$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3eafc32b-ec03-4319-b1c6-3c1c4727e06f/0/27851163005F59C06E35A8FD365F96356EB34971.mft File: 27851163005F59C06E35A8FD365F96356EB34971.mft (raw, json) Hash identifier: HRYiH2PZGzkBl68/J/OygptiCSjgRdMDiWuoo8HcqeU= Subject key identifier: 49:0D:06:72:B6:70:04:85:AA:65:66:6A:B4:AD:55:2C:F0:AC:FB:F0 Authority key identifier: 27:85:11:63:00:5F:59:C0:6E:35:A8:FD:36:5F:96:35:6E:B3:49:71 Certificate issuer: /CN=27851163005f59c06e35a8fd365f96356eb34971 Certificate serial: 209C2686D7C096B659F929FCEFAF2AB955987152 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J4URYwBfWcBuNaj9Nl-WNW6zSXE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3eafc32b-ec03-4319-b1c6-3c1c4727e06f/0/27851163005F59C06E35A8FD365F96356EB34971.mft Manifest number: 7D Signing time: Sun 27 Apr 2025 03:44:52 +0000 Manifest this update: Sun 27 Apr 2025 03:39:52 +0000 Manifest next update: Mon 28 Apr 2025 05:41:52 +0000 Files and hashes: 1: 27851163005F59C06E35A8FD365F96356EB34971.crl (hash: PK24ep0knfHFE2ecyoAZgrkz3abHEmZ+V4obC1Dc5sM=) 2: 323030313a3637633a6638633a3a2f34382d3438203d3e20323132383535.roa (hash: prfcq9YIMAg2ry1iZCXqsMkFnalbT+MPZdyoUmwmw6g=) 3: AS212855.asa (hash: T3YdrgEJ1P9IU1IPBHUKuz7lJiYzWWWbNO7fDdrADAU=) 4: 39332e3135372e3134302e302f32342d3234203d3e20323132383535.roa (hash: hdp9Cx8dMbvUUOjRrqy1XfSIVtsUnXM8OZnay1usHT4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3eafc32b-ec03-4319-b1c6-3c1c4727e06f/0/27851163005F59C06E35A8FD365F96356EB34971.crl rsync://rsync.paas.rpki.ripe.net/repository/3eafc32b-ec03-4319-b1c6-3c1c4727e06f/0/27851163005F59C06E35A8FD365F96356EB34971.mft rsync://rpki.ripe.net/repository/DEFAULT/J4URYwBfWcBuNaj9Nl-WNW6zSXE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Apr 2025 05:41:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:9c:26:86:d7:c0:96:b6:59:f9:29:fc:ef:af:2a:b9:55:98:71:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27851163005f59c06e35a8fd365f96356eb34971 Validity Not Before: Apr 27 03:39:52 2025 GMT Not After : Apr 28 05:41:52 2025 GMT Subject: CN=490D0672B6700485AA65666AB4AD552CF0ACFBF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:4f:80:b4:63:58:43:0d:6e:4c:f0:50:31:28: 1a:12:2f:08:76:f5:8f:e5:63:29:04:c4:03:82:42: 7f:ca:db:52:d9:15:42:d9:e1:09:41:c2:ba:f3:9c: 0c:7b:63:f2:a7:70:3d:7f:95:03:a4:32:f4:7d:b8: cc:83:6a:98:f5:a2:7a:3d:ac:9a:61:3b:22:b0:62: 18:1c:51:c4:6d:a4:5b:6f:4f:c9:94:26:c5:ae:f3: 34:3b:08:5f:99:38:33:8d:8c:e5:24:19:55:8b:6a: 85:31:8e:37:a2:69:de:3e:9d:aa:23:a9:83:1e:63: 0b:74:76:42:4d:41:e1:f8:da:37:49:8a:a8:48:07: 1d:8f:80:0f:e4:3f:f6:e6:a0:15:8c:5e:e7:a1:e8: a1:91:bd:8f:5d:b9:26:e3:60:2e:9a:08:54:65:c6: 59:f0:ac:bf:fe:0b:b0:73:af:ef:5e:b8:94:47:30: 64:00:88:98:35:61:f1:97:30:56:07:93:d8:da:be: 2f:b1:2a:d1:03:13:98:0e:71:89:75:32:84:02:fb: 06:d2:16:11:6a:3d:cd:f7:60:25:8d:dd:2e:66:73: 3b:ee:81:59:0a:51:6f:fb:31:52:e3:dc:a0:85:79: 6c:b3:97:fa:bd:56:65:08:cc:0a:65:ea:a7:03:4e: a9:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:0D:06:72:B6:70:04:85:AA:65:66:6A:B4:AD:55:2C:F0:AC:FB:F0 X509v3 Authority Key Identifier: keyid:27:85:11:63:00:5F:59:C0:6E:35:A8:FD:36:5F:96:35:6E:B3:49:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3eafc32b-ec03-4319-b1c6-3c1c4727e06f/0/27851163005F59C06E35A8FD365F96356EB34971.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4URYwBfWcBuNaj9Nl-WNW6zSXE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3eafc32b-ec03-4319-b1c6-3c1c4727e06f/0/27851163005F59C06E35A8FD365F96356EB34971.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:49:3e:d8:39:f3:fd:d7:4b:2d:0b:cf:1c:6d:11:e9:57:85: 28:37:0a:79:d1:24:dc:03:b7:d0:40:33:32:17:9e:d7:47:ec: da:a0:d4:69:19:85:23:2c:02:66:3f:43:31:a9:01:26:64:40: b4:01:bd:34:7a:6d:3b:bf:22:ee:78:47:2b:8a:f4:da:97:08: 6c:e6:78:b9:99:85:2c:af:e3:7f:58:67:36:e2:e7:ef:52:ff: 11:68:54:a9:83:f1:90:3b:d5:45:a8:8b:a7:59:18:01:49:7b: 19:1b:c1:05:d9:05:dc:c5:a6:97:a8:63:e8:49:55:68:30:bc: f9:bd:a7:4a:fd:cb:16:fb:84:ba:7d:b1:63:c7:a6:62:46:6f: 82:8a:d7:01:bf:ac:34:46:d0:00:c2:37:f5:89:ee:34:ef:7a: ed:f4:5e:98:8d:2b:a4:e1:58:41:4a:7f:75:f5:ae:61:bb:40: b6:b7:6a:fe:15:e5:3f:e4:2d:72:ef:1f:cb:d9:2d:bf:ab:c9: 46:b2:45:2a:8a:f8:52:ad:81:5d:d8:64:6e:1f:f9:21:da:df: ed:cc:71:9b:53:8e:3b:c4:76:cd:ab:ca:6f:a7:c9:47:30:6a: 5a:3d:a6:cd:47:a7:b8:09:32:c0:c2:ad:71:99:6a:c3:ed:c0: c1:23:91:76 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUIJwmhtfAlrZZ+Sn8768quVWYcVIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjc4NTExNjMwMDVmNTljMDZlMzVhOGZkMzY1Zjk2MzU2 ZWIzNDk3MTAeFw0yNTA0MjcwMzM5NTJaFw0yNTA0MjgwNTQxNTJaMDMxMTAvBgNV BAMTKDQ5MEQwNjcyQjY3MDA0ODVBQTY1NjY2QUI0QUQ1NTJDRjBBQ0ZCRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzT4C0Y1hDDW5M8FAxKBoSLwh2 9Y/lYykExAOCQn/K21LZFULZ4QlBwrrznAx7Y/KncD1/lQOkMvR9uMyDapj1ono9 rJphOyKwYhgcUcRtpFtvT8mUJsWu8zQ7CF+ZODONjOUkGVWLaoUxjjeiad4+naoj qYMeYwt0dkJNQeH42jdJiqhIBx2PgA/kP/bmoBWMXueh6KGRvY9duSbjYC6aCFRl xlnwrL/+C7Bzr+9euJRHMGQAiJg1YfGXMFYHk9javi+xKtEDE5gOcYl1MoQC+wbS FhFqPc33YCWN3S5mczvugVkKUW/7MVLj3KCFeWyzl/q9VmUIzApl6qcDTqkRAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUSQ0GcrZwBIWqZWZqtK1VLPCs+/AwHwYDVR0j BBgwFoAUJ4URYwBfWcBuNaj9Nl+WNW6zSXEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvM2VhZmMzMmItZWMwMy00MzE5LWIxYzYtM2MxYzQ3Mjdl MDZmLzAvMjc4NTExNjMwMDVGNTlDMDZFMzVBOEZEMzY1Rjk2MzU2RUIzNDk3MS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0o0VVJZd0JmV2NCdU5hajlObC1XTlc2 elNYRS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zZWFmYzMyYi1l YzAzLTQzMTktYjFjNi0zYzFjNDcyN2UwNmYvMC8yNzg1MTE2MzAwNUY1OUMwNkUz NUE4RkQzNjVGOTYzNTZFQjM0OTcxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJUk+2Dnz/ddLLQvPHG0R 6VeFKDcKedEk3AO30EAzMhee10fs2qDUaRmFIywCZj9DMakBJmRAtAG9NHptO78i 7nhHK4r02pcIbOZ4uZmFLK/jf1hnNuLn71L/EWhUqYPxkDvVRaiLp1kYAUl7GRvB BdkF3MWml6hj6ElVaDC8+b2nSv3LFvuEun2xY8emYkZvgorXAb+sNEbQAMI39Ynu NO967fRemI0rpOFYQUp/dfWuYbtAtrdq/hXlP+Qtcu8fy9ktv6vJRrJFKor4Uq2B Xdhkbh/5Idrf7cxxm1OOO8R2zavKb6fJRzBqWj2mzUenuAkywMKtcZlqw+3AwSOR dg== -----END CERTIFICATE-----Generated at Sun Apr 27 20:54:35 2025 by rpki-client