$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/0/75D2E4BDF4BEFC82AC938ECC346F0B3216597523.mft File: 75D2E4BDF4BEFC82AC938ECC346F0B3216597523.mft (raw, json) Hash identifier: lnX9VEb8X4jaGTfDX1HsugKCf0z/VutMN55egTcsw0c= Subject key identifier: 0C:5F:88:A7:0B:90:C7:85:5D:32:07:99:47:FF:0E:EB:CF:F3:EC:90 Authority key identifier: 75:D2:E4:BD:F4:BE:FC:82:AC:93:8E:CC:34:6F:0B:32:16:59:75:23 Certificate issuer: /CN=75d2e4bdf4befc82ac938ecc346f0b3216597523 Certificate serial: 0878EF7D2817B1C8B5C3D1553D7BD4F3A8231DA8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ddLkvfS-_IKsk47MNG8LMhZZdSM.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/0/75D2E4BDF4BEFC82AC938ECC346F0B3216597523.mft Manifest number: 9D Signing time: Thu 03 Apr 2025 06:34:31 +0000 Manifest this update: Thu 03 Apr 2025 06:29:31 +0000 Manifest next update: Fri 04 Apr 2025 07:54:31 +0000 Files and hashes: 1: 323030313a3637633a6439303a3a2f34382d313238203d3e203437323732.roa (hash: pidPjaC/0SzUTjVt7jeHfSi0+syOL6p0IuoBQSBkar0=) 2: 75D2E4BDF4BEFC82AC938ECC346F0B3216597523.crl (hash: D+a/DVRoBOrbx+e/d3nPwmjD8iLckZ2BDdQecg/zyBQ=) 3: AS47272.asa (hash: V1JO5W+cc6ckYUh1nImJJtFR/jaKow9IHBTPbid4vVM=) 4: 323030313a3637633a6438383a3a2f34382d313238203d3e203437323732.roa (hash: trryrU9wIYmZgEJdzHNYY5h4S9o2VXqY8o0Zi9mSgQo=) 5: 323030313a3637633a6438343a3a2f34382d313238203d3e203437323732.roa (hash: n7zi8erDwVkaEAccTf7AgcxyPGv2dh/rzzppLzmNaTU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/0/75D2E4BDF4BEFC82AC938ECC346F0B3216597523.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/0/75D2E4BDF4BEFC82AC938ECC346F0B3216597523.mft rsync://rpki.ripe.net/repository/DEFAULT/ddLkvfS-_IKsk47MNG8LMhZZdSM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 04 Apr 2025 07:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:78:ef:7d:28:17:b1:c8:b5:c3:d1:55:3d:7b:d4:f3:a8:23:1d:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75d2e4bdf4befc82ac938ecc346f0b3216597523 Validity Not Before: Apr 3 06:29:31 2025 GMT Not After : Apr 4 07:54:31 2025 GMT Subject: CN=0C5F88A70B90C7855D32079947FF0EEBCFF3EC90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:59:e0:5b:4b:3f:5a:83:01:8d:e5:ba:9a:af: 7b:43:f4:bd:4c:3b:a0:97:1c:51:82:97:51:f1:9c: be:0f:ca:d2:47:a7:5c:ad:dc:28:96:7e:cc:98:45: 58:68:2d:1a:ca:5f:ac:5d:f8:3f:a7:69:84:93:da: 4a:82:a1:ee:d1:15:d1:f8:e3:f0:55:2c:30:f4:bb: 4e:99:a6:80:f3:82:ac:7e:a5:14:fa:de:ea:6e:e2: 94:fa:6a:05:5c:5c:b4:ea:e2:23:c1:18:38:f6:7a: 61:76:5f:22:0c:13:ce:e9:da:7a:a9:e8:f1:fe:0a: a8:45:fe:66:25:a9:d7:23:f6:f8:a8:33:09:12:dc: 02:22:70:67:a0:c7:fa:8f:da:43:a6:7f:e6:8b:23: db:f2:0f:f3:3b:bc:73:fb:3d:87:d0:3d:f1:80:eb: 2b:e7:de:8e:1d:6e:33:5c:02:93:3c:9a:aa:c6:c6: 20:2a:ca:c3:f8:72:0c:65:b7:c2:d1:33:fa:f4:67: 1c:ac:1f:fc:73:7e:cc:e1:da:74:ca:7e:28:11:0a: 58:83:73:e6:7c:e5:59:e2:e0:1e:6c:8c:56:43:8a: 3e:22:62:3a:44:ab:a5:4d:cc:15:94:11:9b:db:0c: ff:7f:2f:eb:5e:09:78:bd:5e:59:55:2a:91:9f:0e: e3:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:5F:88:A7:0B:90:C7:85:5D:32:07:99:47:FF:0E:EB:CF:F3:EC:90 X509v3 Authority Key Identifier: keyid:75:D2:E4:BD:F4:BE:FC:82:AC:93:8E:CC:34:6F:0B:32:16:59:75:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/0/75D2E4BDF4BEFC82AC938ECC346F0B3216597523.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ddLkvfS-_IKsk47MNG8LMhZZdSM.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/0/75D2E4BDF4BEFC82AC938ECC346F0B3216597523.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:4f:3e:52:f2:aa:88:cd:a7:fd:cf:63:1e:60:66:cd:fb:76: 9e:c6:25:9a:85:57:7c:70:dd:80:ad:84:0b:a5:aa:28:ac:60: 47:44:d8:40:cf:58:68:25:ba:9c:7e:80:89:d7:7d:af:75:88: cd:95:fb:f3:f8:e4:9b:67:23:f1:af:e9:71:ee:eb:ea:ce:33: 10:b0:78:d3:a4:0d:fe:d4:4d:5e:87:8a:8b:2c:04:3e:7a:85: 70:b6:7b:a4:d8:bd:c8:ed:8c:3a:a0:3d:c2:50:2c:39:9d:98: 9f:ff:45:6f:db:60:ca:77:34:1c:8d:3c:f8:89:a8:51:f7:a9: 59:a7:27:ee:c5:19:77:01:50:39:ba:5f:bd:e2:85:e1:c3:eb: 06:e5:2e:36:e4:db:42:df:13:0e:78:d5:af:c0:80:21:70:7f: 7d:8e:38:19:af:2b:53:f4:0b:5b:42:fd:80:d3:14:27:8b:cb: 1d:9f:b3:b3:fd:92:42:9e:1a:84:8c:35:ec:0d:c1:34:0d:74: e2:c8:7b:6b:02:9c:47:93:a8:bd:3e:5b:cb:c7:63:75:0f:de: 18:2b:3c:fc:fc:9d:cf:21:d3:6d:e0:94:18:7d:57:50:4c:4a: 6c:00:a6:bd:6e:3a:bd:9d:0f:ab:c1:87:e2:5f:10:31:bf:57: 3b:b4:e5:e5 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUCHjvfSgXsci1w9FVPXvU86gjHagwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzVkMmU0YmRmNGJlZmM4MmFjOTM4ZWNjMzQ2ZjBiMzIx NjU5NzUyMzAeFw0yNTA0MDMwNjI5MzFaFw0yNTA0MDQwNzU0MzFaMDMxMTAvBgNV BAMTKDBDNUY4OEE3MEI5MEM3ODU1RDMyMDc5OTQ3RkYwRUVCQ0ZGM0VDOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/WeBbSz9agwGN5bqar3tD9L1M O6CXHFGCl1HxnL4PytJHp1yt3CiWfsyYRVhoLRrKX6xd+D+naYST2kqCoe7RFdH4 4/BVLDD0u06ZpoDzgqx+pRT63upu4pT6agVcXLTq4iPBGDj2emF2XyIME87p2nqp 6PH+CqhF/mYlqdcj9vioMwkS3AIicGegx/qP2kOmf+aLI9vyD/M7vHP7PYfQPfGA 6yvn3o4dbjNcApM8mqrGxiAqysP4cgxlt8LRM/r0ZxysH/xzfszh2nTKfigRCliD c+Z85Vni4B5sjFZDij4iYjpEq6VNzBWUEZvbDP9/L+teCXi9XllVKpGfDuOhAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUDF+IpwuQx4VdMgeZR/8O68/z7JAwHwYDVR0j BBgwFoAUddLkvfS+/IKsk47MNG8LMhZZdSMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjc5NDg3MzgtMzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5 OTVkLzAvNzVEMkU0QkRGNEJFRkM4MkFDOTM4RUNDMzQ2RjBCMzIxNjU5NzUyMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RkTGt2ZlMtX0lLc2s0N01ORzhMTWha WmRTTS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNzk0ODczOC0z MjU1LTQ5ZjktOWI2Yy05YzlmMzg5ODk5NWQvMC83NUQyRTRCREY0QkVGQzgyQUM5 MzhFQ0MzNDZGMEIzMjE2NTk3NTIzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAU8+UvKqiM2n/c9jHmBm zft2nsYlmoVXfHDdgK2EC6WqKKxgR0TYQM9YaCW6nH6Aidd9r3WIzZX78/jkm2cj 8a/pce7r6s4zELB406QN/tRNXoeKiywEPnqFcLZ7pNi9yO2MOqA9wlAsOZ2Yn/9F b9tgync0HI08+ImoUfepWacn7sUZdwFQObpfveKF4cPrBuUuNuTbQt8TDnjVr8CA IXB/fY44Ga8rU/QLW0L9gNMUJ4vLHZ+zs/2SQp4ahIw17A3BNA104sh7awKcR5Oo vT5by8djdQ/eGCs8/PydzyHTbeCUGH1XUExKbACmvW46vZ0Pq8GH4l8QMb9XO7Tl 5Q== -----END CERTIFICATE-----Generated at Thu Apr 3 11:12:06 2025 by rpki-client