$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft File: DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft (raw, json) Hash identifier: 9an242x6TSXdS36+kMmudUsM2YBWFpOh3BlQq5x3WBM= Subject key identifier: 4F:E4:F7:7E:84:6C:68:85:09:B5:3B:E4:E4:60:24:01:95:81:6D:92 Authority key identifier: DD:C2:5A:D2:F1:A4:89:24:77:13:EE:39:B1:C0:3E:A2:FD:DA:41:18 Certificate issuer: /CN=DDC25AD2F1A489247713EE39B1C03EA2FDDA4118 Certificate serial: 4C774C0FB6A2DE0CC07F1D0F965F0BAB33EB3FEB Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft Manifest number: 0D Signing time: Sun 20 Apr 2025 18:59:21 +0000 Manifest this update: Sun 20 Apr 2025 18:54:21 +0000 Manifest next update: Tue 22 Apr 2025 10:17:21 +0000 Files and hashes: 1: DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.crl (hash: 6yJ+ZdTVosLKcsNvMC9g5vYiQ0o+cP9X82KHLtvVAvY=) 2: 326130623a346530373a363065303a3a2f34342d3438203d3e203339333531.roa (hash: /JgrvpSR1ZDGP36oDONfP8baAAR4FG/skafz4v4Fs6E=) 3: 326130623a346530373a363064303a3a2f34342d3438203d3e20323134373031.roa (hash: uV2TLwh180zk/DItScOuiwKDHaU99Mhyx8m59bwZFmA=) 4: 326130623a346530373a363030303a3a2f34312d3438203d3e20323134373031.roa (hash: 4kUbGyjkNaSVg+CdxZZIcLS92ZdRbZtwjsOz4Bjkgro=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.crl rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Apr 2025 21:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:77:4c:0f:b6:a2:de:0c:c0:7f:1d:0f:96:5f:0b:ab:33:eb:3f:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDC25AD2F1A489247713EE39B1C03EA2FDDA4118 Validity Not Before: Apr 20 18:54:21 2025 GMT Not After : Apr 22 10:17:21 2025 GMT Subject: CN=4FE4F77E846C688509B53BE4E460240195816D92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:23:cb:b2:89:90:d4:bc:52:45:d1:3a:0a:53: 72:a7:3b:d3:6c:c8:84:42:fe:29:03:d2:bf:da:5f: 0c:65:8a:2a:50:b4:07:df:63:fd:e3:68:36:7e:45: 85:cb:af:7d:f6:87:7d:ae:71:c8:08:2d:9a:fc:73: 29:b7:02:98:31:cd:6a:ea:2b:48:2c:d6:9c:d4:1e: 5d:ec:6b:b8:4d:23:b0:29:7d:0d:cc:27:d5:a5:a2: 11:e4:49:f0:6b:05:27:27:d9:06:2b:ac:24:6c:35: 7e:08:09:23:2b:20:33:68:5b:bc:31:d4:7f:29:22: ab:9c:3f:7b:41:4b:1d:14:60:83:ae:2f:e0:aa:d7: 4d:f7:e7:07:0f:b3:7b:5f:26:08:f9:aa:b4:ed:43: 1a:f4:e5:01:e0:d4:69:2a:7b:b9:1f:f4:37:3d:75: 81:c7:08:be:9a:ac:28:df:0a:61:2f:b3:ae:81:b4: e5:f9:ae:40:27:76:c2:63:f7:cc:af:b2:9a:69:3b: b3:2d:f8:b9:87:a4:dc:ee:14:aa:aa:6a:e9:f6:3b: de:3f:13:f4:78:02:d2:0d:da:fa:e8:bd:01:ab:c8: 90:d3:ee:d3:16:5e:23:1b:af:44:e3:c8:22:35:13: c2:b5:e6:6c:54:fc:50:97:d0:25:60:11:3f:bd:94: df:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:E4:F7:7E:84:6C:68:85:09:B5:3B:E4:E4:60:24:01:95:81:6D:92 X509v3 Authority Key Identifier: keyid:DD:C2:5A:D2:F1:A4:89:24:77:13:EE:39:B1:C0:3E:A2:FD:DA:41:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:56:7e:11:fb:5d:b1:d9:d9:1f:bd:e0:8f:2d:c4:39:2e:40: 44:7b:58:07:03:70:03:c4:ad:40:f5:91:88:3b:09:4a:da:ea: 6e:94:5a:b1:2c:d9:b1:a7:3c:07:0f:e9:78:d4:7f:2f:77:e4: 5c:f0:b8:5b:c2:cf:a9:ea:f9:16:3a:18:6c:63:93:30:d3:22: d4:aa:24:b8:2c:25:ef:9c:8a:96:fb:1e:a7:01:d9:69:e1:02: 34:b3:96:46:5e:fd:4c:8e:0e:3c:f1:63:69:01:3c:a0:5a:dc: e4:4e:31:3d:ea:44:fa:1d:4e:96:5e:3d:28:40:b0:b4:ff:27: 8a:d2:8e:00:c4:36:31:f9:f1:7e:0a:f6:e6:b2:e8:6d:64:09: 11:8d:b6:36:ec:2b:d7:bf:4f:64:98:e9:e0:46:f1:d7:0f:4d: 79:40:8c:eb:dd:3e:f4:4a:30:0c:2d:5a:3e:49:87:e9:9e:45: 72:28:0c:b1:88:0d:38:30:a9:ee:61:ac:a6:a9:2d:ce:f0:25: 73:36:64:03:1e:aa:5c:d8:b4:75:db:f1:0e:03:56:8d:2d:ee: 71:7e:04:ca:af:5e:94:0f:a0:b6:69:47:81:f0:b8:1d:b5:bb: d4:7b:b7:3e:59:0a:58:29:8c:c3:f7:9e:85:d8:f6:44:67:f6: c5:30:e9:29 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUTHdMD7ai3gzAfx0Pll8LqzPrP+swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERDMjVBRDJGMUE0ODkyNDc3MTNFRTM5QjFDMDNFQTJG RERBNDExODAeFw0yNTA0MjAxODU0MjFaFw0yNTA0MjIxMDE3MjFaMDMxMTAvBgNV BAMTKDRGRTRGNzdFODQ2QzY4ODUwOUI1M0JFNEU0NjAyNDAxOTU4MTZEOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmI8uyiZDUvFJF0ToKU3KnO9Ns yIRC/ikD0r/aXwxliipQtAffY/3jaDZ+RYXLr332h32uccgILZr8cym3ApgxzWrq K0gs1pzUHl3sa7hNI7ApfQ3MJ9WlohHkSfBrBScn2QYrrCRsNX4ICSMrIDNoW7wx 1H8pIqucP3tBSx0UYIOuL+Cq10335wcPs3tfJgj5qrTtQxr05QHg1Gkqe7kf9Dc9 dYHHCL6arCjfCmEvs66BtOX5rkAndsJj98yvspppO7Mt+LmHpNzuFKqqaun2O94/ E/R4AtIN2vrovQGryJDT7tMWXiMbr0TjyCI1E8K15mxU/FCX0CVgET+9lN8HAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUT+T3foRsaIUJtTvk5GAkAZWBbZIwHwYDVR0j BBgwFoAU3cJa0vGkiSR3E+45scA+ov3aQRgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmVhZDJkY2YtZWFkNS00OTU0LWFkODQtNjU4MGNkMmE5 YzUwLzMvRERDMjVBRDJGMUE0ODkyNDc3MTNFRTM5QjFDMDNFQTJGRERBNDExOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvRERDMjVBRDJGMUE0ODkyNDc3MTNFRTM5QjFDMDNFQTJGRERB NDExOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZWFkMmRjZi1l YWQ1LTQ5NTQtYWQ4NC02NTgwY2QyYTljNTAvMy9EREMyNUFEMkYxQTQ4OTI0Nzcx M0VFMzlCMUMwM0VBMkZEREE0MTE4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPVZ+EftdsdnZH73gjy3E OS5ARHtYBwNwA8StQPWRiDsJStrqbpRasSzZsac8Bw/peNR/L3fkXPC4W8LPqer5 FjoYbGOTMNMi1KokuCwl75yKlvsepwHZaeECNLOWRl79TI4OPPFjaQE8oFrc5E4x PepE+h1Oll49KECwtP8nitKOAMQ2Mfnxfgr25rLobWQJEY22Nuwr179PZJjp4Ebx 1w9NeUCM690+9EowDC1aPkmH6Z5FcigMsYgNODCp7mGspqktzvAlczZkAx6qXNi0 ddvxDgNWjS3ucX4Eyq9elA+gtmlHgfC4HbW71Hu3PlkKWCmMw/eehdj2RGf2xTDp KQ== -----END CERTIFICATE-----Generated at Mon Apr 21 04:06:09 2025 by rpki-client