$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: Am1naB39x3WzbAfK/E/xUNXqfJXPU9myqNruEN75VV8= Subject key identifier: ED:E1:D5:FE:12:FF:42:60:D3:F2:61:EB:72:48:AD:07:EC:70:22:CE Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 246A58CE0B3D725B75D67FEFDCFA27DD788146DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 02B6 Signing time: Fri 04 Apr 2025 11:39:46 +0000 Manifest this update: Fri 04 Apr 2025 11:34:46 +0000 Manifest next update: Sat 05 Apr 2025 13:49:46 +0000 Files and hashes: 1: 3130392e3130372e33322e302f31392d3139203d3e203531303539.roa (hash: X2z2XPrgUr9xIts6n1d1e4f9jy7uzF9LQOiTf+AM3H0=) 2: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: xrYxMPWlm0NFN/UuQmB97S5T+AeBbukKizXkLUfGrf8=) 3: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: FMr6NQn2E9Bb20nuhrn072KXh7yXRuoKR2xlN3ELfZI=) 4: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: tM6AOBSdq8t/+b2jwQliXrToX+/NgR89RNEhgmdHZII=) 5: 3130392e3130372e34382e302f32302d3230203d3e203531303539.roa (hash: VFZuAq39Eq3+auAQ5gu6dgnspNNlfOP6SeCqq8W6XvE=) 6: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: ytuECs7j4zGJqJdJa4rGkrEPCrlfuZ9RaEY2T4xYUeA=) 7: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: BTfImX353JFUgcIZ2jDRlZdLmp+KqSbtrCi6ArFxd6k=) 8: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: SHik7GJBsZxZrUgX6oF8ZU0PTNHU0zYvgquX6NtVrA4=) 9: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: Dcvv1Ul0JGTxvGw2Ps2/e001gxa3ZWx5ttvSXeBWQh0=) 10: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: OgJ5IHBdzo8hNNE/hueSPIOCulRspm4s5gp10NbE/v8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Apr 2025 13:49:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:6a:58:ce:0b:3d:72:5b:75:d6:7f:ef:dc:fa:27:dd:78:81:46:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Apr 4 11:34:46 2025 GMT Not After : Apr 5 13:49:46 2025 GMT Subject: CN=EDE1D5FE12FF4260D3F261EB7248AD07EC7022CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:16:df:e5:02:67:3f:e7:46:1f:bb:6e:09:72: c5:6e:32:21:83:bc:f7:ab:05:e1:b3:65:e0:a0:7a: a0:89:10:a2:17:b8:e2:0a:ff:a4:26:a7:c5:64:bf: d9:97:d4:c3:25:ea:e4:4e:d1:b2:bb:7e:e1:85:c3: 86:35:68:82:71:8b:00:6d:bb:cb:f5:86:15:20:74: 57:89:00:0a:62:ca:b9:e4:da:0f:21:2e:f3:2e:3c: d4:29:46:26:c2:67:af:16:bd:29:50:0d:d0:14:27: 57:a2:e6:f2:69:ed:d1:03:df:53:0a:bc:ec:54:5e: 80:05:ce:de:79:85:6d:7f:96:ab:9c:3c:55:63:9a: 47:02:e8:48:22:e3:a9:ce:d0:ff:54:1d:a7:dd:4a: d3:b0:56:f9:e4:e9:61:16:99:c3:e5:7e:7c:8d:50: 99:38:92:a5:4e:10:68:1a:ba:c3:ed:a9:26:52:42: 91:8e:06:e6:81:bb:9d:19:91:03:15:ce:ee:8a:6c: 03:06:36:c1:aa:ff:02:df:54:7d:73:1d:4d:68:65: 32:66:88:09:90:e1:68:42:06:b1:cb:8b:a8:45:9c: e0:b7:06:83:53:bc:a6:47:10:aa:8d:01:3f:69:df: 54:f9:f3:ee:f3:e1:06:73:d7:6e:72:94:b7:42:d4: d7:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:E1:D5:FE:12:FF:42:60:D3:F2:61:EB:72:48:AD:07:EC:70:22:CE X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:74:b9:f2:7f:d3:0b:35:f2:2d:66:26:53:67:c3:62:0f:54: 16:6f:79:5a:91:71:39:d3:50:8d:fd:ab:2d:ad:86:27:01:d6: de:26:2e:19:92:fe:54:18:9d:aa:1e:6d:23:90:48:0c:dc:63: 9a:d4:bc:71:9a:00:0e:ac:ea:09:9f:b6:32:26:12:ce:4b:ab: f2:08:02:9c:e1:73:48:ae:00:34:58:0f:30:2d:5e:3f:ec:c9: f3:c1:86:04:58:fb:a2:65:cd:ae:1f:98:2b:ac:f6:d6:91:44: 51:b8:06:49:ee:7a:59:cb:42:bb:a5:68:4b:15:03:21:05:21: 88:16:e6:ce:77:79:11:b6:55:8b:c0:93:1c:74:34:fb:6f:5b: df:d6:a1:a6:b2:74:32:5b:c1:27:33:e6:33:8c:f5:a7:02:1f: 58:23:79:6d:bb:7e:33:c9:9f:e9:1a:af:f7:8a:98:3e:1e:b6: 69:b1:3f:55:d2:ac:ee:94:83:c4:e4:1f:6a:f1:dd:19:7f:2a: 9a:99:b5:22:06:a7:44:b1:8d:83:2a:15:7b:c1:6e:8f:7f:c5: 90:40:97:d7:dd:d4:95:22:2a:c6:74:71:2c:5a:34:d8:c7:56: f0:02:6a:52:8a:06:4e:ff:6f:08:35:f0:dd:52:16:d0:bd:77: e2:c8:e7:a0 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUJGpYzgs9clt11n/v3Pon3XiBRt4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNTA0MDQxMTM0NDZaFw0yNTA0MDUxMzQ5NDZaMDMxMTAvBgNV BAMTKEVERTFENUZFMTJGRjQyNjBEM0YyNjFFQjcyNDhBRDA3RUM3MDIyQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgFt/lAmc/50Yfu24JcsVuMiGD vPerBeGzZeCgeqCJEKIXuOIK/6Qmp8Vkv9mX1MMl6uRO0bK7fuGFw4Y1aIJxiwBt u8v1hhUgdFeJAApiyrnk2g8hLvMuPNQpRibCZ68WvSlQDdAUJ1ei5vJp7dED31MK vOxUXoAFzt55hW1/lqucPFVjmkcC6Egi46nO0P9UHafdStOwVvnk6WEWmcPlfnyN UJk4kqVOEGgausPtqSZSQpGOBuaBu50ZkQMVzu6KbAMGNsGq/wLfVH1zHU1oZTJm iAmQ4WhCBrHLi6hFnOC3BoNTvKZHEKqNAT9p31T58+7z4QZz125ylLdC1Ne3AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU7eHV/hL/QmDT8mHrckitB+xwIs4wHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeHS58n/TCzXyLWYmU2fD Yg9UFm95WpFxOdNQjf2rLa2GJwHW3iYuGZL+VBidqh5tI5BIDNxjmtS8cZoADqzq CZ+2MiYSzkur8ggCnOFzSK4ANFgPMC1eP+zJ88GGBFj7omXNrh+YK6z21pFEUbgG Se56WctCu6VoSxUDIQUhiBbmznd5EbZVi8CTHHQ0+29b39ahprJ0MlvBJzPmM4z1 pwIfWCN5bbt+M8mf6Rqv94qYPh62abE/VdKs7pSDxOQfavHdGX8qmpm1IganRLGN gyoVe8Fuj3/FkECX193UlSIqxnRxLFo02MdW8AJqUooGTv9vCDXw3VIW0L134sjn oA== -----END CERTIFICATE-----Generated at Sat Apr 5 06:20:21 2025 by rpki-client