$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft File: 4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft (raw, json) Hash identifier: Xf+waEv2A5wED/87hvyTkT98k5eTRusF9BjdbsnJUO8= Subject key identifier: 7E:45:93:CF:D8:1D:8B:BC:6D:0B:3F:D4:7D:E7:8E:34:EE:EB:66:3E Authority key identifier: 4B:A4:51:1F:4B:81:C5:65:CE:D3:E7:0B:30:20:FB:D0:ED:05:56:2F Certificate issuer: /CN=4BA4511F4B81C565CED3E70B3020FBD0ED05562F Certificate serial: 5CEE1B2E79F4DD79150E5B0A0B63B17A8E75B596 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft Manifest number: 01D0 Signing time: Sat 14 Jun 2025 19:35:00 +0000 Manifest this update: Sat 14 Jun 2025 19:29:58 +0000 Manifest next update: Sun 15 Jun 2025 22:48:58 +0000 Files and hashes: 1: 4BA4511F4B81C565CED3E70B3020FBD0ED05562F.crl (hash: 5JHWOz9HnGdj2luMpX0RvFGPkNh3twbixOHFucwhQEI=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Jun 2025 16:19:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:ee:1b:2e:79:f4:dd:79:15:0e:5b:0a:0b:63:b1:7a:8e:75:b5:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BA4511F4B81C565CED3E70B3020FBD0ED05562F Validity Not Before: Jun 14 19:29:58 2025 GMT Not After : Jun 15 22:48:58 2025 GMT Subject: CN=7E4593CFD81D8BBC6D0B3FD47DE78E34EEEB663E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:39:b0:78:0b:a8:f2:da:47:b3:09:07:d8:df: 42:4a:d3:4c:1c:5d:bf:75:e7:84:c5:a9:03:f2:22: 5d:85:a0:72:7a:fe:da:b6:08:59:20:4e:fa:6a:fa: 35:05:ab:4f:ac:1e:8b:88:41:f3:4e:8d:55:e0:ec: 87:2b:ec:2b:19:64:ac:21:84:30:63:28:50:6a:28: d3:05:de:7c:c6:26:b7:2a:a6:cb:3e:a1:8f:de:ab: f3:ea:c0:e6:f9:45:1b:76:50:40:90:09:cc:62:9d: 3b:b5:3b:6f:4d:3a:6a:af:94:6f:af:7f:6f:72:00: 58:9c:a2:b8:b5:fc:1b:27:c3:b4:24:9f:9c:9b:c8: fe:cb:7c:8d:21:8d:9a:75:fa:dc:24:c2:0f:86:0a: 60:90:5f:03:75:59:85:4d:1f:87:70:ce:6c:ef:ad: 16:6a:77:ee:82:fb:c1:38:ab:b9:1c:52:7e:4f:89: a0:13:b5:65:3f:20:4e:92:3e:15:00:15:be:e1:c6: da:81:e2:d4:af:d0:18:b4:50:d7:5b:39:4e:61:e6: b6:6b:95:c3:b8:3c:74:e1:81:7a:b4:fa:79:6f:a2: f5:ff:25:fc:ed:ec:19:50:67:c7:4d:e4:c3:ec:e6: a7:a2:af:9d:71:1f:a5:b8:b5:15:9b:82:44:ba:a4: b9:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:45:93:CF:D8:1D:8B:BC:6D:0B:3F:D4:7D:E7:8E:34:EE:EB:66:3E X509v3 Authority Key Identifier: keyid:4B:A4:51:1F:4B:81:C5:65:CE:D3:E7:0B:30:20:FB:D0:ED:05:56:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:7a:17:35:7e:79:08:25:69:b6:c5:89:d2:59:41:8b:c3:53: ed:71:4c:a0:5f:0b:e0:76:4b:7c:d5:f1:68:91:99:d6:a4:13: 31:cf:13:99:21:80:db:f8:81:17:93:22:dc:dc:ff:6c:06:2a: a1:ed:e8:f3:be:e4:a2:71:1f:9c:74:52:80:8c:7e:d9:60:38: bf:7a:f4:44:5d:fe:92:46:65:33:bf:44:45:e6:ff:de:da:b4: 59:79:db:4e:7c:d9:0f:f9:65:11:f1:d9:22:5f:9a:bd:1c:c5: 53:1e:b9:53:38:af:29:1a:50:32:e5:af:59:f0:61:dd:25:ea: 43:36:65:57:b1:fb:0c:d2:d3:ec:62:14:d3:ad:dd:d8:1d:e9: 13:91:ef:99:49:e3:11:e4:4a:40:a9:68:56:5a:53:4f:8d:9e: 87:1a:e1:d7:71:49:e6:44:10:a9:65:bd:18:6f:03:8d:51:54: 57:3e:8c:b3:86:be:2a:bc:12:5f:bd:4e:c0:a4:d6:56:9d:9b: e3:c8:6d:74:dd:3b:42:02:b4:32:42:a9:1e:6a:6e:3f:08:98: f3:a2:5a:a2:2d:9a:b3:94:04:dc:a0:7d:97:d9:cb:2d:9f:f8: 3a:9e:16:82:c3:c7:12:91:b7:74:c4:c3:5a:c4:d5:be:2c:c9: 9a:4f:71:bb -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUXO4bLnn03XkVDlsKC2Oxeo51tZYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJBNDUxMUY0QjgxQzU2NUNFRDNFNzBCMzAyMEZCRDBF RDA1NTYyRjAeFw0yNTA2MTQxOTI5NThaFw0yNTA2MTUyMjQ4NThaMDMxMTAvBgNV BAMTKDdFNDU5M0NGRDgxRDhCQkM2RDBCM0ZENDdERTc4RTM0RUVFQjY2M0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8ObB4C6jy2kezCQfY30JK00wc Xb9154TFqQPyIl2FoHJ6/tq2CFkgTvpq+jUFq0+sHouIQfNOjVXg7Icr7CsZZKwh hDBjKFBqKNMF3nzGJrcqpss+oY/eq/PqwOb5RRt2UECQCcxinTu1O29NOmqvlG+v f29yAFicori1/Bsnw7Qkn5ybyP7LfI0hjZp1+twkwg+GCmCQXwN1WYVNH4dwzmzv rRZqd+6C+8E4q7kcUn5PiaATtWU/IE6SPhUAFb7hxtqB4tSv0Bi0UNdbOU5h5rZr lcO4PHThgXq0+nlvovX/Jfzt7BlQZ8dN5MPs5qeir51xH6W4tRWbgkS6pLljAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUfkWTz9gdi7xtCz/UfeeONO7rZj4wHwYDVR0j BBgwFoAUS6RRH0uBxWXO0+cLMCD70O0FVi8wDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzk3M2U3YTk4YTcxYjQ5ZmZiYjIyYjc2ZWQ1ZjEyOWUyLzAv NEJBNDUxMUY0QjgxQzU2NUNFRDNFNzBCMzAyMEZCRDBFRDA1NTYyRi5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy80QkE0NTExRjRCODFDNTY1Q0VEM0U3MEIzMDIwRkJE MEVEMDU1NjJGLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzk3M2U3 YTk4YTcxYjQ5ZmZiYjIyYjc2ZWQ1ZjEyOWUyLzAvNEJBNDUxMUY0QjgxQzU2NUNF RDNFNzBCMzAyMEZCRDBFRDA1NTYyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAHh6FzV+eQglabbFidJZ QYvDU+1xTKBfC+B2S3zV8WiRmdakEzHPE5khgNv4gReTItzc/2wGKqHt6PO+5KJx H5x0UoCMftlgOL969ERd/pJGZTO/REXm/97atFl520582Q/5ZRHx2SJfmr0cxVMe uVM4rykaUDLlr1nwYd0l6kM2ZVex+wzS0+xiFNOt3dgd6ROR75lJ4xHkSkCpaFZa U0+Nnoca4ddxSeZEEKllvRhvA41RVFc+jLOGviq8El+9TsCk1ladm+PIbXTdO0IC tDJCqR5qbj8ImPOiWqItmrOUBNygfZfZyy2f+DqeFoLDxxKRt3TEw1rE1b4syZpP cbs= -----END CERTIFICATE-----Generated at Sat Jun 14 23:58:17 2025 by rpki-client