$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/1/75D5C2ECD30F680DB5D16987F457FEB45D8BA970.mft File: 75D5C2ECD30F680DB5D16987F457FEB45D8BA970.mft (raw, json) Hash identifier: D4TOdDhubxHD7lsBi5QjX5Y8PaF27INmhIqyPrBsVZA= Subject key identifier: EC:4C:99:05:A4:34:E8:91:41:27:A2:C1:56:5B:9D:59:49:EF:77:7C Authority key identifier: 75:D5:C2:EC:D3:0F:68:0D:B5:D1:69:87:F4:57:FE:B4:5D:8B:A9:70 Certificate issuer: /CN=75D5C2ECD30F680DB5D16987F457FEB45D8BA970 Certificate serial: 78732E2184B986834DDC5501D2AB65AA79483F9D Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/75D5C2ECD30F680DB5D16987F457FEB45D8BA970.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/1/75D5C2ECD30F680DB5D16987F457FEB45D8BA970.mft Manifest number: 0125 Signing time: Thu 03 Apr 2025 17:29:36 +0000 Manifest this update: Thu 03 Apr 2025 17:24:36 +0000 Manifest next update: Fri 04 Apr 2025 20:00:36 +0000 Files and hashes: 1: 326130363a396634313a3a2f33322d3438203d3e20323135303835.roa (hash: ZKnqXWpL638YuDEQpZ7F3g5bqELtKVJQB4+caqr2NiE=) 2: 75D5C2ECD30F680DB5D16987F457FEB45D8BA970.crl (hash: SYEzwPwBECFUHlTwNICNVn8EKVLTgc/VQPoqKWtadBk=) 3: 38332e3134322e33312e302f32342d3234203d3e20323135303835.roa (hash: DeNLRbWhS9WKIEvlMBYaR+2p0F2qMHWNHV7i4if0F4Q=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/1/75D5C2ECD30F680DB5D16987F457FEB45D8BA970.crl rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/1/75D5C2ECD30F680DB5D16987F457FEB45D8BA970.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/75D5C2ECD30F680DB5D16987F457FEB45D8BA970.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 04 Apr 2025 20:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:73:2e:21:84:b9:86:83:4d:dc:55:01:d2:ab:65:aa:79:48:3f:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75D5C2ECD30F680DB5D16987F457FEB45D8BA970 Validity Not Before: Apr 3 17:24:36 2025 GMT Not After : Apr 4 20:00:36 2025 GMT Subject: CN=EC4C9905A434E8914127A2C1565B9D5949EF777C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d5:32:e1:94:1f:c4:52:8d:95:80:98:f4:74: 66:f9:47:a7:19:ca:2c:26:54:7f:ec:ad:fa:df:ae: de:a3:1f:39:2e:16:f3:64:95:31:a2:80:6a:3f:ff: d7:7d:26:fa:c0:00:d2:bb:b1:fe:ce:c3:ea:5e:80: 5c:2e:c2:c5:1a:0f:19:f9:1f:ac:17:d3:5c:82:bb: fe:ed:3f:4c:4c:5a:6a:e0:33:3e:4d:1a:ee:61:ee: ec:67:dc:2a:5e:e0:d9:04:d9:7e:05:d0:94:25:db: 86:93:f1:dd:1d:8b:92:4a:96:e8:c8:b0:28:39:18: 8b:7d:ba:94:fe:18:e5:fa:70:66:74:85:20:13:65: 99:ff:a7:14:3f:b7:c5:c0:67:34:ff:78:dc:e7:27: ab:c5:6b:bc:92:13:bf:f1:3d:70:4a:b1:8b:30:f8: fd:3d:93:2e:cd:0d:fa:c2:d3:5f:42:a9:41:d6:c9: d4:15:65:13:36:8b:3b:18:84:88:e9:2d:d4:81:35: 1f:2d:cb:ba:91:01:8d:f8:3d:b7:12:58:aa:79:cb: 9c:49:2f:28:f1:22:21:64:57:dd:b0:c5:be:a7:c4: e7:a3:bb:23:45:45:f3:ce:17:c1:ab:eb:36:4c:1b: 7f:b8:cd:46:97:d3:da:37:d0:29:03:82:83:68:7c: 01:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:4C:99:05:A4:34:E8:91:41:27:A2:C1:56:5B:9D:59:49:EF:77:7C X509v3 Authority Key Identifier: keyid:75:D5:C2:EC:D3:0F:68:0D:B5:D1:69:87:F4:57:FE:B4:5D:8B:A9:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/1/75D5C2ECD30F680DB5D16987F457FEB45D8BA970.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/75D5C2ECD30F680DB5D16987F457FEB45D8BA970.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/1/75D5C2ECD30F680DB5D16987F457FEB45D8BA970.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:1f:8a:d2:84:f7:30:bc:99:f1:53:5d:ad:16:30:7c:bf:84: c7:23:ba:7b:6a:16:eb:dc:73:8b:d3:88:82:ea:07:11:e4:4d: bd:51:d0:1d:11:9e:c0:24:9b:c3:35:8c:29:47:6d:19:ea:67: 41:03:67:67:7b:32:b2:76:f8:5e:18:73:12:8f:11:84:75:87: 10:10:4c:54:47:6d:0a:91:99:60:09:65:87:a1:c9:ec:34:11: fd:7a:58:ac:92:ff:f2:d0:41:bf:3d:ef:3f:bf:af:9b:99:bc: b9:cf:2f:fd:3d:5d:27:d2:3e:9d:fd:3c:bc:c8:91:1e:f0:72: a9:1a:58:36:3a:e3:6f:a1:3a:13:46:a4:f7:0d:ed:ab:2d:08: 3f:8d:a3:41:d3:e2:8c:77:c2:42:75:b2:7c:79:9e:b3:c2:17: d3:67:51:31:87:8f:25:12:07:bb:02:9f:53:31:85:fd:c0:02: 88:32:3a:af:de:cc:d6:e7:31:f9:8e:1b:51:1e:b1:c0:c0:2b: 8b:52:c2:55:7b:a7:e1:63:76:e1:95:aa:f3:30:0b:e7:fe:32: 52:08:bb:c6:6e:da:e1:a1:01:5e:d9:ad:44:40:2a:fa:fa:0c: 13:07:43:13:5a:7e:fe:f9:d5:86:17:60:98:27:8c:ec:ff:13: bd:1f:05:36 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUeHMuIYS5hoNN3FUB0qtlqnlIP50wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzVENUMyRUNEMzBGNjgwREI1RDE2OTg3RjQ1N0ZFQjQ1 RDhCQTk3MDAeFw0yNTA0MDMxNzI0MzZaFw0yNTA0MDQyMDAwMzZaMDMxMTAvBgNV BAMTKEVDNEM5OTA1QTQzNEU4OTE0MTI3QTJDMTU2NUI5RDU5NDlFRjc3N0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI1TLhlB/EUo2VgJj0dGb5R6cZ yiwmVH/srfrfrt6jHzkuFvNklTGigGo//9d9JvrAANK7sf7Ow+pegFwuwsUaDxn5 H6wX01yCu/7tP0xMWmrgMz5NGu5h7uxn3Cpe4NkE2X4F0JQl24aT8d0di5JKlujI sCg5GIt9upT+GOX6cGZ0hSATZZn/pxQ/t8XAZzT/eNznJ6vFa7ySE7/xPXBKsYsw +P09ky7NDfrC019CqUHWydQVZRM2izsYhIjpLdSBNR8ty7qRAY34PbcSWKp5y5xJ LyjxIiFkV92wxb6nxOejuyNFRfPOF8Gr6zZMG3+4zUaX09o30CkDgoNofAHBAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQU7EyZBaQ06JFBJ6LBVludWUnvd3wwHwYDVR0j BBgwFoAUddXC7NMPaA210WmH9Ff+tF2LqXAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzAxMTk0NGQtN2ViMy00ZjYzLWExNTktY2ZmMDJjMDI2 YWJmLzEvNzVENUMyRUNEMzBGNjgwREI1RDE2OTg3RjQ1N0ZFQjQ1RDhCQTk3MC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvNzVENUMyRUNEMzBGNjgwREI1RDE2OTg3RjQ1N0ZFQjQ1RDhC QTk3MC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMDExOTQ0ZC03 ZWIzLTRmNjMtYTE1OS1jZmYwMmMwMjZhYmYvMS83NUQ1QzJFQ0QzMEY2ODBEQjVE MTY5ODdGNDU3RkVCNDVEOEJBOTcwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIR+K0oT3MLyZ8VNdrRYw fL+ExyO6e2oW69xzi9OIguoHEeRNvVHQHRGewCSbwzWMKUdtGepnQQNnZ3sysnb4 XhhzEo8RhHWHEBBMVEdtCpGZYAllh6HJ7DQR/XpYrJL/8tBBvz3vP7+vm5m8uc8v /T1dJ9I+nf08vMiRHvByqRpYNjrjb6E6E0ak9w3tqy0IP42jQdPijHfCQnWyfHme s8IX02dRMYePJRIHuwKfUzGF/cACiDI6r97M1ucx+Y4bUR6xwMAri1LCVXun4WN2 4ZWq8zAL5/4yUgi7xm7a4aEBXtmtREAq+voMEwdDE1p+/vnVhhdgmCeM7P8TvR8F Ng== -----END CERTIFICATE-----Generated at Fri Apr 4 05:56:33 2025 by rpki-client