a8:14:03:72:b8:ba: 9a:e3:ae:88:f3:c1:5c:cf:5e:2f:93:9f:2a:a1:62:79:a6:a8: a3:7c:07:de:bc:09:83:c4:f8:29:c4:65:37:da:d4:ea:9f:4e: f4:91:8a:66:45:1f:17:e8:44:28:3b:6b:1d:32:ee:51:e0:15: f8:86:90:66:a4:86:5d:cc:b9:e1:c5:18:f0:55:34:50:45:19: 34:2d:70:b5:7c:65:fa:64:07:a4:68:3d:f3:55:9d:cd:64:94: 75:75:2d:39:00:5d:b7:aa:76:04:06:aa:75:64:cd:fa:c5:d9: ee:cf:be:a0:15:d4:b1:a9:b1:d0:a4:fb:fd:07:ce:33:ce:37: 64:c2:1f:c6:16:a1:c4:b2:ba:90:87:f3:e7:eb:dc:bd:ad:f5: c6:44:57:20:e0:12:f5:64:99:56:8f:f0:c6:ad:03:2c:3e:64: 37:4d:b9:d9:96:57:df:0e:61:e3:75:fc:b7:1f:65:09:9f:40: a3:16:0a:6f:2b:4a:df:9b:ec:76:f1:4f:bf:89:20:f6:99:0f: e4:43:b1:85:93:c1:6b:b7:70:05:69:58:62:24:60:0c:4e:1f: 97:09:13:78 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUMgAJ0bDYNXnh9L5T1nj+/061G2wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY1ODlDREU1REMzMzM5Q0U3QkJENEJCMUM3QzE0NjQ3 NDk3Qzk1NjAeFw0yNTA0MDQxNDEyNTNaFw0yNTA0MDUxNzIxNTNaMDMxMTAvBgNV BAMTKERCOEREQkJBMUEzOEQ4RDcyQ0ZDNjc1Q0VEMTQzQzA2RURBMTM5ODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtfShc5m71IiwxbHh8vnlLekLn uwVc0tNqvSMzx0LsuoFjuNi3PlkrtRwrPqGkjZBlbj5DYhnK01idNP0MHfhkys2r e7KWXSAYzl2f63I0O/y377RDAET3sdbOOIKjkLFqPvdFN6OzcTuGyapesYS1DP/x stij1bot1ZTHnaI48o17g9AT71jOs1MPB8bIbkhGCXTzH8Xa8i+Njs1hMhyEhSgt /fTwQuxJ6FpLfpY+y0hPk56o8yCBrx7omvPnC5DzWt4otfFGxnlk/opj3nDbCkxE LAfogWsCCUIygdNhy5wx17uh+R7lc2J3so5Y5O+QA5JfsHYk+lz7zKITcXWzAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQU243buho42Ncs/Gdc7RQ8Bu2hOYAwHwYDVR0j BBgwFoAUFlic3l3DM5znu9S7HHwUZHSXyVYwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzNkYjgxNjNmNjkyMjQ3OThhYzJjNDYzYzBiY2E0ZDZiLzAv MTY1ODlDREU1REMzMzM5Q0U3QkJENEJCMUM3QzE0NjQ3NDk3Qzk1Ni5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xNjU4OUNERTVEQzMzMzlDRTdCQkQ0QkIxQzdDMTQ2 NDc0OTdDOTU2LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzNkYjgx NjNmNjkyMjQ3OThhYzJjNDYzYzBiY2E0ZDZiLzAvMTY1ODlDREU1REMzMzM5Q0U3 QkJENEJCMUM3QzE0NjQ3NDk3Qzk1Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAEj5KTHjyCR1dn0c6KTe MwCjetHyME1j9PH+s39RN6gUA3K4uprjrojzwVzPXi+TnyqhYnmmqKN8B968CYPE +CnEZTfa1OqfTvSRimZFHxfoRCg7ax0y7lHgFfiGkGakhl3MueHFGPBVNFBFGTQt cLV8ZfpkB6RoPfNVnc1klHV1LTkAXbeqdgQGqnVkzfrF2e7PvqAV1LGpsdCk+/0H zjPON2TCH8YWocSyupCH8+fr3L2t9cZEVyDgEvVkmVaP8MatAyw+ZDdNudmWV98O YeN1/LcfZQmfQKMWCm8rSt+b7HbxT7+JIPaZD+RDsYWTwWu3cAVpWGIkYAxOH5cJ E3g= -----END CERTIFICATE-----Generated at Fri Apr 4 17:37:58 2025 by rpki-client