$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/0/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.mft File: 10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.mft (raw, json) Hash identifier: XK7oVZDTmUgn852WBol/jDuwp3OaYZdw7/vYspbNn3A= Subject key identifier: 72:79:7C:47:E0:E1:84:AB:03:E8:17:87:C5:D2:93:CE:AF:76:3A:F0 Authority key identifier: 10:B5:13:39:C5:BC:CE:70:9C:B6:D6:A1:49:21:AA:F4:C6:BA:6A:42 Certificate issuer: /CN=10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42 Certificate serial: 18BEE710B9639ECEE868AE33D292E536041764E1 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/0/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.mft Manifest number: 016B Signing time: Fri 04 Apr 2025 04:30:30 +0000 Manifest this update: Fri 04 Apr 2025 04:25:28 +0000 Manifest next update: Sat 05 Apr 2025 04:39:28 +0000 Files and hashes: 1: 10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.crl (hash: W0G1aCO+dBzHzcZHpiBjVDMQtJMmVzVGHCf/Y5IND/8=) 2: 326131313a663263303a666666303a3a2f34382d3438203d3e20323033303234.roa (hash: Z89FcbCrTMtBscw2h5W75CHunYRsXIbcHNYXASnkLN0=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/0/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/0/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Apr 2025 04:39:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:be:e7:10:b9:63:9e:ce:e8:68:ae:33:d2:92:e5:36:04:17:64:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42 Validity Not Before: Apr 4 04:25:28 2025 GMT Not After : Apr 5 04:39:28 2025 GMT Subject: CN=72797C47E0E184AB03E81787C5D293CEAF763AF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:2e:47:ea:9a:a2:34:7d:09:0c:97:dc:4c:67: e3:5a:0e:2e:53:e8:6c:8c:d1:9a:95:49:7a:6e:36: 86:8e:ab:7f:fe:9b:48:f4:43:c9:1e:19:66:44:77: 1c:af:36:46:45:31:04:db:36:d3:db:3c:84:79:61: 7a:d1:b5:ec:87:b3:ec:94:d5:c1:71:1f:d7:ec:d2: 86:de:06:38:75:fa:8d:61:ab:c6:f2:6c:17:23:7e: 63:b5:71:5c:79:d3:c6:f8:2f:31:c4:9b:20:7b:8c: 69:09:be:7c:38:90:30:7d:53:8a:dc:c0:cf:96:4a: ec:df:82:8f:b9:ad:60:9d:03:a3:55:e9:91:f9:88: 8f:3b:d1:bf:44:05:cb:88:2d:89:ec:c8:79:4d:13: b9:d6:98:52:da:2a:79:85:a9:6f:9f:53:ea:91:a4: af:2b:ce:0c:97:45:88:69:ae:bd:86:76:6e:fe:08: 71:05:af:48:02:3a:f2:3c:93:33:47:e5:5b:ce:e7: 3c:ee:34:1e:4d:19:35:13:e8:36:e3:21:a1:c9:b6: 78:08:26:a1:27:71:dc:97:9c:6f:19:00:be:ef:05: fa:23:d5:fa:f9:c4:d0:f2:0b:db:44:b5:5e:f0:ee: 9a:ca:60:38:17:cd:17:66:cc:09:e4:a9:b8:36:92: 38:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:79:7C:47:E0:E1:84:AB:03:E8:17:87:C5:D2:93:CE:AF:76:3A:F0 X509v3 Authority Key Identifier: keyid:10:B5:13:39:C5:BC:CE:70:9C:B6:D6:A1:49:21:AA:F4:C6:BA:6A:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/0/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/0/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:89:c9:58:34:5c:c5:29:70:55:2c:65:46:73:76:f3:f0:41: 76:0b:25:6c:45:f7:38:78:26:71:e5:d4:ec:0a:e2:15:38:24: 58:5c:1e:be:ec:ba:0e:7d:5e:7e:d1:00:9e:57:0a:02:f9:50: 63:eb:9b:10:45:2e:2d:22:ac:25:56:58:26:8e:9a:8c:15:c5: ba:98:16:f1:c1:fd:f3:c0:76:9d:7a:7b:49:8a:20:f5:3a:46: 77:7c:30:02:8c:32:6a:91:ae:7d:05:c2:54:ad:96:85:54:fa: 23:c1:6b:e0:12:5f:43:a0:e6:9a:f8:14:1b:24:ba:0c:5c:36: 3c:ea:cc:b8:fd:ff:71:18:0b:48:59:28:67:d2:a9:3c:bc:71: a4:fd:bc:49:61:27:dc:53:9d:28:95:33:bf:46:eb:b9:c7:cd: 6f:72:60:1b:1d:c3:9a:51:b9:e0:40:70:f6:76:2b:f3:a6:71: 68:2b:91:33:97:85:cb:8f:7e:07:27:8d:54:c4:14:89:ca:ff: 1f:f6:5a:54:21:8c:51:92:8a:1b:ee:02:64:fe:d7:bc:ba:45: 3f:51:98:4f:24:8c:49:4b:fa:3c:34:f7:4b:b1:0b:e5:ea:9e: 51:02:96:28:b9:79:b2:5f:56:f1:eb:39:61:a5:de:bf:1e:8c: ca:4c:f6:f5 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUGL7nELljns7oaK4z0pLlNgQXZOEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBCNTEzMzlDNUJDQ0U3MDlDQjZENkExNDkyMUFBRjRD NkJBNkE0MjAeFw0yNTA0MDQwNDI1MjhaFw0yNTA0MDUwNDM5MjhaMDMxMTAvBgNV BAMTKDcyNzk3QzQ3RTBFMTg0QUIwM0U4MTc4N0M1RDI5M0NFQUY3NjNBRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXLkfqmqI0fQkMl9xMZ+NaDi5T 6GyM0ZqVSXpuNoaOq3/+m0j0Q8keGWZEdxyvNkZFMQTbNtPbPIR5YXrRteyHs+yU 1cFxH9fs0obeBjh1+o1hq8bybBcjfmO1cVx508b4LzHEmyB7jGkJvnw4kDB9U4rc wM+WSuzfgo+5rWCdA6NV6ZH5iI870b9EBcuILYnsyHlNE7nWmFLaKnmFqW+fU+qR pK8rzgyXRYhprr2Gdm7+CHEFr0gCOvI8kzNH5VvO5zzuNB5NGTUT6DbjIaHJtngI JqEncdyXnG8ZAL7vBfoj1fr5xNDyC9tEtV7w7prKYDgXzRdmzAnkqbg2kjhPAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUcnl8R+DhhKsD6BeHxdKTzq92OvAwHwYDVR0j BBgwFoAUELUTOcW8znCcttahSSGq9Ma6akIwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2VjYjM0YjA0NjkxZTQ5OTVhNjA2OTUyZTgzNmI0ZWNjLzAv MTBCNTEzMzlDNUJDQ0U3MDlDQjZENkExNDkyMUFBRjRDNkJBNkE0Mi5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xMEI1MTMzOUM1QkNDRTcwOUNCNkQ2QTE0OTIxQUFG NEM2QkE2QTQyLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2VjYjM0 YjA0NjkxZTQ5OTVhNjA2OTUyZTgzNmI0ZWNjLzAvMTBCNTEzMzlDNUJDQ0U3MDlD QjZENkExNDkyMUFBRjRDNkJBNkE0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBALGJyVg0XMUpcFUsZUZz dvPwQXYLJWxF9zh4JnHl1OwK4hU4JFhcHr7sug59Xn7RAJ5XCgL5UGPrmxBFLi0i rCVWWCaOmowVxbqYFvHB/fPAdp16e0mKIPU6Rnd8MAKMMmqRrn0FwlStloVU+iPB a+ASX0Og5pr4FBskugxcNjzqzLj9/3EYC0hZKGfSqTy8caT9vElhJ9xTnSiVM79G 67nHzW9yYBsdw5pRueBAcPZ2K/OmcWgrkTOXhcuPfgcnjVTEFInK/x/2WlQhjFGS ihvuAmT+17y6RT9RmE8kjElL+jw090uxC+XqnlEClii5ebJfVvHrOWGl3r8ejMpM 9vU= -----END CERTIFICATE-----Generated at Fri Apr 4 17:18:24 2025 by rpki-client