$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/2/04F7D8E671AC7D0A0FEEB74E4BE9C9C13EB2954C.mft File: 04F7D8E671AC7D0A0FEEB74E4BE9C9C13EB2954C.mft (raw, json) Hash identifier: WFysmC3xX3197INo95by0lSHmpZwZzNaoSbLfqgVLoY= Subject key identifier: 1F:58:AE:42:E2:E2:31:28:3F:21:86:77:63:8D:9B:1C:4A:DC:8E:4F Authority key identifier: 04:F7:D8:E6:71:AC:7D:0A:0F:EE:B7:4E:4B:E9:C9:C1:3E:B2:95:4C Certificate issuer: /CN=04F7D8E671AC7D0A0FEEB74E4BE9C9C13EB2954C Certificate serial: 2CEF0942FA8268A437F5F974AAAB2DA6A5E73608 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/04F7D8E671AC7D0A0FEEB74E4BE9C9C13EB2954C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/2/04F7D8E671AC7D0A0FEEB74E4BE9C9C13EB2954C.mft Manifest number: 013B Signing time: Fri 04 Apr 2025 15:31:09 +0000 Manifest this update: Fri 04 Apr 2025 15:26:09 +0000 Manifest next update: Sat 05 Apr 2025 19:30:09 +0000 Files and hashes: 1: 04F7D8E671AC7D0A0FEEB74E4BE9C9C13EB2954C.crl (hash: endNCVkexsMZlscawXfiZqFQNRloa8Z7Up8gjuPCsSo=) 2: 326130353a646663313a383230303a3a2f34302d3438203d3e20323136343532.roa (hash: RXK+W3w1YvQu9ahIRwMIryYcMgQG39a2/hB4IK34E74=) 3: 326130353a646663313a383236303a3a2f34342d3438203d3e203331383938.roa (hash: BmKTbRMoiut+8VNSufvgCLPuOQU03tX8DldEeEoDX0o=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/2/04F7D8E671AC7D0A0FEEB74E4BE9C9C13EB2954C.crl rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/2/04F7D8E671AC7D0A0FEEB74E4BE9C9C13EB2954C.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/04F7D8E671AC7D0A0FEEB74E4BE9C9C13EB2954C.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Apr 2025 19:30:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:ef:09:42:fa:82:68:a4:37:f5:f9:74:aa:ab:2d:a6:a5:e7:36:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04F7D8E671AC7D0A0FEEB74E4BE9C9C13EB2954C Validity Not Before: Apr 4 15:26:09 2025 GMT Not After : Apr 5 19:30:09 2025 GMT Subject: CN=1F58AE42E2E231283F218677638D9B1C4ADC8E4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:7f:01:87:93:92:e5:d1:e2:21:e8:c2:ab:1a: e3:48:d1:c6:77:34:1a:64:fa:dd:96:e8:1d:21:7a: 58:18:3b:08:c9:76:ac:6b:4b:56:42:21:5e:8d:25: 14:d9:e6:21:d8:94:02:f5:c2:f8:a9:59:23:c0:bc: e1:18:89:a1:cc:48:d9:eb:c3:aa:9b:97:74:85:b9: d8:02:79:a3:78:95:e7:21:6b:27:00:3e:f9:b1:b3: 45:43:f7:23:33:43:81:60:e2:21:a2:b2:cf:48:7a: 3e:a6:a8:68:46:5c:62:1b:f8:8a:b6:d0:d2:f8:8c: 02:8d:45:ee:e9:66:d5:2a:c8:fc:13:73:43:ed:3b: 9f:f6:4b:98:8f:4d:92:f9:a5:f6:7a:a5:2e:09:83: e3:ce:5e:28:d7:92:23:b2:00:a3:48:d8:1f:70:04: 2c:2c:54:36:81:96:c8:68:5b:ea:44:30:ea:f2:7b: df:36:b6:f7:cf:83:a3:b4:c2:74:30:3e:dc:df:ac: f9:78:98:8f:ea:c7:d1:06:85:e5:ce:71:bb:33:11: c6:2c:70:ea:7b:b4:c8:bf:a0:6a:3c:e9:a8:14:69: 98:a1:5a:f6:bf:d0:22:b0:96:d5:13:56:49:8b:88: 2b:6f:d9:2b:c4:7e:e4:29:d4:1a:ba:ba:45:1a:b2: e1:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:58:AE:42:E2:E2:31:28:3F:21:86:77:63:8D:9B:1C:4A:DC:8E:4F X509v3 Authority Key Identifier: keyid:04:F7:D8:E6:71:AC:7D:0A:0F:EE:B7:4E:4B:E9:C9:C1:3E:B2:95:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/2/04F7D8E671AC7D0A0FEEB74E4BE9C9C13EB2954C.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/04F7D8E671AC7D0A0FEEB74E4BE9C9C13EB2954C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/2/04F7D8E671AC7D0A0FEEB74E4BE9C9C13EB2954C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:d8:c3:a7:7d:15:4c:ce:91:d4:8c:26:d3:df:e8:f4:c7:99: 2c:44:e4:65:37:7f:af:6f:94:1b:3d:66:9e:f4:4b:79:ef:f0: 94:c9:58:d8:e6:8a:fb:f4:71:99:33:fd:df:cb:fb:74:41:d8: a4:09:9c:b3:76:d9:e6:89:d3:36:3c:69:e9:5c:f6:13:ed:41: 50:43:db:76:cc:b4:60:7a:c1:62:2e:c2:39:eb:f1:eb:9b:cb: 40:bc:b1:52:0d:5f:f7:18:9b:9e:e2:ba:d6:c2:67:43:03:d2: 43:63:2e:be:0e:f8:39:3d:2b:d5:95:f7:49:79:a7:b0:e8:b2: f5:b8:30:4a:e8:91:e3:c8:c1:0b:cd:af:51:89:e9:4b:5e:9d: fb:cb:dc:cf:b0:c1:a2:9d:51:69:a4:29:92:2d:8d:a9:a2:01: 89:70:1b:31:90:b5:91:5f:b8:37:76:01:8d:d8:22:5d:2e:3c: cd:4c:1a:07:bf:f3:ce:bb:da:4a:60:13:3c:10:28:9a:50:8c: 5b:8f:1b:7b:c1:99:51:eb:76:b0:5e:08:33:91:e4:b6:e7:79: 23:04:c7:f3:e7:82:5c:f5:de:3e:2a:34:14:6b:3d:43:04:5b: 0a:83:f0:98:83:03:3f:2e:7a:f2:66:f2:36:32:55:53:cf:7f: db:cf:50:07 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIULO8JQvqCaKQ39fl0qqstpqXnNggwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDRGN0Q4RTY3MUFDN0QwQTBGRUVCNzRFNEJFOUM5QzEz RUIyOTU0QzAeFw0yNTA0MDQxNTI2MDlaFw0yNTA0MDUxOTMwMDlaMDMxMTAvBgNV BAMTKDFGNThBRTQyRTJFMjMxMjgzRjIxODY3NzYzOEQ5QjFDNEFEQzhFNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3fwGHk5Ll0eIh6MKrGuNI0cZ3 NBpk+t2W6B0helgYOwjJdqxrS1ZCIV6NJRTZ5iHYlAL1wvipWSPAvOEYiaHMSNnr w6qbl3SFudgCeaN4lechaycAPvmxs0VD9yMzQ4Fg4iGiss9Iej6mqGhGXGIb+Iq2 0NL4jAKNRe7pZtUqyPwTc0PtO5/2S5iPTZL5pfZ6pS4Jg+POXijXkiOyAKNI2B9w BCwsVDaBlshoW+pEMOrye982tvfPg6O0wnQwPtzfrPl4mI/qx9EGheXOcbszEcYs cOp7tMi/oGo86agUaZihWva/0CKwltUTVkmLiCtv2SvEfuQp1Bq6ukUasuFjAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUH1iuQuLiMSg/IYZ3Y42bHErcjk8wHwYDVR0j BBgwFoAUBPfY5nGsfQoP7rdOS+nJwT6ylUwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzJjNDA1ZjEtYzMyZC00N2NlLTg5NDMtMDc1MmVkMTNk OGVmLzIvMDRGN0Q4RTY3MUFDN0QwQTBGRUVCNzRFNEJFOUM5QzEzRUIyOTU0Qy5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wLzA0RjdEOEU2NzFBQzdE MEEwRkVFQjc0RTRCRTlDOUMxM0VCMjk1NEMuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvNzJjNDA1ZjEtYzMyZC00N2NlLTg5NDMtMDc1MmVkMTNkOGVm LzIvMDRGN0Q4RTY3MUFDN0QwQTBGRUVCNzRFNEJFOUM5QzEzRUIyOTU0Qy5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAEfYw6d9FUzOkdSMJtPf6PTHmSxE5GU3f69vlBs9Zp70S3nv8JTJWNjm ivv0cZkz/d/L+3RB2KQJnLN22eaJ0zY8aelc9hPtQVBD23bMtGB6wWIuwjnr8eub y0C8sVINX/cYm57iutbCZ0MD0kNjLr4O+Dk9K9WV90l5p7DosvW4MErokePIwQvN r1GJ6UtenfvL3M+wwaKdUWmkKZItjamiAYlwGzGQtZFfuDd2AY3YIl0uPM1MGge/ 88672kpgEzwQKJpQjFuPG3vBmVHrdrBeCDOR5LbneSMEx/Pnglz13j4qNBRrPUME WwqD8JiDAz8uevJm8jYyVVPPf9vPUAc= -----END CERTIFICATE-----Generated at Sat Apr 5 07:34:13 2025 by rpki-client