$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.mft File: 09F041F60B21B649820D0FEE0D7654D63DDD080D.mft (raw, json) Hash identifier: ZCSdFa+jkWfx80xKyHgXml+YETr0bDFIQDFf38cRe08= Subject key identifier: 65:54:54:AB:90:A8:B1:23:33:30:77:27:C8:6A:2B:81:C3:B0:15:53 Authority key identifier: 09:F0:41:F6:0B:21:B6:49:82:0D:0F:EE:0D:76:54:D6:3D:DD:08:0D Certificate issuer: /CN=09F041F60B21B649820D0FEE0D7654D63DDD080D Certificate serial: 15BEC7C135C2A9BB739A6BE06F2293FFEE01FB18 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/09F041F60B21B649820D0FEE0D7654D63DDD080D.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.mft Manifest number: 9E Signing time: Sat 14 Jun 2025 17:31:51 +0000 Manifest this update: Sat 14 Jun 2025 17:26:49 +0000 Manifest next update: Sun 15 Jun 2025 20:41:49 +0000 Files and hashes: 1: 09F041F60B21B649820D0FEE0D7654D63DDD080D.crl (hash: wuS6/5mHF4XL5KnKFbgNneL50UVJwFMuMSQPUNiTMas=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/09F041F60B21B649820D0FEE0D7654D63DDD080D.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Jun 2025 16:19:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:be:c7:c1:35:c2:a9:bb:73:9a:6b:e0:6f:22:93:ff:ee:01:fb:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09F041F60B21B649820D0FEE0D7654D63DDD080D Validity Not Before: Jun 14 17:26:49 2025 GMT Not After : Jun 15 20:41:49 2025 GMT Subject: CN=655454AB90A8B12333307727C86A2B81C3B01553 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:4e:61:cd:87:47:78:f2:d6:b6:bb:66:4f:70: 78:14:72:c9:58:41:60:e1:20:5c:30:8b:20:ce:7f: 0b:4b:80:dc:84:14:70:dc:53:6f:77:38:3e:09:e9: ca:8f:82:24:9c:1f:9f:55:73:47:32:5e:92:7c:d2: a6:91:49:b8:3f:99:47:93:76:1f:92:7c:c5:c2:cc: 7f:96:e2:f2:bc:f9:0d:64:06:48:07:af:e6:fe:1c: 22:d6:ec:ef:80:fe:a1:db:ce:ce:7a:89:2e:da:ac: 2c:fc:0c:e8:1c:e1:ce:5f:3d:23:d3:8a:6c:f8:aa: 41:77:5b:1f:99:2d:fa:a5:0d:d8:18:1e:c9:76:5f: 71:10:b6:61:a6:63:e6:fb:1f:68:da:f2:7a:76:7b: ab:17:c4:4a:6f:d4:be:0d:21:51:64:c7:29:01:07: 0d:85:6b:e5:b9:bb:88:09:a8:50:a4:ed:7c:51:37: 1e:79:28:60:25:35:9d:53:54:96:4a:57:1f:5e:52: 2b:ff:d3:09:0b:3e:69:dd:35:04:46:95:0f:aa:59: e4:b1:40:44:3c:1e:af:d0:e4:e7:02:9e:6c:d3:90: 6c:95:55:90:dd:a4:a9:ab:9a:39:91:3d:13:21:f0: b4:92:69:65:22:8d:b8:b4:4e:d3:54:aa:cc:fa:d4: 55:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:54:54:AB:90:A8:B1:23:33:30:77:27:C8:6A:2B:81:C3:B0:15:53 X509v3 Authority Key Identifier: keyid:09:F0:41:F6:0B:21:B6:49:82:0D:0F:EE:0D:76:54:D6:3D:DD:08:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/09F041F60B21B649820D0FEE0D7654D63DDD080D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:37:a9:6f:1c:0a:eb:02:aa:cb:a1:3d:ed:f3:a5:5c:c7:f6: 11:41:e0:a7:96:f9:02:13:31:54:01:54:8f:53:e3:cb:39:9e: cf:a3:15:89:27:bb:9a:88:24:42:12:51:af:5f:0a:1e:77:8c: 65:68:b9:10:41:2f:2e:dd:35:c5:83:1d:bc:63:f7:47:a1:89: de:9a:8b:38:1a:17:5d:2e:eb:2c:ac:bd:21:1d:6b:49:61:55: a2:01:0c:63:8a:42:4a:ef:94:89:53:f2:6a:54:5f:2e:cb:8a: 27:99:80:0d:6e:13:3a:ba:d4:bd:ef:6d:60:e8:38:c8:31:d1: 72:d5:53:7c:82:6c:b4:a1:9a:98:9d:75:69:6c:c3:68:65:09: 89:e7:48:40:79:a1:cb:35:77:c8:d1:b7:61:eb:cc:f4:6e:25: 18:8d:66:d2:64:f4:26:bb:3e:e8:65:e3:9a:4a:71:37:ec:2a: 92:a4:27:08:d0:eb:ed:df:b4:22:6e:71:c8:2b:5d:bf:e3:ba: a0:39:a3:08:b0:48:0a:93:f4:f1:24:f0:c8:72:f1:7b:d0:c5: e8:29:5c:9f:75:af:a8:f7:d3:7b:f3:0d:4a:cb:73:4f:56:8c: d9:71:44:b3:ce:52:93:10:f6:95:cb:88:32:57:88:c0:40:2c: 0e:56:2e:74 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUFb7HwTXCqbtzmmvgbyKT/+4B+xgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDlGMDQxRjYwQjIxQjY0OTgyMEQwRkVFMEQ3NjU0RDYz REREMDgwRDAeFw0yNTA2MTQxNzI2NDlaFw0yNTA2MTUyMDQxNDlaMDMxMTAvBgNV BAMTKDY1NTQ1NEFCOTBBOEIxMjMzMzMwNzcyN0M4NkEyQjgxQzNCMDE1NTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxTmHNh0d48ta2u2ZPcHgUcslY QWDhIFwwiyDOfwtLgNyEFHDcU293OD4J6cqPgiScH59Vc0cyXpJ80qaRSbg/mUeT dh+SfMXCzH+W4vK8+Q1kBkgHr+b+HCLW7O+A/qHbzs56iS7arCz8DOgc4c5fPSPT imz4qkF3Wx+ZLfqlDdgYHsl2X3EQtmGmY+b7H2ja8np2e6sXxEpv1L4NIVFkxykB Bw2Fa+W5u4gJqFCk7XxRNx55KGAlNZ1TVJZKVx9eUiv/0wkLPmndNQRGlQ+qWeSx QEQ8Hq/Q5OcCnmzTkGyVVZDdpKmrmjmRPRMh8LSSaWUijbi0TtNUqsz61FVbAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUZVRUq5CosSMzMHcnyGorgcOwFVMwHwYDVR0j BBgwFoAUCfBB9gshtkmCDQ/uDXZU1j3dCA0wDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzg0OTFkYjgzY2RhNDRjNjFiMDk0MGQwZTNiMGY5ZjZhLzAv MDlGMDQxRjYwQjIxQjY0OTgyMEQwRkVFMEQ3NjU0RDYzREREMDgwRC5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8wOUYwNDFGNjBCMjFCNjQ5ODIwRDBGRUUwRDc2NTRE NjNEREQwODBELmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzg0OTFk YjgzY2RhNDRjNjFiMDk0MGQwZTNiMGY5ZjZhLzAvMDlGMDQxRjYwQjIxQjY0OTgy MEQwRkVFMEQ3NjU0RDYzREREMDgwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAAI3qW8cCusCqsuhPe3z pVzH9hFB4KeW+QITMVQBVI9T48s5ns+jFYknu5qIJEISUa9fCh53jGVouRBBLy7d NcWDHbxj90ehid6aizgaF10u6yysvSEda0lhVaIBDGOKQkrvlIlT8mpUXy7LiieZ gA1uEzq61L3vbWDoOMgx0XLVU3yCbLShmpiddWlsw2hlCYnnSEB5ocs1d8jRt2Hr zPRuJRiNZtJk9Ca7Puhl45pKcTfsKpKkJwjQ6+3ftCJuccgrXb/juqA5owiwSAqT 9PEk8Mhy8XvQxegpXJ91r6j303vzDUrLc09WjNlxRLPOUpMQ9pXLiDJXiMBALA5W LnQ= -----END CERTIFICATE-----Generated at Sun Jun 15 10:29:57 2025 by rpki-client