$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft File: 4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft (raw, json) Hash identifier: 8Y9KVVJe7x3GanuIh31Q08ojJPtjePu/MbchR3LuazY= Subject key identifier: AB:59:DE:8C:C0:A1:5F:0A:D4:46:C8:05:D4:6B:17:D1:C2:45:72:1E Authority key identifier: 4B:A4:51:1F:4B:81:C5:65:CE:D3:E7:0B:30:20:FB:D0:ED:05:56:2F Certificate issuer: /CN=4BA4511F4B81C565CED3E70B3020FBD0ED05562F Certificate serial: 5F57E3E13C14216BD37ADEF58602F572B7A4F20D Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft Manifest number: 0275 Signing time: Wed 05 Nov 2025 02:54:32 +0000 Manifest this update: Wed 05 Nov 2025 02:49:32 +0000 Manifest next update: Thu 06 Nov 2025 03:57:32 +0000 Files and hashes: 1: 4BA4511F4B81C565CED3E70B3020FBD0ED05562F.crl (hash: zYlTqVDU/bUmqwl5rCOdXi2liUZc4Q5lgoqP716EyF0=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 06 Nov 2025 03:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:57:e3:e1:3c:14:21:6b:d3:7a:de:f5:86:02:f5:72:b7:a4:f2:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BA4511F4B81C565CED3E70B3020FBD0ED05562F Validity Not Before: Nov 5 02:49:32 2025 GMT Not After : Nov 6 03:57:32 2025 GMT Subject: CN=AB59DE8CC0A15F0AD446C805D46B17D1C245721E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:27:5f:47:7a:21:d5:86:81:c3:19:d9:b0:8c: eb:48:b7:96:a8:ef:62:1c:8d:38:b5:6a:e2:94:2c: c7:3c:bf:80:00:7f:98:16:56:e2:9c:13:e4:9d:2e: 2d:d0:fe:c4:db:c6:9c:99:88:5c:ea:1f:ac:95:f7: 41:21:39:8e:83:51:4e:7e:b2:82:9f:36:6e:b6:cb: 81:19:69:fc:e4:d1:06:d2:34:b5:68:f6:38:56:e9: b8:27:4b:13:d5:61:7a:87:97:97:83:f1:4f:61:fe: c2:60:66:37:3f:59:91:4b:d5:4f:f0:e7:64:0d:dd: 98:b2:cc:2d:c5:de:40:60:ef:c8:55:8f:6e:be:0d: 51:64:af:22:00:36:ed:ac:c8:18:27:37:37:d8:32: bd:9d:5c:52:1a:96:87:d8:dd:e5:7a:e8:8d:e3:3f: dd:39:3b:69:2b:c3:61:44:b8:d4:8b:1c:71:c8:90: 4b:1f:61:38:a8:7a:42:1c:46:52:d8:ff:b4:cf:aa: e3:cc:ac:76:dd:fb:6a:8d:5d:d9:bf:9d:a5:d9:c8: 42:81:9e:a9:75:fa:2d:8a:b6:73:6c:ac:66:6d:c0: c2:f7:72:94:13:d4:ad:bf:69:db:01:6d:fd:cc:39: 8b:64:bf:dc:0d:c0:08:c4:8c:72:ca:37:87:93:6b: 27:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:59:DE:8C:C0:A1:5F:0A:D4:46:C8:05:D4:6B:17:D1:C2:45:72:1E X509v3 Authority Key Identifier: keyid:4B:A4:51:1F:4B:81:C5:65:CE:D3:E7:0B:30:20:FB:D0:ED:05:56:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:e3:b3:c9:91:4f:8b:51:20:bf:2c:4f:fa:e5:38:2b:14:8e: 09:91:92:39:1c:58:a2:ac:51:a1:67:6a:41:8a:a0:60:d7:a3: f3:6d:07:26:bd:0a:d0:a0:57:64:6a:82:8d:49:12:ab:07:8f: 0d:70:9b:4f:cf:97:28:0f:c5:13:1d:55:ca:ac:d8:97:e5:02: 6f:7c:43:68:d9:15:ca:a5:ff:b0:e4:2c:df:65:e8:01:c8:93: 0d:5f:9e:d5:fa:fb:0d:de:f6:ae:ad:e9:d9:6f:72:0f:b3:dc: 58:16:ae:60:af:4c:1a:ec:25:e0:e1:d2:15:73:85:d5:9b:32: 5a:74:03:26:06:eb:b8:b7:24:c5:98:99:74:3a:87:fd:a7:c7: 6e:4a:ab:8e:3e:54:bb:fc:e5:05:2a:7c:35:c3:79:b9:69:4e: 7e:98:5d:85:f2:61:9f:4a:9a:e9:25:d3:0f:f2:82:37:80:51: 8e:aa:c6:58:2c:69:2d:a3:0a:66:a2:e6:ac:e7:df:89:bf:97: 37:45:17:fc:b2:a1:fa:b4:06:1f:97:5d:07:38:61:58:29:b1: 9b:01:3b:8e:a6:88:4e:ab:cd:e5:90:7f:cb:b6:58:46:55:96: 50:f1:bc:85:b9:d9:40:45:08:22:2f:c9:5d:c6:7c:75:99:3a: 3d:b3:dd:47 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUX1fj4TwUIWvTet71hgL1crek8g0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJBNDUxMUY0QjgxQzU2NUNFRDNFNzBCMzAyMEZCRDBF RDA1NTYyRjAeFw0yNTExMDUwMjQ5MzJaFw0yNTExMDYwMzU3MzJaMDMxMTAvBgNV BAMTKEFCNTlERThDQzBBMTVGMEFENDQ2QzgwNUQ0NkIxN0QxQzI0NTcyMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJJ19HeiHVhoHDGdmwjOtIt5ao 72IcjTi1auKULMc8v4AAf5gWVuKcE+SdLi3Q/sTbxpyZiFzqH6yV90EhOY6DUU5+ soKfNm62y4EZafzk0QbSNLVo9jhW6bgnSxPVYXqHl5eD8U9h/sJgZjc/WZFL1U/w 52QN3ZiyzC3F3kBg78hVj26+DVFkryIANu2syBgnNzfYMr2dXFIalofY3eV66I3j P905O2krw2FEuNSLHHHIkEsfYTioekIcRlLY/7TPquPMrHbd+2qNXdm/naXZyEKB nql1+i2KtnNsrGZtwML3cpQT1K2/adsBbf3MOYtkv9wNwAjEjHLKN4eTaycPAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUq1nejMChXwrURsgF1GsX0cJFch4wHwYDVR0j BBgwFoAUS6RRH0uBxWXO0+cLMCD70O0FVi8wDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzk3M2U3YTk4YTcxYjQ5ZmZiYjIyYjc2ZWQ1ZjEyOWUyLzAv NEJBNDUxMUY0QjgxQzU2NUNFRDNFNzBCMzAyMEZCRDBFRDA1NTYyRi5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy80QkE0NTExRjRCODFDNTY1Q0VEM0U3MEIzMDIwRkJE MEVEMDU1NjJGLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzk3M2U3 YTk4YTcxYjQ5ZmZiYjIyYjc2ZWQ1ZjEyOWUyLzAvNEJBNDUxMUY0QjgxQzU2NUNF RDNFNzBCMzAyMEZCRDBFRDA1NTYyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAGPjs8mRT4tRIL8sT/rl OCsUjgmRkjkcWKKsUaFnakGKoGDXo/NtBya9CtCgV2Rqgo1JEqsHjw1wm0/PlygP xRMdVcqs2JflAm98Q2jZFcql/7DkLN9l6AHIkw1fntX6+w3e9q6t6dlvcg+z3FgW rmCvTBrsJeDh0hVzhdWbMlp0AyYG67i3JMWYmXQ6h/2nx25Kq44+VLv85QUqfDXD eblpTn6YXYXyYZ9Kmukl0w/ygjeAUY6qxlgsaS2jCmai5qzn34m/lzdFF/yyofq0 Bh+XXQc4YVgpsZsBO46miE6rzeWQf8u2WEZVllDxvIW52UBFCCIvyV3GfHWZOj2z 3Uc= -----END CERTIFICATE-----Generated at Wed Nov 5 09:30:50 2025 by rpki-client