$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft File: 2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft (raw, json) Hash identifier: LX68HUUe20kZrt3odKWdM9iZ58Mt8R4PnbhmZ1abiHA= Subject key identifier: 27:F8:FF:2B:4B:2A:91:CC:86:9B:87:F5:56:BE:8C:3F:35:EB:AA:F3 Authority key identifier: 2F:2C:31:24:01:2C:07:F6:77:5A:62:41:DF:C6:3B:E0:41:4C:98:AD Certificate issuer: /CN=2F2C3124012C07F6775A6241DFC63BE0414C98AD Certificate serial: 70D1A4D13BDCAF50DA1FA08DE57EA4F9DEB96638 Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/2F2C3124012C07F6775A6241DFC63BE0414C98AD.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft Manifest number: AA Signing time: Wed 05 Nov 2025 00:57:36 +0000 Manifest this update: Wed 05 Nov 2025 00:52:36 +0000 Manifest next update: Thu 06 Nov 2025 03:08:36 +0000 Files and hashes: 1: 2F2C3124012C07F6775A6241DFC63BE0414C98AD.crl (hash: s2NtVsGMJa6He5lHn75eiSTnvZm+a+kOakV50h7GpkI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.crl rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft rsync://krill.47272.net/repo/HYEHOST/5/2F2C3124012C07F6775A6241DFC63BE0414C98AD.cer rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 06 Nov 2025 03:08:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:d1:a4:d1:3b:dc:af:50:da:1f:a0:8d:e5:7e:a4:f9:de:b9:66:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F2C3124012C07F6775A6241DFC63BE0414C98AD Validity Not Before: Nov 5 00:52:36 2025 GMT Not After : Nov 6 03:08:36 2025 GMT Subject: CN=27F8FF2B4B2A91CC869B87F556BE8C3F35EBAAF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:21:cb:8a:20:9c:55:fc:2e:63:ab:f7:c2:60: c7:b2:83:e7:1b:2e:56:8a:df:44:bc:9d:3e:c6:4e: 47:01:f6:4b:77:c9:81:8b:a8:aa:c3:f3:8c:5f:97: 11:2e:37:14:0c:84:63:af:78:c1:d2:da:05:56:a3: 7a:b7:92:bc:b7:04:a9:71:e7:29:6a:7b:3a:d3:7d: f5:cd:d7:6f:84:f5:56:23:4c:b1:70:de:25:0c:05: 53:74:cc:bc:0b:b7:08:f3:06:d9:8d:2e:62:80:1d: 44:ee:07:fd:03:70:01:d6:e3:7a:c9:6d:07:89:3b: 1f:8a:05:f5:47:f2:a8:01:6f:39:10:ce:63:0c:e7: e3:44:32:ca:eb:45:2a:61:d8:33:2f:04:66:d9:bf: 3e:bc:b0:e1:72:1b:ff:a1:81:e7:52:4b:db:2b:dd: 67:a2:c9:0a:42:fd:a8:87:2d:15:0f:56:5f:6c:04: ff:0d:00:b4:12:8f:8b:56:59:db:20:e3:c6:11:0a: ee:0b:8c:43:c1:d5:2e:12:68:7b:ad:70:07:e8:bc: 64:b5:a1:8f:ef:d6:eb:64:56:06:b4:5f:d2:e3:cc: 90:38:8f:98:ea:9b:e6:a9:2a:41:9f:68:ea:34:2e: dc:77:e9:9e:8e:54:d2:d9:e1:a2:9f:6f:05:ea:0f: af:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:F8:FF:2B:4B:2A:91:CC:86:9B:87:F5:56:BE:8C:3F:35:EB:AA:F3 X509v3 Authority Key Identifier: keyid:2F:2C:31:24:01:2C:07:F6:77:5A:62:41:DF:C6:3B:E0:41:4C:98:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.crl Authority Information Access: CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/2F2C3124012C07F6775A6241DFC63BE0414C98AD.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:61:5a:97:4c:5a:84:9c:d3:b7:2d:8b:bd:88:17:57:7d:91: 59:d6:bd:3b:e8:53:86:f5:3e:37:f1:d8:8f:12:a0:ab:a1:cd: 54:10:65:20:86:10:14:11:9b:0b:bc:87:72:75:63:4a:ed:6d: b5:ed:0b:ce:27:98:00:f3:8e:88:c0:0d:e8:29:29:d6:c2:ac: e5:f9:67:bb:ef:8b:c9:63:d7:7e:20:3e:7b:c6:69:47:23:dd: bf:30:56:51:f3:b4:da:9a:6e:10:54:ad:bd:17:6c:0e:ec:d9: 9a:6c:4f:f6:89:d5:2e:38:d0:35:d2:ff:c3:e7:08:7f:1e:a8: 1f:14:81:8f:58:e0:06:dc:2b:e8:88:a3:32:f4:e3:c6:e6:33: 58:c3:75:2d:17:ff:ea:ff:36:7f:7c:75:d6:77:25:5d:20:46: a4:d5:cb:da:1f:00:5f:09:e0:34:e4:d8:41:99:bb:6c:9e:82: fe:09:6a:5d:b9:39:d8:ee:29:16:7c:df:a1:12:fe:98:bf:a5: 64:86:00:2a:9c:a4:ef:34:4d:17:df:a7:91:a4:3b:8c:46:7a: 8d:fb:08:c2:15:f8:7b:93:81:ee:72:f8:18:f5:0d:19:f0:47: 1d:21:9d:2e:e5:68:b0:8b:e8:fe:43:06:e2:96:95:f4:16:ec: e1:70:e2:4f -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUcNGk0Tvcr1DaH6CN5X6k+d65ZjgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkYyQzMxMjQwMTJDMDdGNjc3NUE2MjQxREZDNjNCRTA0 MTRDOThBRDAeFw0yNTExMDUwMDUyMzZaFw0yNTExMDYwMzA4MzZaMDMxMTAvBgNV BAMTKDI3RjhGRjJCNEIyQTkxQ0M4NjlCODdGNTU2QkU4QzNGMzVFQkFBRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD6IcuKIJxV/C5jq/fCYMeyg+cb LlaK30S8nT7GTkcB9kt3yYGLqKrD84xflxEuNxQMhGOveMHS2gVWo3q3kry3BKlx 5ylqezrTffXN12+E9VYjTLFw3iUMBVN0zLwLtwjzBtmNLmKAHUTuB/0DcAHW43rJ bQeJOx+KBfVH8qgBbzkQzmMM5+NEMsrrRSph2DMvBGbZvz68sOFyG/+hgedSS9sr 3WeiyQpC/aiHLRUPVl9sBP8NALQSj4tWWdsg48YRCu4LjEPB1S4SaHutcAfovGS1 oY/v1utkVga0X9LjzJA4j5jqm+apKkGfaOo0Ltx36Z6OVNLZ4aKfbwXqD6/PAgMB AAGjggJSMIICTjAdBgNVHQ4EFgQUJ/j/K0sqkcyGm4f1Vr6MPzXrqvMwHwYDVR0j BBgwFoAULywxJAEsB/Z3WmJB38Y74EFMmK0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGU3ZDU1ZjctZWU2MC00MDA1LWJhZDctYjQyODE4Y2Y1 MGU4LzkvMkYyQzMxMjQwMTJDMDdGNjc3NUE2MjQxREZDNjNCRTA0MTRDOThBRC5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL2tyaWxsLjQ3 MjcyLm5ldC9yZXBvL0hZRUhPU1QvNS8yRjJDMzEyNDAxMkMwN0Y2Nzc1QTYyNDFE RkM2M0JFMDQxNEM5OEFELmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2RlN2Q1NWY3LWVlNjAtNDAwNS1iYWQ3LWI0MjgxOGNmNTBlOC85LzJGMkMzMTI0 MDEyQzA3RjY3NzVBNjI0MURGQzYzQkUwNDE0Qzk4QUQubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQATYVqX TFqEnNO3LYu9iBdXfZFZ1r076FOG9T438diPEqCroc1UEGUghhAUEZsLvIdydWNK 7W217QvOJ5gA846IwA3oKSnWwqzl+We774vJY9d+ID57xmlHI92/MFZR87Tamm4Q VK29F2wO7NmabE/2idUuONA10v/D5wh/HqgfFIGPWOAG3CvoiKMy9OPG5jNYw3Ut F//q/zZ/fHXWdyVdIEak1cvaHwBfCeA05NhBmbtsnoL+CWpduTnY7ikWfN+hEv6Y v6VkhgAqnKTvNE0X36eRpDuMRnqN+wjCFfh7k4HucvgY9Q0Z8EcdIZ0u5Wiwi+j+ QwbilpX0FuzhcOJP -----END CERTIFICATE-----Generated at Wed Nov 5 16:59:22 2025 by rpki-client