Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/53bd2bc1-4ea6-4bc5-a2a5-97e465472776/0/CA1437E9F35EDC54A3C0CD31167B996E60DE1504.mft
File: CA1437E9F35EDC54A3C0CD31167B996E60DE1504.mft (raw, json)
Hash identifier: 1rIkWS5WqrRWxucpAArIm/a1bgOfBZkQnffNT3hTiH8=
Subject key identifier: C4:7B:F8:40:05:CC:6C:29:4F:83:7C:28:5B:95:E5:F8:2B:09:ED:71
Authority key identifier: CA:14:37:E9:F3:5E:DC:54:A3:C0:CD:31:16:7B:99:6E:60:DE:15:04
Certificate issuer: /CN=ca1437e9f35edc54a3c0cd31167b996e60de1504
Certificate serial: 73D21F268209EE88DB6F564C7261DB30381CBAA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yhQ36fNe3FSjwM0xFnuZbmDeFQQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/53bd2bc1-4ea6-4bc5-a2a5-97e465472776/0/CA1437E9F35EDC54A3C0CD31167B996E60DE1504.mft
Manifest number: F6
Signing time: Sat 14 Jun 2025 12:37:53 +0000
Manifest this update: Sat 14 Jun 2025 12:32:53 +0000
Manifest next update: Sun 15 Jun 2025 14:45:53 +0000
Files and hashes: 1: CA1437E9F35EDC54A3C0CD31167B996E60DE1504.crl (hash: vR174FDWcpCZJG8Tlm+9fIyVAzQjcJVnsTXqYZE20e0=)
2: 38352e3139332e37372e302f32342d3234203d3e20313337353137.roa (hash: ANBAip94aJgKBvYU6JmgV2jssU1VZukeD0JC5Y7qLUg=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/53bd2bc1-4ea6-4bc5-a2a5-97e465472776/0/CA1437E9F35EDC54A3C0CD31167B996E60DE1504.crl
rsync://rsync.paas.rpki.ripe.net/repository/53bd2bc1-4ea6-4bc5-a2a5-97e465472776/0/CA1437E9F35EDC54A3C0CD31167B996E60DE1504.mft
rsync://rpki.ripe.net/repository/DEFAULT/yhQ36fNe3FSjwM0xFnuZbmDeFQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:d2:1f:26:82:09:ee:88:db:6f:56:4c:72:61:db:30:38:1c:ba:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca1437e9f35edc54a3c0cd31167b996e60de1504
Validity
Not Before: Jun 14 12:32:53 2025 GMT
Not After : Jun 15 14:45:53 2025 GMT
Subject: CN=C47BF84005CC6C294F837C285B95E5F82B09ED71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ec:8e:e3:2d:08:23:54:88:7f:39:79:7c:6e:
59:88:d4:c0:e3:da:38:55:e7:1f:b6:ae:f9:65:46:
0f:e4:c1:7a:f5:6e:9b:53:e9:a2:92:e4:a0:56:e6:
4d:60:ef:7a:b1:54:d6:e8:90:75:0a:74:ef:12:f5:
00:14:6a:21:eb:b3:72:57:c0:66:53:41:0b:63:f2:
16:51:12:45:75:4d:6d:93:04:88:35:37:b1:42:25:
a5:b7:92:34:0b:98:c2:53:3d:5a:3d:56:42:f9:0d:
70:47:f6:32:87:76:13:f9:26:8d:ca:ec:23:52:41:
e4:9f:6f:d8:91:45:06:60:ed:57:b1:2d:fe:0e:78:
b5:d9:d9:00:7d:e1:97:4c:48:e7:03:d2:1b:38:5f:
d5:04:20:a7:c4:f7:f8:b0:82:a7:13:c4:5e:31:1f:
61:9e:c8:c3:d0:e0:c8:43:67:00:c5:d9:36:31:69:
f6:91:97:12:0b:8e:93:72:68:cb:cf:98:39:ca:b2:
d6:58:c1:48:3f:41:1e:c7:2e:59:0d:69:79:17:f4:
7c:a0:a2:a7:f8:fc:fb:1e:82:55:45:59:96:23:84:
cc:34:1d:a1:fc:1c:eb:7d:ff:52:8e:02:02:5f:02:
f5:a2:9b:ce:8f:70:72:a7:dc:38:6a:56:83:1c:ac:
cd:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:7B:F8:40:05:CC:6C:29:4F:83:7C:28:5B:95:E5:F8:2B:09:ED:71
X509v3 Authority Key Identifier:
keyid:CA:14:37:E9:F3:5E:DC:54:A3:C0:CD:31:16:7B:99:6E:60:DE:15:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/53bd2bc1-4ea6-4bc5-a2a5-97e465472776/0/CA1437E9F35EDC54A3C0CD31167B996E60DE1504.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yhQ36fNe3FSjwM0xFnuZbmDeFQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/53bd2bc1-4ea6-4bc5-a2a5-97e465472776/0/CA1437E9F35EDC54A3C0CD31167B996E60DE1504.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:d9:84:da:f4:16:e5:88:d7:7e:97:ef:10:a6:27:75:bf:4c:
2a:06:e1:bd:da:91:77:b6:90:40:05:0a:c1:eb:54:b3:65:60:
5b:ec:47:ff:ec:36:19:69:a1:15:f4:a2:e9:a8:7e:f0:b0:b7:
0c:8e:ab:4b:bf:ca:0a:18:bf:c1:cb:99:cc:cb:4b:1f:69:0c:
29:0c:76:5b:63:4d:e5:d8:18:50:a3:bd:79:32:07:43:39:28:
39:49:cc:a3:47:f2:55:6b:3d:01:b1:9b:37:dc:96:54:90:14:
a3:1f:f4:d8:71:7c:66:46:d9:3d:ce:fd:8a:55:b7:13:04:50:
39:33:92:f8:31:cf:9b:b8:43:e2:40:5e:f5:99:37:85:39:3b:
33:fb:de:34:0f:33:87:56:a1:03:97:71:f4:77:01:70:c6:39:
fa:b8:bf:8d:92:ad:d1:e8:e5:ee:c4:1d:e6:4e:72:35:7b:d8:
47:81:3f:5f:19:1f:4f:bd:c9:6c:4c:c6:b1:8b:01:24:f1:ce:
a7:2c:cc:5f:57:96:c8:f4:a2:9b:da:fe:e6:1d:00:3b:f0:b9:
58:0c:d9:0c:7a:5d:f7:c5:aa:57:be:cd:39:9a:e4:ae:5a:62:
b6:3b:c1:d0:b1:c5:79:fa:0c:b3:c3:be:98:7a:eb:ef:a4:3e:
6b:e2:93:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 21:30:39 2025 by rpki-client