Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/53bd2bc1-4ea6-4bc5-a2a5-97e465472776/0/CA1437E9F35EDC54A3C0CD31167B996E60DE1504.mft
File: CA1437E9F35EDC54A3C0CD31167B996E60DE1504.mft (raw, json)
Hash identifier: pMJy5r6l+17iyIqgVxUu18oDYpCynI+7DT7T+IviZZA=
Subject key identifier: 93:5F:1E:73:DC:CA:EE:5D:08:DA:81:D8:26:41:1E:B9:4A:1D:58:27
Authority key identifier: CA:14:37:E9:F3:5E:DC:54:A3:C0:CD:31:16:7B:99:6E:60:DE:15:04
Certificate issuer: /CN=ca1437e9f35edc54a3c0cd31167b996e60de1504
Certificate serial: 081E67A2340F3FACB0AB79676F7FFFC2FD1606A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yhQ36fNe3FSjwM0xFnuZbmDeFQQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/53bd2bc1-4ea6-4bc5-a2a5-97e465472776/0/CA1437E9F35EDC54A3C0CD31167B996E60DE1504.mft
Manifest number: B5
Signing time: Sun 27 Apr 2025 19:14:59 +0000
Manifest this update: Sun 27 Apr 2025 19:09:59 +0000
Manifest next update: Mon 28 Apr 2025 20:28:59 +0000
Files and hashes: 1: CA1437E9F35EDC54A3C0CD31167B996E60DE1504.crl (hash: E4A1+Xm9QOz8oEvy+SnPTtmAX9/6W0IR0YNB0ZzF01Q=)
2: 38352e3139332e37372e302f32342d3234203d3e20313337353137.roa (hash: ANBAip94aJgKBvYU6JmgV2jssU1VZukeD0JC5Y7qLUg=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/53bd2bc1-4ea6-4bc5-a2a5-97e465472776/0/CA1437E9F35EDC54A3C0CD31167B996E60DE1504.crl
rsync://rsync.paas.rpki.ripe.net/repository/53bd2bc1-4ea6-4bc5-a2a5-97e465472776/0/CA1437E9F35EDC54A3C0CD31167B996E60DE1504.mft
rsync://rpki.ripe.net/repository/DEFAULT/yhQ36fNe3FSjwM0xFnuZbmDeFQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 20:28:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:1e:67:a2:34:0f:3f:ac:b0:ab:79:67:6f:7f:ff:c2:fd:16:06:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca1437e9f35edc54a3c0cd31167b996e60de1504
Validity
Not Before: Apr 27 19:09:59 2025 GMT
Not After : Apr 28 20:28:59 2025 GMT
Subject: CN=935F1E73DCCAEE5D08DA81D826411EB94A1D5827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:73:ec:2a:9f:6e:be:f2:3c:c3:70:e6:09:cb:
b8:38:db:50:e2:d2:2b:d4:ab:c6:10:61:07:25:72:
85:2b:97:33:3b:ab:f1:f5:27:0b:52:65:99:04:d8:
33:5a:6d:e9:98:44:76:64:db:4f:64:54:c4:39:f7:
c5:9b:e2:1c:c9:8b:6d:a1:5b:8e:4a:30:96:08:ef:
bf:24:9d:e0:f8:ed:e0:aa:e6:49:84:f0:1a:36:93:
40:45:76:f8:a4:4b:a1:75:0d:35:bc:34:18:2f:e2:
36:1e:6b:f5:28:30:ae:28:1b:e9:36:de:2b:9f:88:
81:aa:86:2f:0c:f5:6c:9e:63:db:9b:52:e3:af:55:
54:97:4b:06:61:35:8b:db:4c:bd:25:dd:30:b9:ad:
fb:9f:82:a0:55:b8:f1:d8:76:10:0c:3e:88:82:6d:
6d:ca:51:35:a3:c5:04:d6:7b:be:ba:d4:0a:e6:2b:
2d:22:fb:c9:42:a6:14:05:f1:eb:cb:8d:10:ce:cd:
6d:f9:d4:cf:83:ba:95:2d:91:5b:0f:60:17:39:07:
6b:c2:ca:3f:34:91:c8:cc:0b:e1:eb:7d:8a:70:44:
8e:d7:81:1a:71:38:29:8d:7f:fa:ea:77:45:b2:52:
70:2b:ef:c8:a5:3a:3d:19:e4:c9:14:4d:27:0e:d5:
4c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:5F:1E:73:DC:CA:EE:5D:08:DA:81:D8:26:41:1E:B9:4A:1D:58:27
X509v3 Authority Key Identifier:
keyid:CA:14:37:E9:F3:5E:DC:54:A3:C0:CD:31:16:7B:99:6E:60:DE:15:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/53bd2bc1-4ea6-4bc5-a2a5-97e465472776/0/CA1437E9F35EDC54A3C0CD31167B996E60DE1504.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yhQ36fNe3FSjwM0xFnuZbmDeFQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/53bd2bc1-4ea6-4bc5-a2a5-97e465472776/0/CA1437E9F35EDC54A3C0CD31167B996E60DE1504.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:fc:98:e5:cb:37:fc:5e:a4:02:66:aa:56:eb:f2:f3:e1:06:
85:a9:34:c0:a8:00:8b:83:73:28:e5:41:b2:d1:6c:b5:ca:40:
3c:f3:a7:6c:cb:78:fb:34:4a:1c:68:32:a2:a3:4d:c2:61:c7:
86:20:93:41:fb:1b:dd:66:0a:fa:b7:96:2f:c6:a1:67:19:12:
58:58:bd:f9:69:3e:b2:af:1a:c1:77:ba:77:e2:b7:cf:01:14:
af:da:5a:cd:c6:3d:a3:31:db:99:de:7e:b1:2f:a3:9b:ec:f5:
9a:6d:be:8d:cc:58:9d:7e:e4:76:c0:20:2e:5c:e4:19:8f:40:
cc:84:db:b2:18:f3:87:e8:ef:84:6d:50:84:17:d4:f9:8a:40:
0e:d0:d1:11:02:1c:0a:6a:3e:08:1d:c0:8f:80:a8:25:28:d9:
4d:4e:cf:e1:d7:9b:83:08:cd:94:f1:4b:34:50:00:8a:81:1b:
ba:05:ea:1c:6b:aa:d1:97:99:e7:0e:c5:c7:ad:b9:a1:e0:6d:
dc:2b:07:18:41:0d:ab:ff:5f:80:c8:51:f8:f7:53:d2:08:2c:
5a:cf:6c:77:f6:b0:52:1c:c7:6d:86:32:0b:25:8b:29:47:9e:
25:44:4d:2e:86:ff:8f:cc:d0:28:ca:01:07:2c:fd:4b:41:3f:
19:7b:4b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:18:21 2025 by rpki-client