$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft File: 2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft (raw, json) Hash identifier: PSZMaJvBKu3bNmbvCNvKP79z2mk2o5jjza475QOZyyI= Subject key identifier: 73:2F:F4:A6:4D:22:7D:9A:1D:73:0C:87:D9:64:4A:5C:D4:00:1B:C3 Authority key identifier: 2F:2C:31:24:01:2C:07:F6:77:5A:62:41:DF:C6:3B:E0:41:4C:98:AD Certificate issuer: /CN=2F2C3124012C07F6775A6241DFC63BE0414C98AD Certificate serial: 4DCAEEE2485066F9F86A8DD7E3BCDFE173D39DE9 Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/2F2C3124012C07F6775A6241DFC63BE0414C98AD.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft Manifest number: 01 Signing time: Fri 04 Jul 2025 14:55:29 +0000 Manifest this update: Fri 04 Jul 2025 14:50:29 +0000 Manifest next update: Sat 05 Jul 2025 16:11:29 +0000 Files and hashes: 1: 2F2C3124012C07F6775A6241DFC63BE0414C98AD.crl (hash: qYbaCJGeM52qvFOGX7REuOWS55oE0v+b7X62p/ZyoOU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.crl rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft rsync://krill.47272.net/repo/HYEHOST/5/2F2C3124012C07F6775A6241DFC63BE0414C98AD.cer rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Jul 2025 16:11:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:ca:ee:e2:48:50:66:f9:f8:6a:8d:d7:e3:bc:df:e1:73:d3:9d:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F2C3124012C07F6775A6241DFC63BE0414C98AD Validity Not Before: Jul 4 14:50:29 2025 GMT Not After : Jul 5 16:11:29 2025 GMT Subject: CN=732FF4A64D227D9A1D730C87D9644A5CD4001BC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:76:1b:90:9f:86:8b:d7:d6:c2:25:5b:ad:f2: 67:05:4f:4b:5e:d1:58:0f:04:67:c4:4a:8a:2a:22: 13:2e:00:e2:e0:56:35:36:0f:0f:91:a7:0b:1f:3d: cc:fc:87:67:a5:22:0e:32:01:41:f3:ab:c1:5d:ff: 12:71:5d:c2:80:4a:12:5f:ea:4e:30:54:d7:b7:71: e9:45:99:57:03:f8:0b:5b:82:41:87:7e:b8:59:81: 17:90:40:4d:7e:e8:b8:d7:1e:02:27:c6:e4:23:60: e4:13:83:a5:57:f6:7f:45:9a:c0:89:0d:87:91:35: b0:13:e1:d1:6f:b4:34:24:90:64:ef:bb:92:46:b2: f7:d8:71:ba:d8:d7:db:55:28:13:8d:b2:87:1b:1f: b6:dc:6a:2c:e6:0c:a8:59:00:39:c7:cd:a6:37:31: cd:74:09:e7:80:83:cd:f7:3d:28:d0:a9:32:98:94: 30:1a:ab:0d:07:fb:d3:92:94:3b:2e:fc:10:fd:5b: 67:29:a0:90:76:06:ae:66:92:93:92:66:ae:6c:19: 44:94:d4:41:b2:89:96:db:97:1f:e2:d5:fa:83:37: 6c:b0:02:22:5e:eb:64:38:44:ad:f3:a6:50:c9:9a: 46:e4:c9:dc:95:5a:df:e8:b3:9b:bb:b3:ff:9c:38: 06:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:2F:F4:A6:4D:22:7D:9A:1D:73:0C:87:D9:64:4A:5C:D4:00:1B:C3 X509v3 Authority Key Identifier: keyid:2F:2C:31:24:01:2C:07:F6:77:5A:62:41:DF:C6:3B:E0:41:4C:98:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.crl Authority Information Access: CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/2F2C3124012C07F6775A6241DFC63BE0414C98AD.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:cd:2d:74:8a:b0:0d:5d:ca:ff:28:62:c2:d7:98:8c:e4:d0: cd:88:1c:1c:2b:90:1c:3a:54:11:23:83:e4:39:8c:78:7a:aa: 77:c9:72:0a:41:d6:27:16:b8:14:66:0f:5a:8e:a9:9b:61:fe: 94:7d:ef:d3:8b:44:c8:71:dd:c8:83:06:24:47:f6:e5:4b:37: a5:a7:8e:01:f7:57:8d:d4:30:92:9f:62:93:68:be:56:ec:ab: 0f:9d:dc:c1:6d:91:95:35:c5:9e:a8:3d:b1:e3:16:38:45:c1: 58:7a:96:e4:70:e8:ad:95:47:e4:b7:ae:08:15:4e:af:f2:aa: af:b7:7c:fb:da:fd:ba:39:33:58:96:88:19:22:64:b9:a4:78: d4:99:d3:94:fb:4c:2a:2a:da:df:a2:8b:11:a9:8b:5a:e0:2d: ff:c6:9b:d4:7f:b9:bc:10:16:83:b1:f8:ec:1e:43:0f:af:17: 8d:f4:54:33:f2:75:9b:da:e3:db:00:93:8d:3b:af:c1:a4:d5: 67:93:4c:6a:59:9e:d7:99:1a:f9:62:35:53:06:11:ea:99:cf: 9e:c1:4c:f1:eb:04:04:6e:4f:5a:13:0f:97:25:c4:e7:97:78: 64:d5:1e:a2:cb:30:57:85:d7:cd:25:af:f9:83:c2:70:ff:04: 98:d4:54:38 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUTcru4khQZvn4ao3X47zf4XPTnekwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkYyQzMxMjQwMTJDMDdGNjc3NUE2MjQxREZDNjNCRTA0 MTRDOThBRDAeFw0yNTA3MDQxNDUwMjlaFw0yNTA3MDUxNjExMjlaMDMxMTAvBgNV BAMTKDczMkZGNEE2NEQyMjdEOUExRDczMEM4N0Q5NjQ0QTVDRDQwMDFCQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPdhuQn4aL19bCJVut8mcFT0te 0VgPBGfESooqIhMuAOLgVjU2Dw+RpwsfPcz8h2elIg4yAUHzq8Fd/xJxXcKAShJf 6k4wVNe3celFmVcD+AtbgkGHfrhZgReQQE1+6LjXHgInxuQjYOQTg6VX9n9FmsCJ DYeRNbAT4dFvtDQkkGTvu5JGsvfYcbrY19tVKBONsocbH7bcaizmDKhZADnHzaY3 Mc10CeeAg833PSjQqTKYlDAaqw0H+9OSlDsu/BD9W2cpoJB2Bq5mkpOSZq5sGUSU 1EGyiZbblx/i1fqDN2ywAiJe62Q4RK3zplDJmkbkydyVWt/os5u7s/+cOAY3AgMB AAGjggJSMIICTjAdBgNVHQ4EFgQUcy/0pk0ifZodcwyH2WRKXNQAG8MwHwYDVR0j BBgwFoAULywxJAEsB/Z3WmJB38Y74EFMmK0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGU3ZDU1ZjctZWU2MC00MDA1LWJhZDctYjQyODE4Y2Y1 MGU4LzkvMkYyQzMxMjQwMTJDMDdGNjc3NUE2MjQxREZDNjNCRTA0MTRDOThBRC5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL2tyaWxsLjQ3 MjcyLm5ldC9yZXBvL0hZRUhPU1QvNS8yRjJDMzEyNDAxMkMwN0Y2Nzc1QTYyNDFE RkM2M0JFMDQxNEM5OEFELmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2RlN2Q1NWY3LWVlNjAtNDAwNS1iYWQ3LWI0MjgxOGNmNTBlOC85LzJGMkMzMTI0 MDEyQzA3RjY3NzVBNjI0MURGQzYzQkUwNDE0Qzk4QUQubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCHzS10 irANXcr/KGLC15iM5NDNiBwcK5AcOlQRI4PkOYx4eqp3yXIKQdYnFrgUZg9ajqmb Yf6Ufe/Ti0TIcd3IgwYkR/blSzelp44B91eN1DCSn2KTaL5W7KsPndzBbZGVNcWe qD2x4xY4RcFYepbkcOitlUfkt64IFU6v8qqvt3z72v26OTNYlogZImS5pHjUmdOU +0wqKtrfoosRqYta4C3/xpvUf7m8EBaDsfjsHkMPrxeN9FQz8nWb2uPbAJONO6/B pNVnk0xqWZ7XmRr5YjVTBhHqmc+ewUzx6wQEbk9aEw+XJcTnl3hk1R6iyzBXhdfN Ja/5g8Jw/wSY1FQ4 -----END CERTIFICATE-----Generated at Sat Jul 5 06:25:04 2025 by rpki-client