Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/53bd2bc1-4ea6-4bc5-a2a5-97e465472776/0/CA1437E9F35EDC54A3C0CD31167B996E60DE1504.mft
File: CA1437E9F35EDC54A3C0CD31167B996E60DE1504.mft (raw, json)
Hash identifier: wQzwK3lTFo1IzQt/yL1uwiQbKqs6N8QHYpmkY8e2ws4=
Subject key identifier: E4:66:66:96:BA:A0:AB:90:BE:FC:09:DF:93:21:5A:CC:22:71:2C:2A
Authority key identifier: CA:14:37:E9:F3:5E:DC:54:A3:C0:CD:31:16:7B:99:6E:60:DE:15:04
Certificate issuer: /CN=ca1437e9f35edc54a3c0cd31167b996e60de1504
Certificate serial: 5A8736728B12189D7EF354DDFA7D8654BC0C54FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yhQ36fNe3FSjwM0xFnuZbmDeFQQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/53bd2bc1-4ea6-4bc5-a2a5-97e465472776/0/CA1437E9F35EDC54A3C0CD31167B996E60DE1504.mft
Manifest number: 013B
Signing time: Mon 04 Aug 2025 10:22:19 +0000
Manifest this update: Mon 04 Aug 2025 10:17:19 +0000
Manifest next update: Tue 05 Aug 2025 13:18:19 +0000
Files and hashes: 1: CA1437E9F35EDC54A3C0CD31167B996E60DE1504.crl (hash: qMrQdU1/CTqqFo5avfYX+v7fs/S1nf3+c8c30UXZOlQ=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/53bd2bc1-4ea6-4bc5-a2a5-97e465472776/0/CA1437E9F35EDC54A3C0CD31167B996E60DE1504.crl
rsync://rsync.paas.rpki.ripe.net/repository/53bd2bc1-4ea6-4bc5-a2a5-97e465472776/0/CA1437E9F35EDC54A3C0CD31167B996E60DE1504.mft
rsync://rpki.ripe.net/repository/DEFAULT/yhQ36fNe3FSjwM0xFnuZbmDeFQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:52:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:87:36:72:8b:12:18:9d:7e:f3:54:dd:fa:7d:86:54:bc:0c:54:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca1437e9f35edc54a3c0cd31167b996e60de1504
Validity
Not Before: Aug 4 10:17:19 2025 GMT
Not After : Aug 5 13:18:19 2025 GMT
Subject: CN=E4666696BAA0AB90BEFC09DF93215ACC22712C2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:fc:d6:0c:65:a9:6b:44:e4:b4:10:a0:ad:ab:
6e:37:4a:db:46:96:c5:cd:e4:cf:9c:d5:d2:05:5c:
3e:67:f6:4e:e8:ef:bf:7b:f8:e2:d2:84:8d:8b:e0:
01:3e:5a:b9:1a:30:69:69:2f:ee:0c:ea:0d:db:41:
e5:19:76:79:0e:7f:7e:f9:c9:54:fb:9e:a5:47:72:
73:11:e9:65:d5:c2:5c:bf:55:24:69:57:49:17:18:
9a:3d:a3:8d:35:d7:f3:d8:67:3b:35:e5:2a:37:fc:
e4:f3:84:86:69:b2:5e:16:a6:fc:13:ed:e7:4c:ed:
2a:3d:51:8f:24:64:da:34:f8:6e:f4:2c:87:b1:f3:
c3:aa:01:9e:a9:8f:b5:35:3c:cd:45:01:e8:ee:03:
ba:26:0b:51:26:d0:e7:0c:cb:d5:2b:8b:69:ca:d4:
36:31:53:21:24:d5:8b:0a:10:03:53:0c:4f:6a:f5:
f5:db:d3:cd:4e:2d:84:97:47:57:d3:5c:60:01:68:
48:1a:9f:a9:1f:e0:15:bc:b7:a4:d4:39:54:56:d5:
f4:5d:ba:4d:e5:90:13:dd:2a:bf:5b:89:04:07:cb:
5a:2e:64:ed:4a:47:70:0c:4a:5a:6d:31:83:e8:7b:
ff:ea:22:18:14:9c:a2:cc:44:f2:76:8f:82:d5:a5:
c0:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:66:66:96:BA:A0:AB:90:BE:FC:09:DF:93:21:5A:CC:22:71:2C:2A
X509v3 Authority Key Identifier:
keyid:CA:14:37:E9:F3:5E:DC:54:A3:C0:CD:31:16:7B:99:6E:60:DE:15:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/53bd2bc1-4ea6-4bc5-a2a5-97e465472776/0/CA1437E9F35EDC54A3C0CD31167B996E60DE1504.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yhQ36fNe3FSjwM0xFnuZbmDeFQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/53bd2bc1-4ea6-4bc5-a2a5-97e465472776/0/CA1437E9F35EDC54A3C0CD31167B996E60DE1504.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:e2:93:92:2e:be:c2:74:6a:e0:9e:28:ca:52:e3:ec:3b:97:
ca:8e:fb:3c:e6:bd:85:ff:ba:9c:62:88:d6:94:8e:89:ee:3b:
d9:ce:19:b4:0f:c5:1b:55:bc:83:84:5b:5e:78:41:59:fb:8b:
4d:28:08:53:f7:b8:a2:e7:51:3a:c0:2c:78:fb:d9:86:95:03:
10:1b:5c:b9:ae:40:45:e3:79:60:e0:67:d5:1b:ca:c4:16:f7:
c4:44:92:99:5e:b4:59:de:65:12:22:dc:5f:7d:7d:a4:b3:84:
77:79:0f:81:c7:6f:9f:dd:50:b1:a5:cd:11:a6:fa:fe:a3:9b:
a1:f8:5a:83:a0:52:ca:29:8c:a7:49:09:b6:54:9a:f7:73:59:
f1:64:8c:d0:7e:f5:04:eb:76:cd:9f:c1:ee:91:d7:4b:59:cc:
4a:47:75:fa:f1:4b:c3:c6:94:bf:aa:f3:e5:4c:2d:81:6b:60:
4b:60:be:4b:12:96:90:90:55:3e:10:15:8a:ce:a0:ed:2d:37:
dc:0f:3e:b8:6e:9c:2c:c8:91:32:c4:25:05:81:a3:be:fb:be:
03:c2:95:ab:e8:32:1f:74:b8:b9:21:d6:01:a7:45:50:80:4f:
dc:cd:97:28:09:cd:02:64:a1:33:17:bb:50:e1:ac:5a:64:92:
de:7f:bd:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:00:13 2025 by rpki-client