$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: ea3EnUO496rLPmLYOba2gaDJusbrNoZMO/1BOi065RY= Subject key identifier: 0B:37:CF:60:0F:5C:B8:34:BA:98:94:63:03:09:43:9A:85:C2:4C:F0 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 0E43A7869903A8A9FA54BEFCBAE87BBB59B96317 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 0254 Signing time: Tue 21 Jan 2025 10:09:47 +0000 Manifest this update: Tue 21 Jan 2025 10:04:47 +0000 Manifest next update: Wed 22 Jan 2025 10:49:47 +0000 Files and hashes: 1: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: OgJ5IHBdzo8hNNE/hueSPIOCulRspm4s5gp10NbE/v8=) 2: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: tM6AOBSdq8t/+b2jwQliXrToX+/NgR89RNEhgmdHZII=) 3: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: Dcvv1Ul0JGTxvGw2Ps2/e001gxa3ZWx5ttvSXeBWQh0=) 4: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: BTfImX353JFUgcIZ2jDRlZdLmp+KqSbtrCi6ArFxd6k=) 5: 3130392e3130372e33322e302f31392d3139203d3e203531303539.roa (hash: X2z2XPrgUr9xIts6n1d1e4f9jy7uzF9LQOiTf+AM3H0=) 6: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: ytuECs7j4zGJqJdJa4rGkrEPCrlfuZ9RaEY2T4xYUeA=) 7: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: 3jgSTcGFv+Jeybj2sm8+wltuQ8mIwpFjbgezsMDYDuw=) 8: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: xrYxMPWlm0NFN/UuQmB97S5T+AeBbukKizXkLUfGrf8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jan 2025 09:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:43:a7:86:99:03:a8:a9:fa:54:be:fc:ba:e8:7b:bb:59:b9:63:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Jan 21 10:04:47 2025 GMT Not After : Jan 22 10:49:47 2025 GMT Subject: CN=0B37CF600F5CB834BA9894630309439A85C24CF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1b:bd:9b:9b:f0:45:83:cb:e9:a1:57:58:64: eb:e6:e8:b7:4f:bd:b5:d9:e4:08:74:66:6b:2f:e1: 97:eb:c5:51:1a:7c:7c:56:c3:91:14:e9:52:7b:88: 51:61:86:fb:c1:bb:41:dd:2d:3a:3f:a9:f2:0a:c4: f0:24:8f:5a:06:e7:b6:92:ac:c2:c5:27:68:ea:7b: c1:7c:a2:2f:63:d4:5b:8d:34:7c:5d:b1:c5:07:65: 1c:39:e9:13:5b:a9:69:c4:40:ce:12:fa:15:1a:b9: e6:ef:b5:e6:58:e5:77:3f:8f:d3:90:45:5c:0b:20: 41:b7:8e:96:60:c4:04:a3:9f:24:68:b8:4c:ca:5b: 69:fb:13:a3:dd:97:68:81:b8:c0:f4:f9:fc:a9:72: 4f:1f:37:35:21:10:80:d0:5c:e3:b5:50:e8:42:f6: cc:4a:ea:e6:1f:8a:d8:4b:92:bb:b0:9c:c9:9f:29: 44:0e:e9:6f:eb:93:a2:8b:2d:ab:ae:8f:ff:c3:6f: f2:c3:0d:3c:0c:64:b1:23:1b:a2:48:e3:39:12:03: 18:ee:c2:65:5b:1c:60:e2:1a:c2:83:47:3b:b5:d9: 43:02:17:9e:2c:7d:6d:57:e3:2d:b5:e7:a2:52:49: 82:df:ea:5e:70:8e:18:57:09:3c:87:ae:a8:37:55: cb:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:37:CF:60:0F:5C:B8:34:BA:98:94:63:03:09:43:9A:85:C2:4C:F0 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:72:ca:08:a4:cf:98:69:0a:e6:34:fe:a3:38:dc:78:cf:6c: 20:23:19:fe:d2:73:2c:4c:de:74:22:8f:e6:42:93:83:79:29: 61:f4:bd:35:fb:eb:c6:86:03:3f:0f:b9:1f:25:6b:fb:9e:a0: 72:c5:8b:13:b0:cc:3a:be:ba:90:1c:f4:a0:fc:f0:05:e3:bb: 92:7d:77:d9:ca:e1:2b:03:12:d9:21:ea:8a:5a:4b:31:83:a2: 81:37:00:38:f8:00:5b:e4:92:c5:fa:5c:7c:d6:2f:58:4f:76: 7a:4d:62:ee:85:ad:eb:72:da:6a:c3:35:e8:bf:09:d7:f5:43: 09:c4:25:7c:59:d7:33:72:26:5f:82:53:3c:47:7b:55:f1:d9: 5e:8a:8c:52:6e:8a:2c:9e:67:b2:1d:ec:37:a3:9e:03:c3:b4: 3e:c3:b4:50:84:6b:cf:4f:56:e1:7a:c0:f9:d4:63:98:d7:22: 7d:3f:16:ff:11:a5:ce:8b:17:ec:4e:b2:d2:33:d8:4d:02:aa: 9a:31:65:66:18:8c:97:15:65:42:c4:86:54:a9:a6:c6:1d:11: 0e:ef:06:3a:08:dc:a3:65:a3:ef:13:f6:7d:d2:10:07:fc:c4: 21:e6:c0:4e:fd:8f:0e:2e:c2:21:31:62:c7:ec:cb:96:dd:fc: 5b:92:bb:10 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUDkOnhpkDqKn6VL78uuh7u1m5YxcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNTAxMjExMDA0NDdaFw0yNTAxMjIxMDQ5NDdaMDMxMTAvBgNV BAMTKDBCMzdDRjYwMEY1Q0I4MzRCQTk4OTQ2MzAzMDk0MzlBODVDMjRDRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAG72bm/BFg8vpoVdYZOvm6LdP vbXZ5Ah0Zmsv4ZfrxVEafHxWw5EU6VJ7iFFhhvvBu0HdLTo/qfIKxPAkj1oG57aS rMLFJ2jqe8F8oi9j1FuNNHxdscUHZRw56RNbqWnEQM4S+hUauebvteZY5Xc/j9OQ RVwLIEG3jpZgxASjnyRouEzKW2n7E6Pdl2iBuMD0+fypck8fNzUhEIDQXOO1UOhC 9sxK6uYfithLkruwnMmfKUQO6W/rk6KLLauuj//Db/LDDTwMZLEjG6JI4zkSAxju wmVbHGDiGsKDRzu12UMCF54sfW1X4y2156JSSYLf6l5wjhhXCTyHrqg3VcsJAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUCzfPYA9cuDS6mJRjAwlDmoXCTPAwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeHLKCKTPmGkK5jT+ozjc eM9sICMZ/tJzLEzedCKP5kKTg3kpYfS9NfvrxoYDPw+5HyVr+56gcsWLE7DMOr66 kBz0oPzwBeO7kn132crhKwMS2SHqilpLMYOigTcAOPgAW+SSxfpcfNYvWE92ek1i 7oWt63LaasM16L8J1/VDCcQlfFnXM3ImX4JTPEd7VfHZXoqMUm6KLJ5nsh3sN6Oe A8O0PsO0UIRrz09W4XrA+dRjmNcifT8W/xGlzosX7E6y0jPYTQKqmjFlZhiMlxVl QsSGVKmmxh0RDu8GOgjco2Wj7xP2fdIQB/zEIebATv2PDi7CITFix+zLlt38W5K7 EA== -----END CERTIFICATE-----Generated at Tue Jan 21 16:08:18 2025 by rpki-client on console-fra.rpki-client.org