Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/53bd2bc1-4ea6-4bc5-a2a5-97e465472776/0/CA1437E9F35EDC54A3C0CD31167B996E60DE1504.mft
File: CA1437E9F35EDC54A3C0CD31167B996E60DE1504.mft (raw, json)
Hash identifier: MH6pHhGQE+X8nIEZjmGvF9xLWyu/w5aKZ4eEJDYoQbc=
Subject key identifier: 76:66:5F:66:12:E4:9D:B0:16:BF:51:57:A5:04:CD:91:0C:CF:49:6D
Authority key identifier: CA:14:37:E9:F3:5E:DC:54:A3:C0:CD:31:16:7B:99:6E:60:DE:15:04
Certificate issuer: /CN=ca1437e9f35edc54a3c0cd31167b996e60de1504
Certificate serial: 110791B9FA67BD17678F8288FD0D08BD2E1E6331
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yhQ36fNe3FSjwM0xFnuZbmDeFQQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/53bd2bc1-4ea6-4bc5-a2a5-97e465472776/0/CA1437E9F35EDC54A3C0CD31167B996E60DE1504.mft
Manifest number: 0109
Signing time: Sat 28 Jun 2025 13:34:10 +0000
Manifest this update: Sat 28 Jun 2025 13:29:10 +0000
Manifest next update: Sun 29 Jun 2025 14:30:10 +0000
Files and hashes: 1: CA1437E9F35EDC54A3C0CD31167B996E60DE1504.crl (hash: lXNEZF7PferuQ67UY+fsFPqmzN1FG8thuZj0PqAqMYo=)
2: 38352e3139332e37372e302f32342d3234203d3e20313337353137.roa (hash: ANBAip94aJgKBvYU6JmgV2jssU1VZukeD0JC5Y7qLUg=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/53bd2bc1-4ea6-4bc5-a2a5-97e465472776/0/CA1437E9F35EDC54A3C0CD31167B996E60DE1504.crl
rsync://rsync.paas.rpki.ripe.net/repository/53bd2bc1-4ea6-4bc5-a2a5-97e465472776/0/CA1437E9F35EDC54A3C0CD31167B996E60DE1504.mft
rsync://rpki.ripe.net/repository/DEFAULT/yhQ36fNe3FSjwM0xFnuZbmDeFQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:30:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:07:91:b9:fa:67:bd:17:67:8f:82:88:fd:0d:08:bd:2e:1e:63:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca1437e9f35edc54a3c0cd31167b996e60de1504
Validity
Not Before: Jun 28 13:29:10 2025 GMT
Not After : Jun 29 14:30:10 2025 GMT
Subject: CN=76665F6612E49DB016BF5157A504CD910CCF496D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ef:56:12:85:58:db:90:8b:97:1e:be:2f:92:
e6:59:86:7f:1a:fb:46:d6:3e:10:a4:ae:8b:92:8e:
26:1e:fa:e0:3b:9a:af:0d:60:5f:d6:3d:d3:eb:0a:
94:d5:d9:fb:7f:6a:60:99:25:3e:90:d9:20:d5:b0:
7b:05:55:b5:6c:e2:63:b7:71:ae:75:ad:fb:05:c8:
a0:b8:12:c3:ae:59:fc:08:8e:23:b2:b7:a1:76:da:
68:64:f3:32:f8:a1:44:64:95:94:a6:7a:5e:ed:b4:
5a:f9:00:cd:da:28:ab:92:1c:2b:55:a7:57:f8:f1:
72:94:05:74:c8:e6:97:31:f4:01:1e:b0:17:b9:78:
d0:61:c8:39:09:0d:53:b0:0d:54:f9:f8:5a:89:be:
3d:47:0d:8c:a7:ed:3f:98:0d:03:7a:cd:4a:b1:2b:
d3:59:61:46:11:11:6f:55:fa:9e:26:c5:ea:82:59:
2a:54:56:b4:d7:98:fc:62:76:a5:0b:ea:9f:56:23:
52:d1:0b:a7:d9:80:36:58:e6:da:01:5e:5b:73:06:
78:a7:dc:37:96:67:99:04:62:23:23:b5:ec:47:53:
b1:c4:19:37:72:a6:a0:13:01:25:02:8e:71:13:d1:
fd:25:ec:f8:c9:7a:a8:cc:5c:a2:81:74:f6:4c:62:
79:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:66:5F:66:12:E4:9D:B0:16:BF:51:57:A5:04:CD:91:0C:CF:49:6D
X509v3 Authority Key Identifier:
keyid:CA:14:37:E9:F3:5E:DC:54:A3:C0:CD:31:16:7B:99:6E:60:DE:15:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/53bd2bc1-4ea6-4bc5-a2a5-97e465472776/0/CA1437E9F35EDC54A3C0CD31167B996E60DE1504.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yhQ36fNe3FSjwM0xFnuZbmDeFQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/53bd2bc1-4ea6-4bc5-a2a5-97e465472776/0/CA1437E9F35EDC54A3C0CD31167B996E60DE1504.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:03:7a:0e:84:ce:a7:df:9d:1c:50:5c:58:d2:20:a7:a3:8a:
a6:27:32:17:3b:57:57:bf:e2:31:f1:34:f0:2d:b0:f6:11:48:
6c:e2:9d:7b:73:98:d0:80:57:07:b1:95:cd:1d:4a:5b:74:a6:
92:0e:ae:c2:47:cb:68:3f:f3:a0:9d:6c:f8:83:67:28:50:cd:
60:3a:cc:8b:9c:9a:24:02:d7:d8:2b:76:80:65:ba:59:08:ec:
14:cd:d7:63:74:5f:c0:0c:aa:57:cb:d4:0a:8e:aa:3f:f1:a3:
7e:42:bb:bd:ed:b4:f4:de:9d:ac:ac:bc:c6:5d:14:65:88:af:
8d:c0:67:45:5d:c3:45:4d:be:74:81:71:5b:f8:ff:ef:55:70:
1a:3f:c8:52:41:3b:1a:6a:bf:40:f9:a4:5f:42:4f:41:2d:03:
1f:52:7b:15:06:29:c8:a9:23:29:a0:a2:bf:65:b2:c3:de:8e:
b1:a3:1c:9d:eb:ff:1a:e3:75:8d:a8:f2:d8:8f:ba:9e:12:90:
fc:e3:e5:01:93:97:63:2d:6b:59:32:c1:01:24:af:64:67:7b:
08:7f:af:86:48:e7:da:c9:9d:3e:e2:50:ba:c4:52:4a:ce:aa:
72:5d:44:2e:e9:af:90:0e:0c:b2:ba:5b:43:d3:88:21:37:d8:
a2:3a:85:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:26:54 2025 by rpki-client