$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft File: 4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft (raw, json) Hash identifier: ZIPH7uC4kKBFTdgg+O/2ESNve0kKApG5o4eOaPay9Xs= Subject key identifier: 16:44:EE:14:39:7C:83:81:95:B2:B4:A9:9D:BE:02:B1:CC:69:89:3C Authority key identifier: 4B:A4:51:1F:4B:81:C5:65:CE:D3:E7:0B:30:20:FB:D0:ED:05:56:2F Certificate issuer: /CN=4BA4511F4B81C565CED3E70B3020FBD0ED05562F Certificate serial: 7A0F0FA1904069B10DBE821D2CCE5819F84CF1E8 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft Manifest number: 01C4 Signing time: Thu 05 Jun 2025 22:21:07 +0000 Manifest this update: Thu 05 Jun 2025 22:16:04 +0000 Manifest next update: Sat 07 Jun 2025 01:02:04 +0000 Files and hashes: 1: 4BA4511F4B81C565CED3E70B3020FBD0ED05562F.crl (hash: j4bpqnaTpLkswgnWtQei7bTnynqv9Dxu1pl91/DN0Uw=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Jun 2025 01:02:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:0f:0f:a1:90:40:69:b1:0d:be:82:1d:2c:ce:58:19:f8:4c:f1:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BA4511F4B81C565CED3E70B3020FBD0ED05562F Validity Not Before: Jun 5 22:16:04 2025 GMT Not After : Jun 7 01:02:04 2025 GMT Subject: CN=1644EE14397C838195B2B4A99DBE02B1CC69893C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:cf:e5:55:97:b4:74:10:c1:38:40:ae:1c:5f: ec:5d:a4:5c:54:a1:ce:14:b1:c3:c5:44:bd:96:38: 76:ae:a1:17:9d:97:cf:b5:a8:e9:90:94:79:5b:93: 64:c8:78:a4:12:99:ea:1b:a2:c4:2a:4f:62:01:b8: 41:47:d3:f2:49:da:f3:b0:60:c0:95:ab:35:38:43: 41:00:d2:83:1a:13:10:c9:f4:cd:25:bf:94:49:a1: 24:40:0e:8f:62:c9:ff:bf:dc:0a:e7:55:3c:cd:f7: 4a:19:4a:7f:97:a3:23:89:6d:fc:97:e5:9b:39:87: d3:fe:fa:b2:93:e7:b5:6f:a4:6d:6e:99:87:74:da: ae:f6:09:d7:6f:af:23:97:28:5d:ea:0d:ff:2b:c8: 82:6a:8c:c4:52:2c:82:cf:98:9d:1e:ea:96:2e:33: 77:3e:ca:6f:09:da:01:e1:60:dc:1e:60:68:c1:c8: 9e:2f:64:86:22:ba:1c:0d:47:ba:5c:61:7e:5f:26: c6:11:fb:61:df:23:c4:b3:36:05:1c:f9:f9:69:55: 5f:e6:d9:a8:96:13:31:a9:43:84:a1:bb:a0:cb:7a: 28:c8:ed:03:85:1c:47:e8:c1:93:ba:b6:c6:96:54: 52:a1:46:c8:ff:bf:a3:2b:80:56:07:c2:bc:63:cc: 86:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:44:EE:14:39:7C:83:81:95:B2:B4:A9:9D:BE:02:B1:CC:69:89:3C X509v3 Authority Key Identifier: keyid:4B:A4:51:1F:4B:81:C5:65:CE:D3:E7:0B:30:20:FB:D0:ED:05:56:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:3b:1b:16:21:12:a2:5e:1d:8a:e7:5b:3a:2b:5d:50:1e:40: e1:a0:cb:4a:a9:45:da:4f:3b:32:5e:91:5b:ec:af:1c:d3:72: fb:20:3d:f3:d6:aa:40:24:76:6a:91:97:d4:94:f4:9c:29:65: 40:54:37:3e:5e:01:c1:0e:20:95:69:b5:95:04:42:ed:ff:9f: e0:c9:2c:86:1c:77:d0:0e:9b:3f:5f:55:fe:c1:c7:6a:b6:dd: b2:04:67:0b:9e:9c:ff:d0:b1:85:18:5e:09:63:d0:07:d6:77: b8:55:ed:b2:2c:e5:93:bb:2b:a6:96:2e:be:f0:2c:01:8f:97: 06:e8:2d:a6:3f:da:f1:c4:19:09:05:35:22:ad:00:93:84:e8: db:0b:3c:e5:f5:ed:3f:48:8a:4b:86:e0:92:65:cd:57:7e:0b: 8f:d0:b1:06:4e:56:0a:59:b6:c5:29:ed:8e:84:da:25:c6:9e: 78:3e:da:7a:7b:a2:96:22:6a:77:c6:79:2b:ac:67:9a:60:12: 44:fb:5b:bd:ad:d7:39:ec:19:fc:3d:12:6d:72:a4:9b:7a:aa: 10:ad:99:47:e3:d6:4e:e8:b4:24:90:e5:45:61:7e:49:36:e9: ed:08:bb:b5:30:2b:60:3a:80:19:99:35:d7:da:4c:f0:f8:79: 29:76:c9:3c -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUeg8PoZBAabENvoIdLM5YGfhM8egwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJBNDUxMUY0QjgxQzU2NUNFRDNFNzBCMzAyMEZCRDBF RDA1NTYyRjAeFw0yNTA2MDUyMjE2MDRaFw0yNTA2MDcwMTAyMDRaMDMxMTAvBgNV BAMTKDE2NDRFRTE0Mzk3QzgzODE5NUIyQjRBOTlEQkUwMkIxQ0M2OTg5M0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtz+VVl7R0EME4QK4cX+xdpFxU oc4UscPFRL2WOHauoRedl8+1qOmQlHlbk2TIeKQSmeobosQqT2IBuEFH0/JJ2vOw YMCVqzU4Q0EA0oMaExDJ9M0lv5RJoSRADo9iyf+/3ArnVTzN90oZSn+XoyOJbfyX 5Zs5h9P++rKT57VvpG1umYd02q72CddvryOXKF3qDf8ryIJqjMRSLILPmJ0e6pYu M3c+ym8J2gHhYNweYGjByJ4vZIYiuhwNR7pcYX5fJsYR+2HfI8SzNgUc+flpVV/m 2aiWEzGpQ4Shu6DLeijI7QOFHEfowZO6tsaWVFKhRsj/v6MrgFYHwrxjzIazAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUFkTuFDl8g4GVsrSpnb4CscxpiTwwHwYDVR0j BBgwFoAUS6RRH0uBxWXO0+cLMCD70O0FVi8wDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzk3M2U3YTk4YTcxYjQ5ZmZiYjIyYjc2ZWQ1ZjEyOWUyLzAv NEJBNDUxMUY0QjgxQzU2NUNFRDNFNzBCMzAyMEZCRDBFRDA1NTYyRi5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy80QkE0NTExRjRCODFDNTY1Q0VEM0U3MEIzMDIwRkJE MEVEMDU1NjJGLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzk3M2U3 YTk4YTcxYjQ5ZmZiYjIyYjc2ZWQ1ZjEyOWUyLzAvNEJBNDUxMUY0QjgxQzU2NUNF RDNFNzBCMzAyMEZCRDBFRDA1NTYyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAHw7GxYhEqJeHYrnWzor XVAeQOGgy0qpRdpPOzJekVvsrxzTcvsgPfPWqkAkdmqRl9SU9JwpZUBUNz5eAcEO IJVptZUEQu3/n+DJLIYcd9AOmz9fVf7Bx2q23bIEZwuenP/QsYUYXglj0AfWd7hV 7bIs5ZO7K6aWLr7wLAGPlwboLaY/2vHEGQkFNSKtAJOE6NsLPOX17T9IikuG4JJl zVd+C4/QsQZOVgpZtsUp7Y6E2iXGnng+2np7opYianfGeSusZ5pgEkT7W72t1zns Gfw9Em1ypJt6qhCtmUfj1k7otCSQ5UVhfkk26e0Iu7UwK2A6gBmZNdfaTPD4eSl2 yTw= -----END CERTIFICATE-----Generated at Fri Jun 6 17:42:21 2025 by rpki-client