$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3eafc32b-ec03-4319-b1c6-3c1c4727e06f/0/27851163005F59C06E35A8FD365F96356EB34971.mft File: 27851163005F59C06E35A8FD365F96356EB34971.mft (raw, json) Hash identifier: OgGVrKdsjZRhLYiHqH7SPweMrkRaUeqHB7oe+MkQ7ko= Subject key identifier: 15:DE:D2:A3:80:55:AB:C3:F9:B2:5A:BB:04:03:B5:78:CA:4D:24:6D Authority key identifier: 27:85:11:63:00:5F:59:C0:6E:35:A8:FD:36:5F:96:35:6E:B3:49:71 Certificate issuer: /CN=27851163005f59c06e35a8fd365f96356eb34971 Certificate serial: 4C96DFF0DCB0D51F9DF535C22772A06A436D11A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J4URYwBfWcBuNaj9Nl-WNW6zSXE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3eafc32b-ec03-4319-b1c6-3c1c4727e06f/0/27851163005F59C06E35A8FD365F96356EB34971.mft Manifest number: 0C Signing time: Sat 01 Feb 2025 10:00:53 +0000 Manifest this update: Sat 01 Feb 2025 09:55:53 +0000 Manifest next update: Sun 02 Feb 2025 13:44:53 +0000 Files and hashes: 1: 323030313a3637633a6638633a3a2f34382d3438203d3e20323132383535.roa (hash: prfcq9YIMAg2ry1iZCXqsMkFnalbT+MPZdyoUmwmw6g=) 2: 27851163005F59C06E35A8FD365F96356EB34971.crl (hash: i3lRW2Gxz00dRKW0KXNPyHIZPKtVeyOe4dJdLR9myLc=) 3: AS212855.asa (hash: OIBa9pzg4z2URzGEkFm1iyeVKG7dPNF4TLmJ39jX/rk=) 4: 39332e3135372e3134302e302f32342d3234203d3e20323132383535.roa (hash: hdp9Cx8dMbvUUOjRrqy1XfSIVtsUnXM8OZnay1usHT4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3eafc32b-ec03-4319-b1c6-3c1c4727e06f/0/27851163005F59C06E35A8FD365F96356EB34971.crl rsync://rsync.paas.rpki.ripe.net/repository/3eafc32b-ec03-4319-b1c6-3c1c4727e06f/0/27851163005F59C06E35A8FD365F96356EB34971.mft rsync://rpki.ripe.net/repository/DEFAULT/J4URYwBfWcBuNaj9Nl-WNW6zSXE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 02 Feb 2025 13:44:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:96:df:f0:dc:b0:d5:1f:9d:f5:35:c2:27:72:a0:6a:43:6d:11:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27851163005f59c06e35a8fd365f96356eb34971 Validity Not Before: Feb 1 09:55:53 2025 GMT Not After : Feb 2 13:44:53 2025 GMT Subject: CN=15DED2A38055ABC3F9B25ABB0403B578CA4D246D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:26:f0:81:dc:ab:cc:e6:4b:58:a0:54:99:15: d6:5c:7d:1c:53:c5:73:1d:71:b8:87:95:9c:fb:ee: 73:f0:91:2c:1b:2f:43:d3:4a:bb:8a:ab:1c:41:ae: 32:d5:c2:dc:88:19:7e:6b:58:00:21:d6:6c:d4:d1: 16:d3:d0:88:65:0b:1b:8b:e7:07:93:c5:38:d0:e4: 0e:0e:23:61:31:71:44:ca:8e:be:d7:48:af:04:78: d2:bf:20:6a:07:ff:a7:c4:a9:4d:bc:89:56:4b:9e: 5b:84:33:3c:ce:8a:a6:c1:29:9c:fe:23:11:cd:32: f7:92:84:f2:3c:80:34:41:97:cb:8b:e6:2f:2c:f1: c4:c2:62:44:c8:46:2d:8d:08:df:f9:6a:1d:98:5e: e3:fe:ea:92:a4:66:ec:31:c7:48:5a:5f:38:dc:3d: f1:80:aa:3b:9f:cb:79:63:a6:4b:a5:9f:bb:27:68: 4e:53:46:ed:01:52:57:cb:79:a8:ee:68:69:ab:3d: 02:bf:75:0b:d6:ef:85:bd:7c:1e:ad:f6:a7:4a:eb: fc:9d:dc:34:7e:01:71:22:68:19:96:6d:00:9b:16: 13:e5:f6:46:3c:6c:6e:fb:59:5c:c4:d0:aa:c8:c5: 60:4f:cc:8f:c0:e6:e1:1f:f5:e5:6d:7c:dc:60:b6: 25:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:DE:D2:A3:80:55:AB:C3:F9:B2:5A:BB:04:03:B5:78:CA:4D:24:6D X509v3 Authority Key Identifier: keyid:27:85:11:63:00:5F:59:C0:6E:35:A8:FD:36:5F:96:35:6E:B3:49:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3eafc32b-ec03-4319-b1c6-3c1c4727e06f/0/27851163005F59C06E35A8FD365F96356EB34971.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4URYwBfWcBuNaj9Nl-WNW6zSXE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3eafc32b-ec03-4319-b1c6-3c1c4727e06f/0/27851163005F59C06E35A8FD365F96356EB34971.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:fa:29:9f:d7:c3:0d:7d:44:9c:a8:60:94:46:ec:1f:0e:78: 70:70:5a:1e:2c:49:43:f3:e3:97:04:e1:4a:01:04:12:ec:ea: 35:f9:53:07:42:1e:49:56:25:ca:4a:e5:5c:73:7e:9d:ce:68: 70:2c:af:ed:2a:5d:6c:7e:15:a0:bf:6d:26:85:41:84:08:49: fb:d6:c2:82:1f:5b:95:ad:99:95:db:09:29:3b:9e:f0:2b:6d: e2:c7:56:4f:8a:57:fb:03:39:66:64:ad:57:b1:4c:f6:cf:f2: 5d:f8:f3:02:5c:d8:15:a0:60:87:85:67:36:ab:f2:56:d0:dd: 62:00:2e:ff:ff:2f:aa:d9:9a:5c:92:07:75:25:57:94:13:4e: d5:9d:9c:47:f9:ce:62:ba:61:9b:14:98:2c:02:5c:46:ff:2b: 0c:47:11:c0:d6:8c:fc:fb:2f:da:dc:3f:58:42:8c:00:4b:14: 91:ee:16:b5:2a:6f:ba:ac:42:d2:29:94:37:9f:69:93:a6:ea: bf:2d:15:c9:0c:81:d6:9a:fa:6d:b4:02:b3:f5:95:86:3e:0e: 0b:f7:ff:9d:1c:0e:3f:1b:44:9f:01:bc:45:b7:52:a7:08:1d: f0:a4:bb:bf:79:78:93:8b:6e:13:16:da:38:d4:fe:fc:9c:09: 42:56:fa:98 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUTJbf8Nyw1R+d9TXCJ3KgakNtEaYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjc4NTExNjMwMDVmNTljMDZlMzVhOGZkMzY1Zjk2MzU2 ZWIzNDk3MTAeFw0yNTAyMDEwOTU1NTNaFw0yNTAyMDIxMzQ0NTNaMDMxMTAvBgNV BAMTKDE1REVEMkEzODA1NUFCQzNGOUIyNUFCQjA0MDNCNTc4Q0E0RDI0NkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbJvCB3KvM5ktYoFSZFdZcfRxT xXMdcbiHlZz77nPwkSwbL0PTSruKqxxBrjLVwtyIGX5rWAAh1mzU0RbT0IhlCxuL 5weTxTjQ5A4OI2ExcUTKjr7XSK8EeNK/IGoH/6fEqU28iVZLnluEMzzOiqbBKZz+ IxHNMveShPI8gDRBl8uL5i8s8cTCYkTIRi2NCN/5ah2YXuP+6pKkZuwxx0haXzjc PfGAqjufy3ljpkuln7snaE5TRu0BUlfLeajuaGmrPQK/dQvW74W9fB6t9qdK6/yd 3DR+AXEiaBmWbQCbFhPl9kY8bG77WVzE0KrIxWBPzI/A5uEf9eVtfNxgtiX9AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUFd7So4BVq8P5slq7BAO1eMpNJG0wHwYDVR0j BBgwFoAUJ4URYwBfWcBuNaj9Nl+WNW6zSXEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvM2VhZmMzMmItZWMwMy00MzE5LWIxYzYtM2MxYzQ3Mjdl MDZmLzAvMjc4NTExNjMwMDVGNTlDMDZFMzVBOEZEMzY1Rjk2MzU2RUIzNDk3MS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0o0VVJZd0JmV2NCdU5hajlObC1XTlc2 elNYRS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zZWFmYzMyYi1l YzAzLTQzMTktYjFjNi0zYzFjNDcyN2UwNmYvMC8yNzg1MTE2MzAwNUY1OUMwNkUz NUE4RkQzNjVGOTYzNTZFQjM0OTcxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACvopn9fDDX1EnKhglEbs Hw54cHBaHixJQ/PjlwThSgEEEuzqNflTB0IeSVYlykrlXHN+nc5ocCyv7SpdbH4V oL9tJoVBhAhJ+9bCgh9bla2ZldsJKTue8Ctt4sdWT4pX+wM5ZmStV7FM9s/yXfjz AlzYFaBgh4VnNqvyVtDdYgAu//8vqtmaXJIHdSVXlBNO1Z2cR/nOYrphmxSYLAJc Rv8rDEcRwNaM/Psv2tw/WEKMAEsUke4WtSpvuqxC0imUN59pk6bqvy0VyQyB1pr6 bbQCs/WVhj4OC/f/nRwOPxtEnwG8RbdSpwgd8KS7v3l4k4tuExbaONT+/JwJQlb6 mA== -----END CERTIFICATE-----Generated at Sun Feb 2 07:04:05 2025 by rpki-client