$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_6f516320509b4d2d93ef2d5610f5f230/0/F5D54631B7091E1F4B8B02E70FF76F073F8B2320.mft File: F5D54631B7091E1F4B8B02E70FF76F073F8B2320.mft (raw, json) Hash identifier: LKvuBHUT/rV7nda0fpfYwmReC8SAGA17NgloIW6JX0c= Subject key identifier: FF:97:21:F0:64:F1:90:74:FC:61:B5:14:4D:45:80:41:8A:C9:4B:BD Authority key identifier: F5:D5:46:31:B7:09:1E:1F:4B:8B:02:E7:0F:F7:6F:07:3F:8B:23:20 Certificate issuer: /CN=F5D54631B7091E1F4B8B02E70FF76F073F8B2320 Certificate serial: 1ED84F523BC50EB02E5010BE7AC6F34D0CCF007C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/F5D54631B7091E1F4B8B02E70FF76F073F8B2320.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_6f516320509b4d2d93ef2d5610f5f230/0/F5D54631B7091E1F4B8B02E70FF76F073F8B2320.mft Manifest number: 4B Signing time: Fri 04 Apr 2025 09:20:44 +0000 Manifest this update: Fri 04 Apr 2025 09:15:42 +0000 Manifest next update: Sat 05 Apr 2025 11:17:42 +0000 Files and hashes: 1: F5D54631B7091E1F4B8B02E70FF76F073F8B2320.crl (hash: P7X49+vxMLU3bPIdw/JZ9DDvaiRvWwmKDYuIAej4ovk=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_6f516320509b4d2d93ef2d5610f5f230/0/F5D54631B7091E1F4B8B02E70FF76F073F8B2320.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_6f516320509b4d2d93ef2d5610f5f230/0/F5D54631B7091E1F4B8B02E70FF76F073F8B2320.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/F5D54631B7091E1F4B8B02E70FF76F073F8B2320.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Apr 2025 10:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:d8:4f:52:3b:c5:0e:b0:2e:50:10:be:7a:c6:f3:4d:0c:cf:00:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F5D54631B7091E1F4B8B02E70FF76F073F8B2320 Validity Not Before: Apr 4 09:15:42 2025 GMT Not After : Apr 5 11:17:42 2025 GMT Subject: CN=FF9721F064F19074FC61B5144D4580418AC94BBD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:94:73:45:a2:d8:67:74:8a:2e:72:51:d7:43: a3:f0:0e:ff:96:55:08:e8:e7:5e:c3:d2:6b:fb:ba: 25:79:c7:e1:3c:92:bf:d3:3b:2f:1e:ed:25:af:1e: d4:c5:86:fc:9a:c4:1e:42:6b:ca:0a:b7:aa:13:f4: e3:b0:35:06:01:3e:9d:16:84:a1:bf:1a:91:ed:2d: e1:d4:d2:8f:ad:bb:69:e7:11:6e:d4:bc:14:ee:92: 58:d8:07:a9:de:87:7e:e5:63:ec:1b:e5:cc:9f:45: 8c:32:79:ab:5f:90:22:de:d2:3d:13:d3:de:cb:06: 54:fc:8a:38:51:f7:a5:16:4a:f7:c2:12:22:d9:a5: 4a:88:2e:e3:f2:69:bf:89:56:cd:cf:28:92:b1:7f: 49:11:0f:dd:54:c7:11:30:30:67:f1:28:9d:7d:9e: ba:ad:f8:33:c3:d4:84:d0:de:98:19:9d:18:80:11: a5:2f:5d:87:e5:ff:10:76:ef:43:1d:93:9d:a7:b3: 6e:36:94:92:2a:52:59:31:eb:e5:63:71:28:3b:df: 0b:42:ec:cd:20:73:57:03:7f:70:81:c8:fd:b3:99: 4f:e2:ff:40:6d:f7:2f:3e:a4:ce:84:b3:7a:10:7a: 02:d6:45:be:94:a9:10:8c:71:a1:f6:cd:16:b9:a2: 6e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:97:21:F0:64:F1:90:74:FC:61:B5:14:4D:45:80:41:8A:C9:4B:BD X509v3 Authority Key Identifier: keyid:F5:D5:46:31:B7:09:1E:1F:4B:8B:02:E7:0F:F7:6F:07:3F:8B:23:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_6f516320509b4d2d93ef2d5610f5f230/0/F5D54631B7091E1F4B8B02E70FF76F073F8B2320.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/F5D54631B7091E1F4B8B02E70FF76F073F8B2320.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_6f516320509b4d2d93ef2d5610f5f230/0/F5D54631B7091E1F4B8B02E70FF76F073F8B2320.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:ce:35:62:bd:00:3b:40:b8:eb:72:48:64:b1:da:dc:a9:dc: 94:c2:e6:3d:d5:21:08:f8:be:61:dc:53:47:41:60:54:41:0e: e0:c9:fd:de:45:6b:76:e9:f0:1c:1c:f8:c1:8b:9b:68:02:b0: ac:38:39:e1:b3:ce:93:c7:7c:eb:0d:37:a6:54:6e:b0:31:5b: 49:3b:d0:27:40:1f:ae:0d:08:e9:56:8b:45:e8:16:2c:92:a9: 0d:f8:ff:d5:f2:4a:87:06:09:00:02:f0:42:1d:3a:57:dd:ce: 33:aa:c3:5e:52:cd:da:77:c5:dc:3f:e5:30:36:9f:2d:c3:f7: a9:95:da:76:cd:78:e4:a3:28:6f:4f:15:c4:70:0d:6a:2a:14: c6:e5:b0:73:5d:77:70:5c:fa:49:57:b9:0e:2c:7c:8f:82:fc: 6b:6e:de:b7:49:3a:78:31:6a:8e:66:af:1f:1e:94:5f:81:1a: e3:26:b2:dd:59:31:33:86:ce:23:fb:75:0c:2f:fc:0c:aa:92: 7f:87:74:03:17:51:69:f0:50:92:a9:df:73:7d:cc:c0:ff:f8: c7:40:0d:9d:69:82:c4:7f:f4:71:fb:1a:05:a3:38:c4:5a:1a: 3f:80:1d:51:2d:f7:ef:13:0a:50:54:e8:12:90:44:ff:0b:19: 78:55:8b:6f -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUHthPUjvFDrAuUBC+esbzTQzPAHwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjVENTQ2MzFCNzA5MUUxRjRCOEIwMkU3MEZGNzZGMDcz RjhCMjMyMDAeFw0yNTA0MDQwOTE1NDJaFw0yNTA0MDUxMTE3NDJaMDMxMTAvBgNV BAMTKEZGOTcyMUYwNjRGMTkwNzRGQzYxQjUxNDRENDU4MDQxOEFDOTRCQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7lHNFothndIouclHXQ6PwDv+W VQjo517D0mv7uiV5x+E8kr/TOy8e7SWvHtTFhvyaxB5Ca8oKt6oT9OOwNQYBPp0W hKG/GpHtLeHU0o+tu2nnEW7UvBTukljYB6neh37lY+wb5cyfRYwyeatfkCLe0j0T 097LBlT8ijhR96UWSvfCEiLZpUqILuPyab+JVs3PKJKxf0kRD91UxxEwMGfxKJ19 nrqt+DPD1ITQ3pgZnRiAEaUvXYfl/xB270Mdk52ns242lJIqUlkx6+VjcSg73wtC 7M0gc1cDf3CByP2zmU/i/0Bt9y8+pM6Es3oQegLWRb6UqRCMcaH2zRa5om5vAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQU/5ch8GTxkHT8YbUUTUWAQYrJS70wHwYDVR0j BBgwFoAU9dVGMbcJHh9LiwLnD/dvBz+LIyAwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzZmNTE2MzIwNTA5YjRkMmQ5M2VmMmQ1NjEwZjVmMjMwLzAv RjVENTQ2MzFCNzA5MUUxRjRCOEIwMkU3MEZGNzZGMDczRjhCMjMyMC5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9GNUQ1NDYzMUI3MDkxRTFGNEI4QjAyRTcwRkY3NkYw NzNGOEIyMzIwLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzZmNTE2 MzIwNTA5YjRkMmQ5M2VmMmQ1NjEwZjVmMjMwLzAvRjVENTQ2MzFCNzA5MUUxRjRC OEIwMkU3MEZGNzZGMDczRjhCMjMyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBALzONWK9ADtAuOtySGSx 2typ3JTC5j3VIQj4vmHcU0dBYFRBDuDJ/d5Fa3bp8Bwc+MGLm2gCsKw4OeGzzpPH fOsNN6ZUbrAxW0k70CdAH64NCOlWi0XoFiySqQ34/9XySocGCQAC8EIdOlfdzjOq w15Szdp3xdw/5TA2ny3D96mV2nbNeOSjKG9PFcRwDWoqFMblsHNdd3Bc+klXuQ4s fI+C/Gtu3rdJOngxao5mrx8elF+BGuMmst1ZMTOGziP7dQwv/Ayqkn+HdAMXUWnw UJKp33N9zMD/+MdADZ1pgsR/9HH7GgWjOMRaGj+AHVEt9+8TClBU6BKQRP8LGXhV i28= -----END CERTIFICATE-----Generated at Fri Apr 4 18:02:34 2025 by rpki-client