$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_de53339823204f748d440d2cf026dda9/0/F794DFA009EA90B4CBBB340DE4C255446986D7C6.mft File: F794DFA009EA90B4CBBB340DE4C255446986D7C6.mft (raw, json) Hash identifier: Q//8dhtAq4ut6O1T5oo0ZGt9kJJciihh/JsYUDuXMgQ= Subject key identifier: 55:E5:15:CC:A8:50:00:F5:E1:54:93:B7:07:95:61:D6:1F:27:A9:A9 Authority key identifier: F7:94:DF:A0:09:EA:90:B4:CB:BB:34:0D:E4:C2:55:44:69:86:D7:C6 Certificate issuer: /CN=F794DFA009EA90B4CBBB340DE4C255446986D7C6 Certificate serial: 4AF84DEBE0B68D5401F0AAA0766134679BBB9D94 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/F794DFA009EA90B4CBBB340DE4C255446986D7C6.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_de53339823204f748d440d2cf026dda9/0/F794DFA009EA90B4CBBB340DE4C255446986D7C6.mft Manifest number: 01C5 Signing time: Thu 12 Jun 2025 14:19:35 +0000 Manifest this update: Thu 12 Jun 2025 14:14:33 +0000 Manifest next update: Fri 13 Jun 2025 16:52:33 +0000 Files and hashes: 1: F794DFA009EA90B4CBBB340DE4C255446986D7C6.crl (hash: 9bSd9jfgY9fe1hj7tP9/yXNLZoBvB6HdUIvSUWa3j1E=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_de53339823204f748d440d2cf026dda9/0/F794DFA009EA90B4CBBB340DE4C255446986D7C6.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_de53339823204f748d440d2cf026dda9/0/F794DFA009EA90B4CBBB340DE4C255446986D7C6.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/F794DFA009EA90B4CBBB340DE4C255446986D7C6.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 13 Jun 2025 09:37:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:f8:4d:eb:e0:b6:8d:54:01:f0:aa:a0:76:61:34:67:9b:bb:9d:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F794DFA009EA90B4CBBB340DE4C255446986D7C6 Validity Not Before: Jun 12 14:14:33 2025 GMT Not After : Jun 13 16:52:33 2025 GMT Subject: CN=55E515CCA85000F5E15493B7079561D61F27A9A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e0:d8:06:67:5a:6f:d9:c7:35:d0:a1:40:9b: ca:9a:68:a1:ed:80:b5:6a:39:eb:76:65:49:4e:0c: 6c:0e:0f:77:8d:52:d4:8a:fb:07:58:d7:c7:b4:5f: 1b:98:83:09:82:58:3d:6d:07:0d:28:db:88:6a:4b: cf:a7:76:16:1f:1c:57:35:ac:b6:5c:33:64:31:b3: be:ac:45:6c:f4:ea:15:d3:10:c2:d1:d1:2a:9e:65: ab:4b:23:f2:db:1e:c1:7f:ae:6d:91:a5:f6:19:29: ea:ba:c1:05:c1:2e:f0:84:2b:64:2f:c7:b5:6d:20: 5e:7a:a8:fb:6b:90:2d:7b:e7:25:07:50:78:21:b3: 26:70:cc:72:c7:a8:b8:74:e2:79:f8:b3:e0:c8:f8: 77:d3:f0:2c:94:ce:15:cc:38:f0:f3:b4:61:03:5e: 81:a1:c2:4a:3f:65:4f:d8:50:65:a0:17:fe:46:a1: b4:4b:0e:24:b7:be:fd:1e:dd:f4:ea:83:62:57:83: c9:bb:01:b5:3a:3b:57:8f:11:f9:07:71:2f:26:18: 7b:29:62:1f:6a:e4:82:88:aa:56:41:f5:16:9d:08: a5:75:7e:7e:f6:1b:4a:60:3d:11:aa:ae:62:30:8e: b3:b9:eb:90:1e:44:01:cf:45:c3:71:52:33:bc:04: 53:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:E5:15:CC:A8:50:00:F5:E1:54:93:B7:07:95:61:D6:1F:27:A9:A9 X509v3 Authority Key Identifier: keyid:F7:94:DF:A0:09:EA:90:B4:CB:BB:34:0D:E4:C2:55:44:69:86:D7:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_de53339823204f748d440d2cf026dda9/0/F794DFA009EA90B4CBBB340DE4C255446986D7C6.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/F794DFA009EA90B4CBBB340DE4C255446986D7C6.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_de53339823204f748d440d2cf026dda9/0/F794DFA009EA90B4CBBB340DE4C255446986D7C6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:38:b7:c9:4f:09:30:93:d1:f5:16:1e:cf:86:60:34:0e:b8: 81:dc:9a:0a:0e:f1:55:b3:4e:78:ee:42:aa:49:dd:13:1e:84: 95:b9:ac:fa:0e:78:ec:d0:40:8b:c2:1c:0c:1e:43:0c:de:6c: 56:a8:ab:f2:56:13:7f:42:05:2b:01:27:c2:ea:26:d7:82:96: 9b:49:69:58:0b:f5:e2:ed:40:02:3d:0f:15:93:52:6a:86:89: 6d:ca:b4:60:44:ba:1b:8d:48:f8:ec:60:68:a7:96:b9:3e:6a: 81:4d:06:36:49:07:c3:c4:6c:eb:0c:17:4e:09:e4:c9:f1:94: 5b:7c:bb:1a:ad:f1:b0:2d:c6:1d:2e:50:b5:29:95:42:8e:bb: d7:1f:e4:02:bb:ca:79:b9:63:52:17:80:ff:2e:01:9c:66:2f: c5:fd:96:52:55:e2:49:77:21:f6:85:b1:4f:66:c7:82:be:07: 89:09:4e:c5:b7:1e:b6:a1:54:c1:e6:1c:d8:41:0d:70:a3:63: 8a:4b:77:9c:1a:45:1c:c1:79:20:69:c8:04:3c:1f:90:c5:c3: 23:62:7c:86:e7:ec:f3:11:4a:ef:f2:b8:2e:1c:0b:ec:27:79: 7f:ba:1c:4a:55:12:23:2d:46:f0:b9:4d:6d:81:80:26:6b:1b: 3c:f6:01:9b -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUSvhN6+C2jVQB8KqgdmE0Z5u7nZQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjc5NERGQTAwOUVBOTBCNENCQkIzNDBERTRDMjU1NDQ2 OTg2RDdDNjAeFw0yNTA2MTIxNDE0MzNaFw0yNTA2MTMxNjUyMzNaMDMxMTAvBgNV BAMTKDU1RTUxNUNDQTg1MDAwRjVFMTU0OTNCNzA3OTU2MUQ2MUYyN0E5QTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo4NgGZ1pv2cc10KFAm8qaaKHt gLVqOet2ZUlODGwOD3eNUtSK+wdY18e0XxuYgwmCWD1tBw0o24hqS8+ndhYfHFc1 rLZcM2Qxs76sRWz06hXTEMLR0SqeZatLI/LbHsF/rm2RpfYZKeq6wQXBLvCEK2Qv x7VtIF56qPtrkC175yUHUHghsyZwzHLHqLh04nn4s+DI+HfT8CyUzhXMOPDztGED XoGhwko/ZU/YUGWgF/5GobRLDiS3vv0e3fTqg2JXg8m7AbU6O1ePEfkHcS8mGHsp Yh9q5IKIqlZB9RadCKV1fn72G0pgPRGqrmIwjrO565AeRAHPRcNxUjO8BFPRAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUVeUVzKhQAPXhVJO3B5Vh1h8nqakwHwYDVR0j BBgwFoAU95TfoAnqkLTLuzQN5MJVRGmG18YwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2RlNTMzMzk4MjMyMDRmNzQ4ZDQ0MGQyY2YwMjZkZGE5LzAv Rjc5NERGQTAwOUVBOTBCNENCQkIzNDBERTRDMjU1NDQ2OTg2RDdDNi5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9GNzk0REZBMDA5RUE5MEI0Q0JCQjM0MERFNEMyNTU0 NDY5ODZEN0M2LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2RlNTMz Mzk4MjMyMDRmNzQ4ZDQ0MGQyY2YwMjZkZGE5LzAvRjc5NERGQTAwOUVBOTBCNENC QkIzNDBERTRDMjU1NDQ2OTg2RDdDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBABY4t8lPCTCT0fUWHs+G YDQOuIHcmgoO8VWzTnjuQqpJ3RMehJW5rPoOeOzQQIvCHAweQwzebFaoq/JWE39C BSsBJ8LqJteClptJaVgL9eLtQAI9DxWTUmqGiW3KtGBEuhuNSPjsYGinlrk+aoFN BjZJB8PEbOsMF04J5MnxlFt8uxqt8bAtxh0uULUplUKOu9cf5AK7ynm5Y1IXgP8u AZxmL8X9llJV4kl3IfaFsU9mx4K+B4kJTsW3HrahVMHmHNhBDXCjY4pLd5waRRzB eSBpyAQ8H5DFwyNifIbn7PMRSu/yuC4cC+wneX+6HEpVEiMtRvC5TW2BgCZrGzz2 AZs= -----END CERTIFICATE-----Generated at Fri Jun 13 00:53:36 2025 by rpki-client