$ rpki-client -vvf rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft File: 4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft (raw, json) Hash identifier: mNn9TN/wiJXdih3ym2zQU72BKaZikANiBGzysnEFJLQ= Subject key identifier: 54:17:3C:8C:9B:BE:94:C0:07:1C:9F:93:E8:B9:95:1B:78:6C:06:21 Authority key identifier: 4E:9A:6C:18:F3:49:B3:95:C3:1C:33:BB:7F:9B:9F:58:17:BD:E9:A8 Certificate issuer: /CN=4e9a6c18f349b395c31c33bb7f9b9f5817bde9a8 Certificate serial: 7C2DEFD4CF0BD0BAD3A9C9C166D82B90442C7DEB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer Subject info access: rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft Manifest number: A7 Signing time: Tue 29 Apr 2025 15:54:48 +0000 Manifest this update: Tue 29 Apr 2025 15:49:48 +0000 Manifest next update: Wed 30 Apr 2025 18:53:48 +0000 Files and hashes: 1: 3138352e3230342e31342e302f32332d3233203d3e20323033393339.roa (hash: 0iU1VE4oIBeR0g+kEvaxFQYjnK8h1fW0reMHFIiSAYk=) 2: 3138352e3230342e31322e302f32332d3233203d3e203631393631.roa (hash: 05KBv20ho05+9nNhARljl3KvN1w1xbUcP6YBmhidjZI=) 3: 323030313a3637383a3565343a3a2f34382d3438203d3e20323034303132.roa (hash: aQtSJ+DrPdjI6tdPjH35DjDz8hbObLwmapnYguKW8IE=) 4: 323030313a3637383a3565343a3a2f34382d3438203d3e20343031353531.roa (hash: 4UYrDw3R1HMApdgBpMB/GcyfbyVxIeygboeA0NGcRKA=) 5: 326130613a663034303a3a2f32392d3239203d3e203631393631.roa (hash: n9oD82N/Oc74KjefJWuXbdniXyTRuYdzVFV6P1uLFxM=) 6: 323030313a3637383a3565343a3a2f34382d3438203d3e203631393631.roa (hash: 9lXsRq2vH27QU6oONZHHcOI2KgKrR7I1qDb4jmPN0NI=) 7: 4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl (hash: gaDsong+F73VNBHTTYxgqwZQ8J6Mg0+iB8WTNeJyt+c=) Validation: OK Signature path: rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 30 Apr 2025 15:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:2d:ef:d4:cf:0b:d0:ba:d3:a9:c9:c1:66:d8:2b:90:44:2c:7d:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e9a6c18f349b395c31c33bb7f9b9f5817bde9a8 Validity Not Before: Apr 29 15:49:48 2025 GMT Not After : Apr 30 18:53:48 2025 GMT Subject: CN=54173C8C9BBE94C0071C9F93E8B9951B786C0621 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1c:41:c7:38:12:d9:45:6c:8e:18:1b:d5:8f: f6:3d:37:7e:90:11:b0:14:b8:f2:01:d5:31:37:88: 6f:1f:7f:52:d5:84:9d:4f:a0:2c:9c:84:05:bb:6e: 0c:17:37:de:54:91:3b:e7:68:86:4e:a0:dd:3a:a3: 45:5e:5f:da:2d:75:ae:20:ef:a9:8c:31:b9:b7:9c: 5b:07:11:20:b3:09:ab:80:df:a0:af:d7:62:5c:99: 75:90:e5:7a:80:fa:24:2b:70:40:df:ab:62:1b:b4: f8:11:7b:ca:50:91:01:d4:cb:7e:99:88:53:f9:c5: b6:cc:e8:03:0c:d1:71:4f:b0:82:db:81:f7:cb:a7: 8a:a9:92:97:bc:13:b1:d1:59:2b:9a:c2:ee:ff:31: ec:cf:3f:4e:c5:5f:dd:7f:0c:9c:66:a6:43:88:54: c8:c3:76:17:be:2d:a6:2b:33:74:3f:36:fb:d7:ff: 41:2b:8b:50:cd:26:e7:92:a0:f8:11:04:1e:b5:a6: c4:a9:15:2b:e8:07:dc:1c:48:39:9c:a0:c5:b5:db: c2:e2:df:d5:a1:1b:9c:22:17:e8:f9:02:fc:a4:f2: b0:83:69:f6:d3:33:dc:8a:8f:3e:1d:6d:8d:a0:ec: 4c:42:43:9d:eb:4c:4a:4b:10:33:83:84:17:07:9a: d5:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:17:3C:8C:9B:BE:94:C0:07:1C:9F:93:E8:B9:95:1B:78:6C:06:21 X509v3 Authority Key Identifier: keyid:4E:9A:6C:18:F3:49:B3:95:C3:1C:33:BB:7F:9B:9F:58:17:BD:E9:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer Subject Information Access: Signed Object - URI:rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:ed:65:06:ab:f4:9a:35:45:a4:27:e6:b8:84:a4:a5:3d:22: 80:b5:80:45:4a:70:5d:be:d3:e4:83:14:c2:5e:fd:46:b3:55: 1a:60:fb:8d:d5:30:6f:e3:3d:b7:7c:26:08:3b:54:1c:6a:d2: c8:f1:25:6b:51:bc:4e:ff:c0:82:9d:dc:d7:ed:18:04:cb:11: 0f:61:7c:1d:54:aa:e8:c5:d0:dc:eb:b3:8d:3a:59:65:98:11: f4:c8:45:6c:d5:27:34:06:7f:b2:2f:d6:db:d2:a1:87:db:b7: 34:bf:82:41:b0:c0:65:cf:4b:5f:c2:5e:dd:77:dc:c7:a3:cd: f0:54:b1:2e:97:89:e7:3b:b6:1d:3c:df:9a:8a:24:00:fc:ee: f8:b7:7d:56:ce:ab:18:39:85:cc:76:d9:17:de:88:90:b3:4d: 51:c9:af:64:33:80:b5:96:20:cd:eb:6a:8b:01:9d:a2:ab:25: ae:cd:f7:0c:76:1c:dc:e5:93:f7:63:b4:e0:0d:12:82:7a:ef: 51:ed:a2:aa:f2:35:e1:e9:1d:ad:7c:9e:22:f8:5b:4b:6b:25: b8:fe:22:54:a4:e7:14:18:dd:7f:b1:49:99:e7:e6:ea:d1:c4: 56:05:42:4b:cf:ae:05:84:cf:0b:a7:aa:a4:8f:ea:8f:21:1a: bc:6b:cd:8f -----BEGIN CERTIFICATE----- MIIE4TCCA8mgAwIBAgIUfC3v1M8L0LrTqcnBZtgrkEQsfeswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGU5YTZjMThmMzQ5YjM5NWMzMWMzM2JiN2Y5YjlmNTgx N2JkZTlhODAeFw0yNTA0MjkxNTQ5NDhaFw0yNTA0MzAxODUzNDhaMDMxMTAvBgNV BAMTKDU0MTczQzhDOUJCRTk0QzAwNzFDOUY5M0U4Qjk5NTFCNzg2QzA2MjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIHEHHOBLZRWyOGBvVj/Y9N36Q EbAUuPIB1TE3iG8ff1LVhJ1PoCychAW7bgwXN95UkTvnaIZOoN06o0VeX9otda4g 76mMMbm3nFsHESCzCauA36Cv12JcmXWQ5XqA+iQrcEDfq2IbtPgRe8pQkQHUy36Z iFP5xbbM6AMM0XFPsILbgffLp4qpkpe8E7HRWSuawu7/MezPP07FX91/DJxmpkOI VMjDdhe+LaYrM3Q/NvvX/0Eri1DNJueSoPgRBB61psSpFSvoB9wcSDmcoMW128Li 39WhG5wiF+j5Avyk8rCDafbTM9yKjz4dbY2g7ExCQ53rTEpLEDODhBcHmtWTAgMB AAGjggHrMIIB5zAdBgNVHQ4EFgQUVBc8jJu+lMAHHJ+T6LmVG3hsBiEwHwYDVR0j BBgwFoAUTppsGPNJs5XDHDO7f5ufWBe96agwDgYDVR0PAQH/BAQDAgeAMGcGA1Ud HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraS5uZWxsaWN1cy5uZXQvcmVwby9uZWxs aWN1cy8xLzRFOUE2QzE4RjM0OUIzOTVDMzFDMzNCQjdGOUI5RjU4MTdCREU5QTgu Y3JsMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJp cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9UcHBzR1BOSnM1WERIRE83ZjV1ZldC ZTk2YWcuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9y cGtpLm5lbGxpY3VzLm5ldC9yZXBvL25lbGxpY3VzLzEvNEU5QTZDMThGMzQ5QjM5 NUMzMUMzM0JCN0Y5QjlGNTgxN0JERTlBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsG AQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBACztZQar9Jo1RaQn 5riEpKU9IoC1gEVKcF2+0+SDFMJe/UazVRpg+43VMG/jPbd8Jgg7VBxq0sjxJWtR vE7/wIKd3NftGATLEQ9hfB1UqujF0Nzrs406WWWYEfTIRWzVJzQGf7Iv1tvSoYfb tzS/gkGwwGXPS1/CXt133MejzfBUsS6Xiec7th0835qKJAD87vi3fVbOqxg5hcx2 2RfeiJCzTVHJr2QzgLWWIM3raosBnaKrJa7N9wx2HNzlk/djtOANEoJ671Htoqry NeHpHa18niL4W0trJbj+IlSk5xQY3X+xSZnn5urRxFYFQkvPrgWEzwunqqSP6o8h GrxrzY8= -----END CERTIFICATE-----Generated at Tue Apr 29 23:39:29 2025 by rpki-client