$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/8/EDB2DCB923521313E46CEDD7E505C1E6714C9C1D.mft File: EDB2DCB923521313E46CEDD7E505C1E6714C9C1D.mft (raw, json) Hash identifier: 6CKaxiZ8NzXNB4C5fvnVHLSx3jzakunjvVDDT1OirqU= Subject key identifier: E9:D5:B1:24:9A:3F:A5:A9:FE:3C:52:6D:24:B7:47:5B:47:76:F7:7D Authority key identifier: ED:B2:DC:B9:23:52:13:13:E4:6C:ED:D7:E5:05:C1:E6:71:4C:9C:1D Certificate issuer: /CN=EDB2DCB923521313E46CEDD7E505C1E6714C9C1D Certificate serial: 20121935FB55DD35C2417D90DD862D7644F26AF8 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/EDB2DCB923521313E46CEDD7E505C1E6714C9C1D.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/8/EDB2DCB923521313E46CEDD7E505C1E6714C9C1D.mft Manifest number: 4C Signing time: Sat 05 Apr 2025 00:57:35 +0000 Manifest this update: Sat 05 Apr 2025 00:52:35 +0000 Manifest next update: Sun 06 Apr 2025 01:16:35 +0000 Files and hashes: 1: EDB2DCB923521313E46CEDD7E505C1E6714C9C1D.crl (hash: CkffZVc8BIHs7rfwHUPFOrkO/jSWqk2Vdz8JzW2MqdM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/8/EDB2DCB923521313E46CEDD7E505C1E6714C9C1D.crl rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/8/EDB2DCB923521313E46CEDD7E505C1E6714C9C1D.mft rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/EDB2DCB923521313E46CEDD7E505C1E6714C9C1D.cer rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Apr 2025 00:55:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:12:19:35:fb:55:dd:35:c2:41:7d:90:dd:86:2d:76:44:f2:6a:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EDB2DCB923521313E46CEDD7E505C1E6714C9C1D Validity Not Before: Apr 5 00:52:35 2025 GMT Not After : Apr 6 01:16:35 2025 GMT Subject: CN=E9D5B1249A3FA5A9FE3C526D24B7475B4776F77D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f0:6e:ad:fa:51:d8:ee:48:5e:7f:22:71:69: 3c:12:23:de:08:17:e9:29:0e:ce:0f:5c:62:a3:9b: 47:a3:16:a1:81:ce:b2:e0:1c:d3:51:bf:1c:37:e0: 21:7f:d4:e0:b2:b0:fb:d5:ee:1c:bf:a8:f0:d1:48: 8c:8c:52:32:ff:a2:91:54:36:62:f5:8b:c6:90:36: 17:e1:e1:23:7a:6f:bd:d7:bb:1c:e2:be:72:20:33: 87:a8:3b:af:57:37:d0:03:c5:75:4c:0e:68:9c:9a: 13:97:7c:59:70:23:a3:c6:a9:06:01:ed:e1:fe:25: 3a:d6:23:bb:63:13:e5:82:09:53:59:17:b6:04:3b: a4:48:a7:6d:34:f2:64:25:5f:b4:a9:a1:df:81:d6: 86:6e:4c:1c:86:5d:69:36:43:f1:bd:18:2e:84:cf: a5:e1:f9:5f:62:20:33:27:0e:26:69:1d:eb:28:49: 8f:b0:52:1f:3e:07:cb:f5:da:c4:72:f5:22:e2:b6: 97:87:3e:ae:c9:e7:a3:cf:6b:de:47:a2:4a:fa:93: 27:af:8c:00:df:eb:ea:fe:04:4e:a9:43:0b:51:db: 9f:50:32:ba:89:55:f8:43:85:45:62:74:ba:e1:63: 11:d5:37:8a:72:c4:fe:9d:fe:a1:43:d4:db:38:0c: 48:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:D5:B1:24:9A:3F:A5:A9:FE:3C:52:6D:24:B7:47:5B:47:76:F7:7D X509v3 Authority Key Identifier: keyid:ED:B2:DC:B9:23:52:13:13:E4:6C:ED:D7:E5:05:C1:E6:71:4C:9C:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/8/EDB2DCB923521313E46CEDD7E505C1E6714C9C1D.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/EDB2DCB923521313E46CEDD7E505C1E6714C9C1D.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/8/EDB2DCB923521313E46CEDD7E505C1E6714C9C1D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:55:4d:6f:b4:50:be:dc:24:e6:cb:ae:16:0a:f7:c0:a9:4d: d0:0e:15:14:9a:bb:39:d2:be:e0:a1:ef:5c:f9:c3:00:b3:6e: 51:1f:d1:21:a8:c0:c6:74:d3:e2:ad:48:e4:54:c3:64:a4:a4: eb:82:27:8b:f8:40:ce:b2:3d:1e:fd:3c:14:bc:66:2f:25:c3: bb:6e:fa:e2:0d:80:04:b1:24:47:a3:af:6e:bd:25:33:0d:68: cf:36:3a:7e:e9:34:e7:f8:40:f4:d7:f7:cf:aa:d7:92:48:59: dc:e9:87:2a:55:5d:a3:87:e5:86:1c:3a:78:64:86:00:7e:cf: 79:37:f1:80:e0:de:06:09:29:78:ed:d1:11:2b:90:49:dc:d8: 7e:b7:e3:a9:27:f6:ce:6e:2d:16:dd:b8:39:94:ee:38:32:86: 3b:70:29:b0:67:59:44:1f:ea:75:46:6a:0a:41:ee:80:c9:e9: dc:6e:1b:3d:61:4b:49:19:06:9a:e4:4c:16:0b:6b:e5:f8:8d: 09:95:ea:11:ae:3f:af:ce:9d:5e:c5:15:0d:45:94:a8:c9:20: b9:71:41:29:53:8f:f9:55:0d:5d:9b:4f:58:31:67:41:23:a4: 05:17:ac:e2:87:e6:8e:22:d7:93:f7:82:cd:1f:58:34:ea:74: 45:c4:ea:11 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUIBIZNftV3TXCQX2Q3YYtdkTyavgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRURCMkRDQjkyMzUyMTMxM0U0NkNFREQ3RTUwNUMxRTY3 MTRDOUMxRDAeFw0yNTA0MDUwMDUyMzVaFw0yNTA0MDYwMTE2MzVaMDMxMTAvBgNV BAMTKEU5RDVCMTI0OUEzRkE1QTlGRTNDNTI2RDI0Qjc0NzVCNDc3NkY3N0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf8G6t+lHY7khefyJxaTwSI94I F+kpDs4PXGKjm0ejFqGBzrLgHNNRvxw34CF/1OCysPvV7hy/qPDRSIyMUjL/opFU NmL1i8aQNhfh4SN6b73XuxzivnIgM4eoO69XN9ADxXVMDmicmhOXfFlwI6PGqQYB 7eH+JTrWI7tjE+WCCVNZF7YEO6RIp2008mQlX7Spod+B1oZuTByGXWk2Q/G9GC6E z6Xh+V9iIDMnDiZpHesoSY+wUh8+B8v12sRy9SLitpeHPq7J56PPa95Hokr6kyev jADf6+r+BE6pQwtR259QMrqJVfhDhUVidLrhYxHVN4pyxP6d/qFD1Ns4DEixAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU6dWxJJo/pan+PFJtJLdHW0d2930wHwYDVR0j BBgwFoAU7bLcuSNSExPkbO3X5QXB5nFMnB0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGU3ZDU1ZjctZWU2MC00MDA1LWJhZDctYjQyODE4Y2Y1 MGU4LzgvRURCMkRDQjkyMzUyMTMxM0U0NkNFREQ3RTUwNUMxRTY3MTRDOUMxRC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNzk0ODczOC0zMjU1LTQ5 ZjktOWI2Yy05YzlmMzg5ODk5NWQvMy9FREIyRENCOTIzNTIxMzEzRTQ2Q0VERDdF NTA1QzFFNjcxNEM5QzFELmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2RlN2Q1NWY3LWVlNjAtNDAwNS1iYWQ3LWI0MjgxOGNmNTBlOC84L0VEQjJEQ0I5 MjM1MjEzMTNFNDZDRUREN0U1MDVDMUU2NzE0QzlDMUQubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAQVU1v tFC+3CTmy64WCvfAqU3QDhUUmrs50r7goe9c+cMAs25RH9EhqMDGdNPirUjkVMNk pKTrgieL+EDOsj0e/TwUvGYvJcO7bvriDYAEsSRHo69uvSUzDWjPNjp+6TTn+ED0 1/fPqteSSFnc6YcqVV2jh+WGHDp4ZIYAfs95N/GA4N4GCSl47dERK5BJ3Nh+t+Op J/bObi0W3bg5lO44MoY7cCmwZ1lEH+p1RmoKQe6Ayencbhs9YUtJGQaa5EwWC2vl +I0JleoRrj+vzp1exRUNRZSoySC5cUEpU4/5VQ1dm09YMWdBI6QFF6zih+aOIteT 94LNH1g06nRFxOoR -----END CERTIFICATE-----Generated at Sat Apr 5 18:03:02 2025 by rpki-client