$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft File: 5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft (raw, json) Hash identifier: e9mcHp5giVqnJLrwyUc1rlt0FdPirVFTIG20xF69f34= Subject key identifier: 53:EC:C5:DB:5E:1C:D1:D4:79:F3:27:0A:27:FF:06:87:7E:40:6E:3D Authority key identifier: 5D:A3:21:5A:BF:A4:62:1D:57:70:9F:83:8A:92:80:1F:2E:90:DD:FE Certificate issuer: /CN=5da3215abfa4621d57709f838a92801f2e90ddfe Certificate serial: 122F9FF5675F5E8E4C0864079AC30DB77C76141F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaMhWr-kYh1XcJ-DipKAHy6Q3f4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft Manifest number: 0408 Signing time: Sat 05 Apr 2025 01:50:45 +0000 Manifest this update: Sat 05 Apr 2025 01:45:45 +0000 Manifest next update: Sun 06 Apr 2025 02:21:45 +0000 Files and hashes: 1: 5DA3215ABFA4621D57709F838A92801F2E90DDFE.crl (hash: oX26XigXORVmN4mtQsGqrWI7GS+uKEaIPx/axl9ls48=) 2: 34352e38312e35362e302f32342d3234203d3e203634323637.roa (hash: kGVNeEKX35ugOpsFmA5GwCl6f0GnZpLJS8pEn3cyWJI=) 3: 34352e38312e35382e302f32342d3234203d3e20323039323432.roa (hash: PgFKkZH0aQaFuwRYs1mJhheMQU+0AR2Y9C0+BkBTwpo=) 4: 34352e38312e35372e302f32342d3234203d3e203631333137.roa (hash: Nt6v0on8wvNIRTqw0ZzJ5VjTWjEZFT63u0ZbVbhKyNc=) 5: 326130393a643634303a3a2f32392d3239203d3e20313938333435.roa (hash: LaBCcb8mjeERCC5tHKO7thlovLIwutTtPGiGYEZVPF8=) 6: 34352e38312e35392e302f32342d3234203d3e20323131343339.roa (hash: Y0ZApSmGCRch+djTYBN+U0p8LaOUa+NCEgyRR8hvTcU=) 7: 34352e38312e35392e302f32342d3234203d3e20323132333834.roa (hash: 7ySWNlqh8pfpYqSc3fbfv+VTSwiuDNFNlc7aZa5se9U=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.crl rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft rsync://rpki.ripe.net/repository/DEFAULT/XaMhWr-kYh1XcJ-DipKAHy6Q3f4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Apr 2025 21:19:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:2f:9f:f5:67:5f:5e:8e:4c:08:64:07:9a:c3:0d:b7:7c:76:14:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5da3215abfa4621d57709f838a92801f2e90ddfe Validity Not Before: Apr 5 01:45:45 2025 GMT Not After : Apr 6 02:21:45 2025 GMT Subject: CN=53ECC5DB5E1CD1D479F3270A27FF06877E406E3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:66:14:12:98:ab:35:84:d7:c9:96:6b:c5:2b: f9:6a:d1:97:50:e5:2c:77:d0:e3:91:1d:d4:19:25: c4:32:44:3a:75:fb:6a:f5:0d:78:41:4a:30:8e:ff: e1:17:9c:18:0b:2d:73:16:e0:3e:b5:8e:50:71:14: 90:1a:ab:dc:ca:c8:c4:0b:fa:c1:97:c1:dc:b0:e4: c1:66:27:c9:dc:77:a4:e3:d1:b5:60:87:08:c2:66: 42:eb:f5:ef:a8:b2:3a:fd:c0:cf:73:49:d7:e7:21: 47:5b:39:4a:12:7d:f9:d2:5a:85:36:7b:ff:43:ae: bf:81:a5:1b:df:bc:0e:fd:85:9c:bc:e6:b8:1b:0e: 22:c4:23:7f:b2:6e:34:76:d5:07:aa:66:c5:e3:89: 81:30:5f:13:1d:98:aa:36:ed:4f:b6:7e:8c:21:43: 39:16:42:f3:a2:bc:0d:bc:f5:ff:a0:78:b8:bc:49: 26:00:a9:01:de:8e:1d:61:db:6c:4a:32:86:af:ce: 6f:09:c4:e4:00:b1:df:1a:57:f6:50:b5:09:b7:ba: a9:c0:44:b0:1e:f4:75:87:4e:8d:00:54:62:20:20: 57:7b:29:0c:fb:1e:71:00:bd:87:18:c9:bc:35:a5: f0:4b:ef:a8:45:81:c2:3e:a4:e7:12:e9:0b:12:c7: 89:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:EC:C5:DB:5E:1C:D1:D4:79:F3:27:0A:27:FF:06:87:7E:40:6E:3D X509v3 Authority Key Identifier: keyid:5D:A3:21:5A:BF:A4:62:1D:57:70:9F:83:8A:92:80:1F:2E:90:DD:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaMhWr-kYh1XcJ-DipKAHy6Q3f4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:4e:99:70:f4:04:42:b5:bd:b0:a4:ce:42:40:cb:ae:91:27: 3d:df:01:9f:fe:06:04:dc:df:07:11:ff:d1:c1:99:6e:19:6c: 20:22:e4:98:a0:33:6d:3e:b6:dc:c6:e1:13:31:84:88:00:e3: ca:5e:75:64:b0:b4:3a:2a:11:bc:1b:d5:97:b1:0f:82:f3:09: c1:94:dc:0d:c7:c1:11:7b:4d:2e:09:25:78:7d:19:53:73:a3: 07:16:d9:8d:79:17:91:5e:04:b8:27:88:5e:86:7a:93:8a:b5: 36:8e:5c:9c:45:83:44:a5:95:9d:81:05:d7:d0:70:74:cf:fb: 76:47:6f:f3:27:32:35:f0:98:c3:66:f1:3d:fc:92:2d:9d:7e: e5:7a:ac:14:95:86:34:8e:7b:cc:82:3d:32:1c:a3:1d:cb:40: 42:9c:2b:81:cd:ca:4f:55:82:4b:12:c3:99:39:91:1e:79:d6: 2d:2b:7f:60:1b:c0:f6:ef:b9:bc:d5:0e:7f:ce:41:d8:5d:72: 14:c4:ed:c9:4e:9d:c7:48:a3:62:2f:71:e4:05:a7:cd:c2:42: 6c:6e:53:ca:e0:60:0b:9e:93:b1:c0:71:8f:4e:ea:d1:99:cb: f0:64:fd:b2:0b:92:af:b5:7c:38:6a:82:16:84:c1:da:16:7e: 06:c3:7a:f0 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUEi+f9WdfXo5MCGQHmsMNt3x2FB8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNWRhMzIxNWFiZmE0NjIxZDU3NzA5ZjgzOGE5MjgwMWYy ZTkwZGRmZTAeFw0yNTA0MDUwMTQ1NDVaFw0yNTA0MDYwMjIxNDVaMDMxMTAvBgNV BAMTKDUzRUNDNURCNUUxQ0QxRDQ3OUYzMjcwQTI3RkYwNjg3N0U0MDZFM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBZhQSmKs1hNfJlmvFK/lq0ZdQ 5Sx30OORHdQZJcQyRDp1+2r1DXhBSjCO/+EXnBgLLXMW4D61jlBxFJAaq9zKyMQL +sGXwdyw5MFmJ8ncd6Tj0bVghwjCZkLr9e+osjr9wM9zSdfnIUdbOUoSffnSWoU2 e/9Drr+BpRvfvA79hZy85rgbDiLEI3+ybjR21QeqZsXjiYEwXxMdmKo27U+2fowh QzkWQvOivA289f+geLi8SSYAqQHejh1h22xKMoavzm8JxOQAsd8aV/ZQtQm3uqnA RLAe9HWHTo0AVGIgIFd7KQz7HnEAvYcYybw1pfBL76hFgcI+pOcS6QsSx4kfAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUU+zF214c0dR58ycKJ/8Gh35Abj0wHwYDVR0j BBgwFoAUXaMhWr+kYh1XcJ+DipKAHy6Q3f4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmYyNDU2N2ItN2E3NC00YzFmLWFhODUtZGQyNGFmNzNj Y2JiLzAvNURBMzIxNUFCRkE0NjIxRDU3NzA5RjgzOEE5MjgwMUYyRTkwRERGRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hhTWhXci1rWWgxWGNKLURpcEtBSHk2 UTNmNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZjI0NTY3Yi03 YTc0LTRjMWYtYWE4NS1kZDI0YWY3M2NjYmIvMC81REEzMjE1QUJGQTQ2MjFENTc3 MDlGODM4QTkyODAxRjJFOTBEREZFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhE6ZcPQEQrW9sKTOQkDL rpEnPd8Bn/4GBNzfBxH/0cGZbhlsICLkmKAzbT623MbhEzGEiADjyl51ZLC0OioR vBvVl7EPgvMJwZTcDcfBEXtNLgkleH0ZU3OjBxbZjXkXkV4EuCeIXoZ6k4q1No5c nEWDRKWVnYEF19BwdM/7dkdv8ycyNfCYw2bxPfySLZ1+5XqsFJWGNI57zII9Mhyj HctAQpwrgc3KT1WCSxLDmTmRHnnWLSt/YBvA9u+5vNUOf85B2F1yFMTtyU6dx0ij Yi9x5AWnzcJCbG5TyuBgC56TscBxj07q0ZnL8GT9sguSr7V8OGqCFoTB2hZ+BsN6 8A== -----END CERTIFICATE-----Generated at Sat Apr 5 06:43:36 2025 by rpki-client