Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/53bd2bc1-4ea6-4bc5-a2a5-97e465472776/0/CA1437E9F35EDC54A3C0CD31167B996E60DE1504.mft
File: CA1437E9F35EDC54A3C0CD31167B996E60DE1504.mft (raw, json)
Hash identifier: na2djZRhCe6NFi87gpiqgAQ20pARp/9mqWgGRmgNbRY=
Subject key identifier: D0:3F:4B:18:E7:D6:FC:F2:D2:7F:D7:A2:B4:3F:F0:9C:88:67:66:D4
Authority key identifier: CA:14:37:E9:F3:5E:DC:54:A3:C0:CD:31:16:7B:99:6E:60:DE:15:04
Certificate issuer: /CN=ca1437e9f35edc54a3c0cd31167b996e60de1504
Certificate serial: 6839AF8875F70FD29A831DF28B4121F62FF26422
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yhQ36fNe3FSjwM0xFnuZbmDeFQQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/53bd2bc1-4ea6-4bc5-a2a5-97e465472776/0/CA1437E9F35EDC54A3C0CD31167B996E60DE1504.mft
Manifest number: 0154
Signing time: Sat 23 Aug 2025 08:47:33 +0000
Manifest this update: Sat 23 Aug 2025 08:42:33 +0000
Manifest next update: Sun 24 Aug 2025 12:06:33 +0000
Files and hashes: 1: CA1437E9F35EDC54A3C0CD31167B996E60DE1504.crl (hash: ON67unUoxxsmW4Eko05GfIrMaX6MclCW4b+YVhM2Ixs=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/53bd2bc1-4ea6-4bc5-a2a5-97e465472776/0/CA1437E9F35EDC54A3C0CD31167B996E60DE1504.crl
rsync://rsync.paas.rpki.ripe.net/repository/53bd2bc1-4ea6-4bc5-a2a5-97e465472776/0/CA1437E9F35EDC54A3C0CD31167B996E60DE1504.mft
rsync://rpki.ripe.net/repository/DEFAULT/yhQ36fNe3FSjwM0xFnuZbmDeFQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:39:af:88:75:f7:0f:d2:9a:83:1d:f2:8b:41:21:f6:2f:f2:64:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca1437e9f35edc54a3c0cd31167b996e60de1504
Validity
Not Before: Aug 23 08:42:33 2025 GMT
Not After : Aug 24 12:06:33 2025 GMT
Subject: CN=D03F4B18E7D6FCF2D27FD7A2B43FF09C886766D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f4:ca:f5:af:09:06:ce:9a:2f:03:46:eb:00:
07:d5:83:f5:a4:be:1d:ae:4f:e8:f2:8e:76:20:8e:
d5:4e:b8:91:89:9c:b1:7d:42:d0:15:37:4c:0f:80:
52:30:2a:6e:73:51:fc:8b:81:ca:00:6e:9f:9a:90:
e7:12:88:b9:ea:18:da:0b:61:d6:ea:b5:89:b7:72:
fc:aa:94:7f:02:e9:a5:a2:b0:bf:5d:47:ad:03:ec:
24:41:ca:99:10:69:cf:58:af:29:d1:43:fe:56:a2:
06:21:96:bf:84:85:6f:5d:d5:23:bd:4f:66:f2:a4:
36:62:3d:eb:68:c3:f9:37:50:4c:3b:25:df:04:b9:
c2:fa:84:9f:fe:fb:9e:2a:60:90:07:cd:13:96:e9:
16:36:10:ed:2f:53:cc:85:3c:77:cf:a6:3d:05:12:
cc:48:ae:49:b1:c8:7a:dd:42:3d:5b:80:f1:8e:1e:
27:a1:2e:09:90:97:a2:7d:e0:cc:13:64:ec:fb:a9:
92:48:55:90:cb:c0:1c:58:05:6e:aa:72:28:07:37:
da:64:5c:67:5d:23:3e:90:fc:b2:3c:3c:c0:5c:57:
9e:ec:8c:77:9d:ec:c7:53:99:7e:46:ab:18:e3:ac:
cf:7a:12:0d:9e:23:88:16:2e:75:f5:a7:c2:d3:7f:
07:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:3F:4B:18:E7:D6:FC:F2:D2:7F:D7:A2:B4:3F:F0:9C:88:67:66:D4
X509v3 Authority Key Identifier:
keyid:CA:14:37:E9:F3:5E:DC:54:A3:C0:CD:31:16:7B:99:6E:60:DE:15:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/53bd2bc1-4ea6-4bc5-a2a5-97e465472776/0/CA1437E9F35EDC54A3C0CD31167B996E60DE1504.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yhQ36fNe3FSjwM0xFnuZbmDeFQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/53bd2bc1-4ea6-4bc5-a2a5-97e465472776/0/CA1437E9F35EDC54A3C0CD31167B996E60DE1504.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:06:2d:64:01:fc:8b:4f:77:85:5d:3b:af:29:34:98:ad:ad:
85:34:80:38:98:ee:94:af:6a:0c:ac:83:78:0d:a1:76:ac:53:
6a:39:7a:79:3b:eb:5d:aa:99:75:63:54:58:48:5c:83:47:d0:
95:63:ee:1d:48:50:c3:01:4d:91:e2:38:98:69:81:c5:7f:1e:
ed:a9:e7:40:61:7b:e7:35:cc:b2:20:4d:b2:95:30:4e:c4:46:
fe:17:c8:d1:00:1e:14:f6:6c:85:71:d9:2d:63:6d:f5:73:a5:
09:38:b8:ae:72:0e:18:36:77:fd:d4:56:9b:04:ca:f2:db:32:
8d:e2:c5:fc:5b:cb:15:72:d8:db:c6:22:79:bf:55:ff:7b:c5:
7c:28:28:56:6c:fe:b0:41:69:6d:3f:69:38:20:4a:82:f2:51:
51:fd:49:a4:98:75:d6:b2:bf:cb:25:88:3d:84:52:16:f4:50:
be:ac:86:a4:95:72:69:6f:2f:14:93:bb:c4:ad:f1:ba:d5:e3:
cb:82:ee:e5:b3:fd:4f:95:c9:30:96:88:98:60:59:34:c1:f7:
43:48:8b:e5:5e:cb:43:81:e9:e6:dc:01:ee:07:ac:7d:a6:21:
c4:75:c6:34:51:aa:39:ac:37:d5:af:af:83:ff:b1:67:52:4a:
19:cf:64:7b
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUaDmviHX3D9Kagx3yi0Eh9i/yZCIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoY2ExNDM3ZTlmMzVlZGM1NGEzYzBjZDMxMTY3Yjk5NmU2
MGRlMTUwNDAeFw0yNTA4MjMwODQyMzNaFw0yNTA4MjQxMjA2MzNaMDMxMTAvBgNV
BAMTKEQwM0Y0QjE4RTdENkZDRjJEMjdGRDdBMkI0M0ZGMDlDODg2NzY2RDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZ9Mr1rwkGzpovA0brAAfVg/Wk
vh2uT+jyjnYgjtVOuJGJnLF9QtAVN0wPgFIwKm5zUfyLgcoAbp+akOcSiLnqGNoL
YdbqtYm3cvyqlH8C6aWisL9dR60D7CRBypkQac9YrynRQ/5WogYhlr+EhW9d1SO9
T2bypDZiPetow/k3UEw7Jd8EucL6hJ/++54qYJAHzROW6RY2EO0vU8yFPHfPpj0F
EsxIrkmxyHrdQj1bgPGOHiehLgmQl6J94MwTZOz7qZJIVZDLwBxYBW6qcigHN9pk
XGddIz6Q/LI8PMBcV57sjHed7MdTmX5GqxjjrM96Eg2eI4gWLnX1p8LTfwe7AgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQU0D9LGOfW/PLSf9eitD/wnIhnZtQwHwYDVR0j
BBgwFoAUyhQ36fNe3FSjwM0xFnuZbmDeFQQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTNiZDJiYzEtNGVhNi00YmM1LWEyYTUtOTdlNDY1NDcy
Nzc2LzAvQ0ExNDM3RTlGMzVFREM1NEEzQzBDRDMxMTY3Qjk5NkU2MERFMTUwNC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3loUTM2Zk5lM0ZTandNMHhGbnVaYm1E
ZUZRUS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS81M2JkMmJjMS00
ZWE2LTRiYzUtYTJhNS05N2U0NjU0NzI3NzYvMC9DQTE0MzdFOUYzNUVEQzU0QTND
MENEMzExNjdCOTk2RTYwREUxNTA0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaAYtZAH8i093hV07ryk0
mK2thTSAOJjulK9qDKyDeA2hdqxTajl6eTvrXaqZdWNUWEhcg0fQlWPuHUhQwwFN
keI4mGmBxX8e7annQGF75zXMsiBNspUwTsRG/hfI0QAeFPZshXHZLWNt9XOlCTi4
rnIOGDZ3/dRWmwTK8tsyjeLF/FvLFXLY28Yieb9V/3vFfCgoVmz+sEFpbT9pOCBK
gvJRUf1JpJh11rK/yyWIPYRSFvRQvqyGpJVyaW8vFJO7xK3xutXjy4Lu5bP9T5XJ
MJaImGBZNMH3Q0iL5V7LQ4Hp5twB7gesfaYhxHXGNFGqOaw31a+vg/+xZ1JKGc9k
ew==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:24:48 2025 by rpki-client