$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft File: 16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft (raw, json) Hash identifier: i1j09md+aN4EWvUx2xN7h7ENMZYNUzJS8HeFYrqCpPo= Subject key identifier: 22:3F:3D:68:BA:98:2C:33:74:BB:A6:19:78:98:08:6F:1A:74:94:B4 Authority key identifier: 16:58:9C:DE:5D:C3:33:9C:E7:BB:D4:BB:1C:7C:14:64:74:97:C9:56 Certificate issuer: /CN=16589CDE5DC3339CE7BBD4BB1C7C14647497C956 Certificate serial: 757F80AB4724EC98AAE2215293B1B1D3D8B9D9CF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft Manifest number: 01C0 Signing time: Sun 08 Jun 2025 12:52:52 +0000 Manifest this update: Sun 08 Jun 2025 12:47:50 +0000 Manifest next update: Mon 09 Jun 2025 14:56:50 +0000 Files and hashes: 1: 16589CDE5DC3339CE7BBD4BB1C7C14647497C956.crl (hash: dFOLf4nm2oTlZSnMEMz/DJirbdWV6G0+nLh/f3wA9a0=) 2: 326131313a663263303a666666623a3a2f34382d3438203d3e20323033313035.roa (hash: CRdzdHWSYcmiZSUenz1Z8qs+SDNJcoSUoxr755stLH4=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 09 Jun 2025 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:7f:80:ab:47:24:ec:98:aa:e2:21:52:93:b1:b1:d3:d8:b9:d9:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16589CDE5DC3339CE7BBD4BB1C7C14647497C956 Validity Not Before: Jun 8 12:47:50 2025 GMT Not After : Jun 9 14:56:50 2025 GMT Subject: CN=223F3D68BA982C3374BBA6197898086F1A7494B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:d7:e0:34:6f:ea:4f:61:19:29:53:52:08:67: cb:53:4a:d1:f8:6a:a4:06:6f:12:f1:a5:11:62:9c: 62:fc:17:d0:fc:72:67:aa:ee:ce:a9:17:5e:b0:17: dc:9c:c9:ce:b8:b1:61:44:d4:ff:ea:aa:e3:fa:da: 86:34:0f:86:03:47:eb:94:d1:11:d9:db:57:19:d6: 5e:09:66:1a:d4:f5:ad:c1:b8:6b:2e:21:93:ce:d1: 78:87:f3:7a:74:6e:47:10:c9:c7:89:22:1e:4f:d2: 6e:d1:80:14:63:85:70:03:e3:f9:0a:b9:8f:d2:22: 1b:a2:05:cc:a8:86:63:92:bf:b3:74:91:66:03:ea: 1d:ff:9f:63:1c:f7:49:56:63:f4:7a:06:1c:7a:e9: 17:4b:e4:d4:20:2c:fa:3d:ca:29:b5:0e:3d:c3:39: 7b:3b:cc:3d:68:98:04:52:b8:8f:fb:59:1f:91:47: 15:15:ad:51:36:ea:4e:38:14:2b:38:58:ab:5d:2d: cc:c7:ef:cf:6c:bd:ed:2b:c8:17:0b:81:30:1d:3a: 31:87:c7:1e:e6:70:42:bf:f1:46:84:37:2a:41:3c: e6:9f:a3:2d:30:c5:ca:77:d9:ec:49:76:d3:1f:d6: 9c:6e:2f:fe:08:36:cf:b0:48:cc:be:68:2b:af:e8: c1:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:3F:3D:68:BA:98:2C:33:74:BB:A6:19:78:98:08:6F:1A:74:94:B4 X509v3 Authority Key Identifier: keyid:16:58:9C:DE:5D:C3:33:9C:E7:BB:D4:BB:1C:7C:14:64:74:97:C9:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:43:a9:5e:43:52:71:f1:2f:75:13:35:00:7c:e2:56:53:1c: dc:70:15:e9:95:0b:da:19:9a:ee:81:86:ba:01:55:5d:75:b0: a7:38:c3:6e:06:28:a9:f3:f3:5b:fc:3a:e4:71:13:e3:fc:67: 17:f2:d6:b1:98:0a:0f:ee:bf:55:df:ac:e0:7f:1d:92:df:51: 34:c3:55:61:bc:8b:46:f8:b4:f4:60:8e:86:89:0d:f3:48:73: 85:45:52:5a:f5:b5:96:db:92:06:ed:7c:42:8c:6a:69:48:a9: 07:19:df:b5:a0:f6:5b:6d:05:ab:1d:59:e1:cd:16:f4:ce:6a: 61:97:84:9a:c5:a1:02:e4:97:95:a8:3c:fe:92:4b:7d:27:c9: 28:f3:e2:4e:c4:30:d6:aa:ae:6b:7e:a8:d4:01:20:4a:57:8e: a8:c1:c1:16:62:da:f1:5a:e2:20:79:53:4c:9d:2c:f6:2a:e0: 30:ea:fe:77:ac:91:5b:f9:36:0d:79:a0:51:a8:15:25:fc:7c: 9a:87:82:15:d7:38:e2:61:54:6d:0d:b9:c8:d1:a8:0b:f7:4d: f2:83:47:3d:1f:08:df:25:8e:d9:8b:a4:f5:00:4b:27:42:76: ff:7c:8d:0a:6d:1b:49:71:97:79:cd:06:80:3a:10:62:db:37: 7e:19:ab:74 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUdX+Aq0ck7Jiq4iFSk7Gx09i52c8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY1ODlDREU1REMzMzM5Q0U3QkJENEJCMUM3QzE0NjQ3 NDk3Qzk1NjAeFw0yNTA2MDgxMjQ3NTBaFw0yNTA2MDkxNDU2NTBaMDMxMTAvBgNV BAMTKDIyM0YzRDY4QkE5ODJDMzM3NEJCQTYxOTc4OTgwODZGMUE3NDk0QjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX1+A0b+pPYRkpU1IIZ8tTStH4 aqQGbxLxpRFinGL8F9D8cmeq7s6pF16wF9ycyc64sWFE1P/qquP62oY0D4YDR+uU 0RHZ21cZ1l4JZhrU9a3BuGsuIZPO0XiH83p0bkcQyceJIh5P0m7RgBRjhXAD4/kK uY/SIhuiBcyohmOSv7N0kWYD6h3/n2Mc90lWY/R6Bhx66RdL5NQgLPo9yim1Dj3D OXs7zD1omARSuI/7WR+RRxUVrVE26k44FCs4WKtdLczH789sve0ryBcLgTAdOjGH xx7mcEK/8UaENypBPOafoy0wxcp32exJdtMf1pxuL/4INs+wSMy+aCuv6MEBAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUIj89aLqYLDN0u6YZeJgIbxp0lLQwHwYDVR0j BBgwFoAUFlic3l3DM5znu9S7HHwUZHSXyVYwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzNkYjgxNjNmNjkyMjQ3OThhYzJjNDYzYzBiY2E0ZDZiLzAv MTY1ODlDREU1REMzMzM5Q0U3QkJENEJCMUM3QzE0NjQ3NDk3Qzk1Ni5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xNjU4OUNERTVEQzMzMzlDRTdCQkQ0QkIxQzdDMTQ2 NDc0OTdDOTU2LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzNkYjgx NjNmNjkyMjQ3OThhYzJjNDYzYzBiY2E0ZDZiLzAvMTY1ODlDREU1REMzMzM5Q0U3 QkJENEJCMUM3QzE0NjQ3NDk3Qzk1Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBABhDqV5DUnHxL3UTNQB8 4lZTHNxwFemVC9oZmu6BhroBVV11sKc4w24GKKnz81v8OuRxE+P8Zxfy1rGYCg/u v1XfrOB/HZLfUTTDVWG8i0b4tPRgjoaJDfNIc4VFUlr1tZbbkgbtfEKMamlIqQcZ 37Wg9lttBasdWeHNFvTOamGXhJrFoQLkl5WoPP6SS30nySjz4k7EMNaqrmt+qNQB IEpXjqjBwRZi2vFa4iB5U0ydLPYq4DDq/neskVv5Ng15oFGoFSX8fJqHghXXOOJh VG0NucjRqAv3TfKDRz0fCN8ljtmLpPUASydCdv98jQptG0lxl3nNBoA6EGLbN34Z q3Q= -----END CERTIFICATE-----Generated at Sun Jun 8 19:56:27 2025 by rpki-client